Recent content by adam108

ARe you trying to let hosts on your internal lan access the DMZ or on an external interface? The security level for the lower than the security level for your inside interface so you will not need a access rule. If you want to let hosts on a lower security level interface access your dmz...

Assuming your IOS is up to date (there may be exceptions) and that you have enabled Quickedit mode and insert mode on your Windows command prompt, you can save a lot of time. Ping the ip. type "show ip arp <address>" Highlight the Mac with your mouse and press return. type "show mac- | include...

I've come to believe that if you connect two switches together and are able to do so, you should set the link up to function as a trunk. The reason for this is that if you need to add vlans at a later date it is easy and non-disruptive to add vlans to a trunk. Converting a standard link to a...

Is your network switched or shared? If it is switched, then you can track it down right after it happens by digging though switch mac tables until you find the mac. He can tell it is a Cisco device because that mac address has been assigned to Cisco. Here is the OUI record. 00-01-64 (hex)...

I would say that to answer succinctly the original question that pinging 127.0.0.1 is not the same as pinging the NIC IP. From a troubleshooting perspective, if you can't ping 127.0.0.1 you are having a problem with the TCP/IP stack on your machine and should troubleshoot this problem...

Are you using crossover cables? I have two 2924xl's set up with a single trunk port on each the same way except I'm using dot1q and it works. If you are using a crossover between the switches and still not bringing up the interfaces, set the ports back to access mode and see if you can get...

PAT and NAT are both Address Translations. Port Address translation uses a single public address to represent multiple hosts. This allows many machines to connect to the Internet using only 1 IP address. While this can be useful if browsing is the main goal for your users. However, if you...

Oops, the second line of that access-list should be 192.168.200.2 to account for the second server.

Realizing that you are working off the top of your head. Access-list 1 is a standard access list which only accounts for source address and not destination. I imagine the statement is: access-list 1 permit 192.168.200.0 0.0.0.255 With this assumption in mind, you need to remove this list...

We are still evaluating our options with regards to going with Cisco or Checkpoint. I'm comfortable with both companies and we use both in our network so we have a level of experience using both. Your comfort level with the brand and your ability to support that brand are important too. Cisco...

Does access-list 1 explicitly deny the addresses of your servers before allowing any host to use the overload? Also, you need a route 192.168.200.0/24 via e0/0 because your router does not know how to get to these two servers and uses the default gateway which is the internet.

We are currently evaluating encryption for about 400 offices connected via a frame. For the head-ends, we are looking at Cisco 3030 and above concentrators with Pix 501's at some sites and 3002 conecentrators at the others. The 3002 has a one-tunnel limit while the Pix can perform more...

The free TFTP server from cisco would work fine. Otherwise any tftp server should do the trick for you. I found a telnet scripter which could be used to telnet into the various routers and execute a copy command from a tftp server. The best advice I can give about TFTP servers is to keep them...

In my experience with the 2900xl switches, the less power cycling you do, the better. Although they run like the dickens, they are prone to problems at startup. Why not make 2 configs. One which allows access and the other which shuts down all of the ports. This way you can just copy the new...

Are you connecting TN3270 to the m/f? Unless you are using SNA to connect their is no reason to believe that mac address has anything to do with your connectivity problems. The Mac Layer of the mainframe lan is more or less independant of the mac layer of the laptop lan unless you are running...