RE: quick question - router for regular dial in isp? [7:36006]

2002-02-21 Thread Mark Odette II
Beth- Yes. You can use the 804 in the fashion you ask. In fact, that's what it is designed to do... if you want it to perform as if it were routing traffic in a nailed-up state, you just set the dialer timer to an infinitely high value... and then it'll never hang up, unless you kill the power,

Global line config question [7:36046]

2002-02-21 Thread Julian Fletcher
I have a question regarding the use of the login keyword within global config-line - in this example with the vty entries. A default config would read :- ! line vty 0 4 ! ! Entering global config-line mode, and entering the login command, we get :- ! line vty 0 4 login ! However, entering

IDS 4210 help again [7:36047]

2002-02-21 Thread Shane Stockman
I have setup the ids with the all the relevant in for such as the sensor and ids manager details as well as the ip address,netmask,default gateway. My question is that if 1 interface is the monitoring interface and it is connected to the internet router and the other is the command and control

Re: China/Cisco connection [7:35946]

2002-02-21 Thread Dominick Marino
I agree with Joseph Brunner. To compare the two is absurd! The Chinese will use the technology to suppress the truth from becoming known to the people ( peasants to the elite). It is also a good way to find the subversives and eliminate them. As for the US government monitoring the traffic,

Boson's CCIE LAB Practice [7:36049]

2002-02-21 Thread kaushik khakhar
Group, I am going for CCIE RS lab soon. Boson released CCIE Lab practice book, plus some simulation software. The total price in current introductry offer is abt 750USD approx. I dont mind investing in it, but before that as usual I would like to take some vauable inputs from Group. If any one

Re: CSPM 2.3i and NT versus 2000 [7:35980]

2002-02-21 Thread Chee Kin
This is what I have discovered while preparing for the CSIDS exam a while back. I was using a CSPM 2.3.2i eval copy. For CSPM standalone mode, you need to have NT 4.0 SP6a and IE 5.5. I installed IE 5.5 SP2 to get it working on the NT box. You won't be able to install CSPM (standalone mode)

Re: exec-timeout 0 0 ?? [7:36018]

2002-02-21 Thread Scott H.
You gotta love this one. Real pain in the *ss to get back in. Chuck wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... and if you want to have a ton of fun, set it to something like 0 1 ;- Thom Castognalia wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Phil -

Should I buy IDS ? [7:36053]

2002-02-21 Thread Arni V. Skarphedinsson
I am administrating a network of about 500 computers, 30 servers, and somthink like 70 WAN locations, I have been thinking about the Cisco IDS system, anyone have any good reasons to use one, have you used it, and has it detected much intrusion. I realy need somthing to sell the ides to the

Re: Delay Metric in EIGRP [7:36001]

2002-02-21 Thread Steven A. Ridder
So is it safe for me to conclude that I was wrong in stating that EIGRP sends the metrics to its neighbors. It actually sends the raw data such as bandwidth, and delay, and the neighbor router uses the DUAL FSM process to calculate the Reported Distance and then it's distance? I've been

RE: Should I buy IDS ? [7:36053]

2002-02-21 Thread Maccubbin, Duncan
For that small of a network SNORT would be fine and it costs quite a bit less. -Original Message- From: Arni V. Skarphedinsson [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 21, 2002 9:32 AM To: [EMAIL PROTECTED] Subject: Should I buy IDS ? [7:36053] I am administrating a network

Boot Rom upgrade on SUP I? [7:36056]

2002-02-21 Thread Paul C
Does anyone know if it is possible to upgrade the NMP and MCP boot roms on a Supervisor I switch engine? I have found the procedure for the upgrade on a SUP II and III, but I am unable to locate the procedure for a SUP I. Thanks in advance Paul C. Message Posted at:

RE: Should I buy IDS ? [7:36053]

2002-02-21 Thread Tel Khan
Hi, Where can i obtain information on SNORT? Thanks in advance Tel Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36057t=36053 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report

Re: Should I buy IDS ? [7:36053]

2002-02-21 Thread Patrick Ramsey
Well...it depends on how secure you want your network! The size is completely irrelevant... if you own a medical practice with patient data floating around your network and you only have 10 computers, with 4 of them offering some type of internet service through the firewal,etc etc... then I

Re: Delay Metric in EIGRP [7:36001]

2002-02-21 Thread Phil Barker
The 'Bandwidth' and 'Delay' parameters ARE metrics, which are sent to neighbours in packets in order that DUAL can be run to calculate its topological database and routing table. Phil. --- Steven A. Ridder wrote: So is it safe for me to conclude that I was wrong in stating that EIGRP

RE: MLPS-VPN requirements [7:35972]

2002-02-21 Thread Irwin Lazar
Hi Stanzin, See www.mplsrc.com/vendor.shtml for links to Cisco VPN configuration information. irwin -Original Message- From: Stanzin Takpa [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 20, 2002 2:49 PM To: [EMAIL PROTECTED] Subject: MLPS-VPN requirements [7:35972] Hi !

RE: Should I buy IDS ? [7:36053]

2002-02-21 Thread Patrick Ramsey
www.snort.org and remember www.lids.org :) Install lids then snort... (unless you are plannign on runnign snort on a microsoft platform! :) (but that kinda defeats the purpose of security...) Tel Khan 02/21/02 10:12AM Hi, Where can i obtain information on SNORT? Thanks in advance

RE: Should I buy IDS ? [7:36053]

2002-02-21 Thread Tel Khan
Hi Patrick, Thanks for the urls Tel Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36064t=36053 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure

DEC server addressing [7:36065]

2002-02-21 Thread Wilson, Gavin (KBPB)
Hi there Does anyone know how to change the ip address and default gateway on a dec server then the correct way of saving it to memory. Cheers Gavin Gavin Wilson Kleinwort Benson Private Bank Tel: 0207 4751771 Mobile: 07989441850 email: [EMAIL PROTECTED]

RE: Should I buy IDS ? [7:36053]

2002-02-21 Thread Irwin Lazar
Before you go for a solution you need to understand the requirements. What is the threat from attack? What can be lost? What is the impact on the business? If you can demonstrate sufficient requirements for an IDS, selling a solution to management should be easy. Irwin -- Irwin Lazar

Autonomous-system command [7:36067]

2002-02-21 Thread John Neiberger
In 12.2(3) I just ran across the following global configuration command: autonomous-system [AS] Router(config)#? Configure commands: aaa Authentication, Authorization and Accounting. access-list Add an access list entry alias

DEC server addressing [7:36068]

2002-02-21 Thread Wilson, Gavin (KBPB)
Hi there Does anyone know how to change the ip address and default gateway on a dec server then the correct way of saving it to memory. Cheers Gavin Gavin Wilson Kleinwort Benson Private Bank Tel: 0207 4751771 Mobile: 07989441850 email: [EMAIL PROTECTED]

NAS and NACServer [7:36069]

2002-02-21 Thread John Green
i need some quick help with this. please post asap. thanks -- Network Access Server and Network Access Control Server are two different boxes ? eg CiscoSecure Access Control Server (unix) is a software that is installed on Solaris box, to which

Re: Boson's CCIE LAB Practice [7:36049]

2002-02-21 Thread Kevin St.Amour
There is also : http://www.ipexpert.net/products/workbook/workbook.asp Any one knpw about this one as well? I am interested in feedback on both... kaushik khakhar wrote: Group, I am going for CCIE RS lab soon. Boson released CCIE Lab practice book, plus some simulation software. The total

Re: DEC server addressing [7:36068]

2002-02-21 Thread Patrick Ramsey
def int gateway x.x.x.x Wilson, Gavin (KBPB) 02/21/02 10:46AM Hi there Does anyone know how to change the ip address and default gateway on a dec server then the correct way of saving it to memory. Cheers Gavin Gavin Wilson Kleinwort Benson Private Bank Tel: 0207 4751771 Mobile:

RE: Should I buy IDS ? [7:36053]

2002-02-21 Thread Ken Diliberto
Ken Tel Khan 02/21/02 09:12AM Hi, Where can i obtain information on SNORT? Thanks in advance Tel Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36072t=36053 -- FAQ, list archives, and subscription info:

Re: DEC server addressing [7:36068]

2002-02-21 Thread Patrick Ramsey
sorry def int address x.x.x.x def int mask x.x.x.x -Patrick Wilson, Gavin (KBPB) 02/21/02 10:46AM Hi there Does anyone know how to change the ip address and default gateway on a dec server then the correct way of saving it to memory. Cheers Gavin Gavin Wilson Kleinwort Benson Private

Re: %Error: No System flash chip information available - Help [7:36074]

2002-02-21 Thread MADMAN
Are you installing two 8M SIMMs? Scratching my head but I seem to recall that if you do you will have partitoned flash. If you want an unpartitioned 16M you need to install a single 16M SIMM. I'm sure this can be verified on CCO if your so inclined. good luck Dave Cisco Nuts wrote:

Re: Works Now!! Was: Re: 16MB Flash (Read) (Read/Write) on a [7:36075]

2002-02-21 Thread MADMAN
should read all the mail before responding, forget my last message and I'll go back to scrathing my head;) Dave Cisco Nuts wrote: OK, Finally got it to work!! Thank you so much Sasa and the rest of you for helping me out. Here is what I did: (for others who might have a similiar

RE: PIX v6.2 [7:35987]

2002-02-21 Thread Brian Zeitz
I have not used it, but I think there is going to be some issues for someone trying to use PPPoe on a firewall, especially if the IP is dynamic. Just to get hands on with a firewall, I was playing with ISA 2000 Server at home (Microsoft Firewall). Their packet filters would not bind to a dynamic

RE: Trunk Modes Perspective [7:36016]

2002-02-21 Thread Daniel Cotts
... And the answer comes from ... you guessed it ... Cisco LAN Switching by Clark and Hamilton. page 320 The 'desirable' mode causes a Catalyst interface to inform the remote end of its 'intent' to enable ISL, but does not actually enable ISL unless the remote end agrees to enable it. The remote

RE: Trunk Modes Perspective [7:36016]

2002-02-21 Thread Pierre-Alex GUANEL
Thanks again ... I wished we add a major bookstore in Fairfield Do you have a real world practical example of when you used one versus the other I would like to share something concrete with my class tonight... Pierre-Alex -Original Message- From: Daniel Cotts [mailto:[EMAIL

RE: Should I buy IDS ? [7:36053]

2002-02-21 Thread Irwin Lazar
There is another public domain IDS at http://www.icir.org/vern/bro-info.html it is also worth checking out http://www.networkintrusion.co.uk/ids.htm for a detailed list of IDSs irwin -Original Message- From: Patrick Ramsey [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 21, 2002

RE: EIGRP Successor [7:36044]

2002-02-21 Thread s vermill
Hunt Lee wrote: I have an EIGRP question that I'm a bit confused: Firstly, let me try to see if I understand the terms: (for EIGRP) Successor - A neighoring router used for packet forwarding that has a least cost path to a destination. Feasible Successor - Next-hop router for the

Re: %Error: No System flash chip information available - Help [7:36077]

2002-02-21 Thread Chuck
on the 25xx series, you can have 2x4 meg or 2x8 meg I believe what needs be done is to enter the command partition flash 1 this will perform some magic that will result in one great big 16 meg flash after reloading. Chuck MADMAN wrote in message [EMAIL PROTECTED]">news:[EMAIL

Re: Delay Metric in EIGRP [7:36001]

2002-02-21 Thread Priscilla Oppenheimer
A router sends the components of the metric. The recipient calculates the actual composite metric by working a bunch of black magic. The DUAL process and figuring out successors are separate from the metric calculation, but use the metric info. Here's a terrific paper on the topic:

RE: hop count in EIGRP? [7:36082]

2002-02-21 Thread s vermill
Actually there are hop count limits that need to be adhered to when you implement EIGRP for Appletalk and IPX. You can search on CCO and read all about it. Steven A. Ridder wrote: Anyone know why there is a hop-count in EIGRP? It has a 1 byte value, but it doesn't limit the number of hops

RE: Autonomous-system command [7:36067]

2002-02-21 Thread Kane, Christopher A.
Checked one of my lab boxes, it's running 12.0(16) and had that command as well. Like you I searched cisco command ref online and couldn't find it. I have an old 11.1 command summary manual and found it on page 453. [no] autonomous-system (local-as) To specify the local autonomous system that

Re: hop count in EIGRP? [7:36082]

2002-02-21 Thread Steven A. Ridder
thanks! -- RFC 1149 Compliant. s vermill wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Actually there are hop count limits that need to be adhered to when you implement EIGRP for Appletalk and IPX. You can search on CCO and read all about it. Steven A. Ridder wrote:

RE: Autonomous-system command [7:36067]

2002-02-21 Thread John Neiberger
Thanks! I figured it must do something or they wouldn't have it there. :-) It's interesting that they don't have it in the command references any longer, though. You'd think that if you check the master index that all possible commands would be in there somewhere, but I couldn't find this one.

route selection in BGP [7:36088]

2002-02-21 Thread Joep Hoet
Can someone solve this confusion regarding the route selection process in Cisco BGP. Suppose the route is sync and the next-hop is reachable, which is then thru? A) 1) highest weight 2) highest local preference 3) shortest AS-path 4) lowest origin code (IGPEGPunknown) 5) lowest MED 6) EBGP

PIX Logs [7:36090]

2002-02-21 Thread [EMAIL PROTECTED]
Greetings all, I have a big pix log (50mb) and I need to clean it up to get src/dest and port numbers in a clean format. Do you guys know of any freebie I can use to clean it? Thanks.Nabil Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36090t=36090

RE: route selection in BGP [7:36088]

2002-02-21 Thread Brian Zeitz
I am not that familiar with BGP but I would say weight. Select the path with the highest administrative weight. * If weights are equal, prefer the route with the highest local preference; * If the local preferences are the same, prefer the route originated by this router; * If none of

RE: PIX v6.2 [7:35987]

2002-02-21 Thread [EMAIL PROTECTED]
Where did you guys find the new 6.2 versions? I looked at Cisco's site, no luck. Thanksnabil Brian Zeitz cc:

Pin #6 - DSR - Why?? [7:36094]

2002-02-21 Thread Cisco Nuts
Hello, The BCRAN course book mentions 8 pins being used for modem connections: Pins 2,3,4,5,6,7,8,20...Pin # 6 it says is not really used for modem connection and infact I don't even see that pin on the actual adapter. Then why is it mentioned and if it is actually used, when would it be used?

Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Cisco Nuts
And upon finishing the program, how many years of slavery will we unfortunate ones be indebted to your gracious company? :-) Can you clarify this?? From: Jason Lee Reply-To: Jason Lee To: [EMAIL PROTECTED] Subject: CISCO INTERNSHIP.CCIE. [7:36091] Date: Thu, 21 Feb 2002 13:40:20

Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Brian
Perhaps its a new look on recruiting, they train u, get a slice of the dough for awhile?? Just speculating of course.. Brian On Thu, 21 Feb 2002, Cisco Nuts wrote: And upon finishing the program, how many years of slavery will we unfortunate ones be indebted to your gracious

Re: Delay Metric in EIGRP [7:36001]

2002-02-21 Thread Priscilla Oppenheimer
Did anyone notice that I explained reliability and load backwards? ;-) It was a copy-and-paste error. Reverse the two explanations below please. Priscilla At 08:43 PM 2/20/02, Priscilla Oppenheimer wrote: The delay part of the EIGRP composite metric is not measured. It's based on the type of

Re: CCIE Practical studies - review by Brad. [7:36038]

2002-02-21 Thread Paul Borghese
We have a complete archive of all messages sent at www.groupstudy.com. You may also try the Webboard for this group which has every message from the last six months. Take care, Paul - Original Message - From: Rajesh Kumar To: Sent: Wednesday, February 20, 2002 10:28 PM Subject: CCIE

RE: Pin #6 - DSR - Why?? [7:36094]

2002-02-21 Thread s vermill
I suspect that you will get a fair number of responses since there are many variations on the use of this signal. I seem to recall reading that section and disagreeing somewhat on the author's comments. But the perspective was a Cisco one, so you can't fight City Hall. Asserting DSR is

RE: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Sean Knox
I've taken some classes at ICTP. From what I gather, their CCIE intern program works like this: you sign up for their CCIE program (which is not cheap I should add) and when you pass your CCIE written/lab (I vaguely remember that the CCIE written pass is all you need), you can work as a

Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Steven A. Ridder
A CCNA makes more than 50k. And you wouldn't have to pay your company to work for them and get training. Most companies pay you and pay for your training. -- RFC 1149 Compliant. Sean Knox wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I've taken some classes at ICTP. From

RE: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Sean Knox
A CCNA with little or no experience? Hardly. He's lucky to even land a job right now. I think this intern program is aimed at people new to the field. -Original Message- From: Steven A. Ridder [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 21, 2002 12:50 PM To: [EMAIL PROTECTED]

Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Steven A. Ridder
Well in the good old days of the economy, I made more than that even before becoming a CCNA. I would never settle for 50k, even in this econ., especially as a CCIE. Plus, a CCIE IMO should already have exp., and lots of it. Otherwise it defeats the purpose of becoming a CCIE - cisco certified

RE: PIX v6.2 [7:35987]

2002-02-21 Thread Hartnell, George
Hummm, I too scanned the Cisco site for 6.2 and only found 6.1.2. I'd heard from the rumor-mill that 6.2 was out, but perhaps that's incorrect. As I'm about ready to upgrade the failover 515UR, it'd be nice if I only had to do this once -- this year. Any speculation on that 6.2 release

Re: PIX Logs [7:36090]

2002-02-21 Thread Patrick Ramsey
50mb? What are you logging to? check out kiwisyslog and the various utils on their site www.kiwisyslog.com -Patrick [EMAIL PROTECTED] 02/21/02 01:37PM Greetings all, I have a big pix log (50mb) and I need to clean it up to get src/dest and port numbers in a clean format. Do you

Re: Delay Metric in EIGRP [7:36001]

2002-02-21 Thread Patrick Ramsey
ahhh you ole cut'n'paster :p :) Priscilla Oppenheimer 02/21/02 02:51PM Did anyone notice that I explained reliability and load backwards? ;-) It was a copy-and-paste error. Reverse the two explanations below please. Priscilla At 08:43 PM 2/20/02, Priscilla Oppenheimer wrote: The

Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Patrick Ramsey
ccna makes 50? uh maybe with a little experience Here in atlanta cna means squat Steven A. Ridder 02/21/02 03:50PM A CCNA makes more than 50k. And you wouldn't have to pay your company to work for them and get training. Most companies pay you and pay for your training. -- RFC

RE: Trunk Modes Perspective [7:36016]

2002-02-21 Thread McIntosh, Leslie (US - Tulsa)
Try Amazon. COM, Barnes and Noble is out there and there are a bunch more book sales on the net, then you do not have to fight the traffic to find that book you want. Thank You, Leslie McIntosh Network Engineer Deloitte Touche (918)461-4894 [EMAIL PROTECTED] -Original Message- From:

Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Cisco Nuts
That's right. A CCNA could potentially make more than $50K (with skills though) Here is what I don't understand: Jason states that his company is looking(note) for people while Sean mentions that you do have to actually sign up(note) for their program which he adds is not cheap?? So basically,

RE: Trunk Modes Perspective [7:36016]

2002-02-21 Thread Pierre-Alex GUANEL
Thanks, sometimes I forget the obvious :) Pierre-Alex -Original Message- From: McIntosh, Leslie (US - Tulsa) [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 21, 2002 3:54 PM To: 'Pierre-Alex GUANEL'; '[EMAIL PROTECTED]' Subject: RE: Trunk Modes Perspective [7:36016] Try Amazon.

Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Patrick Ramsey
pay for an internship? sounds like I am in the wrong business all together... hehe Cisco Nuts 02/21/02 04:54PM That's right. A CCNA could potentially make more than $50K (with skills though) Here is what I don't understand: Jason states that his company is looking(note) for people while

Re: Delay Metric in EIGRP [7:36001]

2002-02-21 Thread Priscilla Oppenheimer
The EIGRP bandwidth metric is 2.56 billion divided by the real bandwidth. That's just how Cisco does it (and how Sniffer displays it). In this case, the bandwidth metric is 1657856, as the Sniffer reports. The network is reachable via a single, ordinary 1544 Kbps serial interface. Do the math.

Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Brian
I suspect the below is not as true as it used to be.. Brian On Thu, 21 Feb 2002, Steven A. Ridder wrote: A CCNA makes more than 50k. And you wouldn't have to pay your company to work for them and get training. Most companies pay you and pay for your training. -- RFC 1149

Re: Delay Metric in EIGRP [7:36001]

2002-02-21 Thread Priscilla Oppenheimer
Reposting. I never saw this one get posted. The EIGRP bandwidth metric is 2.56 billion divided by the real bandwidth. That's just how Cisco does it (and how Sniffer displays it). In this case, the bandwidth metric is 1657856, as the Sniffer reports. The network is reachable via a single,

Re: hop count in EIGRP? [7:36082]

2002-02-21 Thread Priscilla Oppenheimer
It's possible it's just a holdover from IGRP which does limit the diameter of a network by checking the hop count. But EIGRP may limit the number of hops too, depending on which document you read. ;-) The following document says that the default max is 100 but can be increased with the metric

RE: PIX information [7:35294]

2002-02-21 Thread Mears, Rob
Any changes you make to the Pri PIX will be written to the SEC, no need to day anything. Good Idea to move the sec and do a Wr M Rob -Original Message- From: Evans, TJ [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 13, 2002 12:53 PM To: [EMAIL PROTECTED] Subject: RE: PIX

Re: hop count in EIGRP? [7:36082]

2002-02-21 Thread s vermill
Priscilla Oppenheimer wrote: It's possible it's just a holdover from IGRP which does limit the diameter of a network by checking the hop count. But EIGRP may limit the number of hops too, depending on which document you read. ;-) The following document says that the default max is 100

Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Marc Maxwell
I would be curious to know what type of contractual obligation is involved here. I would be willing to look at *something*, as long as it wasn't too binding (yeah right). And I *haven't* seen companies pay for training, at least not this (the good kind, that advances your career). Many if

Re: hop count in EIGRP? [7:36082]

2002-02-21 Thread s vermill
I have seen references to EIGRP hop count limits before. As I mentioned in my first post, that seems related to Appletalk and IPX support. However, a 'sh ip prot' will indeed produce a line that stated EIGRP maximum hopcount 100. Thus far, I haven't been able to find a command to change

Re: hop count in EIGRP? [7:36082]

2002-02-21 Thread s vermill
Well, a little messing around with the command line produced this: p1r1(config-router)#metric ? holddown Enable IGRP holddown maximum-hops Advertise IGRP routes greater than as unreachable weights Modify IGRP metric coefficients However, setting the max-hops

RE: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Larry Letterman
I would have to assume that your ccna candidates are paid well then..Most places in the midwest pay ccnp people about 60K or so...as far as training I have not been seeing many people in the last few classes I have attended. Larry Letterman Cisco Systems [EMAIL PROTECTED] -Original

Access list question [7:36124]

2002-02-21 Thread Justin M. Clark
can someone explain to me exactly what this line means: access-list 101 permit tcp any any established thanks Justin Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36124t=36124 -- FAQ, list archives, and subscription info:

Re: Access list question [7:36124]

2002-02-21 Thread Regis Thornton
Justin M. Clark wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... can someone explain to me exactly what this line means: access-list 101 permit tcp any any established thanks Justin Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36125t=36124

Re: Access list question [7:36124]

2002-02-21 Thread Brian
If you're on your lan and go to an external website, you presumably want the data to be able to get back to you, you dont want to write a permit statement for the return traffic of every site people visit. This allows tcp traffic from any ip to any ip in the direction implied in the config.

RE: Access list question [7:36124]

2002-02-21 Thread David Jones
Justin, This is typically used in an Internet/NAT situation where you are allowing something from the Internet to come back in, only if it's a reply to a request that originated from inside your network. For instance, with a router connected to the Internet, you typically want an access-list

Re: Access list question [7:36124]

2002-02-21 Thread Brian
Or for a better explanation, see the ack bit discussion on http://www.daemon.org/tcp.html. Brian On Thu, 21 Feb 2002, Justin M. Clark wrote: can someone explain to me exactly what this line means: access-list 101 permit tcp any any established thanks Justin Message Posted at:

Re: CISCO INTERNSHIP.....CCIE..... [7:36091]

2002-02-21 Thread Steven A. Ridder
In MA we have a high cost of living, so maybe that explains it. Larry Letterman wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I would have to assume that your ccna candidates are paid well then..Most places in the midwest pay ccnp people about 60K or so...as far as training I

Another access list question [7:36131]

2002-02-21 Thread Justin M. Clark
I have the following access list and am trying to make since of it. Here is what I have sofar with what I think the line does. 1. access-list 101 deny icmp any any redirect stop all redirects 2. access-list 101 deny icmp any any echo stop ping 3. access-list 101 deny ip 127.0.0.0

Re: Access list question [7:36124]

2002-02-21 Thread Steven A. Ridder
I can get through it by just setting the ack bit in the IP packet on. That's all it check for. Not very secure. Justin M. Clark wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... can someone explain to me exactly what this line means: access-list 101 permit tcp any any established

Re: Another access list question [7:36131]

2002-02-21 Thread Brian
the last line doesnt permit everything, just icmp packets that are not echo request, since those will be dropped by the second line. Looks like the icmp approach is block ping, permit other icmp, which is a common approach. First match wins.. Bri On Thu, 21 Feb 2002, Justin M. Clark

Re: Access list question [7:36124]

2002-02-21 Thread MADMAN
packets coming into the router that are part of a session initiated from within. I'm sure someone came be more eloquent in describing it though:) Dave Justin M. Clark wrote: can someone explain to me exactly what this line means: access-list 101 permit tcp any any established thanks

Re: Access list question [7:36124]

2002-02-21 Thread Brian
Which is why most people who are concerned use firewalls that actually keep a table of open connections. Brian On Thu, 21 Feb 2002, Steven A. Ridder wrote: I can get through it by just setting the ack bit in the IP packet on. That's all it check for. Not very secure. Justin M.

RE: Re: China/Cisco connection [7:35946]

2002-02-21 Thread [EMAIL PROTECTED]
I only agree partially. On the other hand, US government put censorship on the whole Internet, if anyone could remember what happened during US bombing of the Serbs. The news said that a virus sent NATO secrets to an ICQ site, which was quickly deleted by an USA robot, and the robot notified

PIX 520 ---no console access [7:36138]

2002-02-21 Thread Sunil Soporie
Hi All, I recently upgraded Flash and RAM on a Cisco PIX 520 and it worked fine for a week.After a week or so in production it suddenly stopped , rebooted but no luck, I could not even console into it.What happend is after some time I had the console access again and everything is fine, no

Re: Another access list question [7:36131]

2002-02-21 Thread Justin M. Clark
Thats, that just slipped my mind. Justin Brian wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... the last line doesnt permit everything, just icmp packets that are not echo request, since those will be dropped by the second line. Looks like the icmp approach is block ping,

RE: PIX 520 ---no console access [7:36138]

2002-02-21 Thread Thom Castognalia
Sunil - Open up the PIX. Remove the flash card and the RAM. Re-install the flash card and the RAM. See if that does the trick. If not, replace the RAM. TC Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36140t=36138 -- FAQ,

RE: CCIE Practical Volume I [7:36060]

2002-02-21 Thread Thom Castognalia
Is this book good for the written exam too? Where's the cheapest place to pick it up at? TC Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36141t=36060 -- FAQ, list archives, and subscription info:

Re: Re: China/Cisco connection [7:35946]

2002-02-21 Thread Steven A. Ridder
It's a rumor. wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... I only agree partially. On the other hand, US government put censorship on the whole Internet, if anyone could remember what happened during US bombing of the Serbs. The news said that a virus sent NATO secrets to an

https to log in to a router - Possible?? [7:36143]

2002-02-21 Thread Cisco Nuts
Hello, Is it possible to use https:// to access a router? I have just been thinking about this and would like to know if and how it would indeed be possible? An acl permitting 443 would not work as it is not for traffic originating from the router itself, correct? Is there like a

Re: hop count in EIGRP? [7:36082]

2002-02-21 Thread Chuck
to augment the other answers, the IP hop count is really the IP TTL value. It can never exceed 255 EIGRP defaults to 100 hops, so I would expect that the routing packet IP TTL is set at 100 at that point. Well ( checking the sniffer trace that Priscilla so thoughtfully supplied a couple of days

Re: https to log in to a router - Possible?? [7:36143]

2002-02-21 Thread Steven A. Ridder
The router would have to have a web server with ssl built in, and I don't believe Cisco's do. Cisco Nuts wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hello, Is it possible to use https:// to access a router? I have just been thinking about this and would like to know if

RE: Access list question [7:36124]

2002-02-21 Thread Priscilla Oppenheimer
That's a good conceptual explanation. I would add that technically, it allows TCP packets that have the ACK bit set. In other words, it allows packets that are acknowledging another packet. That means it would not allow an incoming SYN used to set up a session, but it would allow a reply to a

cipt [7:36148]

2002-02-21 Thread tony paparazzo
Anyone take this yet..What is passing..What are some key areas to study.. Thanks Tony Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=36148t=36148 -- FAQ, list archives, and subscription info:

Re: Access list question [7:36124]

2002-02-21 Thread Priscilla Oppenheimer
IP doesn't have an ACK bit. You mean TCP. Picky, picky, I know. ;-) Priscilla At 07:00 PM 2/21/02, Steven A. Ridder wrote: I can get through it by just setting the ack bit in the IP packet on. That's all it check for. Not very secure. Justin M. Clark wrote in message [EMAIL

RE: Re: China/Cisco connection [7:35946]

2002-02-21 Thread Priscilla Oppenheimer
At 07:13 PM 2/21/02, [EMAIL PROTECTED] wrote: Let's hope whoever has the power to control information on Internet only do it for legitimate purpose. That would be nobody. (at least in most countries ;-) It's out of control. But, I know that I asked for too much. Tony Dominick Marino

Re: hop count in EIGRP? [7:36082]

2002-02-21 Thread Priscilla Oppenheimer
At 08:05 PM 2/21/02, Chuck wrote: to augment the other answers, the IP hop count is really the IP TTL value. It can never exceed 255 You're confusing two issues. Remember the router has two jobs: forwarding packets and learning the topology. Hop count has to do with the latter and affects what

Re: hop count in EIGRP? [7:36082]

2002-02-21 Thread Priscilla Oppenheimer
At 05:45 PM 2/21/02, s vermill wrote: Well, a little messing around with the command line produced this: p1r1(config-router)#metric ? holddown Enable IGRP holddown maximum-hops Advertise IGRP routes greater than as unreachable weights Modify IGRP metric

RE: Autonomous-system command [7:36067]

2002-02-21 Thread Lupi, Guy
John, I don't know if you found an answer. Looks like this command is used to specify your AS number when you are running EGP, which is something like the precursor to BGP. There is actually a chapter on this in Doyle's Routing TCP/IP Volume II, chapter 1. HTH. From CCO: autonomous-system

Re: https to log in to a router - Possible?? [7:36143]

2002-02-21 Thread Cisco Nuts
Hum! Suprisingly it has the http built-in. I would think that they should have implemented ssl functionality in the code than http From: Steven A. Ridder Reply-To: Steven A. Ridder To: [EMAIL PROTECTED] Subject: Re: https to log in to a router - Possible?? [7:36143] Date: Thu, 21 Feb

Re: Console speed [7:36155]

2002-02-21 Thread Ranma
Re-start the router then BREAK it during it boot up and enter rommonconfig it will ask you question one by one... choose the option of different console=speed here then reboot the machine again. NK Sat wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Hi guys, I am

  1   2   >