Re: [c-nsp] NPE-G1 cant read Compact Flash

2010-01-08 Thread Scott McGrath
Cisco on the older boxes used a non-FAT flash file system the key is whether the flash is referred to as slotX or diskX. if the nomenclature is slotX it uses a proprietary disk format which cannot be read by an external reader. to format CF card for use with older system format slot0:

Re: [c-nsp] CompactFlash card compatibility

2009-12-03 Thread Scott McGrath
For a LONG time there was a 512MB limitation on filesystem size i.e. the Sup720's would recognize a 512MB CF card but not a 1Gb card.Until this thread we were not aware that the limitation had been lifted on newer code. This is helpful as we have been scouring the universe for old 512Mb C

Re: [c-nsp] Cisco AIRONET WPA-Enterprise w/Windows question..

2009-11-30 Thread Scott McGrath
That's what I LIKE about standards - SO MANY incompatible ones to choose from... - Scott Scott Granados wrote: Not to be confused with WPA2-psk which is like WPA psk but uses aes instead of TKIP cryptography. - Original Message - From: "Scott McGrath" To: &quo

Re: [c-nsp] Cisco AIRONET WPA-Enterprise w/Windows question..

2009-11-30 Thread Scott McGrath
Since there is WPA-PSK and WPA2 often known as Enterprise, The real difference is that WPA-PSK uses a fixed 'pre-shared' key to encrypt the link between the AP and the supplicant, Enterprise assumes that a RADIUS server is available to authenticate the session and set the key for the session

Re: [c-nsp] is a DWDM SFP a DWDM SFP?

2009-11-25 Thread Scott McGrath
but a device down will... Don't SUPPORT third party optics but give us the option to use them without resorting to hacks.What's even worse is that most of CSCO's optics are indeed Finisar optics with different firrmware. Justin Shore wrote: Scott McGrath wrote: Or

Re: [c-nsp] is a DWDM SFP a DWDM SFP?

2009-11-25 Thread Scott McGrath
Or Cisco could do something RADICAL and actually support the industry standard optics model like they USED to for GBIC'sSure TAC would only support the Cisco optics which is fair, but being able to use any optic that is physically present is PRICELESS.And I can see customers whining abo

Re: [c-nsp] Pile on the 6509 noob

2009-09-28 Thread Scott McGrath
Personally, The 6509 was never optimal for WAN usage it's a excellent ethernet router, What we have done is use a 7206 or similar router for WAN service and connected it to the 65xx via ethernet one this isolates your WAN circuits so in the event Zeus tosses a thunderbolt your way you blow u

Re: [c-nsp] CALEA was Re: OT - Dark Fiber

2009-09-04 Thread Scott McGrath
Been there done that - bet detective was not amused when informed said timezone did not exist.The alphabet soup guys often come calling at our shop. -Original Message- From: "jp" Subj: Re: [c-nsp] CALEA was Re: OT - Dark Fiber Date: Fri Sep 4, 2009 16:55 Size: 2K To: "Scott

Re: [c-nsp] asa SSL VPN

2009-08-24 Thread Scott McGrath
The SSL vpn client is implemented either as a ActiveX control or a java application depending upon platform. It replicates the functionality of the IPsec client and is currently the only support Cisco has for 64 bit OS'es There is a WebVPN license as well which only allows access to published

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Scott McGrath
Not so much - we use ACS for TACACS services and proxy the TACACS via RADIUS for some application but Cisco ACS is now an appliance and on the close order of 8K + SmartNet so you are looking at 20K $US for a new solution. RADIATOR is open-source but not 'free' it has 200+ authenticators and i

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

2009-08-13 Thread Scott McGrath
Radiator RADIUS server. There are multiple versions of this software and support is available for a reasonable fee runs on Windows/Solaris/Linux Www open com au -Original Message- From: "Phil Mayers" Subj: Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS? Date: Thu Aug

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-28 Thread Scott McGrath
You are forgetting NLSP (Novell Link State Protocol) designed to eliminate RIP/SAP adverts But IPX had a lot of advantages large address space, local network autoconfiguration, anti-spoofing, service autolocation Jeff Kell wrote: Justin Shore wrote: According to a Pannaway SE who visit

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-28 Thread Scott McGrath
EIGRP... Ducks and runs for cover Justin Shore wrote: Hank Nussbacher wrote: I just got this product alert from Cisco: From: cisconotificationserv...@cisco.com To: h...@efes.iucc.ac.il Subject: Cisco Notification Alert -Alerts_Daily-07/28/2009 07:38 GMT Cisco Notification Service A

Re: [c-nsp] 4510 reporting dozens of config changes throughout the day...

2009-06-08 Thread Scott McGrath
Port autonegotiation may be a cause you may prefer not logging port status changes which DO alter the running config Sent with Good (www.good.com) -Original Message- From: Steven Fischer [mailto:sfischer1...@gmail.com] Sent: Sunday, June 07, 2009 10:06 PM Central Standard Time To:

Re: [c-nsp] Cat6500 sup2 boot from PCMCIA

2008-12-12 Thread Scott McGrath
You can boot a sup2 from TFTP in ROMMON Teller, Robert wrote: I ran into a similar problem and had to RMA a new sup/cf card from cisco. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of David Lima Sent: Friday, December 12

Re: [c-nsp] ASA doesn't like ipsec...

2008-09-25 Thread Scott McGrath
VPN is a single context feature david raistrick wrote: Guys, Trying to turn up a vpn on a newly reinstalled (and out of support) pair of asa 5520s. They're running in multiple context mode, and active/standby. I've searched and searched to no avail, but man this seems familiar.. running 8

Re: [c-nsp] Performance Of www.cisco.com

2008-09-24 Thread Scott McGrath
How about bringing back the old Mustard and Olive CCO the one which actually worked... S H A N wrote: hi, i guess its about time the cco should sit behind akamai or limelight... what do you think? On Wed, Sep 24, 2008 at 5:03 PM, Mark Tinka <[EMAIL PROTECTED]>wrote: Hi all. Not sure if i

Re: [c-nsp] Cisco ASA VPN Active/Standby - license requirements

2008-09-22 Thread Scott McGrath
Think LBSSP - Although Cisco making everything a 'Revenue Enhancement' opportunity puts my teeth on edge Cisco seems to have forgotten how they got to their dominant position mediocre products with GREAT support and reasonable licensing terms. They still have mediocre products but now sup

Re: [c-nsp] Catalyst 650x sup2 or sup32

2008-08-29 Thread Scott McGrath
Sup32 - Sup2 is obsolete it's had a GREAT run we just took our last sup 2's out of production this year and they were installed in 2000 so in a technology sense they were almost immortal - Sup2 does not support ipv6 in hardware - going forward Cisco will be supporting the Sup32 not the 2 Jeff

Re: [c-nsp] Few questions regarding fixed vs modular and when which is better.

2008-08-28 Thread Scott McGrath
The only problem with the 4948 is it's price point with 10G it's 15K. The 3750E's are much more reasonable you can mount the switch and RPS in 1U if you use the front and back rails Ian MacKinnon wrote: Drew Weaver wrote: What is the 'defacto' top of rack 10/100/1000 48 port

Re: [c-nsp] XMODEM a native image to a 6500 Sup2 SP

2008-08-12 Thread Scott McGrath
Use a PCMCIA to CF adapter and load the image using your PC - we used these extensively and they worked well and were much cheaper than the flash cards plus with a laptop we could copy directly onto the CF no need for XMODEM/TFTP Church, Charles wrote: Does anyone know if it's possible to use

Re: [c-nsp] 6509 power supply question

2008-05-23 Thread Scott McGrath
Jeff, I've done this before but one of the power supplies was sufficient to run the chassis What you need to do 1 - set the power to combined mode ( since the PS units will not match ) 2 - remove one of the power supplies 110V cable 3 - install the 'new' power supply cable 4 - power it up and m

Re: [c-nsp] Fake Cisco Equipment News Articles - very interesting

2008-05-13 Thread Scott McGrath
the spindle. The political dimension I agree is outside the scope of the c-nsp list and should not be discussed here Scott McGrath wrote: > I have some experience with the counterfeit stuff as well. > > Purchased CWDM SFP's from a Cisco platinum partner - they failed the > va

Re: [c-nsp] Fake Cisco Equipment News Articles - very interesting

2008-05-13 Thread Scott McGrath
I have some experience with the counterfeit stuff as well. Purchased CWDM SFP's from a Cisco platinum partner - they failed the validity check they looked good came in cisco packaging with all the seals documentation etc. It's just they were fake turns out distributors use the 'spot' market

Re: [c-nsp] PIX questions

2008-05-09 Thread Scott McGrath
You do realize that ICMP handling needs to be enabled on the PIX independently of ACL Rudy Setiawan wrote: > Hi all, > > I have a question about PIX translation > > An outside interface has IP address: > 192.168.1.2 255.255.255.0 > > An DMZ interface has IP address: > 10.1.1.2 255.255.255.0 > > >

Re: [c-nsp] IOS pirating requests

2008-04-03 Thread Scott McGrath
1 - log into router 2 - type write erase 3 - reload Upgrade and perfect security all at once ;-} Adam Korab wrote: > On Wed, Apr 2, 2008 at 9:15 AM, <[EMAIL PROTECTED]> wrote: > >> How do you do an IOS upgrade? >> >> :) >> > > Phase 1: log into your router > Phase 2: type "no ip retard

Re: [c-nsp] Catalyst 3750 failure - marsupial interference

2008-04-02 Thread Scott McGrath
DEC trivia 1 - Does anyone remember "Say it in SIXBIT" 2 - What is the difference between a DECSYSTEM-10 and a DECSYSTEM-20 3 - When did the FOONLY project get started and what was the "SUPER FOONLY" used to make Tony Li wrote: > > > |> ... It was founded by ex-DEC folks > |> > |> http://

Re: [c-nsp] External Firewall

2008-03-24 Thread Scott McGrath
because they do not trust their field offices not to install the latest 'screen saver'... [EMAIL PROTECTED] wrote: > Why would anybody want to secure their lan from their wan? :) > > -- > Regards, > > Jason Plank > CCIE #16560 > e: [EMAIL PROTECTED] > > -- Original message --

Re: [c-nsp] RES: Router security defaults (WAS RE: Proxy ARP -- Todisable, or not to disable..)

2008-03-24 Thread Scott McGrath
nks, > > Fred Reimer, CISSP, CCNP, CQS-VPN, CQS-ISS > Senior Network Engineer > Coleman Technologies, Inc. > 954-298-1697 > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Scott McGrath > Sent: Monday, March 24, 2

Re: [c-nsp] RES: Router security defaults (WAS RE: Proxy ARP -- Todisable, or not to disable..)

2008-03-24 Thread Scott McGrath
Both redirects and unreachables can be used to implement a Denial of Service attack.We allow internally for troubleshooting but disallow both transmission to and reception from the global internet.Both to prevent DDoS from compromised hosts and from external hosts with hostile intent.

Re: [c-nsp] I need help. Cisco Etherswitch PoE Module Not Powering IP Phones

2008-03-10 Thread Scott McGrath
What hardware are you using. From this display it looks like no power is available from the device If this is on a Catalyst 4000 for instance even if the blade has PoE you need a separate power shelf to actually supply the PoE it does not take power from the system supply. Felix Nkansah wro

Re: [c-nsp] CCNP exams while working full time?

2008-01-22 Thread Scott McGrath
Unless you are new to networking and Cisco equipment CCNP is easy to attain - but your mileage may vary I just read the Cisco press books during spare time and passed with flying colors I've had my CCNP for almost 9 years nos Mohamed Ahmad wrote: > Hi everyone, > > I just wanted to see how man

Re: [c-nsp] tcpdump on ios?

2008-01-11 Thread Scott McGrath
debug ip packet - BE VERY CAREFUL with this one matthew zeier wrote: > I'm trying to track down an issue and recall some method to watch > traffic going through a router based on an ACL. Can't recall the syntax > though. > > help? > ___ > cisco-nsp ma

Re: [c-nsp] Warranty Info on 6500 Gear

2007-04-06 Thread Scott McGrath
They have a 90 day warranty - after that you pay... Phil Mayers wrote: > On Wed, Apr 04, 2007 at 07:59:23PM -0700, Richard J. Sears wrote: > >> Hey Everyone - >> >> I am looking for specific warranty information on Cisco 6500 series >> switches and modules. I looked all over the Cisco website