Recent content by jjk3

Mark thank you for this info, it turns out I did miss some concepts, specially the details of the PIR. I reread the section on shapers in the "End-to-End QoS Network Design" book and along with your example it makes much more sense. Thanks! That being said, an offer rate of 2912kbps for a...

Thanks for the reply Maheick, but it turns out the issue was resolved by changing the version of IOS, either to a newer or older version, I don't remember. As you can see the offer rate is 2912000 bps in the second "show policy-map interface fa0/1" that I included. This is nearly 3 times the...

I’m seeing some traffic from the voice VLAN when sniffing on one of my servers. Mostly broadcast, but occasionally unicast traffic between the CMs and some phones. When I remove the "switchport voice vlan" command from the interface which is connected to the server the traffic goes away. The...

I'm not sure what the default tx ring, but I believe I am configuring it to 2 with the the following commands. tx-ring-limit 2 tx-queue-limit 2 As for the type of interface, I'm not sure what you are getting after, but it's a Fast Ethernet port hooked up to a satellite modem...

I’ve implemented a shaper to limit traffic to 1Mbps, but it doesn’t seem to be working. Below I can see that 1368000 and later 2912000 bps of traffic is going through the interface but the shaper is not activating. The config is at the bottom, Can anyone see if I am doing anything wrong...

We recently moved from a Serial to an Ethernet link for one of our WAN links on our 2811 running 12.4 Advanced Enterprise (c2800nm-adventerprisek9-mz.124-15.T3.bin). We created a parent service-policy, included the shape average command and the old service policy as a child. Then we applied the...

We have users that are running Entourage 2004 that are missing email. Many users are reporting that they open their power books and several weeks to several months of email are missing. The email is also gone in OWA and searching all their messages for the missing email doesn't turn up anything...

It turned out it's related to the filtering settings of GPMC. I have to uncheck the "Only show policy settings that can be fully managed" filter and the policy showed up. And yes we understand the security risks as mentioned in my P.S. Joe --------------------------------------- Joe Keegan -...

I am trying to create a .adm file that will allow us to set autologin via GPO. I have created the following .adm file, but the policy does not show up in GPMC. CLASS MACHINE CATEGORY "Auto-Login" POLICY "Enable Auto-Login" KEYNAME...

I’m having a PIX with four interfaces Outside – Security 0 Extranet – Security 15 - 10.3.0.0/16 DMZ – Security 50 - 10.2.0.0/16 Inside – Security 100 I am having problems getting traffic between the Extranet and DMZ interfaces. Traffic between the other interfaces works fine. When trying to...

I am unable to get hosts accessing HQ via a site-to-site VPN to be able to access the DMZ. I have reviewed several topics on tek-tips regarding VPN into the DMZ and most seem to have been an issue with not having a NAT 0 on the DMZ interface. I do have a nat 0 on my DMZ interface, but it still...

Thanks for the reply NetworkGhost, but that's not the case. I should have included IP info for the PIXs. HQ PIX IP = aa.bbb.194.253 Branch PIX IP = xxx.yyy.191.66 Any other ideas? --------------------------------------- Joe Keegan - Joe@jjk3.com SANS GSEC & GCFW CCSE, CCNA, CCSA & Sun Certified

I am trying to setup a branch office with a site-to-site VPN to our HQ office. The HQ PIX is a 515E with an existing VPN to an existing router at another site. The branch office has a PIX 501. The debug crypto isakmp looks ok on the 501 except it looks to me that it is not completing IKE Phase...

I just double checked everything and I did miss something. I can get the BVI on VLAN 300 if I set VLAN 300 as native (this automatically changes bridge-group 1 to the subinterface that is trunking VLAN 300). I had forgot to change the native VLAN on the switch. Once I did that it all worked out...

I have a Cisco Aironet I would like to setup with three VLANs: VLAN12 – Secure Wireless VLAN22 – Open Wireless VLAN300 – Management All of our Cisco Devices have their management IP’s on VLAN 300 and I would like to have the Aironets on them as well. I have attempted to set this up and all...