Recent content by lambent

I think everyone should have experience in explaining technical terms to ordinary users who know nothing about I.T. So how are you going to explain the following terms to say....the HR manager in your company? 1) Hard disk & Computer (they always mix them up!) 2) router/switch/firewall (they...

lol...actually she just wants to understand what I'm working with :)

Assuming your wife knows nothing about networking, how are you going to explain to her what a router/switch/firewall is?

use multiple groups of HSRP for load-sharing outbound traffic you need to use BGP MED/AS prepend or summary address + longer prefixes to manually load-share the inbound traffic. Take a look at this URL for an example using HSRP and AS prepend...

for the loopback, give it a different IP subnet Usually we use a /32 mask for that. Say your network has 10.0.0.0/24 and 10.0.1.0/24, then assign one more subnet 10.254.0.0/24 for the loopback of all devices. E.g. 10.254.0.1/32 for Router1, 10.254.0.2/32 for Router2...etc. For QOS, it depends...

Imagine you have multiple paths to reach your router. If you use an IP address of one of the physical/sub-interfaces to use as...say router-id of your routing protocols, SNMP source, or whatever processes, when that particular interface is down, all of these processes will not work even if you...

Yes as of 12.2(13)T you can just use "drop" with the policing commands." Sorry for the typo, it should be "without the policing commands".

hmm Dlink...I'm not sure what VLAN terms DLink uses but you should have a similar setup like this: On Dlink: Port 1: (Connect to Cisco interface f0/1) VLAN membership: VLAN 2, 3 VLAN tagging: tag all Port 2: (Connect to VLAN 2 host) VLAN membership: VLAN 2 VLAN tagging: untag all Port 3...

Yes as of 12.2(13)T you can just use "drop" with the policing commands. You can use it on 2600 platform, but of course the performance is em..you know...

There's no problem if you can connect and transfer/receive files via FTP on your browser or other FTP GUI clients. Since your FTP server is behind a NAT router, you need to use PASV mode which is supported by most FTP GUI clients and even your browser. Using FTP commands to enter PASV mode is...

when you "show ip int brief", do you see those interface like "bri0/0:1", "bri0/0:2"..? I suggest you use dialer profiles instead of legacy ddr: Router1: ! hostname router1 ! username router2 password 0 ppppassword ! interface BRI0/0 no ip address encapsulation ppp dialer pool-member 1...

Remove this: ip route 0.0.0.0 0.0.0.0 172.30.0.1 I don't see your switch has any L3 ports or SVIs configured for this subnet. So this default should not be working. Also make sure your hosts in VLAN 23 has the following IP configurations: IP subnet: 172.19.0.0 Subnet mask: 255.255.0.0...

NBAR with policy-map is probably what you're looking for if you want to do it on routers rather than firewall/proxy. E.g. class-map match-all ROOT_EXPLOIT match protocol http url "*root.exe*" ! policy-map ROOT_EXPLOIT_IN class ROOT_EXPLOIT drop ! interface f0/0 service-policy input...

This is a layer-2 switch and there's only 1 SVI up at any time which is used for switch management purpose. So if you want to make a new SVI for management purpose, you need to shut down other SVIs first if they exist.

There are SC-LC/SC-MTRJ fibers. You just need to make sure that both GBICs are either running multi-mode or single-mode and then buy the correct MM/SM fiber cables.