Recent content by buraglio

I believe you need BGP running to see AS information. I assume that you also need to have it peering with something to get this info. I have not tried to just turn it on and see how it operates w/o a peering. ---------------------------------------- Nick Buraglio http://www.nickburaglio.com/

Cisco privs are often unused to their fullest capability. I believe this is doable, check out http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cgcr/fsecur_c/fothersf/scfpass.htm It's a decent reference to all the privileges. ---------------------------------------- Nicholas...

I don't beieve there is any Class or quality of service on by default. Also, I think a cisco 4600 is a content distribution device, not a catalyst switch (I could be wrong). Did you mean catalyst 4500? If so, some parameters are Sup dependent. The default is off. Showing command also...

You can also block it using a squid proxy w/o much effort. Something like Dan's Guardian (content filter) or squidguard may also be useful. nb ---------------------------------------- Nicholas D. Buraglio http://www.buraglio.com/nick/gpg-pub-key.txt

Test the light levels on both ends. ---------------------------------------- Nicholas D. Buraglio http://www.buraglio.com/nick/gpg-pub-key.txt

We just did this...... We went with a cisco solution because they met more criteria than any other. The decision really depends on what you need to do on your network. Foundry is nice for an inexpensive, reelatively dense, somewhat feature rich solution. They are lacking in some things, like...

Are you using fiber GBICS? I had some serious failure rates (like 5 out of 20) with copper gbics, just something to consider. As vipergg said, they won't "automatically trunk". If the light levels are correct and the optics are the same they should see link though after setting them to admin...

I think you'll really only need zebra if you're running a routing protocol (I believe Quagga is prefered over zebra anyhow, and openbsd now has many routing protocols like bgpd and ospfd built in). You *should* be able to use pf to do a lot of your data direction using the route-to flags...

Yes, I've done LDAP for another project now, it's too bloated for what I need. Right now I'm building from a postgresql database with perl scripts, it works pretty well, but it certainly very proprietary. I may try the newest cfengine and see if it has some user management capabilities (older...

NIS would work OK, it lacks some of the security that NIS+ has, but I had terrible luck with NIS+, it could have been that I didn't do the original setup, but it used to breakfor no obvoius reason and the documentation I had was really poor. Right now I'm building from a postgresql database...

I've had a lot of problems with ne cards in openbsd, specifically ISA cards (IRQ and address problems). what is in your /etc/hostname.ne1 file? Normally I think it should see it as ne0 unless there are 2 ne cards. Can you try swapping it with a PCI card? Realtek chipset cards work well as...

I've not done it exactly that way. In my experience I used a full ATM DS3 into my 7206vxr, and back into the telcos ATM cloud. From there it went up to the redback, to the respective DSLAMs and out to the customer from there. The Redback did the access control (via PPPoE usernames and...

I have also been playing with using openbsd as a KDC, but it just seems that there should be a better way to do it. NIS+ did more or less everything I wanted (aside from it breaking for no reason and have 0 documentation). I'd really rather not use LDAP since some of the machines are very...

A redback could do it, but depending on how you are provisioning your DSL you may be going through one already. If you are "reselling" the telco service (using your own bandwidth) then you are probably using their DSLAM equipment and possibly a redback as well. The port speeds are...

devinci is pretty much dead on. Open is the easiest for me since I started with it, but Free has a bit better documentation in my opinion and more software support (as well as a larger ports collection) Net is cool, but the only reason I ever used it was to run it on obscure hardware (so I...