Re: [c-nsp] OT: How do you fight spam in your enterprise? I need help

2007-12-20 Thread Ted Mittelstaedt
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Felix Nkansah Sent: Wednesday, December 19, 2007 11:13 AM To: groupstudy; cisco-nsp@puck.nether.net Subject: [c-nsp] OT: How do you fight spam in your enterprise? I need help Hello, I know this

Re: [c-nsp] OT: How do you fight spam in your enterprise? I needhelp

2007-12-20 Thread Ted Mittelstaedt
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pablo Almido Sent: Wednesday, December 19, 2007 9:15 PM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] OT: How do you fight spam in your enterprise? I needhelp You could buy appliances from

Re: [c-nsp] Aironet Indoor or Router Wireless for WLAN

2007-12-20 Thread A . L . M . Buxey
Hi, According to Cisco I have to run a Site Survey for deploying a WLAN. Currently I need deploy it in my enterprise, iluminate several courtrooms conference in the building, how can I run a good site survey?. In addition, I have router wireless trednet but it does not work very well,

Re: [c-nsp] OT: How do you fight spam in your enterprise? I needhelp

2007-12-20 Thread Andy Dills
On Thu, 20 Dec 2007, Ted Mittelstaedt wrote: The expensive commercial spamfiltering solutions only make sense for mid-tier ISPs, that is, the ISPs that have networks too big for a single admin to do everything, but are not large enough to be capitalized to the extent that they can hire a

[c-nsp] [ASAP] STP port-state

2007-12-20 Thread Hiromasa Sekiguchi
Hi, In what situation does Port-State output type-inconsis? We use cat6k. (enable) sh spantree VLAN 1 Spanning tree mode PVST+ Spanning tree type ieee Spanning tree enabled Designated Root ** Designated Root Priority32769 Designated Root Cost0

Re: [c-nsp] OT: How do you fight spam in your enterprise? I needhelp

2007-12-20 Thread Ted Mittelstaedt
-Original Message- From: Andy Dills [mailto:[EMAIL PROTECTED] Sent: Thursday, December 20, 2007 2:37 AM To: Ted Mittelstaedt Cc: Pablo Almido; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] OT: How do you fight spam in your enterprise? I needhelp On Thu, 20 Dec 2007, Ted

Re: [c-nsp] OT: How do you fight spam in your enterprise? I need help

2007-12-20 Thread Tom Storey
On 20/12/2007, at 7:32 PM, Ted Mittelstaedt wrote: Most ISP's run mailservers to help contain customers. The idea is if you keep them off of gmail, they won't be pitched as often by your competitors. And not just because offering customers a free mailbox with their internet connection is

Re: [c-nsp] [ASAP] STP port-state

2007-12-20 Thread Andy Dills
On Thu, 20 Dec 2007, Hiromasa Sekiguchi wrote: Hi, In what situation does Port-State output type-inconsis? We use cat6k. (enable) sh spantree VLAN 1 Spanning tree mode PVST+ Spanning tree type ieee Spanning tree enabled Designated Root **

[c-nsp] ip helper address on pix

2007-12-20 Thread Bagosi Rómeó
Hello Experts! Is there a way to enable udp broadcasts (netbios, wins...) through Cisco Pix v6.3? Is there any ip helper address like command? Thank You, Romeo Bagosi ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] shaping using policy-map on bridged interface

2007-12-20 Thread Francois Corthésy
Hi all, I was playing around with a 1841, and tried to do shaping using a policy-map on its interfaces in bridge mode. This setup works fine when the interfaces are routed, but as soon as I put them in a bridge group, no shaping takes place. Here is what the setup looks like:

Re: [c-nsp] shaping using policy-map on bridged interface

2007-12-20 Thread Oliver Boehmer (oboehmer)
Francois Corthésy wrote on Thursday, December 20, 2007 2:39 PM: Hi all, I was playing around with a 1841, and tried to do shaping using a policy-map on its interfaces in bridge mode. This setup works fine when the interfaces are routed, but as soon as I put them in a bridge group, no

[c-nsp] Cisco Rate Limit

2007-12-20 Thread Duracom Lists
I have the need to limit a customer to 20M Up and 20M Down. The scenario is they are connected to our OC3 ATM via a 45M DS3 but only paying for 20M, so can you rate limit the entire interface that they are on without doing an Access list to match IP's since they have several IP's from different

Re: [c-nsp] ip helper address on pix

2007-12-20 Thread Darryl Dunkin
No, the only command supported is 'dhcprelay'. http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/df.html#wp1084795 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bagosi Rómeó Sent: Thursday, December 20, 2007 05:25 To:

Re: [c-nsp] BGP soft reconfiguration inbound

2007-12-20 Thread Aaron
Mohamed, As many have already said, you lose the ability to see some info from your peer. If you only have 1 upstream then it is worth the memory it takes. Removing will free up memory since that looks like where your concern lies. I would try to upgrade your memory if possible. Aaron On Dec 18,

[c-nsp] Central Office Cisco Gear?

2007-12-20 Thread Troy Beisigl
Hi, Everyone has always been so helpful in the past on answering my questions and so I have one more. Does Cisco have equipment that can be used to deploy DS1, DS3 and OCx circuits from a colo in an ILEC CO? If not, does anyone have any recommendations as to what would be best for this?

Re: [c-nsp] OT: How do you fight spam in your enterprise? I need help

2007-12-20 Thread Frank Bulk
Tom: So you don't think that an ISP-branded e-mail creates stickiness? I'll have you man our helpdesk after we send a letter to our new subscribers from acquisitions that they need to change their e-mail address. It's not 100%, but it's a significant and measureable quantity. We encourage

[c-nsp] Wireless Technology / direction

2007-12-20 Thread jacob c
Hello, I was hoping to get some input or even examples for the two issues below. 1) What product(s) are guys using to manage a hybrid of Cisco and other vendors access points? Has anyone tried AMP or Trapeze? Will Cisco WLSE/WDS manage OTHER vendor's products? 2) I need to put

[c-nsp] Rate-Limit Problem

2007-12-20 Thread Paul Stewart
Can anyone tell me why this doesn't work? We have this implemented in dozens of other locations and it works fine... Cisco 2621 router interface FastEthernet0/0.10 description Office LAN encapsulation dot1Q 10 ip address 216.168.114.57 255.255.255.248 rate-limit input 420 2100 2100

Re: [c-nsp] Central Office Cisco Gear?

2007-12-20 Thread OCOSA ListAcct
For DS-1 and DS-3 I would recommend using 7200VXR router and for the OC-n level using GSR router. You can absolutely just use the GSR for all but if you are not really taking a lot of circuits via Ethernet or OC-n level too expensive. But it really just depends on your budget, what you want to

Re: [c-nsp] Rate-Limit Problem

2007-12-20 Thread Andy Dills
On Thu, 20 Dec 2007, Paul Stewart wrote: Can anyone tell me why this doesn't work? We have this implemented in dozens of other locations and it works fine... rate-limit input 420 2100 2100 conform-action transmit exceed-action drop Your burst buckets are too small. The general

Re: [c-nsp] cisco-nsp Digest, Vol 61, Issue 52

2007-12-20 Thread Collins, Richard (SNL US)
Hello Frank, I did get it working with my 2851. I used subinterfaces on my Gigabit trunk port Gi0/1. It only worked if I used the bridge-group under these subinterfaces and not under the int vlan. Maybe it is similar with your gear? Is something similar to bridge 2 protocol ieee available on

[c-nsp] copy tftp flash gives OOOOOO!OOOOOO!

2007-12-20 Thread Adam Greene
Hi, Have you ever received output like this while you are copying an image to flash on a router? (in this case 2611XM running 12.3(22))? !!!O!O!OO!O! O!O!OO!O!OO!O

Re: [c-nsp] Rate-Limit Problem

2007-12-20 Thread Paolo Lucente
Hi Paul, also consider the access rate (100Mbps) is much higher than your CIR (some 4Mbps); this means that TCP tests will perform badly unless you introduce some sort of egress shaping instead of that brutal rate-limiting which just drops non-conforming packets. Rate-limiting and policing are

Re: [c-nsp] copy tftp flash gives OOOOOO!OOOOOO!

2007-12-20 Thread Ramcharan, Vijay A
Make sure you compare the md5 hash after the upload/download is done before you try to use the image. Vijay Ramcharan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adam Greene Sent: December 20, 2007 16:50 To: cisco-nsp@puck.nether.net Subject:

Re: [c-nsp] copy tftp flash gives OOOOOO!OOOOOO!

2007-12-20 Thread Adam Greene
Thanks guys. Image copied successfully, and I verified the MD5 hash as well, as suggested. I appreciate the help and the peace of mind of knowing the router will most likely reboot! Adam - Original Message - From: Jeffrey Ollie [EMAIL PROTECTED] To: Adam Greene [EMAIL PROTECTED] Cc:

Re: [c-nsp] copy tftp flash gives OOOOOO!OOOOOO!

2007-12-20 Thread Dale Shaw
Hi all, - Original Message - From: Jeffrey Ollie [EMAIL PROTECTED] To: Adam Greene [EMAIL PROTECTED] Cc: cisco-nsp@puck.nether.net Sent: Thursday, December 20, 2007 5:07 PM Subject: Re: [c-nsp] copy tftp flash gives OO!OO! The Os indicate that a TFTP packet was lost along

Re: [c-nsp] OT: How do you fight spam in your enterprise? I need help

2007-12-20 Thread Tom Storey
On 21/12/2007, at 6:26 AM, Frank Bulk wrote: Tom: So you don't think that an ISP-branded e-mail creates stickiness? I'll have you man our helpdesk after we send a letter to our new subscribers from acquisitions that they need to change their e-mail address. It's not 100%, but

Re: [c-nsp] OT: How do you fight spam in your enterprise? Ineed help

2007-12-20 Thread Daniel Hooper
On 21/12/2007, at 6:26 AM, Frank Bulk wrote: Tom: So you don't think that an ISP-branded e-mail creates stickiness? I'll have you man our helpdesk after we send a letter to our new subscribers from acquisitions that they need to change their e-mail address. It's not 100%, but

Re: [c-nsp] OT: How do you fight spam in your enterprise? Ineed help

2007-12-20 Thread Tom Storey
On 21/12/2007, at 10:38 AM, Daniel Hooper wrote: On 21/12/2007, at 6:26 AM, Frank Bulk wrote: Tom: So you don't think that an ISP-branded e-mail creates stickiness? I'll have you man our helpdesk after we send a letter to our new subscribers from acquisitions that they need to change

Re: [c-nsp] Bridging two VLANs together

2007-12-20 Thread Frank Bulk - iNAME
Thanks. Unfortunately, bridge 2 protocol ieee is not a valid command on my 7609-S 12.22SR. Without it, I don't think it's worth trying the subinterfaces. Regards, Frank -Original Message- From: Collins, Richard (SNL US) [mailto:[EMAIL PROTECTED] Sent: Thursday, December 20, 2007 3:44

Re: [c-nsp] copy tftp flash gives OOOOOO!OOOOOO!

2007-12-20 Thread Phil Bedard
I ran into this recently when tftp was being throttled by Control Plane Policing. O generally means a dropped packet. Phil On Dec 20, 2007, at 4:50 PM, Adam Greene wrote: Hi, Have you ever received output like this while you are copying an image to flash on a router? (in this case

Re: [c-nsp] copy tftp flash gives OOOOOO!OOOOOO!

2007-12-20 Thread Jon Lewis
Actually, isn't that O = out of order packet? Are there multiple active paths between the router and TFTP server? Perhaps cef per-packet on serial links to the router? On Thu, 20 Dec 2007, Phil Bedard wrote: I ran into this recently when tftp was being throttled by Control Plane Policing.

Re: [c-nsp] copy tftp flash gives OOOOOO!OOOOOO!

2007-12-20 Thread Jonathan Charles
The Os mean out of order. Which means what you are TFTPing is over 18.4MB and crappy TFTP servers (Solarwinds, Cisco...) reset their sequence number to 0 after 18.4MB... Get 3CDaemon Jonathan On Dec 20, 2007 3:50 PM, Adam Greene [EMAIL PROTECTED] wrote: Hi, Have you ever received output

Re: [c-nsp] copy tftp flash gives OOOOOO!OOOOOO!

2007-12-20 Thread Jon Lewis
On Thu, 20 Dec 2007, Jonathan Charles wrote: The Os mean out of order. Which means what you are TFTPing is over 18.4MB and crappy TFTP servers (Solarwinds, Cisco...) reset their sequence number to 0 after 18.4MB... Get 3CDaemon Or use copy ftp://user:[EMAIL PROTECTED]/pathtoios as it'll run

Re: [c-nsp] copy tftp flash gives OOOOOO!OOOOOO!

2007-12-20 Thread Jeffrey Ollie
On 12/20/07, Adam Greene [EMAIL PROTECTED] wrote: Have you ever received output like this while you are copying an image to flash on a router? (in this case 2611XM running 12.3(22))? !!!O!O!OO!O!

Re: [c-nsp] copy tftp flash gives OOOOOO!OOOOOO!

2007-12-20 Thread Richard A Steenbergen
On Fri, Dec 21, 2007 at 12:33:07AM -0500, Jon Lewis wrote: Or use copy ftp://user:[EMAIL PROTECTED]/pathtoios as it'll run faster anyway and not have any issues with IOS file sizes. Unless it corrupts the image when you use ftp instead of tftp (hi SRA!). -- Richard A Steenbergen [EMAIL

Re: [c-nsp] OT: How do you fight spam in your enterprise? Ineed help

2007-12-20 Thread Ted Mittelstaedt
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tom Storey Sent: Thursday, December 20, 2007 4:02 PM To: Daniel Hooper Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] OT: How do you fight spam in your enterprise? Ineed help On 21/12/2007,