Cisco Solution

San Francisco Walking Tours - From History to Ghosts

2009-05-14T23:54:00.000-07:00

While it's said that "nobody walks in L.A.," it's known that everyone walks in San Francisco. Having been a resident and frequent visitor to San Francisco, I can tell you that the very idea of walking in the City has always seemed odd to me. Let's face it; it's not the flattest town in which to walk. Yet, that's what everyone does. Walk, and huff and puff, and walk some more. There's just something about San Francisco that makes you want to step outside your hotel and walk. Perhaps it has something to do with the many different fascinating neighborhoods and buildings that compel people to slow down and take it all in.

If you're planning a vacation or holiday to San Francisco one of the best ways to actually experience the city is to take a walking tour. And, when it comes to walking tours, both free and fee-required, San Francisco has more than its share (it must have taken some from L.A.).

Free Walking Tours

First, let's begin with the free tours offered by San Francisco City Guides, a non-profit organization of more than 200 trained volunteers who lead free walking tours in San Francisco (donations, of course, are gladly accepted). If you visit their website, sfcityguides.org, you'll notice an interesting array of free walking tours offered every day of the week, tours like "1906 Earthquake and Fire," "Art Deco Marina," "Chinatown," "City Hall," "Downtown Deco," "Financial District" and "Gold Coast Architecture." A few of the more interesting walks include:

"Bawdy & Naughty"

This downtown two-block walk explores the arrival of "professional" women in San Francisco during the Gold Rush. And, no, we're not talking about women doctors or lawyers.

"Castro: Tales of the Village"

The Castro area in San Francisco is a predominately gay area of town. But, it wasn't always that way. This tour explores the early years of the Castro.

"Coit Tower Murals"

This tour takes visitors to Coit Tower on Telegraph Hill to view the Murals created by some of California's leading artists of the 30s depicting life in the Great Depression. The murals are definitely worth seeing, either as a tour group or on your own. San Francisco City Guides say their tour shows you some murals not shown to the general public, so I recommend you consider the tour for this San Francisco landmark.

"Ghost Walks"

Here are a couple fun walking tours. The "Ghost Walk at City Hall" and the "Ghost Walk at the Palace" are held in October only, and explore, what else, ghostly occurrences.

The tours typically begin in easy to identify and very public places and most of them even meet near access to public transportation in order to accommodate visitors coming from other areas of the city.

Fee-Required Tours:

While you do have plenty of opportunity for free walking tours, you might also consider some of the fee-required tours. One such fee-required tour is Hobnob Tours, a walking tour of Nob Hill, often times referred to as Snob Hill due to the number of wealthy people who live there. This two-hour tour costs $30 and takes you to an elegant ballroom where Tony Bennett belted out "I Left My Heart in San Francisco," through spectacular Grace Cathedral, through Huntington Park, with a cable car ride up Nob Hill. There is an optional breakfast, lunch or high tea at added cost. You can call for more information at 866-851-1123.

Another Fee-required tour is a tour of Chinatown which includes a visit to a fortune cookie factory and herbal pharmacy, as well as a hosted 10-course Dim Sum lunch at a Chinatown restaurant. The tour-only price is $28 for adults, $15 for children 6-17. With the added Dim Sum lunch the price is $40 for adults, $27 for children. You can call for reservations at 415-982-8839.

Whichever tour you decide to take you will probably leave you feeling satisfied, either with a greater insight to San Francisco, or with great Dim Sum.

Shari Hearn is a writer and creator of Top Vacation Spots, where you can learn about such things as Canary Island Holidays.

CCNP certification is getting a new look at the end of 2006. The BSCI and BCMSN exams are being updated, and the CIT and BCRAN exams are being retired. Let's take a look at what to expect from the new BSCI exam.

According to Cisco's exam blueprint - admittedly a very broad blueprint at this time - the major new topics are IP version 6 (IPv6) and multicasting. The addition of these two topics will make an already demanding Cisco certification exam that much tougher, but this is a great change for the exam and for the candidate. IPv6 is just going to become more and more prevalent in today's networks, and multicasting is as well.

Multicasting for the Cisco CCNP BSCI exam is going to go far beyond what you learned about it in your CCNA studies. For the new BSCI exam, you'll need to know the different methods of creating multicast groups as well as assigning members to them. This material was previously limited to CCIE-level books, and while I don't look for the questions to be as hard as the CCIE written exam, multicasting is not an easy topic and should not be taken lightly by the CCNP candidate in 2007.

One major CCNP exam topic that isn't going anywhere is BGP. The Border Gateway Protocol has been a big part of previous BSCI exams, and that looks to continue.

If you're pursuing your CCNP certification in 2007, be sure to monitor Cisco's website for additions to the CCNP blueprint. It's obvious that Cisco has raised the bar for CCNP certification, and earning this important Cisco certification will in turn raise your market value and networking knowledge like never before. Watch for future tutorials examining the other three new CCNP exams!

Visit his blog and sign up for Cisco Certification Central, a daily newsletter packed with CCNA, Network+, Security+, A+, and CCNP certification exam practice questions! A free 7-part course, ?How To Pass The CCNA?, is also available, and you can attend an in-person or online CCNA boot camp with The Bryant Advantage!

Cisco CCNP Certification Training: What's New On The BSCI 642-901 Exam?

2009-05-08T22:51:00.000-07:00

The CCNP exams are changing at the end of 2006. What's new about the new BSCI exam? Find out from Chris Bryant, CCIE #12933.

One major CCNP exam topic that isn't going anywhere is BGP. The Border Gateway Protocol has been a big part of previous BSCI exams, and that looks to continue.

If you're pursuing your CCNP certification in 2007, be sure to monitor Cisco's website for additions to the CCNP blueprint. It's obvious that Cisco has raised the bar for CCNP certification, and earning this important Cisco certification will in turn raise your market value and networking knowledge like never before. Watch for future articles taking a closer look at the other three new CCNP exams!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage (http://www.thebryantadvantage.com).

For his FREE seven-part course, ?How To Pass The CCNA?, visit the website and sign up today! Daily free CCNA, CCNP, Network+, Security+, and A+ certification questions, too!

Seattle Seahawks at San Francisco 49ers

2009-04-21T05:52:00.000-07:00

It's a week 11 NFL match up of division foes. The Seahawks lead the series 8-6 and have plowed through the 49ers in the last 6 meetings. They could very well post another 14+ point victory this week.

The 49ers are coming off another victory--they are 4-5 now--and hope to make it three in a row. Two weeks ago they beat the Minnesota Vikings in San Francisco 9-6. To say this game was boring is an understatement. Last week they went to Detroit and beat a lackluster Lions team 19-13. I think the Detroit Tigers would have gave them a better run for the money.

The Seahawks continue to move forward without MVP running back Shaun Alexander and Pro Bowl QB Matt Hasslebeck. However, there's good new from Seahawks camp. Both will be practicing this week. They might get some limited duty this weekend--depending how the game goes. Last week backup RB Morris and QB Wallace helped the Seahawks beat division foe St. Louis. The play of the game was the 90ish yard return by newly sign WR Nate Burleson.

Wallace is playing pretty well and the 49ers aren't exactly a top team. We might see Hasslebeck play a series or even take another week off. The remaining schedule favors the Seahawks, so they can be a bit cautious here.

I'm looking for the Hawks offense to explode on the soft 49ers secondary. This is a team--49ers--that gave up 40+ points to Chicago, Kansas City and San Diego. They also gave up 34 to Arizona and 38 to Philadelphia. This could be another explosive day for the Seahawks offense. Look for them to open it up early to get a lead and give their returning stars the opportunity to "practice" during the game. This is another great opportunity for the Seahawks defense to tighten up and work on some issues.

The author writes articles on many topics including sports wagering, jeu casino, and paris en ligne.

Cisco CCNA Certification Exam Case Study: Frame Relay, Pings, And Routing Protocols

2009-04-13T23:49:00.000-07:00

Cisco CCNA certification training includes troubleshooting your own work and that of others. The best CCNA certification training you can do is indeed troubleshooting your own Cisco router and switch configurations - as I'm always telling my students, "I can guarantee that any error you make has been made before, and you'll probably see it again one day." One such common error involves two very important CCNA certification topics - Frame Relay and routing protocols.

A student was working on his CCNA exam home lab and came up with an interesting problem. He set Frame Relay up in a hub-and-spoke configuration with R1 as the hub and R2 and R3 as the spokes. He wrote the following frame map statements:

frame-relay map ip 172.12.123.2 122

frame-relay map ip 172.12.123.3 123

He was able to ping both spokes from the hub, so he assumed everything was working correctly. Then he configured RIP version 2 on the router and got the following result after running "debug ip rip" and clearing the routing table with "clear ip route *":

03:33:01: IP: s=172.12.123.1 (local), d=224.0.0.9 (Serial0), len 72, sending broad/multicast

03:33:01: IP: s=172.12.123.1 (local), d=224.0.0.9 (Serial0), len 72, encapsulation failed

You may have already spotted the problem, and if you did, your CCNA certification exam studies are going well! The problem is that the "broadcast" option was left off the frame map statements. "broadcast" must be configured on frame map statements in order to send broadcasts and multicasts across the frame link. As you know from your CCNA certification exam studies, RIP version 1 broadcasts updates and RIP version 2 multicasts them, so the "broadcast" option must be present for either version to send updates by using those frame mappings.

He then rewrote the frame map statements as shown below....

R1(config-if)#frame map ip 172.12.123.2 122 broadcast

R1(config-if)#frame map ip 172.12.123.3 123 broadcast

... and the RIP updates went out as expected.

R1#debug ip rip

RIP protocol debugging is on

R1#clear ip route *

06:22:13: RIP: sending general request on Loopback0 to 224.0.0.9

06:22:13: RIP: sending general request on Serial0 to 224.0.0.9

06:22:13: RIP: ignored v2 packet from 1.1.1.1 (sourced from one of our addresses)

06:22:14: RIP: received v2 update from 172.12.123.3 on Serial0

06:22:14: 1.1.1.1/32 -> 0.0.0.0 in 3 hops

06:22:14: 2.2.2.2/32 -> 0.0.0.0 in 2 hops

06:22:14: 3.3.3.3/32 -> 0.0.0.0 in 1 hops

06:22:14: 172.12.23.0/24 -> 0.0.0.0 in 1 hops

06:22:14: 172.12.123.0/24 -> 0.0.0.0 in 1 hops

06:22:14: RIP: sending v2 update to 224.0.0.9 via Loopback0 (1.1.1.1)

06:22:14: 2.2.2.2/32 -> 0.0.0.0, metric 3, tag 0

06:22:14: 3.3.3.3/32 -> 0.0.0.0, metric 2, tag 0

06:22:14: 172.12.23.0/24 -> 0.0.0.0, metric 2, tag 0

06:22:14: 172.12.123.0/24 -> 0.0.0.0, metric 1, tag 0

06:22:14: RIP: sending v2 update to 224.0.0.9 via Serial0 (172.12.123.1)

Cisco CCNA certification depends on noticing details like these, and there's no better way to learn these details than by working on real Cisco routers and switches. Whether you're renting rack time online or buying used Cisco routers and switches, real-time debugs and configurations are the way to CCNA certification exam success!

Cisco CCNP CIT Exam Training: Creating A Network Baseline

2009-04-02T01:48:00.000-07:00

Creating a network baseline is an important skill for the CCNP exams, and it's even more important in real-world networks. Learn the basic of creating a baseline from Chris Bryant, CCIE #12933.

The first thing we've got to do in order to document our network is to create a network baseline. After all, if we don't know our goals, we can't accomplish them. A baseline is really a "network snapshot", a picture of our network devices and their performance - which also helps us spot issues before they happen.

Every network has its "breaking point", the point at which it can no longer transfer data effectively. By creating a baseline, you can see what the current network load is now - and by maintaining that baseline, you can spot network issues well before they become critical. For example, say you baseline all your network routers, and part of that is noting the CPU capability and usage. By maintaining the network baseline, you can note smaller, gradual increases in CPU usage and do something about it before the situation becomes critical.

Establishing a baseline also gives less-experienced network personnel a starting point for troubleshooting, and it gives new network support personnel a starting point as well.

To begin that task, we've got to define where this baseline will begin and end - in other words, we must define the scope of the baseline. Some questions to ask:

What is the scope of this baseline?

What goals do we have for our network?

What network devices will be part of this baseline?

What is the objective here? Why are we creating this baseline?

Baseline construction methods differ from one vendor to another, but I recommend the first thing you do when creating a baseline is taking inventory. Why? First, it's hard to create a full network picture if you don't know everything that's in your network; second, many networks are poorly inventoried.

When you're creating network documentation, consistency is vital. This goes for abbreviations, symbols, and icons. There are sets of Cisco icons for use in Microsoft Visio - find and use these icons when documenting and diagramming your network. Keep your usage of these icons consistent as well.

Decide upon your scope and your goals, and stick with that decision. Don't start documenting one part of the network and then jump to another part.

Also, don't hide the documentation! If I have to substitute for you at a client site, I should be able to find the documentation without asking anyone.

Most importantly, maintain the documentation. Nothing is worse than seeing a date at the top of a network baseline doc that's from last year. (Or the last century.) Don't fall into the trap of "I'll catch the documentation up next week", because I can practically guarantee that no matter how great your work ethic is, something's going to happen that will distract you from getting the documentation done. Do it now.

In short, when creating network documentation, follow these rules:

Define the scope of the documentation and stick to it.

Define your objective and the values to be documented.

Consistency is key. Keep abbreviations and terminology consistent from document to document.

Make sure the appropriate personnel have access to the documentation.

Keep the documentation current.

Your client will thank you, and those that follow you will thank you as well!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of over 200 free certification exam tutorials, including CCNA certification training articles. His exclusive CCNA study guide is also available!Visit his blog and sign up for Cisco Certification Central, a daily newsletter packed with CCNA, Network+, Security+, A+, and CCNP certification exam practice questions! A free 7-part course, ?How To Pass The CCNA?, is also available, and you can attend an in-person or online Cisco CCNA training boot camp with The Bryant Advantage!

San Francisco on the Cheap

2009-03-19T03:20:00.000-07:00

If you?ve ever visited San Francisco, you know it can be a very expensive city. Hotel costs, restaurant tabs, valet fees and cab fares can add up quite quickly. But, if you know where the values are, that trip to San Francisco can actually fit into your budget quite nicely.

First, let?s start with lodging. Yes, it?s nice to stay at the Grand Hyatt on Union Square or the Mark Hopkins. But, let?s face it, they?re expensive. For budget considerations, I suggest you consider Lombard Street. No, not the crooked part of Lombard Street, but the section of Lombard Street which runs through the Cow Hollow and Marina districts in the northern part of San Francisco, near the Golden Gate Bridge.

You can find a nice room on Lombard Street for just under $100 a night, which is a far cry from the hotels on Union Square. But, what kind of room will your $100 get you? Of course, you?re not going to get the luxury of a fancy hotel, but you?re not paying for luxury. You?re paying to enjoy San Francisco. Your $100 will buy you a comfortable, clean room. Also, you will generally receive free parking. If you drive to San Francisco or rent a car in San Francisco, free parking is a big deal. The luxury hotels usually charge for parking, as well as a in & out fees when you retrieve your car for a day trip or night out.

Lombard Street is also a great location. Just north of Lombard Street is Chestnut Street, with a movie theater, shops and wonderful food. To the south a few blocks you?ll find Union Street, with upscale shops and, again, wonderful food. Lombard Street is also a good location for bus service to all parts of San Francisco, eliminating the need for expensive taxi rides.

You have numerous choices for lodging along Lombard Street. I?ve stayed at the Cow Hollow Motor Inn (415-921-5800) and find it to be good, inexpensive choice, with free parking, with a nice, inexpensive Italian restaurant located just north on Steiner Street (Ristorante Parma). One caveat I have about Cow Hollow, which can probably be applied to any of the motels on Lombard Street, is that you will probably want to request an inside room off the main streets, as they can get quite loud. Another motel you might consider would be La Luna Inn (415-346-4664), a recently renovated inn with some luxuries you wouldn?t expect from a budget motel, such as pillow-top mattresses, flat screen TVs, wireless internet access and complimentary muffins, breads, coffee, tea and juices served every morning. All that for just under $100 per night for a single king or queen bed.

Restaurants can also add up to the cost of a vacation. San Francisco has a large amount of wonderful restaurants at inexpensive prices. Of course, you have to know which ones they are. Those would usually be the ones the locals frequent, so if you want to avoid over-priced restaurants, you?d stay away from restaurants in tourist traps like Fisherman?s Wharf and go for neighborhood restaurants, such as those found in Cow Hollow and the Marina District, 24th Street in Noe Valley, or Potrero Hill. One very inexpensive restaurant I?d recommend in Potrero Hill is San Francisco Bar B Que, 1328 18th St., a wonderful little Thai BBQ restaurant that serves great food at cheap prices. If there?s a wait, just put your name on the list and bop into Bloom?s Saloon a couple doors down for a drink and great views of the downtown skyline.

As for inexpensive things to do in San Francisco, check out the free walking tours offered by San Francisco City Guides, a non-profit organization of more than 200 trained volunteers who lead free walking tours in San Francisco. Their website at sfcityguides.org lists all the many different walking tours of such sites as Chinatown, Golden Gate Bridge, Coit Tower, and even ghost walks of supposedly haunted locations.

San Francisco is truly a great city to visit. It?s even better when you know you can visit and experience all the city has to offer without breaking the bank.

Shari Hearn is a writer and creator of Top Vacation Spots, where you can learn more about things to do in San Francisco.

CCNA Certification: Three Occasions To Reload Or Reopen A Cisco Router Interface

2009-03-19T02:26:00.000-07:00

Passing the CCNA certification exam means that you know how to configure and troubleshoot a Cisco router instead of using what I call the "hope method" - you know, "Let's reload the router and hope that takes care of it." The majority of Cisco router configurations take effect without the need for a reload, but every once in a while you just have to reload a router or shut and reopen an interface. Let's take a look at three such scenarios.

The first is when you change an OSPF Router ID from its default. For the new RID to take effect, you must either reload the router or clear the OSPF process, which means that all existing adjacencies will come down. Cisco routers are kind enough to tell you this with the following message after you configure a new RID: "Reload or use "clear ip ospf process" command, for this to take effect".

In a previous tutorial, I showed you how to configure an Etherchannel. You have to place each port into the Etherchannel with the channel-group command, and if you do so individually, some of the ports may go into error-disabled state, or "err-disable". This can also happen as a result of port security enforcement. You can see this with the show interface command:

sw1#show int fast 0/1

FastEthernet0/1 is down, line protocol is down (err-disabled)

A syslog message putting that port into err-disabled state will look like this:

04:10:23: %PM-4-ERR_DISABLE: channel-misconfig error detected on Po1, putting Fa0/1 in err-disable state

If this happens during an Etherchannel configuration, just finish the config and then shut and reopen the ports in err-disabled state. They'll come back up and be placed into the Etherchannel.

Finally, our old friend the SPID often makes us shut and reopen the BRI interface. If the BRI interface is open and you configure SPIDs on it, the SPID can be absolutely correct and you'll still see this in the output of show isdn status:

spid1 configured, spid1 NOT sent, spid1 NOT valid

At least the Cisco router puts "NOT" in caps, right? It's easier to see that way! With SPIDs, before you call the service provider or check the SPID you entered about 40 times, just shut and reopen the interface. That usually does the trick.

When you earn your CCNA certification, that means that you know what you're doing instead of hoping that you do - and part of that knowing is knowing when a simple reload or open/shut will take care of the issue.

Cisco CCNA Certification: The Proper Use Of Default Static Routes

2009-03-16T05:28:00.000-07:00

Earning your Cisco CCNA certification means knowing the details of Cisco routing, and that includes knowing when Cisco routing terms don't quite mean what they sound like they mean. For example, the general meaning of "default" is a setting that is used unless you or I change it. On the other hand, a default route is a route taken by packets that have no other route they can take. Let's take a look at how a default static route is configured and used on a Cisco router.

Here's our current routing table:

Gateway of last resort is not set

1.0.0.0/32 is subnetted, 1 subnets

C 1.1.1.1 is directly connected, Loopback0

172.12.0.0/16 is variably subnetted, 2 subnets, 2 masks

C 172.12.13.0/24 is directly connected, Serial1

C 172.12.21.0/30 is directly connected, BRI0

If we have packets destined for the network 15.1.1.0 /24, the packets will be dropped by this router. There's no match in that routing table for that network and the gateway of last resort is not set.

We could configure a static route to the 15.1.1.0 /24 network, but instead we'll use a default static route. The hardest part of configuring that route type is getting used to the odd syntax! As with any other static route, we can use the IP address of the next-hop router or the local router's exit interface. Here, we'll send any traffic with no more-specific match in the routing table out the local router's Serial1 interface.

R1(config)#ip route 0.0.0.0 0.0.0.0 serial1

Let's take a look at the routing table now.

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

1.0.0.0/32 is subnetted, 1 subnets

C 1.1.1.1 is directly connected, Loopback0

172.12.0.0/16 is variably subnetted, 2 subnets, 2 masks

C 172.12.13.0/24 is directly connected, Serial1

C 172.12.21.0/30 is directly connected, BRI0

S* 0.0.0.0/0 is directly connected, Serial1

A gateway of last resort has now been successfully configured, and the S* means that last route in the table is a static default route. Remember, the default route is not the route that all packets will take - it's the route packets use if there is no other possible match for their destination in the routing table.

CCNA Certification Training: Configuring Static Routes On A Cisco Router

2009-03-09T00:19:00.000-07:00

Knowing how to quickly configure a static route is a valuable skill for both the CCNA exam and working with real-world networks. Learn all about static routes from Chris Bryant, CCIE #12933.

The great thing about CCNA certification training is that the skills you learn will truly come in handy when working with Cisco routers and switches in production networks. That's particularly true of static route configuration. While most networks use dynamic routing protocols such as RIP, EIGRP, and OSPF to build routing tables, static routes still come in handy sometimes - especially if a routing protocol configuration goes awry.

Let's say that you just added a new segment to your network and you've successfully added it to your network's routing tables. Suddenly, on Monday morning, users on that segment can't get to a network resource such as an email server, or they can't get out to the Internet. We all know what it's like to try to fix something while the phone's ringing like crazy. That's when we have to do two things.

First, resist the temptation to say ?I would fix it, but I?m too busy talking to you?.

Second, use a quick fix to get the issue resolved temporarily while you resolve the issue.

Static routes are a great quick fix. You can use a static route to get the users where they need to be, which gives you time to find out what the problem is with the dynamic routing protocol. (You must also resist the temptation to apply a static route and declare the problem fixed!)

Static routes are configured with the ip route command, followed by the destination network and mask. After that, you must specify either the next-hop IP address or the local exit interface. Both of the following masks are acceptable:

ip route 172.10.1.0 255.255.255.0 210.1.1.1

ip route 172.10.1.0 255.255.255.0 serial0

Using IOS Help on a Cisco router shows the various options:

R1(config)#ip route ?

A.B.C.D Destination prefix

profile Enable IP routing table profile

vrf Configure static route for a VPN Routing/Forwarding instance

R1(config)#ip route 172.10.1.0 ?

A.B.C.D Destination prefix mask

R1(config)#ip route 172.10.1.0 255.255.255.0 ?

A.B.C.D Forwarding router's address

BRI ISDN Basic Rate Interface

Dialer Dialer interface

Loopback Loopback interface

Null Null interface

Serial Serial

TokenRing IEEE 802.5

Remember, you're specifying either the next-hop router's IP address or the local router's exit interface!

Configuring static routes is a great skill to have in the network room and in the CCNA exam room. Be ready to configure them in either situation!

Cisco CCNA Certification Training: Etherchannels And Spanning Tree Protocol (STP)

2009-03-01T22:08:00.000-08:00

Etherchannels and STP are major topics on the CCNA exam, but how do they work together? Learn the vital details from Chris Bryant, CCIE #12933.

Cisco CCNA certification looks great on your resume, and it also teaches you vital real-world networking skills. One exam topic that you'll definitely see in today's networks is the configuration of an Etherchannel on a Cisco router. You need to know how to build and verify one - so let's build one right now!

In this Cisco training tutorial, we'll use two switches that are connected at ports 0/11 and 0/12 via crossover cables. SW1 is the root bridge, SW2 is the non-root bridge. Even though there are two separate physical connections, spanning tree protocol (STP) will only allow the use of one, as verified by the partial output of "show spanning vlan 1" on SW2.

Fa0/11 Root FWD 19 128.11 P2p

Fa0/12 Altn BLK 19 128.12 P2p

It's a waste of network resources not to use that second physical path. Additionally, there's going to be a delay in cutting over from 0/11 to 0/12 if the forwarding path goes down. We can get around both of these issues by creating an Etherchannel. An Etherchannel is a logical bundling of physical paths into one logical path. By configuring an Etherchannel on both 0/11 and 0/12, we will be left with one logical connection that will actually use the full capacity of both physical connections!

SW1(config)#int fast 0/11

SW1(config-if)#channel-group 1 mode on

Creating a port-channel interface Port-channel 1

The channel-group command must be configured on each physical interface that we want to place into the Etherchannel, so we'll have to configure it on ports 0/11 and 0/12 on both SW1 and SW2. Naturally, the group number used must match among all ports placed into the Etherchannel.

Did you notice the router message "creating a port-channel interface port-channel 1"? You can verify the creation of that virtual interface just as you would a physical interface:

SW1#show int port-channel 1

Port-channel1 is up, line protocol is up (connected)

Hardware is EtherChannel, address is 000f.90e1.c24b (bia 000f.90e1.c24b)

Note the readout "Hardware is EtherChannel". Also, where we once saw two physical ports when we ran "show spanning vlan 1", we now see only one - the port-channel. Also note that where the individual ports had a port cost of 19, the Etherchannel has a cost of 12 due to its increased bandwidth capabilities.

Po1 Desg FWD 12 128.65 P2p

Etherchannels give us a performance benefit and a fault tolerance benefit as well. Performance is increased since all physical channels between the two switches can be used, rather than the one STP allows by default. Fault tolerance is also increased, since a physical channel bundled into the Etherchannel can go down without an STP recalculation -- STP sees the Etherchannel as one single connection!

Etherchannels aren't just important to know about for the CCNA exam, they're commonly used in real-world networks as well - so make sure you know how to configure and troubleshoot them!

San Francisco Plastic Surgeon offers most advanced silicone breast implant option

2009-02-20T21:56:00.000-08:00

San Francisco, CA November 20, 2006 -- Following the United States Food and Drug Administration?s approval on Friday November 17th 2006 of silicone breast implants for use in cosmetic breast augmentation surgery, San Francisco Board-Certified Plastic Surgeon Dr. Scott W. Mosser, will begin immediately offering the newly approved implants as an option for all his patients seeking this type of cosmetic surgery.

This is good news for Bay Area women who may be considering breast augmentation. They now can consider silicone implants in addition to the commonly used saline filled implants currently being used for cosmetic surgery.

Dr. Mosser, who specializes in breast surgery, has used the improved silicone implants for some time for reconstructive breast surgery following mastectomy and for corrective surgery for medical reasons. The FDA?s 14-year ban on silicone implants did not extend to their use in breast augmentation surgery for medical reasons. He now anticipates a greatly increased demand for cosmetic reasons.

In announcing the approval, the FDA stated, "The extensive body of scientific evidence provides reasonable assurance of the benefits and risks of these devices. This information is available in the product labeling and will enable women and their physicians to make informed decisions."

This newer form of silicone implants ? with a thicker, cohesive gel ? has been widely used in the US for some time for breast surgery designated as ?reconstructive?; that is, anything from breast lifts combined with implants to post-cancer restoration.

The new silicone implant gel technology is cohesive, which means that it defies diffusion when rupture occurs, behaving more like a viscous gel than a liquid. Would a leak to happen, this material is designed to be less likely to seep into local tissues and cause inflammation.

The FDA approved the implants for use in cosmetic surgery on women over the age of 22 after carefully reviewing safety data over the past decade. The FDA has also stipulated that the manufacturers must continue follow up safety studies. As a condition of the implants' approval, each company agreed to conduct a study tracking 40,000 women for ten years after receiving silicone implants and must also continue lab studies on implant failures.

This development, coupled with recent studies disproving any link between silicone implants and systemic disease, have now lessened the fear and greatly broadened the options available to any woman seeking cosmetic breast augmentation.

Now that women have the added option of using silicone, each qualified breast augmentation candidate has the additional responsibility of understanding the pros and cons of silicon vs. saline, cautions Dr. Mosser. ?The decision of whether to use saline or silicone implants is still one which should be made by a Board-Certified Plastic Surgeon and should be tailored specifically to the individual patient. Every patient is unique and the choice of type of implant and surgical procedure used is a very personal and carefully weighed decision.?

In addition to understanding implant options, one of the most important questions to ask when you are researching breast augmentation surgeons, in order to make a responsible decision, is the surgeon?s qualification. Any licensed physician can legally advertise him/herself as a plastic or cosmetic surgeon. Therefore, choosing a board certified plastic surgeon for a breast augmentation can help prevent complications and reduce the risks already involved. Patients who choose a board certified plastic surgeon can be assured that quality training and prestigious credentials are available.

Dr. Mosser also advises breast augmentation candidates to ask the following questions while researching plastic surgeons in order to determine if he or she is able to perform the procedure at a high level of safety, with desirable results:

-How many breast augmentations have you performed?
-Are the goals I wish to achieve attainable?
-What are the risks involved?
-How long is the recovery period before I can expect to see the final results?
-What happens if I am dissatisfied with the results?

Following the FDA approval of silicone breast implants for cosmetic augmentation on November 17th, a Board Certified San Francisco Plastic Surgeon offers a perspective on responsible, individualized patient decisions.

How to: Cisco 2600 Router's Password Recovery

2009-02-20T05:44:00.000-08:00

As you might already know, the configuration register value is the key player in password recovery. This is due to the fact that the configuration register value controls the boot sequence. The part that matters in the configuration register here is the sixth bit. When this bit is off, the router look into the NVRAM for the configuration. If the bit is on, the router neglects the contents of NVRAM and acts as if there is no (startup-config). So, to get things going when you have forgotten the password, or a previous administrator does not give you the password due to lack of documentation, you can bypass this problem.

Go through the following steps carefully:

1. Interrupt the router booting operation. This is done by pressing (Ctrl+Break) key simultaneously as soon as you turn on the router. This step will get you to the ROM monitor mode (rommon).

You will have the following:

System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)

TAC:Home:SW:IOS:Specials for info

PC = 0xfff0a530, Vector = 0x500, SP = 0x680127b0

C2600 platform with 32768 Kbytes of main memory

PC = 0xfff0a530, Vector = 0x500, SP = 0x80004374 monitor:

command "boot" aborted due to user interrupt

rommon 1 >

The (rommon 1 >) prompt is for the ROM monitor mode.

2. Now you should change the value of the configuration register in order to make the router neglect the contents of the NVRAM in the next boot up. This is achieved using the following command:

rommon 1 > confreg 0x2142

This command will change the sixth bit (originally the configuration register is 0x2102) to one. By doing so, the router will act as new in the next boot.

3. Perform a restart to the router using the following command:

rommon 1 > reset

4. The router now will restart and ask you if you want to use the setup mode and of course you will say no. Now, in order not to loose the configuration that you already have in the router, you should go to the USER privileged mode and perform:

Router#copy start run

This will get you back your old configuration but with one exception, you already are in the privileged mode without having to know the password..!!!!

Now you put a new password or passwords if you may:

Router(config)#enable secret blabla

And you can also put new console and telnet passwords if you like.

5. To get things going back to normal, change the value of the configuration register to its original form (0x2102) using the following global configuration command:

Router(config)#config-register 0x2102

6. Now you should save the configuration including the new passwords that you know:

Router#copy run start

7. Now reload and you are good to go:

Router#reload

What we have done in these steps is that we by passed the original configuration that has the unknown password, and then we got to the privileged mode without the need to know the password. And then we loaded the old configuration so we don?t loose it and imposed a new password and saved things back to the NVRAM. And then we got back to the original boot sequence. A piece of cake, isn?t it??

Cisco CCNP Certification Training Tutorial: The New ONT 642-845 Exam

2009-02-16T22:05:00.000-08:00

The Cisco CCNP certification is changing at the end of 2006, with the BSCI and BCMSN exams being updated and the BCRAN and CIT exams being dropped. One of the two new exams is the 642-845 Optimizing Converged Cisco Networks (ONT) test, and the name of the exam doesn't give many hints as to the material covered!

According to Cisco's exam blueprint, the major topics on this new exam will be Voice over IP (VoIP) and Quality of Service (QoS). This exam change is an excellent move on Cisco's part, since VoIP is one of the fastest-growing network technologies today, and implementing VoIP demands the ability to implement QoS!

Among the QoS topics on the exam will be NBAR, ToS, IP Precedence, DSCP, traffic policing, and traffic shaping. Some of these topics may be familiar to you if you studied for the BCRAN exam, but I feel it's a safe bet that there will be much more detail on the ONT exam as compared to the BCRAN exam. Wireless LANs (WLANs) are also on the Cisco exam blueprint for ONT, and again I'd expect a lot more detail on that topic than you would have seen on the BCRAN exam.

Cisco's obviously raising the bar for the new CCNP exams, and that's a good thing for both you and for Cisco. The CCNP will be harder to get in 2007, but it will also become more valuable - and when you invest time and money into a certification, you want the vendor to protect your investment. Besides, to work with Cisco networks today and in the future, you'll need to learn VoIP and Qos, so you might as well get the certification while you're at it!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of over 100 free certification exam tutorials, including CCNA certification training articles. His exclusive CCNA study guide is also available!

Cisco CCNA Certification Training Tutorial: PPP Multilink And ISDN BRI

2009-02-16T04:38:00.000-08:00

Earning your CCNA certification means you have to notice details about Cisco routers that others might miss, and that's true in the exam room and on the job. In today's tutorial, we'll take a look at multilink PPP - a topic that seems simple enough, but has details that trip up some CCNA certification candidates.

ISDN BRI (Basic Rate Interface) has two B-channels that both carry data, and they each have a capacity of 64 KBPS. Interestingly enough, they don't share the load by default - the first channel has to be at capacity before the second channel starts taking some of the load. It's more efficient to have the channels share the load before then, and we can do just that by configuring PPP multilink. (Note that it's called PPP multilink for a reason. We can't configure it if the BRI interface is running at the default of HDLC.)

Configuring PPP multilink is simple enough. PPP must be running on the interface to begin with, and then you simply configure the interface with the "PPP multilink" command.

R1(config)#int bri0

R1(config-if)#encapsulation ppp

R1(config-if)#ppp multilink

Here's where knowing the details comes in handy. An additional command, "dialer load-threshold", is needed to define the capacity level of the first b-channel that will bring up the second b-channel. For example, let's say we want the second channel to come up when the first channel hits 50% of its capacity. It's easy to think that we would put "50" at the end of the dialer load-threshold command, but that's wrong! Look at what IOS Help tells us about this command.

R1(config-if)#dialer load-threshold ?

<1-255> Load threshold to place another call

This value is based on 255, not 100. To bring the second channel up as described earlier, we need to enter a value that is 50% of 255:

R1(config-if)#dialer load-threshold 127

The dialer load-threshold command has other options not shown here. The interface can be configured to consider only incoming or outgoing traffic for this command, or both.

This is just one of the many details you must master in order to earn your CCNA certification. Take it from me - it's worth it. Keep studying!

California Dreaming on Highway One from San Francisco to Lose Angeles

2009-02-12T22:24:00.000-08:00

As a teenager in the mid-sixties I was greatly inspired by the music of the Beach Boys. One balmy evening during the summer of 1964 I was stirred by the driving tempo of I Get Around by a group I'd never heard of blasting from the huge old bakelite valve-driven radio that dominated my bedroom. It was during those times when, against the British government?s wishes, every teenager was tuned to Radio Caroline, broadcasting illegally from an old coaster moored somewhere out on the North Sea. I?d heard nothing like this before. It was certainly beyond the play lists of Auntie BBC and her tedious Home Service! I was hooked, not only to the vibrant, close harmonies and falsettos of the vocals but by the very images the lyrics portrayed of sun, sand, striped-shirt freedom and long=legged bikini clad girls. Flower power, love-ins, peace movements and the whole Haight-Asbury thing followed. Then, in 1969, Pirelli published their highly collectible California calendar, containing evocative close-up images by photographer Harry Peccinotti of beautiful sun tanned Californian maidens. By modern standards the photographs were very tame, more like snapshots. Nevertheless that calendar re-enforced a yearning to visit California because it seemed the best place on earth. My vision was of stunning blond California girls, a youth culture driving Chevrolet Corvette Stingrays and a wild freedom that seemed unknown to teenaged Britain.

For various reasons, ok I?ll be honest ? a lack of funds, forced me to wait a decade before I managed to realize my dream and by this time LA, Carmel, Santa Monica, Santa Cruz and San Francisco had become household names through the lyrics of a continuous stream of hit songs by The Beach Boys, Eagles, Jan and Dean and The Mamas and Papas, California Dreaming really had become something of a reality. By the time I arrived in the City of Angels aboard a TWA westbound seven-forty-seven and things were every bit as I imagined. Once bitten, I was smitten and vowed to return as soon as I could. But it took more than twenty years, but with the love affair still intact, I was going back. Maybe I?d become an ageing hippie still listening to those melodic surfin? sounds that had continued to drive my mind through all of these years. Previously I?d flown from San Francisco to LA this time I was going to do things for real by driving the Pacific route between the two largest cities along California State Highway One.

Despite claims that the USA lacks culture, nobody can deny that what it does have is scenery ? huge, mind blowing scenery such as Yosemite, the Grand Canyon and Zabriski Point. California?s Pacific coast similarly does not go begging. It is where nature competes with itself for superiority along rugged cliff tops that rise and fall against the might of the great ocean; mist encrusted mountains against mighty sequoia forests. The Pacific is everything the Atlantic lacks. It can be wilder, more belligerent; the breakers tend to roll higher making it, sometimes a surfer?s paradise, at others a seafarer?s grave. California, despite an element of confident brashness, has always appealed more for its natural untamed beauty than say the tourism evoked retirement condominiums of Florida on America's opposite coast.

Many claim that Highway One is best tackled north to south. Route One really beings at Legett where the road clings tightly to the ocean for nearly 150 salt splashed miles as it passes close to the giant redwoods at Muir Woods before becoming US 101, the Golden Gate freeway, and crossing the magnificent, often fog enshrined, bridge of the same name. Most don?t bother with the first part, choosing to join the route at San Francisco and continuing at a gentile pace with a stop or two before reaching the congestion rush of greater Los Angeles. If you?re in a hurry, then the 400 mile drive can comfortably be made in a day although there?s little point in missing the enormous potential it offers. It?s best to stop and linger a while if you can. The West Coast can be chilly, often hemmed in by coastal fogs held in by the mountains, despite this you?ll still feel at one with the elements and it's best driven in an open-top sports car. I didn?t but, but should have and I regret that I didn?t!

San Francisco is a beautiful city of over six million and a delicate charm of its own, especially where the palatial Victorian homes have survived a series of earthquakes. There?s Lombard Street, short but steep, rising 27 degrees through a series of eight hairpins that twist and turn forcing a cars to proceed at a snail?s pace. Some of the main streets reach 300 feet at Pacific Heights before dropping through amazing gradients to the Marina District below. As you top each crest you?ll be transformed and in your minds-eye you are Steve McQueen playing Bullitt flooring the accelerator of that throaty Shelby-Mustang and bouncing over those bumps at breathtaking speed as you fight to tame this out-of-control beast. In reality you?ll take it slow, real slow, fearing the consequences should your brakes fail! A more sober way is to take the cable car from Nob Hill to the Bay and watch the floor show performed by the driver and his agile grip man as they work together to traverse the undulating tarmac. These days the cable cars are usually packed with tourists and it can be hard to get a ride.

Once more in the real world I start my journey at Fisherman?s Wharf, the trendy waterside area of good fish restaurants, a waxworks and tourist shops that compete with a fine view of the Bay. Alcatraz Island, the former penal establishment that is now a crumbling State Museum, stands formidably in turbulent waters three miles east of the Golden Gate. This, for seventeen years, was the home of Robert Stroud the infamous Bird Man but he was never the gentile ornithologist Bert Lancaster portrayed. It was also where Al Capone was finally caged up for, of all things, tax evasion.

Leaving behind the squawking sea lions feeding off restaurant scraps at one of the piers, I head south leaving the city behind, past San Francisco International Airport and some of the wealthy outlying suburbs. The car radio informs me that ?It?s going to be a fine day right across the whole of the Bay Area and there are no reported traffic snarl ups?. That?s good to hear because only weeks before floods had caused landslides that were still keeping the coast road closed until twenty miles south at Half Moon Bay. Between here and Ano Nuevo lie a number of State beaches renowned for their outstanding natural beauty. This is where the northern elephant seals and sea lions come to breed or just to wallow lazily in the sun. This was March however and the beaches were deserted.

For much of the way the route is a two-lane blacktop ? no dual carriageway, just a well maintained twin-lane tarmac highway that clings heroically around the cliff tops that tower and fall above the Ocean. I am surprised at so little traffic, most of the locals preferring to take highway 101, a faster route that meanders on an almost parallel inland course for most of the way. Better still I haven?t seen a single cop. But beware, I am told they patrol from low flying helicopters (bears in the air) so I watch my speed and although I try to keep to a steady 55mph my instincts push me to go ever faster.

The highway runs via Pescadero where there is a lighthouse built in 1872, then onward to the seaside resort of Santa Cruz on the northern point of Monterey Bay. A further 28 miles south around the coast and I reach the old Spanish town and former Californian capital. Monterey, a town made famous by John Steinbeck in his novels Cannery Row and Tortilla Flat. The old sardine canneries are now long closed but the buildings have been transformed into trendy shops and restaurants. There is also an excellent aquarium. Beyond the beach, in waters stretching 110 miles out to sea is the Monterey National Marine Sanctuary, containing the largest underwater cavern anywhere in offshore US.

I didn?t have sufficient time to take the 17 mile drive but if you do it starts just south at Pacific Grove, ends at Carmel and passes the world class golf courses at Pebble Beach and Spyglass Hill. Although you pay for the privilege, those that have taken the detour say that the beauty of the drive, much of it man-made, is exceptional. Instead, I remain on Highway One and head for Carmel, home of Clint Eastwood, aka Dirty Harry and the former mayor. He wasn?t about. At least he wasn?t driving the West Coast. The city dates back to 1770 when a Franciscan monk, Father Juniperro Serra built a mission and church. Although it fell into disrepair after being abandoned in 1834, the Mission, one of several along the coast, has been carefully restored.

South of Carmel is a truly wonderful stretch of coastline that runs almost a 100 miles below the Ventana Wilderness, part of the Los Padres National Forest. This is Big Sur, a mood-inspiring rocky, wild area of State Parks and exceptional natural beauty. I Linger for a while just listening to the breakers crashing against the rocks before continuing, crossing the Bixby Creek Bridge, once the world?s longest single-arch span at 550 feet. This was built in 1932 two years after the Highway was opened at Big Sur. In 1983 storms here swept much of the highway away forcing it to close for over a year.

At San Simeon there is a wooden pier on a rugged shale beach. I decide to stay the night at a reasonably priced motel. In the hills above the highway is Hearst Castle, a stately palace folly created from treasures imported from all over the world by newspaper magnate, William Randolph Hearst and bequeathed to the state of California in 1958. Visitors must park at the tourist center and be transported by buses up a long, winding hilltop drive to reach the surrealistic Castle. The creation reputedly cost $10 million to build but it is very much a statement of bad taste, nevertheless it?s sure to impress.

Just south of San Simeon is the artist?s colony of Cambria. It is also a weekend retreat for those wishing to escape the heavy yellow smogs of LA. Next, Morro Bay where the chimneys of the PG & E power station are the singular blot on the landscape of the entire route The road turns inland here around a sand spit and causeway that leads to a huge extinct Volcano known as Morro Rock. Soon I reach the halfway point between San Francisco and LA at San Luis Obispo where there is another mission. Now highway one unites with 101 for a brief stretch until Pismo, a 20 mile stretch of wide, sandy beaches.

The beautifully kept Spanish colonial style terracotta roofed houses and picturesque clean streets of Santa Barbara make it, for me, one of the loveliest small cities anywhere. Following the earthquake in 1925, the city was rebuilt in the adobe fashion and the buildings are now preserved by law but this didn?t stop nature from coming perilously close to covering some of the dwellings in mud washed down from by the floods from the surrounding hills. The high street is full of interesting shops, excellent, but expensive, restaurants and a wonderful book shop where I enjoyed a coffee and a muffin while browsing the shelves. There is a prosperous, relaxed air to Santa Barbara and I can see why the city has attracted so many Hollywood stars who have come to build their homes in the exclusive hills above the city.

The last leg of my journey takes me through Ventura and on to Santa Monica Bay. At the northern end is Malibu, where a long, wide stretch of state beach is exclusive to surfers (no swimming allowed). At Malibu Colony, another place favoured by the famous names of Hollywood, the lavish mansions line the shoreline but there is no public access to beach. In the hills above, the J Paul Getty museum claims to house some of the finest art in the world.

Santa Monica, a lively resort on the fringes of Los Angeles is the setting for Bay Watch. The city sits atop a cliff overlooking the beach and separated by a palm lined strip known as Pallisades Park. From here there are fantastic views of the Bay especially at sunset. My time however does not allow me to linger. As highway one turns inland away from the Pacific Coast cities of Venice, Marina Del Ray (where Beach Boy drummer Dennis Wilson drowned in 1983) and Long Beach before rejoining the ocean at Seal Beach, I bid a fond farewell. A short distance away my journey takes me to LAX and my flight home. As my jet climbs above the twinkling lights of Beverley Hills I reflect on my memories of this trip and in those famous words of Arnold Schwarzeineger I swear ?I?ll be back?.

Robert Bluffield is a full time professional photographer and writer based in Milton Keynes. As a writer he specialises in features on travel, cars, food and wine, business, current affairs and photography. He is an author of 3 published books and he is currently working on a history of Imperial Airways and the Birth of British Airlines. Web site: http://robertbluffield.co.uk

Cisco CCNP Certification Training Tutorial: The New 642-825 ISCW CCNP Exam

2009-02-05T01:36:00.000-08:00

As part of the new CCNP curriculum, Cisco has added two brand-new exams. Learn all about the ISCW exam from Chris Bryant, CCIE #12933.

Cisco CCNP certification is getting a brand-new look, and that new look includes two new exams! The BCRAN and CIT exams are retiring at the end of 2006, and the exam replacing the BCRAN is the 642-825 Implementing Secure Converged Wide Area Networks exam, which is thankfully known as ISCW.

The key word in this Cisco exam is "secure". Very few of the BCRAN topics are moving to the ISCW exam, and an emphasis is being placed on VPNs and network security configurations and methods. According to Cisco's exam blueprint, the only BCRAN topics you can expect to possibly see on the ISCW exam are PPPoE and PPPoA. The importance of network security has never been higher, and it's to Cisco's credit that their new CCNP exams are emphasizing security.

Other new topics on this exam include Frame-Mode MPLS, the configuration and verification of Cisco IOS firewalls, and the Cisco IOS IPS. Successful CCNP candidates will also be able to describe and defend against network intrusions and attacks by everything from Trojan Horses to Denial of Service (DOS) attacks. The access-list knowledge you picked up during your CCNA exam studies will come in handy on the ISCW exam as well, since ACLs are a form of network security.

VPNs are just about as common in today's networks as cable, and all well-rounded network admins must know about the many different forms of attacks their networks can suffer, as well as how to defend against those attacks. The knowledge you acquire while studying for the ISCW exam will be immediately applicable in any network environment. This new CCNP certification exam is a tremendous step forward for Cisco certifications, and this already valuable certification is only going to become more valuable -- and tougher to get!

CCNA Cisco Certification Training Case Study: How Multiple Passwords Affect Router Access

2009-02-02T02:15:00.000-08:00

You have to know how to configure passwords on a Cisco router to earn your CCNA, but you also have to be able to look at a router configuration and determine the existing levels of security. Learn how from Chris Bryant, CCIE #12933.

Your CCNA certification exam efforts must include practicing with different password types and knowing how to configure them on a Cisco router - but for CCNA exam success and to thrive in real-world networks, you also have to know how to examine a Cisco router configuration and determine the level of network security that is already present. After all, most routers you work with already have passwords set, and it's up to you to determine if those passwords are getting the job done.

Let's start with a telnet password. Telnet passwords are configured on the VTY lines, and no telnet access is enabled on a Cisco router by default. If you saw the following configuration, what would it mean?

line vty 0 4

privilege level 15

password baseball

That small Cisco router configuration means three things - first, Telnet access is enabled. Second, the password is baseball. Third, the "privilege level 15" command means that any user who attempts to Telnet to the router and knows the password will automatically be placed into privileged exec mode. (If that command were not present, the user would be placed into user exec and then prompted for the enable password before being allowed into privileged exec.)

You may not want to give that level of access to all incoming Telnet connections. If you walked into a client's router room and saw this configuration on a router, what would it mean to you?

username halas password 0 bears

username ewbank password 0 jets

username ed privilege 15 password 0 mcdaniel

line vty 0 4

This configuration means three things as well. Each user attempting to telnet in will be prompted for both a username and password. Each individual user must enter the password that's been assigned to them. For example, the user "halas"would have to enter the password "bears" to successfully Telnet into this router. The command "login local" under the VTY lines means that this local database of usernames and passwords will be used for authentication.

Again, by default, users who are Telnetting in will be placed into user exec mode by default. Only users with "privilege 15" in the middle of their username / password definition will be placed into privileged exec immediately upon login.

Notice that zero in each of the username / password statements? I didn't enter that when I configured these statements. This number indicates the level of encryption the password is currently under; a zero is the lowest level of encryption, indicating that the passwords aren't encrypted at all. There's a single line near the top of a Cisco router configuration that tells you why.. which of these three is it?

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

Simple enough! The password encryption service is off by default. To turn it on. just run the command service password-encryption. Let's do so here and then take a look at the configuration.

R1(config)#service password-encryption

username halas password 7 1415170A1E17

username ewbank password 7 070524585D

username ed privilege 15 password 7 082C4F4A08170C121E

Now that's what I call encryption! Note that the zero has changed to a "7" - that's the highest level of encryption on a Cisco router, and as you can see, it's very effective.

Knowing how to read a Cisco router configuration is a valuable skill for both the CCNA certification exam and working with production networks. Keep practicing, keep studying, and you'll have the coveted letters "CCNA" behind your name soon!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of over 100 free certification exam tutorials, including Cisco CCNA certification test prep articles. His exclusive Cisco CCNA study guide and Cisco CCNA training is also available!Visit his blog and sign up for Cisco Certification Central, a daily newsletter packed with CCNA, Network+, Security+, A+, and CCNP certification exam practice questions! A free 7-part course, ?How To Pass The CCNA?, is also available.

Cisco CCNA Certification Exam Training: Telnet, Passwords, and Privilege

2009-01-29T23:16:00.000-08:00

Your CCNA certification exam is likely going to contain questions about Telnet, an application-level protocol that allows remote communication between two networking devices. With Telnet use being as common as it is, you had better know the details of how to configure it in order to pass your CCNA exam and to work in real-world networks.

The basic concept is pretty simple - we want to configure R1, but we're at R2. If we telnet successfully to R1, we will be able to configure R1 if we've been given the proper permission levels. In this CCNA case study, R2 has an IP address of 172.12.123.2 and R1 an address of 172.12.123.1. Let's try to telnet from R2 to R1.

R2#telnet 172.12.123.1

Trying 172.12.123.1 ... Open

Password required, but none set

[Connection to 172.12.123.1 closed by foreign host]

This seems like a problem, but it's a problem we're happy to have. A Cisco router will not let any user telnet to it by default. That's a good thing, because we don't want just anyone connecting to our router! The "password required" message means that no password has been set on the VTY lines on R1. Let's do so now.

R1(config)#line vty 0 4

R1(config-line)#password baseball

A password of "baseball" has been set on the VTY lines, so we shouldn't have any trouble using Telnet to get from R2 to R1. Let's try that now.

R2#telnet 172.12.123.1

Trying 172.12.123.1 ... Open

User Access Verification

Password:

R1>

We're in, and placed into user exec mode. Let's say we want to configure a new IP address on the ethernet interface on R1. We'll now go into privileged exec mode....

R1>enable

% No password set

R1>

... or maybe we won't! The default behavior of Telnet on a Cisco router is to place the incoming user into user exec mode, and require an enable password to allow that user into privileged exec mode! Right now, we can't configure anything on this router and even the show commands we would use are limited at best.

If we wanted to allow all telnetting users to be put into privileged exec mode immediately without being prompted for an enable password, the command privilege level 15 placed on the VTY lines will accomplish this.

R1(config)#line vty 0 4

R1(config-line)#privilege level 15

From R2, we'll telnet into R1 again.

R2#telnet 172.12.123.1

Trying 172.12.123.1 ... Open

User Access Verification

Password:

R1#

We were able to telnet in from R2 with the original password of "baseball", and even better, we were placed into privileged exec mode immediately!

You may or may not want to do this in real-world networks, though. If you want to assign privilege levels on an individual user basis, configure usernames and passwords and use the privilege 15 command in the actual username/password command itself to give this privilege levels to some users but not all.

R1(config)#username heidi password klum

R1(config)#username tim privilege 15 password gunn

Both users can telnet into the router, but the first user will be placed into user exec and challenged for the enable password to enter privileged exec mode. If there is no enable password, the user literally cannot get into privileged exec. The second user will be placed into privileged exec immediately after successfully authenticating.

Passwords on a Cisco router or switch are vitally important, and you're not tied down to granting "all-or-nothing" access. Knowing the details like the ones shown here help you tie down network security while allowing people to do their jobs - and it doesn't hurt to know this stuff for the CCNA exam, either!

Culture and Contemporary Life at San Francisco

2009-01-24T04:05:00.000-08:00

San Francisco has been characterized by a high standard of living. The downtown has seen a renaissance driven by redevelopment of the Embarcadero, with the strong neighborhoods South Beach and Mission Bay. Boutiques along Fillmore Street in Pacific Heights are centralized by commerce and shopping districts downtown, with the Financial District and the area around Union Square, are very well-known.

Performing arts

San Francisco's ?War Memorial? and the ?Performing Arts Center? features some of the longest running and performing arts companies throughout the United States. The ?War Memorial Opera House? houses the ?San Francisco Opera? and ?San Francisco Ballet?, where as the ?San Francisco Symphony? is played in Davies Symphony Hall. The ?Herbst Theatre stages? an eclectic mix of real music performances, plus public radio's ?City Arts & Lectures?.

The ?Fillmore? is a music venue located in the Western Addition. It is the second incarnation of a venue that gained fame in the 1960s. Beach ?Blanket Babylon? is a zany musical revue and also a civic institution. San Francisco often hosts national touring productions of Broadway theatre shows in a number of year 1920s-era venues in the ?Theater District? including the ?Curran?, ?Orpheum?, and in ?Golden Gate Theatres?.

Museums

The San Francisco Museum of Modern Art (SFMOMA) has 20th Century contemporary pieces. It moved to iconic building in South of Market during 1995 and attracted 600,000 people annually. The ?Palace of the Legion of Honor? has primary works done by Europeans. The ?De Young Museum? and the ?Asian Art Museum? have a significant anthropological and non-European holding.

The ?Palace of Fine Arts?, was originally built for the 1915 ?Panama-Pacific Exposition?, now houses the ?Exploratorium?, a popular science museum devoted to teaching through hands-on-hands interaction. The ?California Academy of Sciences? is a natural history museum, which hosts the ?Morrison Planetarium? and ?Steinhart Aquarium?. The ?San Francisco Zoo? cares for about 250 animal pet?s species out of which 39 have been deemed endangered or threatened.

San Francisco is all about having contemporary life. The culture is maintained from long time. One can enjoy and explore themselves at San Francisco with great experience.

Amjath is a great tourist guide of San Francisco and is also a good copywriter who has worked for many sites describing many hotspots of San Francisco. For Further details on San Francisco tours, culture and life please visit http://www.sanfranshuttletours.com/ or contact Amjath through mail: sanfranshuttletours@gmail.com

CCNA Certification Exam Training: Passwords, Cisco Routers, And Network

2009-01-12T22:36:00.000-08:00

CCNA certification is important, and so is securing our network's Cisco routers! To reflect the importance of network security, your CCNA certification exam is likely going to contain quite a few questions about the various passwords you can set on a Cisco router. Let's take a look at some of those passwords and when to apply them.

If the previous user has logged out of the router properly, you will see a prompt like this when you sit down at the router console:

R1 con0 is now available

Press RETURN to get started.

R1>

To get into enable mode, by default all I have to do is type "enable".

R1>enable

R1#

See how the prompt changed? By default, I can now run all the show and debug commands I want, not to mention entering global configuration mode and doing pretty much what I want. It just might be a good idea to password protect this mode! We do so with either the enable password command or the enable secret command. Let's use the enable password command first.

R1(config)#enable password dolphins

Now when I log out and then go back to enable mode - or try to - I should be prompted for the password "dolphins". Let's see what happens.

R1>enable

Password:

R1#

I was indeed prompted for a password. Cisco routers will not show asterisks or any other character when you enter a password; in fact, the cursor doesn't even move.

The problem with the enable password command is that the password will show in the configuration in clear text, making it easy for someone to look over your shoulder and note the password for future use, as shown below:

hostname R1

enable password dolphins

We could use the "service password-encryption" command to encrypt the enable password, but that will also encrypt all the other passwords in the Cisco router config. That's not necessarily a bad thing! Here's the effect of this command on the enable password we set earlier.

enable password 7 110D1609071A020217

Pretty effective encryption! However, if we want to have the enable password automatically encrypted, we can use the enable secret command. I'll use that command here to set this password to "saints", and note that I'm not removing the previous enable password.

R1(config)#enable secret saints

After removing the "service password-encryption" command, we're left with two enable mode passwords, and they appear in the Cisco router config like this:

enable password dolphins

enable secret 5 $1$kJB6$fPuVebg7uMnoj5KV4GUKI/

If we have two enable passwords, which one should we use to log into the router? Let's try the first password, "dolphins", first:

R1>enable

Password:

When you're prompted for the password a second time, you know you got it wrong the first time! Let's try "saints":

R1>enable

Password:

R1#

When both the enable secret and enable password commands are in use on a Cisco router, the enable secret password always takes precedence. "dolphins" didn't get us in, but "saints" did. That's valuable information for both the CCNA certification exam and real-world networks, because there's no worse feeling than typing a password at a Cisco router prompt and then getting another password prompt!

This is just one way to perform basic Cisco router security with passwords. We'll take a look at other methods in a future CCNA certification exam training tutorial!

Cisco CCNP Certification Training : The New CCNP BCMSN 642-812 Exam

2008-10-31T23:03:00.000-07:00

Cisco CCNP certification is about to become more valuable and more difficult! Cisco is making major changes to the CCNP certification program, retiring two exams (BCRAN and CIT) while updating two old friends, the BSCI and BCMSN exam. Today, we'll take a look at the changes in the Building Converged Cisco Multilayer Switched Networks (BCMSN) exam.

According to Cisco's exam blueprint, there are some major additions with the introduction of the 642-812 exam. Wireless access, security, and voice are all rapidly growing features and concerns in today's real-world networks, and Cisco is responding to that by adding all three of these topics to the CCNP BCMSN exam. Cisco CCNP candidates should expect to be questioned on WLANs as well as wireless clients.

There were some security topics on the 642-811 BCMSN exam, port security and 802.1x among them. The successful Cisco CCNP certification candidate will now be expected to know about the different network attacks that can take place at the data link layer of the OSI model, including DHCP Spoofing and VLAN Hopping.

There was also just a bit of voice material on the 642-811 BCMSN exam, but you'll have to know more voice to pass the 642-812 exam. Voice VLANs, voice QoS, and IP Phone configuration are just some of the topics being added to the new BCMSN exam.

Cisco is obviously raising the bar with the new CCNP exams, and this certification is going to be harder to get than ever before. That also makes it more valuable than ever before, and 2007 will be the best year yet in which to earn your CCNP certification. Make your plans to earn this valuable Cisco certification, and then put that plan into action!

San Francisco Walking Tours - From History to Ghosts

2008-10-30T05:29:00.000-07:00

Free Walking Tours

"Bawdy & Naughty"

This downtown two-block walk explores the arrival of "professional" women in San Francisco during the Gold Rush. And, no, we're not talking about women doctors or lawyers.

"Castro: Tales of the Village"

The Castro area in San Francisco is a predominately gay area of town. But, it wasn't always that way. This tour explores the early years of the Castro.

"Coit Tower Murals"

"Ghost Walks"

Here are a couple fun walking tours. The "Ghost Walk at City Hall" and the "Ghost Walk at the Palace" are held in October only, and explore, what else, ghostly occurrences.

Fee-Required Tours:

Whichever tour you decide to take you will probably leave you feeling satisfied, either with a greater insight to San Francisco, or with great Dim Sum.

Shari Hearn is a writer and creator of Top Vacation Spots, where you can learn about such things as Canary Island Holidays

Cisco CCNP Certification Training: What's New On The BSCI 642-901 Exam

2008-10-16T23:34:00.000-07:00

One major CCNP exam topic that isn't going anywhere is BGP. The Border Gateway Protocol has been a big part of previous BSCI exams, and that looks to continue.

Cisco CCNP Certification Training: What's New

2008-10-13T01:06:00.000-07:00

The CCNP exams are changing at the end of 2006. What's new about the new BSCI exam? Find out from Chris Bryant, CCIE #12933.

One major CCNP exam topic that isn't going anywhere is BGP. The Border Gateway Protocol has been a big part of previous BSCI exams, and that looks to continue.

If you're pursuing your CCNP certification in 2007, be sure to monitor Cisco's website for additions to the CCNP blueprint. It's obvious that Cisco has raised the bar for CCNP certification, and earning this important Cisco certification will in turn raise your market value and networking knowledge like never before. Watch for future articles taking a closer look at the other three new CCNP exams!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage (http://www.thebryantadvantage.com).

For his FREE seven-part course, ?How To Pass The CCNA?, visit the website and sign up today! Daily free CCNA, CCNP, Network+, Security+, and A+ certification questions, too!

Seattle Seahawks at San Francisco 49ers

2008-07-22T00:04:00.000-07:00

It's a week 11 NFL match up of division foes. The Seahawks lead the series 8-6 and have plowed through the 49ers in the last 6 meetings. They could very well post another 14+ point victory this week.

The author writes articles on many topics including sports wagering, jeu casino, and paris en ligne.

Cisco CCNA Certification Exam Case Study: Frame Relay, Pings, And

2008-07-12T00:10:00.000-07:00

frame-relay map ip 172.12.123.2 122

frame-relay map ip 172.12.123.3 123

03:33:01: IP: s=172.12.123.1 (local), d=224.0.0.9 (Serial0), len 72, sending broad/multicast

03:33:01: IP: s=172.12.123.1 (local), d=224.0.0.9 (Serial0), len 72, encapsulation failed

He then rewrote the frame map statements as shown below....

R1(config-if)#frame map ip 172.12.123.2 122 broadcast

R1(config-if)#frame map ip 172.12.123.3 123 broadcast

... and the RIP updates went out as expected.

R1#debug ip rip

RIP protocol debugging is on

R1#clear ip route *

06:22:13: RIP: sending general request on Loopback0 to 224.0.0.9

06:22:13: RIP: sending general request on Serial0 to 224.0.0.9

06:22:13: RIP: ignored v2 packet from 1.1.1.1 (sourced from one of our addresses)

06:22:14: RIP: received v2 update from 172.12.123.3 on Serial0

06:22:14: 1.1.1.1/32 -> 0.0.0.0 in 3 hops

06:22:14: 2.2.2.2/32 -> 0.0.0.0 in 2 hops

06:22:14: 3.3.3.3/32 -> 0.0.0.0 in 1 hops

06:22:14: 172.12.23.0/24 -> 0.0.0.0 in 1 hops

06:22:14: 172.12.123.0/24 -> 0.0.0.0 in 1 hops

06:22:14: RIP: sending v2 update to 224.0.0.9 via Loopback0 (1.1.1.1)

06:22:14: 2.2.2.2/32 -> 0.0.0.0, metric 3, tag 0

06:22:14: 3.3.3.3/32 -> 0.0.0.0, metric 2, tag 0

06:22:14: 172.12.23.0/24 -> 0.0.0.0, metric 2, tag 0

06:22:14: 172.12.123.0/24 -> 0.0.0.0, metric 1, tag 0

06:22:14: RIP: sending v2 update to 224.0.0.9 via Serial0 (172.12.123.1)

Hair Loss Experts Visit San Francisco and Other Places to Educate

2008-07-03T22:32:00.000-07:00

A lot of organizations are visiting different places across America to educate people about the possible hair loss they may experience in the future. For example, an organization named The International Society of Hair Restoration Surgery has initiated an educational program about hair loss that is designed to visit selected stadiums throughout the United States as an awareness campaign for men to be known about the hair loss problems they may encounter in the future and how to prevent it.

Recently, they had staged a campaign in Los Angeles, Miami, Dallas, and twice in San Francisco to inform men about male pattern baldness. This event occurred in football stadiums so that it would be convenient for men to attend. All this was done because these hair loss experts know the frustration of dealing with hair loss and that they know that the answer to this problem is early detection to prevent the possible future problems.

Hair loss is actually a wide-spread problem that has a ratio of two in three. But these men can be helped when they know the source of their problems. Sources of hair loss vary greatly from men to men. Some hair loss problems are caused by stress, some hormonal changes, and still some are caused by inadequate nutrients that are not taken into the body.

Consulting with the doctor is an important step toward preventing hair loss. There are many treatments and drugs that claim to treat this condition right now and some of these are actually very effective, but before you self-medicate, you must first know the reason for your hair loss. The wrong treatment would at the least have no effect and at the worst aggravate you existing problem and probably even add to it.

Three fourths of men are said to be worried about hair loss even when they are still in their twenties. This is an actual problem if they are just beginning their careers and are already worried about hair loss. In fact, this problem would probably bring out more problems like the lack of self confidence and consciousness that would lead to a less than great career because of this particular embarrassment that could have been prevented.

There are also a lot of methods to prevent hair loss like using natural products or even drugs. For example, Rogaine is a popular choice of treating hair loss however, there are some side effects of this so if you have scalp irritation or even a minor sunburn, it would be better not to even try this.

There are other drugs you can consider but just like any other drugs, there are unwanted effects to consider. Some of these hair loss drugs can even lead to sexual impotency when it is nor the right drug for you. So be careful in your choice and it is always best to consult with your doctor first.

The visits hair loss experts do to educate people is important so that they will know how to prevent this problem and not be worried needlessly. Expert?s different places to share the latest finding about the causes and treatments that are available for hair loss would really be helpful for people in the long run. Some of the guidelines we can follow everyday to prevent this includes eating the right foods because that are rich in protein as these foods can help keep your hair and scalp healthy. So, we must really be careful about our diet because when the body feels threatened of starvation or malnourishment, it will conserve all the energy it can and it feels that maintaining a healthy hair is not necessary for its survival. Little things can really go a long way.

Note: This article may be freely reproduced as long as the AUTHOR'S resource box at the bottom of this article is included and all links must be Active/Linkable with no syntax changes.

Charlene J. Nuble

For All the things you need to know about hair loss, please go to: Prevent Hair Loss

Cisco CCNA Certification: Becoming A Truly Valuable CCNA

2008-06-26T22:21:00.000-07:00

I've been active in the Cisco Certification track for four years, working my way from the CCNA to the coveted Cisco Certified Internetwork Expert title, and during that time I've conducted job interviews and casual conversations with hundreds of CCNAs and CCNA candidates.

The CCNA is an exciting beginning to your Cisco career, but just having the certification simply isn't enough. A recruiter or interviewer isn't going to be impressed just with the cert; you've got to have some real-world knowledge to back it up.

I've been down that road myself, and sat on both sides of the CCNA job interview table. With that in mind, I'd like to offer to you some tips on becoming a truly valuable and employable CCNA.

Get some hands-on experience. I know the trap well; you can't get experience until you get a CCNA, and you can't get a CCNA without real experience. Well, actually, you can, but do you want to? Working on simulators is fine to a certain extent, but don't make the classic mistake of depending on them. I've seen plenty of CCNAs who were put in front of a set of routers and really didn't know what to do or how to put together a simple configuration, and had NO idea how to begin troubleshooting.

There are CCNA classes that offer you the chance to work with industry experts on real Cisco equipment. Beyond that, you can put together your own CCNA rack for less than $1000 by buying used routers. Some people think that's a lot of money, but this is the foundation of your career. Treat it that way. The work you do now is the most important work you'll ever do. Do it on real Cisco equipment. The skills I learned as a CCNA helped me all the way up to the CCIE.

Besides, after you get your CCNA (and after that, hopefully you'll choose to pursue the CCNP), you can always get some of your money back by selling the equipment. The hands-on experience you gain this way is invaluable.

Know binary math. Do NOT go the easy route of memorizing a subnet mask chart for the CCNA exam. I know some people brag about being able to pass the CCNA exam without really understanding binary math. I've seen those people on the other side of the interview table, and they're not laughing when I ask them to do a subnetting question. They're not laughing when they can't explain or create a VLSM scheme. That chart does nothing to help you understand what's going on.

If you can add and know the difference between a one and a zero, you can do binary math. Don't let the name intimidate you. Become a REAL CCNA -- learn binary math !

Run "show" and "debug" commands. No commands help you truly understand how things work in a Cisco network than show and debug commands. As you progress through the Cisco certification ranks, you'll be glad you started using these at the CCNA level.

Do you need to know these commands for the exam? Probably not. Do you need them to be successul in the real world? Absolutely.

The Cisco certification track has been great to me, and it can boost your career as well, whether you stop at the CCNA, CCNP, or go all the way to the CCIE. It's the skills you develop today that will truly make you a networking engineer. Don't take shortcuts or get the attitude of "just passing the exam".

It's what you achieve after the exam that counts, and it's the work you put in before passing the exam that makes those achievements possible.

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of over 100 free certification exam tutorials, including Cisco CCNA test prep articles. His exclusive Cisco CCNA study guide and certification training is also available!

Cisco CCNA Certification Exam Training: What Is Packet Switching?

2008-06-19T23:00:00.000-07:00

Cisco CCNA certification exam training means you've got to learn a lot of new terms, and some of them can be a little confusing at first. To pass this tough certification exam, one term you definitely need to understand is packet switching. The first question, of course, is "What is packet switching in the first place?" Let's define this term in today's Cisco CCNA exam prep tutorial.

Packets transmitted from "point A" to "point B" all have to arrive at the same destination, but with packet switching, they do not all have to take the same path to get there. If you and I are standing 10 feet apart and I want to throw a basketball to you, I've got a couple of options. I could bounce the ball off the floor to you, I could throw it straight at you, or I could throw it high into the air to you. Packet switching is really the same thing - packets will take different paths to get from source to destination, but the end result is that all the packets arrive at the destination. The packets are then reassembled to take the form of the original message.

Packet switching may sound a little odd, but it's a very efficient way of transporting data. Frame Relay is a packet switching technology, as is X.25, and both of these protocols are highly efficient.

If we have packets that must arrive at the destination in the same order in which they left the source, packet switching isn't a good choice. For this situation, we'll need to use some form of circuit switching, and we'll discuss that in tomorrow's Cisco CCNA certification training article!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage (http://www.thebryantadvantage.com), home of free Cisco CCNA and CCNP tutorials! For my FREE "How To Pass The CCNA" or "CCNP" ebook, visit the website and download your copies. Get your CCNA certification exam training from The Bryant Advantage!#BREAK# #TITLE#Cisco CCNA Certification Exam Training: What Is Packet Switching#/TITLE#

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of over 100 free certification exam tutorials, including Cisco CCNA and CCNP certification training articles. CompTIA Network+, Security+, and A+ certification tutorials are available, also!

Coming in 2007 -- Microsoft Vista certification with The Bryant Advantage!

Cisco ASA 5500

2008-06-15T23:19:00.000-07:00

This is a review on the new Cisco ASA 5500.

The Cisco ASA or Adaptive security appliance can use different modules for different security needs. There are currently four unique modules. They include the firewall module, IPS which is a intrusion protection system. Anti-x module and a VPN (virtual private network) module.

The benefits of this appliance is that modules can be added as your needs grow. All in one device. There is a business edition provides small to medium businesses with VPN and gateway capabilities. The firewall module can be implemented to stop corporate users from abusing instant messaging, the introduction of Spyware and Adware onto the corporate network.It will also protect against external threats suck as hackers or crackers. Policies can also be set up to block peer to peer file sharing.

The Cisco ASA 5500 can also provide VPN access for remote users. The SSL (Secure Sockets Layer) and also IPSec protocols can be used to encrypt traffic. Different forms of authentication can be used such as Kerbeos, Microsoft Active directory, LDAP lightweight directory protocol and RSA secure ID.

Everything can be controlled through the Cisco Security Manager, a all in one management platform. I watched a video on this at Cisco's website. I like the interface, you can even see attacks in real time and decide to section off that part of the network. Thats pretty slick. Another way to do this is through MARS, which is Cisco's analysis tool.

There are different modules for different needs Some firewalls can support up to 1.2Gbps.

The Anti-X technology is based on Trend Micros technology to stop threats like viruses, spyware, trojans and worms.

Benjamin Hargis
IT Security Analyst

http://www.computersecurityadvice.com

Cisco's Catalyst 6500 Remains The Network Switch To Beat

2008-06-11T01:21:00.000-07:00

San Francisco, California October 10, 2006: Following a lackluster Q3, Cisco Systems emerges as the leader in the 10 Gigabit Ethernet Switch Market for the fourth quarter. Fueled by increased demand and an overall rise in the average selling price, Cisco experienced significant gains in a market of over $300 Million.

With almost 70% of the projected $1.3 Billion 10-Gig market share and a more powerful, yet affordable design, the Catalyst 6500 is poised to cement Cisco as the dominating force in the industry. With the recent release of an eight-port, 10-Gigabit Ethernet module for the 6500, Cisco is quickly pulling away from the rest of the pack.

In addition, upgrades like the Application Control Engine (ACE) module have prompted companies like Pure Video Networks to adopt Cisco switches to manage traffic of their popular video websites. Implementing simultaneous data center services such as server load balancing, integrated network and application switching/security, the ACE module delivers the highest performance in the industry. The ACE Simplifies application infrastructure by combining the functionality of multiple application delivery appliances into a single module, including server load balancing and off-load, Secure Socket Layer (SSL) protocol, security, and application optimization capabilities.

Already the most successful networking switch on the IT market, the 6500 Series reduces existing operational costs and improves a network's ability to respond to intensive bandwidth demands. In general, customers using the services modules for the Catalyst 6500 reduce their total cost of ownership by taking advantage of simplified infrastructure, improved investment protection, pervasive security, and the high levels of performance, scalability, and innovative technologies.

With over twenty unique service modules in five distinct categories, the Catalyst 6500 ranks among the most scalable, high-performance platform for integrated services. Currently, Cisco offers modules that address security issues, application, networking, network monitoring, wireless/mobility, and IP communications, which can be integrated into existing catalyst switches. Each modules offers upgraded performance and reinforces Cisco's hold on the market for network switches. With more than $20 Billion is sales sine it's release in 1999, the 6500 Series switch has become the most popular networking platform ever.

While Cisco has been able to fend off most threats to their position, rival Foundry Networks, and newcomer Force 10 have recently launched new 10Gbe ready products aimed at disrupting the company's market share. According to literature on Force 10's Terascale E-Series 1200, the E1200 boasts of more than double the ports of the Catalyst 6500 (1260 vs. 576 Ethernet ports/chassis). While this may be good news for the company, Force 10 has been focused on the data center vertical, and is therefore still untested in the enterprise market. Foundry's BigIron RX series switch has received favorable press for it's size/performance ratio and lower prices. With the launch of the new RX series, Foundry has mounted a consistent affront to Cisco's unchallenged reign.

Even with the competition mounting new efforts, the Cisco name is still a major factor among IT professionals whose networks depend on their equipment. Fortunately for the stalwart Cisco, reputation is still the key to market dominance.

Oliver Rowen is currently Director of Corporate Accounts for Townsend Assets Group (TAG), a leading reseller of pre-owned data networking and refurbished equipment like the Catalyst 6500. With more than 2500 customers in 23 countries, TAG helps customers acquire, manage and remarket their technology. For more information go to www.townsendassets.com

Visit San Francisco On The Cheap

2008-06-08T23:04:00.000-07:00

Also known as Fog City, San Francisco is a west coast jewel. Gorgeous scenery, charming tourist attractions and mild weather all contribute to this popular destination. Cheap, on the other hand, is not usually a word visitors or residents use to describe the city. Follow our tips below to get around SF On The Cheap.

~Cheap Lodging

As usual, hostels are our choice for cheap lodging and the same advice applies to San Francisco. A couple of our favorites include:

*USA Hostels San Francisco* Just 3 blocks from Union Square and includes an all-you-can-make pancake breakfast. Single and mixed gender dorms (3-4 beds) start at $28 or opt for a private double room for just over $70. Another bonus: Some of the dorm rooms have an ensuite bathroom. Free linen and lockers are also included and staff are happy to help arrange activities or transportation. This relatively new chain of hostels also has locations in Hollywood, Las Vegas and San Diego.

*Green Tortoise Backpackers Hostel* Located near Chinatown, this very popular hostel has some great amenities. In addition to free breakfast (and dinner 3 nights per week!), there is also free internet, free lockers and tons of activities planned. There is also a spinoff company that organizes travel to nearby destinations such as Yosemite. We also love that the dorms have small numbers of beds in them (2-5!) and are available in female-only or mixed genders. Rates start at $25 pp for 5-bed dorms and 33.50 pp for 2 bed or double bed rooms.

Not up for hosteling? There are also some budget hotels left in San Francisco. We particularly like the Park Hotel or the SW Hotel. Both are centrally located and include some nice extras.

~Free San Francisco

Check out the Palace of Fine Arts. This structure was built as part of an Expo after the 1906 quake, and has withstood many a quake after that. The Palace of Fine Arts is a place of indescribable beauty, with a huge dome with thick pillars, creating a classical Roman sort of effect.

Also notable are Fisherman?s Wharf/Ghirardelli Square/World Famous Sea Lions. Fisherman?s Wharf and Ghirardelli Square are two big shopping centers located near the water. As one of San Francisco?s finest attractions, you simply can?t say you?ve been to San Francisco unless you?ve been there. These two centers are located only within a few blocks of each other, at the end of one of SF?s Cable Car routes. While you?re there, be certain to check out the World Famous Sea Lions. For some odd reason, sea lions tend to lounge around and basically hang out there. According to an SF guide, they are the most popular attraction in CA, save for Disneyworld and Disneyland.

~Cheap Eats

If you walk along San Francisco downtown, you will be bombarded by some of the best scents the world has to offer. Try these restaurants of various international cuisines that are easy on the wallet.

*Cordon Bleu Vietnamese Restaurant: The French-sounding name of this place is kind of misleading, but this restaurant serves wonderful Vietnamese food at a low price. For fewer than 8 dollars, you can enjoy a good combo meal that includes 5-spice chicken, grilled barbeque pork, an imperial roll, rice with sauce, and a country salad.

*The Pork Store Caf?: As the name implies, this place is dedicated to all things pork, and you can definitely pork out with the Pork Store Special. For $6.95, you can get two pork chops, two eggs, two biscuits, and lots of hash browns.

*Chow: What the name says, that is what it gives. The food choice is incredibly diverse. The highlights include Goat Cheese and Mushrooms on Toast ($6), Sonoma chicken ($9), lemon and butter mussels ($6.50), and a salmon sandwich ($8).

Don't miss San Francisco just because you hear how expensive it is. For more tips on how to visit SF On The Cheap, please visit our website at www.onthecheaptravel.com.

Happy Travels!

Kadie Kozee is the founder and editor of www.OnTheCheapTravel.com. She takes great delight in visiting the world's most fascinating places on a minimal budget.

Cisco CCNA Certification Exam Tutorial: The Config Register And Password

2008-05-31T00:18:00.000-07:00

Whether you're preparing for the CCNA certification exam or not, you must be prepared for the following question:

"Hey, I reloaded this router and it wants an enable password. Do you know it?"

Because if you don't, and there's no one available who does, you need to perform a password recovery technique on the router - without erasing the current configuration. This involves manipulating the config register, and a misstep here can be fatal to the router's chances of recovery!

Obviously, that can make you pretty nervous about changing the config register, CCNA or not. Different Cisco routers and switches have different techniques for password recovery, so the following discussion is limited to the 2500 series. If you need to do this for another model, do a quick search engine check for "password recovery cisco" and you should quickly find a document for the Cisco router you're working with.

For the 2500 series, you start by reloading the router and sending a BREAK signal during the first 60 seconds of the reload. Depending on the terminal program you're using, this can be the hardest part of the entire process! For most, just press CTRL-BREAK during this one-minute period. If this doesn't work, you may need to check Help in your terminal program to find out how to send this break signal.

As a result of the break sequence, the router will go into ROM Monitor mode. The commands here are totally different than the ones you're used to working with in the router's IOS. Use the command o/r 0x2142 to change the config register setting, and reload the router by entering the letter "i".

This config register setting doesn't erase anything, but it does make the router ignore the contents of NVRAM. This means that you'll be prompted to go into the dreaded Setup Mode, which you do NOT want to do. Simply press "N" and type "enable" when you're at the router prompt. (If you do go into Setup Mode, you can always get out with CTRL-C, a handy command to know for the CCNA exam and for real life, as you can see!)

Be very careful with the next step. You want to enter the command "configure memory" or "copy start run" at this point - don't enter "write memory" or "copy run start". Success on the CCNA exam and in working with real-world networks is all about the details, and this is a very important detail.

At this point, you can look at the running configuration and see the passwords, and change them if you wish. However, we're not done. The config register needs to be set back to its default of 0x2102, and you do so with the global command "config-register 0x2102". Now you want to save your config with "write memory" or "copy run start", and reload the router. The router will now boot as it normally would.

Knowing how to recover from a lost password is a vital skill for both the Cisco CCNA certification exam and for success in real-world networks. It's not something we have to do every day, but when the time calls for it, we have to do it correctly and completely - and that includes that final config-register change!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of over 100 free certification exam tutorials, including CCNA and CCNP tutorials. CompTIA Network+, Security+, and A+ certification tutorials are available, also!

Visit his blog and sign up for Certification Central, a daily newsletter packed with CCNA, Network+, Security+, A+, and CCNP certification exam practice questions! A free 7-part course, ?How To Pass The CCNA?, is also available.

Coming in 2007 -- Microsoft Vista certification with The Bryant Advantage!

Discover Your Heart in San Francisco

2008-05-29T23:19:00.000-07:00

Besides the Golden Gate Bridge and the funky neighborhoods, are you really aware of all that San Francisco has to offer as a vacation destination? Art, culture, history and fun permeate the city and spring up in various forms around every corner. Dull moments and dreary days are few and far between, and there are about five million possible itineraries to choose from. If filling your days with constant sensory stimulation sounds like your idea of a fabulous getaway, you simply must check out the whirling, spinning, energy-rich mecca that is San Francisco.

The Bay area in general is perfect for biking, walking, and cable car riding, so forget about your gas-guzzling beast and plan on getting a little fresh air and exercise. The distinctive architecture, the tranquil wharf and the people watching will all keep you constantly encouraged to move along, meaning that you'll probably end up burning a few calories without even realizing it. Historical walking tours will fill your head with a little knowledge, or if you're the spontaneous type, just hop on your bicycle and see where the day takes you.

If artistic endeavors get your motor running, dozens of opportunities will compete for your attention. The Asian Art Museum is one of the largest collections of Eastern inspired art in the world, and the San Francisco Modern Art Museum is considered a can't miss attraction. Galleries line the more fashionable streets and local artisans are hawking their wares in the most unexpected places; in other words, if you keep your eyes open you're sure to get your art fix.

Its location on the coast of course makes San Francisco properly ocean-oriented, so whether you're looking out across the bay from on of the city's higher vantage points or getting right up close to the action at Pier 39 at Fisherman's Wharf. Sea lions, food vendors and Broadway-style musicals are just a few of the attractions in this area, so save some time to properly appreciate the whimsical offerings. The Conservatory of Flowers is a fragrant and fascinating draw, and most tourists won't be able to leave the Bay area without hopping on a ferry and visiting a famed and intriguing sightseeing spot - Alcatraz.

The theme parks, nature preserves, and cultural spots of interest are compiled in lists and articles much longer than this one, so once you arrive be sure to check out the scene, maybe ask a local, and wander your way through what is sure to be a satisfyingly busy vacation. Don't let yourself get too worn out though; when taking city getaways it can be tempting to run yourself ragged and end up feeling relaxed but tired; avoid post-vacation fatigue by penciling in some downtime.

Play a round of golf on one of San Francisco's gorgeous courses; stop by one of the many high-class spas for a facial, massage or pedicure, or kick back at a casual or upscale restaurant for a delicious meal. Since you've been running around all day, don't worry about calories for once. Indulge in a fantastic dinner (seafood and wine, perhaps?) and go ahead and order dessert. With hundreds of restaurants to choose from, food heads will be in heaven.

Shopping is also a tempting diversion, so spend-a-holics beware that your credit card may be making a few key appearances. From specialty gift stores to upscale boutiques, candy and flower shops to antique markets, it's all here. Considering that this is in the neighborhood of wine country, there are all sorts of tours and tastings to take advantage of. Give your taste buds an awakening, see the process that grapes undergo before reaching your table in the form of sweet nectar in a long-stemmed glass, and take a few bottles home with you as the perfect souvenir.

To add a final touch to the trip, one that will make you look and feel as if you're a professional vacationer who knows how to make a good holiday great, opt to reserve a San Francisco Vacation Rental. With a condo or apartment located downtown, all the hottest activities will be right outside your door and it will greatly aid your vacation state of mind to live like a local.

Or, check out the properties that are tucked away along the coast or in the hills; these will give you more peace and quiet than the typical hotel, and aren't necessarily more expensive when you take into consideration all the fabulous extra amenities that come wrapped up in a vacation rental package. It's at least worth a look, so check out the dozens of houses, town homes and cottages today.

San Francisco isn't a hard sell; there's something for everyone to take interest in and the city knows how to show visitors a good time. If it's time for you to take a break from responsibility for a while, consider heading to this sparkling metropolis as soon as you can swing it.

Visit HomeAway.com as you start to plan your next vacation.#BREAK# #TITLE#How to become a Cisco Certified Network Associate (CCNA)#/TITLE#

As a professional certifications add value to your CV from the point of view of potential employers. Not only do they demonstrate that you have a certain level of knowledge in a given area but they also demonstrate that you can apply yourself to a project or task and are able to see it through to a successful completion. This article explains how to go about becoming a Cisco Certified Network Associate (CCNA).

To become a CCNA you will need to pass either:

Exam - 640-821 INTRO and Exam - 640-811 ICND or Exam - 640-801 CCNA (a composite of the above two exams).

In order to sit the exams you will need to register with an authorised test centre and a fee is involved (currently around ?84 plus VAT). You can do this at Pearson VUE or Thomson Prometric. You should be able to find a location and date that suits you. (If you are attending the below courses your training provider should help you with this.)

In order to gain the necessary knowledge to pass these exams Cisco recommends the following courses:

INTRO - Introduction to Cisco Networking Technologies (http://www.inventioconsulting.co.uk/intro.htm) ICND - Interconnecting Cisco Network Devices (http://www.inventioconsulting.co.uk/icnd.htm)

Self study is also an option and is cheaper than sitting the courses. Self study guides can be bought at online bookstores such as Amazon.co.uk

Either way whether you are attending courses or doing the self study it is advisable to spend time reading up from your course notes or books and doing some of the practice exams which can be found at various websites to build your knowledge and gain confidence before sitting the exams.

David Carrier founded Inventio Consulting (http://www.inventioconsulting.co.uk) in 2003 and has over 10 years experience in the IT training and education industry.

Cisco CCNA / CCNP Certification Exam: Troubleshooting Direct Serial

2008-05-28T23:03:00.000-07:00

Connecting Cisco routers directly via their Serial interfaces works really well once you get it running - and getting such a connection up and running is easy enough. You can use show controller serial x to find out which endpoint is acting as the DCE, and it's the DCE that must be configured with the clockrate command.

R3#show controller serial 1

HD unit 1, idb = 0x11B4DC, driver structure at 0x121868

buffer size 1524 HD unit 1, V.35 DCE cable

R3(config)#int serial1

R3(config-if)#ip address 172.12.13.3 255.255.255.0

R3(config-if)#clockrate 56000

R3(config-if)#no shut

Failure to configure the clockrate has some interesting effects regarding the physical and logical state of the interfaces. Let's remove the clockrate from R3 and see what happens.

R3(config)#int s1

R3(config-if)#no clockrate 56000

R3(config-if)#

18:02:19: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1, changed state to down

The line protocol doesn't drop immediately, but it does drop. Let's run show interface serial1 to compare the physical and logical interface states.

R3#show int serial1

Serial1 is up, line protocol is down

Physically, the interface is fine, so the physical interface is up. It's only the logical part of the interface - the line protocol - that is down. It's the same situation on R1.

R1#show inter serial1

Serial1 is up, line protocol is down

While a router misconfiguration is the most likely cause of a serial connection issue, that's not the only reason for clocking issues. Cisco's website documentation mentions CSU/DSU misconfiguration, out-of-spec cables, bad patch panel connections, and connecting too many cables together as other reasons for clocking problems. Still, the number one reason for clocking problems in my experience is simply forgetting to configure the clockrate command!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

You can also join his RSS feed and visit his blog, which is updated several times daily with new Cisco certification articles, free tutorials, and daily CCNA / CCNP exam questions! Details are on the website.

For a FREE copy of his latest e-books, ?How To Pass The CCNA? and ?How To Pass The CCNP?, visit the website and download your free copies. You can also get FREE CCNA and CCNP exam questions every day! And coming in 2007 -- Microsoft Vista certification from The Bryant Advantage!

Cisco CCNA / CCNP Certification Exam Lab: Frame Relay Subinterfaces

2008-05-27T23:18:00.000-07:00

Earning your Cisco CCNA and CCNP is a tough proposition, and part of that is the fact that you quickly learn that there?s usually more than one way to do things with Cisco routers ? and while that?s generally a good thing, you better know the ins and outs of all options when it comes to test day and working on production networks. Working with Frame Relay subinterfaces and split horizon is just one such situation.

One reason for the use of subinterfaces is to circumvent the rule of split horizon. You recall from your CCNA studies that split horizon dictates that a route cannot be advertised out the same interface upon which it was learned in the first place. In the following example, R1 is the hub and R2 and R3 are the spokes. All three routers are using their physical interfaces for frame relay connectivity, and they are also running RIPv2 172.12.123.0 /24. Each router is also advertising a loopback interface, using the router number for each octet.

R1(config)#int s0

R1(config-if)#ip address 172.12.123.1 255.255.255.0

R1(config-if)#no frame inverse

R1(config-if)#frame map ip 172.12.123.2 122 broadcast

R1(config-if)#frame map ip 172.12.123.3 123 broadcast

R1(config-if)#no shut

R2(config)#int s0

R2(config-if)#encap frame

R2(config-if)#no frame inver

R2(config-if)#frame map ip 172.12.123.1 221 broadcast

R2(config-if)#frame map ip 172.12.123.3 221 broadcast

R2(config-if)#ip address 172.12.123.2 255.255.255.0

R3(config)#int s0

R3(config-if)#encap frame

R3(config-if)#no frame inver

R3(config-if)#frame map ip 172.12.123.1 321 broadcast

R3(config-if)#frame map ip 172.12.123.2 321 broadcast

R3(config-if)#ip address 172.12.123.3 255.255.255.0

R1#show ip route rip

2.0.0.0/32 is subnetted, 1 subnets

R 2.2.2.2 [120/1] via 172.12.123.2, 00:00:20, Serial0

3.0.0.0/32 is subnetted, 1 subnets

R 3.3.3.3 [120/1] via 172.12.123.3, 00:00:22, Serial0

R2#show ip route rip

1.0.0.0/32 is subnetted, 1 subnets

R 1.1.1.1 [120/1] via 172.12.123.1, 00:00:06, Serial0

R3#show ip route rip

1.0.0.0/32 is subnetted, 1 subnets

R 1.1.1.1 [120/1] via 172.12.123.1, 00:00:04, Serial0

The hub router R1 has a route to both loopbacks, but neither spoke has a route to the other spoke's loopback. That's because split horizon prevents R1 from advertising a network via Serial0 if the route was learned on Serial0 to begin with.

We've got two options here, one of which is to disable spilt horizon on the interface. While doing so will have the desired effect in our little network, disabling split horizon is not a good idea and should be avoided whenever possible. We?re not going to do it in this lab, but here is the syntax to do so:

R1(config)#interface serial0

R1(config-if)#no ip split-horizon

A better solution is to configure subinterfaces on R1. The IP addressing will have to be revisited, but that's no problem here. R1 and R2 will use 172.12.123.0 /24 to communicate, while R1 and R3 will use 172.12.13.0 /24. R3's serial0 interface will need to be renumbered, so let's look at all three router configurations:

R1(config)#interface serial0

R1(config-if)#encap frame

R1(config-if)#no frame inverse-arp

R1(config-if)#no ip address

R1(config-if)#interface serial0.12 multipoint

R1(config-subif)#ip address 172.12.123.1 255.255.255.0

R1(config-subif)#frame map ip 172.12.123.2 122 broadcast

R1(config-subif)#interface serial0.31 point-to-point

R1(config-subif)#ip address 172.12.13.1 255.255.255.0

R1(config-subif)#frame interface-dlci 123

R2(config)#int s0

R2(config-if)#ip address 172.12.123.2 255.255.255.0

R2(config-if)#encap frame

R2(config-if)#frame map ip 172.12.13.3 221 broadcast

R2(config-if)#frame map ip 172.12.123.1 221 broadcast

R3(config)#int s0

R3(config-if)#ip address 172.12.13.3 255.255.255.0

R3(config-if)#encap frame

R3(config-if)#frame map ip 172.12.13.1 321 broadcast

R3(config-if)#frame map ip 172.12.123.2 321 broadcast

A frame map statement always names the REMOTE IP address and the LOCAL DLCI. Don't forget the broadcast option!

Show frame map shows us that all the static mappings on R1 are up and running. Note the "static" output, which indicates these mappings are a result of using the frame map command. Pings are not shown, but all three routers can ping each other at this point.

R1#show frame map

Serial0 (up): ip 172.12.123.2 dlci 122(0x7A,0x1CA0), static,

broadcast, CISCO, status defined, active

Serial0 (up): ip 172.12.13.3 dlci 123(0x7B,0x1CB0), static,

broadcast, CISCO, status defined, active

After the 172.12.13.0 /24 network is added to R1 and R3?s RIP configuration, R2 and R3 now have each other's loopback network in their RIP routing tables.

R2#show ip route rip

1.0.0.0/32 is subnetted, 1 subnets

R 1.1.1.1 [120/1] via 172.12.123.1, 00:00:20, Serial0

3.0.0.0/32 is subnetted, 1 subnets

R 3.3.3.3 [120/1] via 172.12.123.1, 00:00:22, Serial0

R3#show ip route rip

1.0.0.0/32 is subnetted, 1 subnets

R 1.1.1.1 [120/1] via 172.12.13.1, 00:00:20, Serial0

2.0.0.0/32 is subnetted, 1 subnets

R 2.2.2.2 [120/1] via 172.12.13.1, 00:00:22, Serial0

While turning split horizon off is one way to achieve total IP connectivity, doing so can have other unintended results. The use of subinterfaces is a more effective way of allowing the spokes to see the hub's loopback network.

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

Cisco CCNA / CCNP Certification Exam: Cabling Your Home Lab

2008-05-26T23:02:00.000-07:00

More CCNA and CCNP candidates than ever before are putting together their own home labs, and there's no better way to learn about Cisco technologies than working with the real thing. Getting the routers and switches is just part of putting together a great CCNA / CCNP home lab, though. You've got to get the right cables to connect the devices, and this is an important part of your education as well. After all, without the right cables, client networks are going to have a hard time working!

For your Cisco home lab, one important cable is the DTE/DCE cable. These cables have two major uses in a home lab. To practice directly connecting Cisco routers via Serial interfaces (an important CCNA skill), you'll need to connect them with a DTE/DCE cable. Second, if you plan on having a Cisco router act as a frame relay switch in your lab, you'll need multiple DTE/DCE cables to do so. (Visit my website's Home Lab Help section for a sample Frame Relay switch configuration.)

If you have multiple switches in your lab, that's great, because you'll be able to get a lot of spanning tree protocol (STP) work in as well as creating Etherchannels. To connect your switches, you'll need crossover cables.

You'll need some straight-through cables as well to connect your routers to the switches.

Finally, if you're lucky enough to have an access server as part of your lab, you'll need an octal cable to connect your AS to the other routers and switches in your lab. The octal cable has one large connector on one end and eight numbered RJ-45 connectors on the other end. The large connector should be attached to the async port on your AS, and the numbered RJ-45 connectors will be connected to the console ports on your other routers and switches.

Choosing and connecting the right cables for your Cisco CCNA / CCNP home lab is a great learning experience, and it's also an important part of your Cisco education. After all, all great networks and home labs all begin at Layer One of the OSI model!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

Cisco CCNA / CCNP Certification Exam: Caller ID Screening And Callback

2008-05-23T23:08:00.000-07:00

As a CCNA and/or CCNP candidate, you've got to be able to spot situations where Cisco router features can save your client money and time. For example, if a spoke router is calling a hub router and the toll charges at the spoke site are higher than that of the hub router, having the hub router hang up initially and then call the spoke router back can save the client money (and make you look good!)

A popular method of doing this is using PPP callback, but as we all know, it's a good idea to know more than one way to do things in Cisco World! A lesser-known but still effective method of callback is Caller ID Screening & Callback. Before we look at the callback feature, though, we need to know what Caller ID Screening is in the first place!

This feature is often referred to simply as "Caller ID", which can be a little misleading if you've never seen this service in operation before. To most of us, Caller ID is a phone service that displays the source phone number of an incoming call. Caller ID Screening has a different meaning, though. Caller ID Screening on a Cisco router is really another kind of password - it defines the phone numbers that are allowed to call the router.

The list of acceptable source phone numbers is created with the isdn caller command. Luckily for us, this command allows the use of x to specify a wildcard number. The command isdn caller 555xxxx results in calls being accepted from any 7-digit phone number beginning with 555, and rejected in all other cases. We'll configure R2 to do just that and then send a ping from R1 to R2. To see the results of the Caller ID Screening, debug dialer will be run on R1 before sending the ping. I?ve edited this output, since the output you see here will be repeated fire times ? once for each ping packet.

R2(config-if)#isdn caller 555xxxx

R1#debug dialer

Dial on demand events debugging is on

R1#ping 172.12.12.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.12.12.2, timeout is 2 seconds:

03:30:25: BR0 DDR: Dialing cause ip (s=172.12.12.1, d=172.12.12.2)

03:30:25: BR0 DDR: Attempting to dial 8358662.

Success rate is 0 percent (0/5)

R1 doesn't give us any hints as to what the problem is, but we can see that the pings definitely aren't going through. On R2, show dialer displays the number of screened calls.

R2#show dialer

BRI0 - dialer type = ISDN

Dial String Successes Failures Last DNIS Last status

8358661 1 0 00:03:16 successful

7 incoming call(s) have been screened.

0 incoming call(s) rejected for callback.

The callback option mentioned in the last line shown above enables the router to reject a phone call, and then call that router back seconds later.

R2 will now be configured to initially hang up on R1, and then call R1 back.

R2(config-if)#isdn caller 8358661 callback

R1 will now ping R2. The pings aren't returned, but seconds later R2 calls R1 back.

R1#ping 172.12.12.2

Success rate is 0 percent (0/5)

R1#

03:48:12: BRI0: wait for isdn carrier timeout, call id=0x8023

R1#

03:48:18: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up

R1#

03:48:18: BR0:1 DDR: dialer protocol up

R1#

03:48:19: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to up

R1#

03:48:24: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 8358662 R2

show dialer on R2 shows the reason for the call to R1 is a callback return call.

R2#show dialer

BRI0 - dialer type = ISDN

Dial String Successes Failures Last DNIS Last status

8358661 3 0 00:00:48 successful

7 incoming call(s) have been screened.

10 incoming call(s) rejected for callback.

BRI0:1 - dialer type = ISDN

Idle timer (120 secs), Fast idle timer (20 secs)

Wait for carrier (30 secs), Re-enable (15 secs)

Dialer state is data link layer up

Dial reason: Callback return call

Time until disconnect 71 secs

Connected to 8358661 (R1)

The drawback to Caller ID Callback is that not all telco switches support it, so if you have the choice between this and PPP Callback, you're probably better off with PPP Callback. However, it's always a good idea to know more than one way to get things done with Cisco!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

Cisco CCNA / CCNP Certification Exam: Same Command, Different Results

2008-05-22T23:20:00.000-07:00

As a CCNA or CCNP, one thing you've got to get used to is that change is constant. Cisco regularly issues new IOS versions, not to mention the many different kinds of hardware they produce! While it's always nice to have "the latest and the greatest" when it comes to routers, switches, firewalls, etc., we have to be prepared for the fact that not all our clients are going to have that latest and greatest!

For instance, there are still quite a few Catalyst 5000 switches out there humming away, and if you're used to working on IOS-driven switches like the 2950, the same command can have dramatically different results.

Let's say you're going to examine the spanning tree protocol (STP) setup of a new client. You're used to working with newer 2950 switches, and you've always run show span on those switches to display spanning-tree information. Then, you run show span on a Catalyst 5000 - and something like this shows:

switch (enable) show span

Destination : Port 6/1

Admin Source : Port 6/2

Oper Source : Port 6/2

Direction : transmit/receive

Incoming Packets: disabled

Learning : enabled

Multicast : enabled

Filter : -

Status : active

Total local span sessions: 1

What's going on here?

The command show span on a 5000 will not show spanning tree stats - instead, what you're going to see are statistics relating to Switched Port ANalyzer (SPAN). Surprise!

Consider an example where you're used to running show span on 5000 switches to see SPAN information. When you run that on a 2950, you know now what you're going to get - spanning tree information! On a 2950, you'll need to run show monitor session, followed by the SPAN session number.

SW1#show monitor session 1

Session 1

---------

Type : Local Session

Source Ports :

Both : Fa0/1

Destination Ports : Fa0/2

Encapsulation : Native

Ingress: Disabled

As a CCNA and CCNP, this is one of those things you just have to get used to. Commands are going to be different, sometimes radically so, between models. That's why you need to be adept with both IOS Help and Cisco's online documentation site. IOS Help is easy, but the online doc site take a little getting used to. Once you learn how to navigate that site, a world of Cisco knowledge is at your fingertips.

Besides, when you sit for the CCIE lab exam, that will be the only friend you have! And a valuable friend it can be - you're just going to have to trust me on that one. :)

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

For a FREE copy of his latest e-books, "How To Pass The CCNA" and "How To Pass The CCNP", visit the website and download your free copies. You can also get FREE CCNA and CCNP exam questions every day! And coming in 2007 -- Microsoft Vista certification from The Bryant Advantage!

Cisco CCNA / CCNP Certification Exam: Frame Relay Encapsulation Types

2008-05-21T23:41:00.000-07:00

When you're studying to pass the Cisco CCNA and CCNP certification exams, you quickly learn that there's always something else to learn. (You'll really pick up on this in your CCIE studies, trust me!) Today we'll take a look at an often-overlooked topic in Frame Relay, the encapsulation type. You don't exactly change this on a daily basis in production networks (not if you want to stay employed, anyway!), but it's an important exam topic that you must be familiar with.

The DCE and DTE must agree on the LMI type, but there's another value that must be agreed upon by the two DTEs serving as the endpoints of the VC. The Frame encapsulation can be left at the default of Cisco (which is Cisco-proprietary), or it can be changed to the industry-standard IETF, as shown below. If a non-Cisco router is the remote endpoint, IETF encapsulation must be used. Note that the default of Cisco isn't listed as an option by IOS Help, so you better know that one by heart!

R1(config)#int s0

R1(config-if)#encap frame ?

ietf Use RFC1490/RFC2427 encapsulation

R1(config-if)#encap frame ietf

What if a physical interface is in use and some remote hosts require Cisco encapsulation and others require IETF? The encapsulation type can be configured on a per-PVC basis as well. One encap type can be used on the interface, and any map statements that require a different encap type can have that specified in the appropriate map statement. In the following example, all PVCs will use the default Cisco encapsulation type except for PVC 115. The frame map statement using that PVC has ietf specified.

R1(config)#int s0/0

R1(config-if)#encap frame

R1(config-if)#frame map ip 172.12.123.3 123 broadcast

R1(config-if)#frame map ip 172.12.123.2 122 ietf broadcast

show frame map shows us that the mapping to DLCI 123 is using Cisco encapsulation, and DLCI 122 is using IETF.

R1#show frame map

Serial0 (up): ip 172.12.123.3 dlci 123(0x7B,0x1CB0), static

broadcast, CISCO, status defined, active

Serial0 (up): ip 172.12.123.2 dlci 122(0x7B,0x1CB0), static

broadcast, ietf, status defined, active

Just remember that Cisco is the default, and all PVCs will use Cisco unless you specify IETF in the frame map statement itself. You could also change the entire interface to use IETF for all mappings with the frame-relay encapsulation IETF command. For Cisco exams, as well as work on production networks, it's always a good idea to know more than one way to do something!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

Cisco CCNA / CCNP Certification Exam: Frame Relay BECNs and FECNs

2008-05-21T01:52:00.000-07:00

BECNs and FECNs aren't just important to know for your Cisco CCNA and CCNP certification exams - they're an important part of detecting congestion on a Frame Relay network and allowing the network to dynamically adjust its transmission rate when congestion is encountered.

The Forward Explicit Congestion Notification (FECN, pronounced "feckon") bit is set to zero by default, and will be set to 1 if congestion was experienced by the frame in the direction in which the frame was traveling. A DCE (frame relay switch) will set this bit, and a DTE (router) will receive it, and see that congestion was encountered along the frame's path.

If network congestion exists in the opposite direction in which the frame was traveling, the Backward Explicit Congestion Notification (BECN, pronounced "beckon") will be set to 1 by a DCE.

If this is your first time working with BECNs and FECNs, you might wonder why the BECN even exists - after all, why send a "backwards" notification? The BECN is actually the most important part of this entire process, since it's the BECN bit that indicates to the sender that it needs to slow down!

For example, frames sent from Kansas City to Green Bay encounter congestion in the FR cloud. A Frame Switch sets the FECN bit to 1. In order to alert KC that it's sending data too fast, GB will send return frames with the BECN bit set. When KC sees the BECN bit is set to 1, the KC router knows that the congestion occurred when frames were sent from KC to GB.

Frame Relay BECN Adaptive Shaping allows a router to dynamically throttle back on its transmission rate if it receives frames from the remote host with the BECN bit set. In this case, KC sees that the traffic it's sending to GB is encountering congestion, because the traffic coming back from GB has the BECN bit set. If BECN Adaptive Shaping is running on KC, that router will adjust to this congestion by slowing its transmission rate. When the BECNs stop coming in from GB, KC will begin to send at a faster rate.

BECN Adaptive Shaping is configured as follows:

KC(config)#int s0

KC(config-if)#frame-relay adaptive-shaping becn

To see how many frames are coming in and going out with the BECN and FECN bits set, run show frame pvc.

R3#show frame pvc

< some output removed for clarity >

input pkts 306 output pkts 609 in bytes 45566

out bytes 79364 dropped pkts 0 in FECN pkts 0

in BECN pkts 0 out FECN pkts 0 out BECN pkts 0

in DE pkts 0 out DE pkts 0

out bcast pkts 568 out bcast bytes 75128

pvc create time 01:26:27, last time pvc status changed 01:26:27

Just watch the "in"s and "out"s of BECN, FECN, and DE in both the exam room and your production networks!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

The Advantages of Official Microsoft and Cisco Certification Training

2008-05-20T02:29:00.000-07:00

Lots of aspirants in design and network management channel all their efforts in order to obtain highly recognized certifications such as MCSE (Microsoft Certified System Engineer) and MCSA (Microsoft Certified System Administrator). These world-recognized certifications are much desired, as they can easily make the difference between a prosperous, lucrative career in designand an average, low-rewarding job as a programmer. Most people would do anything to obtain such world-recognized certifications and they invest lots of money and time in the process, with little or no prospect of ever achieving their goals.

There are thousands of scammers on the Internet who commonly lure people into buying various second-hand tutorials and self-study oriented training programs, promising great results with minimal effort. However, there are also many solid, reliable websites on the World Wide Web that provide students with elaborate, well-structured and comprehensive materials, facilitating the process of learning and guaranteeing success. Considering this fact, it is very important to distinguish between average speculants and professional websites that actually provide effective MCSE and MCSA training programs.

If your time allows it, consider attending to a short classroom training course instead of using self-study oriented programs. There are websites that offer advanced MCSE and MCSA accelerated training courses, laboratories and seminaries, taught by well-trained, experienced professionals. Such classes are far superior to self-training programs, as they involve active participation, better comprehension and learning, stimulating students? thinking and enhancing their overall skills. By participating to a 14-day official MCSE and MCSA training course, one is able to rapidly assimilate vital information regarding solution design and network management with the help of well-trained professionals. In addition, such training programs allow students to acquire a complete set of practical abilities that will help them in their future careers. Official MCSE and MCSA training programs guarantee graduates acceptance in the best companies of the w orld!

Similar to MCSE and MCSA, CCNA (Cisco Certified Network Associate) and CCIE (Cisco Certified Internetwork Expert) certifications are also highly requested in present. There are various professional training centers that offer people the opportunity to participate to elaborate CCNA and CCIE training programs in exchange for a reasonable sum of money. By attending a five or six-day CCNA and CCIE training course, students can quickly familiarize themselves with latest Cisco technologies and hardware. During CCNA and CCIE training sessions , attending students receive constant support and feed-back from well-trained professionals. Such training courses are not only focused on theory; they are also aimed at forming and enhancing students? practical skills regarding various aspects of Cisco technologies and hardware. Thousands of graduates recommend professional CCNA and CCIE training courses to people who wish to build a solid, successful c areer in the field.

So if you want to find out valuable information about MCSE training or CCNA training, or even CCIE training, please follow these links, they will direct you to the safest way to take your courses.

Cisco CCNA / CCNP Exam Tutorial: Testing ISDN Links Without Pings

2008-05-19T01:25:00.000-07:00

To earn your Cisco CCNA and CCNP certifications, you've got to master ISDN - and despite what some people say, there's still a lot of ISDN out there that needs to be supported. And when it comes to troubleshooting ISDN, there's a lot to look at. Is the correct ISDN switchtype configured? Are the dialer map statements correct? What about the dialer-group and dialer-list commands? And that's just the start.

I always say that all troubleshooting starts at Layer 1, the Physical layer of the OSI model. The usual method of troubleshooting ISDN is sending pings across the link, but the connection can be tested without using pings or even before assigning IP addresses to the BRI interfaces!

It's a good idea to place these test calls before configuring the interfaces - that way, you know you've got a valid connection before beginning the configuration (and there's a lot of config to go along with ISDN!)

To place a test call without using pings, use the isdn call interface command.

R1#isdn call interface bri0 8358662

R1#

03:54:43: BR0 DDR: Attempting to dial 8358662

03:54:43: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up

03:54:44: BR0:1 DDR: dialer protocol up

03:54:45: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to up

03:54:49: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 8358662 R2

To tear the test call down correctly, use isdn disconnect interface. IOS Help displays the options with this command.

R1#isdn disconnect interface bri 0 ?

all Disconnect the data call(s) on all b channels

b1 Disconnect the data call on b1 channel

b2 Disconnect the data call on b2 channel

R1#isdn disconnect interface bri 0 all

03:58:36: BR0:1 DDR: disconnecting call

03:58:36: BR0:2 DDR: disconnecting call

03:58:36: %ISDN-6-DISCONNECT: Interface BRI0:1 disconnected from 8358662 R2, call lasted 20 seconds

03:58:36: %LINK-3-UPDOWN: Interface BRI0:1, changed state to down

03:58:36: BR0:1 DDR: disconnecting call

03:58:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to down

I say "correctly" because the one thing you don't want to do to end an ISDN call, test or otherwise, is just shut the interface. Telcos don't like it, and ISDN lab devices like it even less. Always let the d-channel do its work and tear the call down in an orderly fashion - don't just cut it off by shutting the interface down.

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

Cisco CCNA / CCNP Certification Exam Tutorial: Floating Static Routes

2008-05-16T23:04:00.000-07:00

To pass the Cisco CCNA and CCNP certification exams, as well as becoming a world-class networker, you've got to know how and when to use floating static routes. And if you're wondering what makes them "float" -- read on!

In this example, R1 and R2 are running OSPF over a Frame Relay network, 172.12.123.0 /24. They're also connected by a BRI ISDN link, 172.12.12.0 /24. R1 is advertising a loopback network, 1.1.1.1 /32, via OSPF. We want R2 to have a route to that loopback even if the frame goes down - and here, we'll use a floating static route to make that happen.

R2 sees the route to the loopback interface via OSPF, and can ping that interface successfully.

R2#show ip route ospf

1.0.0.0/32 is subnetted, 1 subnets

O 1.1.1.1 [110/65] via 172.12.123.1, 00:00:02, Serial0

R2#ping 1.1.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 68/68/68 ms

This is when it's important to know your administrative distances.... or at least know where to look to see them! The AD of OSPF is 110, which means we can configure a static route to 1.1.1.1 /32, and as long as the AD of the static route is higher than 110, it won't be used unless the OSPF route leaves the routing table. That's why this kind of route is called a "floating" static route - the route "floats" in the routing table and isn't seen unless the primary route leaves the table.

You learned how to write a static route in your CCNA studies, but you also remember that the default AD of a static route is either 1 or 0... and both of those values are less than 110! To change the AD of a static route, configure the desired distance at the end of the ip route command.

R2(config)#ip route 1.1.1.1 255.255.255.255 bri0 ?

<1-255> Distance metric for this route

A.B.C.D Forwarding router's address

name Specify name of the next hop

permanent permanent route

tag Set tag for this route

R2(config)#ip route 1.1.1.1 255.255.255.255 bri0 111

The static route has an AD that's only one higher than that of the OSPF route, but that's enough to make the route "float" and not yet be seen in the routing table.

R2#show ip route

1.0.0.0/32 is subnetted, 1 subnets

O 1.1.1.1 [110/65] via 172.12.123.1, 00:06:44, Serial0

172.12.0.0/24 is subnetted, 2 subnets

C 172.12.12.0 is directly connected, BRI0

C 172.12.123.0 is directly connected, Serial0

Let's see the effect on the routing table when the Serial0 interface is closed.

R2(config)#int s0

R2(config-if)#shutdown

12:04:53: %OSPF-5-ADJCHG: Process 1, Nbr 172.12.123.1 on Serial0 from FULL to DOWN, Neighbor Down: Interface down or detached

12:04:55: %SYS-5-CONFIG_I: Configured from console by console

12:04:55: %LINK-5-CHANGED: Interface Serial0, changed state to administratively down

12:04:56: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to down

R2#show ip route

1.0.0.0/32 is subnetted, 1 subnets

S 1.1.1.1 is directly connected, BRI0

172.12.0.0/24 is subnetted, 1 subnets

C 172.12.12.0 is directly connected, BRI0

The floating static route appears in the table, but the ISDN link will not come up until the BRI interface has traffic to send. Let's ping 1.1.1.1 and see what happens. debug dialer was configured on R2 before sending the ping.

R2#ping 1.1.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds:

12:16:01: BR0 DDR: Dialing cause ip (s=172.12.12.2, d=1.1.1.1)

12:16:01: BR0 DDR: Attempting to dial 8358661

12:16:01: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up.!!

12:16:01: BR0:1 DDR: dialer protocol up!!

Success rate is 80 percent (4/5), round-trip min/avg/max = 36/37/40 ms

The link comes up and traffic can still reach 1.1.1.1. Once R2 becomes an OSPF neighbor of R1 again, the OSPF route will again become the primary path and the floating static route leaves the routing table.

R2(config)#int s0

R2(config-if)#no shut

R2#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

172.12.123.1 1 FULL/DR 00:01:57 172.12.123.1 Serial0

R2#show ip route

1.0.0.0/32 is subnetted, 1 subnets

O 1.1.1.1 [110/65] via 172.12.123.1, 00:00:16, Serial0

172.12.0.0/24 is subnetted, 2 subnets

C 172.12.12.0 is directly connected, BRI0

C 172.12.123.0 is directly connected, Serial0

A floating static route is an excellent "back door" that will keep the ISDN link down while allowing that link to serve as a backup route. Just make sure the ISDN link comes down when you expect it to - always check that with show isdn status!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

Cisco CCNA / CCNP Certification Exam Tutorial: Configuring PPP Callback

2008-05-16T04:19:00.001-07:00

You may run into situations where a router in a remote location needs to dial in to a central router, but the toll charges are much higher if the remote router makes the call. This scenario is perfect for PPP Callback, where the callback client places a call to a callback server, authentication takes place, and the server then hangs up on the client! This ensures that the client isn't charged for the call. The server then calls the client back.

In the following example, R2 has been configured as the client and R1 is the callback server. Let's look at both configurations and the unique commands PPP Callback requires.

Client:

username R1 password CCIE

interface BRI0

ip address 172.12.12.2 255.255.255.0

encapsulation ppp

dialer map ip 172.12.12.1 name R1 broadcast 5557777

dialer-group 1

isdn switch-type basic-ni

ppp callback request

ppp authentication chap

Most of that configuration will look familiar to you, but the ppp callback request command might not. This command enables the BRI interface to request the callback.

Simple enough, right? The PPP Callback Server config requires more configuration and an additional map-class as well.

Server:

username R2 password CCIE interface BRI0

ip address 172.12.12.1 255.255.255.0

encapsulation ppp

dialer callback-secure

dialer map ip 172.12.12.2 name R2 class CALL_R2_BACK broadcast 5558888

dialer-group 1

isdn switch-type basic-ni

ppp callback accept

ppp authentication chap

map-class dialer CALL_R2_BACK

dialer callback-server username

Examining the PPP Callback Server command from the top down...

dialer callback-secure enables security on the callback. If the remote router cannot be authenticated for callback, the incoming call will be disconnected.

The dialer map statement now calls the class CALL_R2_BACK, shown at the bottom of the config excerpt.

ppp callback accept enables PPP callback on this router.

dialer callback-server username tells the callback server that the device referenced in the dialer map statement is a callback client.

The only way to find out if the config works is to test it, so let's send a ping from R2 to R1 and see if the callback takes place.

R2#ping 172.12.12.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.12.12.1, timeout is 2 seconds:

02:45:42: BR0 DDR: Dialing cause ip (s=172.12.12.2, d=172.12.12.1)

02:45:42: BR0 DDR: Attempting to dial 5557777

02:45:42: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up

02:45:42: BR0:1 DDR: Callback negotiated - Disconnecting now

02:45:42: BR0:1 DDR: disconnecting call

02:45:42: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 5557777 R1

02:45:42: %LINK-3-UPDOWN: Interface BRI0:1, changed state to down

02:45:42: DDR: Callback client for R1 5557777 created

02:45:42: BR0:1 DDR: disconnecting call.....

Success rate is 0 percent (0/5)

R2#

02:45:57: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up

R2#

02:45:57: BR0:1 DDR: Callback received from R1 5557777

02:45:57: DDR: Freeing callback to R1 5557777

02:45:57: BR0:1 DDR: dialer protocol up

02:45:58: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to up

The callback was successfully negotiated, and the call then disconnected. R1 then called R2 back, and show dialer on R1 confirms the purpose of the call.

R1#show dialer

BRI0 - dialer type = ISDN

Dial String Successes Failures Last DNIS Last status

5558888 2 4 00:00:20 successful

0 incoming call(s) have been screened.

0 incoming call(s) rejected for callback.

BRI0:1 - dialer type = ISDN

Idle timer (120 secs), Fast idle timer (20 secs)

Wait for carrier (30 secs), Re-enable (15 secs)

Dialer state is data link layer up

Dial reason: Callback return call

Time until disconnect 99 secs

Connected to 5558888 (R2)

Pretty cool! PPP Callback isn?t just important for passing your CCNA and CCNP exams ? in circumstances such as shown in this example, it can save your organization quite a bit of money!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

For a FREE copy of his latest e-books, "How To Pass The CCNA" and "How To Pass The CCNP", visit the website and download your free copies. You can also get FREE CCNA and CCNP exam questions every day! Get your CCNA study guide from The Bryant Advantage! And coming in 2007 ? Microsoft Vista certification!

Cisco CCNA / CCNP Certification Exam Tutorial: Dialer Watch

2008-05-15T03:31:00.000-07:00

Dialer Watch is a vital part of your CCNA and CCNP studies, particularly for the BCRAN exam, but it's one of the most misunderstood technologies as well. To help you pass the CCNA and CCNP certification exams, here's a detailed look at Dialer Watch.

Dialer Watch allows you to configure a route or routes as "watched" when the watched route leaves the routing table and there is no other valid route to that specific destination, the ISDN link will come up. In the following example, R1 and R2 are connected by both a Frame Relay cloud over the 172.12.123.0 /24 network and an ISDN cloud using the 172.12.12.0 /24 network. The routers are running OSPF over the Frame cloud, and R1 is advertising its loopback of 1.1.1.1/32 as well as an Ethernet segment, 10.1.1.0/24, via OSPF. R2 has both of these routes in its OSPF table, as shown below.

R2#show ip route ospf

1.0.0.0/32 is subnetted, 1 subnets

O 1.1.1.1 [110/65] via 172.12.123.1, 00:00:07, Serial0

10.0.0.0/24 is subnetted, 1 subnets

O 10.1.1.0 [110/128] via 172.12.123.1, 00:00:08, Serial0

We want R2 to place a call to R1 if either the loopback or Ethernet networks leave R2's routing table, but we don't want to have to depend on interesting traffic. That dictates the use of Dialer Watch.

First, configure the list of watched routes with dialer watch-list. Only one of the watched routes needs to leave the routing table for the ISDN link to come up. In this example, R2 will watch both routes from its OSPF routing table.

Be careful with this command. The entries here need to match exactly the routes and masks being watched. Dialer watch-lists use subnet masks, not wildcard masks.

R2(config)#dialer watch-list 5 ip 10.1.1.0 255.255.255.0

R2(config)#dialer watch-list 5 ip 1.1.1.1 255.255.255.255

Configure the dialer watch-group command on the BRI interface, AND frame map statements for the watched routes. As with dialer-list and dialer-group, the group number referenced in the dialer watch-group command must match the number assigned to the dialer watch-list.

The Dialer Watch configuration will not work without frame map statements for each watched route. I repeat this because this is the step a lot of people leave out.

R2(config)#interface bri0

R2(config-if)#dialer watch-group 5

R2(config-if)# dialer map ip 1.1.1.1 255.255.255.255. name R1 5557777 broadcast

R2(config-if)# dialer map ip 10.1.1.0 255.255.255.0 name R1 5557777 broadcast

To test Dialer Watch, the Serial0 interface on R2 will be shut down. Since we're running OSPF, the route table will be updated almost immediately and the ISDN link should come up right after that.

R2(config)#int s0

R2(config-if)#shut

01:12:47: %OSPF-5-ADJCHG: Process 1, Nbr 1.1.1.1 on Serial0 from FULL to DOWN, N eighbor Down: Interface down or detached

01:12:47: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up

01:12:48: %SYS-5-CONFIG_I: Configured from console by console

01:12:48: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, changed state to up

01:12:49: %LINK-5-CHANGED: Interface Serial0, changed state to administratively down

01:12:50: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to down

01:12:53: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 5557777 R1

Within five seconds, the ISDN link is up. show dialer verifies that Dialer Watch is the reason the line was brought up.

R2#show dialer

BRI0 - dialer type = ISDN

Dial String Successes Failures Last DNIS Last status

5557777 2 0 00:00:11 successful

0 incoming call(s) have been screened.

0 incoming call(s) rejected for callback.

BRI0:1 - dialer type = ISDN

Idle timer (120 secs), Fast idle timer (20 secs)

Wait for carrier (30 secs), Re-enable (15 secs)

Dialer state is data link layer up

Dial reason: Dialing on watched route loss

Time until disconnect 108 secs

Connected to 5557777 (R1) A final note regarding Dialer Watch ... it will not work with RIP, but will with all our other dynamic IGPs (IGRP, EIGRP, OSPF).

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

For a FREE copy of his latest e-books, ?How To Pass The CCNA? and ?How To Pass The CCNP?, visit the website and download your free copies. You can also get FREE CCNA and CCNP exam questions every day! Get your CCNA study guide from The Bryant Advantage!

Cisco CCNA / CCNP Certification Tutorial: Frame Relay End-To-End

2008-05-12T23:40:00.000-07:00

One of the first things you learned about Frame is that the LMI also serves as a keepalive, or a heartbeat - and if three consecutive LMIs are missed, the line protocol goes down. There's a limitation to LMI as a keepalive, though. The LMI is exchanged only between the DTE and the closest DCE. The LMI is therefore a local keepalive that does not reflect any possible issues on the remote end of the virtual circuit.

Taking the LMI concept to the next logical level, Frame Relay End-To-End Keepalives (FREEK, one of the least-heard Cisco acronyms for some reason) are used to verify that endpoint-to-endpoint communications are functioning properly.

What you have to keep in mind about FREEK is that each and every PVC needs two separate keepalive processes. Remember, with a PVC, there's no guarantee that the path taking through the frame relay cloud to get from R1 to R2 is going to be the same path taken to go back from R2 to R1. One process will be used to send requests for information and handle the responses to these requests; this is the send side. When the send side transmits a keepalive request, a response is expected in a certain number of seconds. If one is not received, an error event is noted. If enough error events are recorded, the VC's keepalive status is marked as down.

The process that responds to the other side's requests is the receive side.

This being Cisco, we've got to have some modes, right? FREEK has four operational modes.

Bidirectional mode enables both the send and receive process enabled on the router, meaning that the router will send requests and process responses (send side) and will also respond to remote requests for information (receive side).

Request mode enables only the send process. The router will send requests and process responses to those requests, but will not answer requests from other routers.

Reply mode enables only the receive process. The router will respond to requests from other routers but will initiate no requests of its own.

Finally, passive reply mode allows the router to respond to requests, but no timers are set and no events are tracked.

Frame Relay End-To-End Keepalive defaults:

Two send or receive errors must be registered in order for the VC to be considered down.

The event window size is three. The event window is the number of events considered by the router when determining the status of the VC. Therefore, using the defaults, two send or receive errors would have to be received within the event window of three events for the VC to be considered down.

The timer mentioned earlier - the amount of time a router waits for a response - is set to 10 seconds

Working with Frame Relay end-to-end keepalives is just one Frame skill you?ll need to pass the CCNP exams ? and I wouldn?t be surprised to see them on a CCIE exam. Know the details and you?re on your way to Cisco certification exam success!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

For a FREE copy of his latest e-books, ?How To Pass The CCNA? and ?How To Pass The CCNP?, visit the website and download your free copies. You can also get FREE CCNA and CCNP exam questions every day! Get your CCNA study guide from The Bryant Advantage!

Hertz Rent-a-Car in San Francisco

2008-05-11T23:01:00.000-07:00

I wanted to make a three-day car reservation for a visit to San Francisco.

I called Hertz Rent-a-Car, where I am a member of the ?Hertz Number One Club? for frequent travelers. I planned to use an award coupon for one free-day rental from American Airlines and additional award coupons for two more free days from United Airlines.

The telephone reservations officer provided impeccable service. She greeted me pleasantly, acknowledged me as a member of the Hertz Number One Club, confirmed my dates, flights, pick-up location and choice of automobile.

Then she asked me what time I would be returning the car after the first day of rental. ?I want the car for all three days,? I replied.

?You can?t keep the same car for all three days,? she asserted. ?After the first day you have to bring the car back and pick up a different car for the next two days. The first day is paid for with your American Airlines coupon, but the next two days are paid for with your United coupons.?

?So what?s the difference??, I responded. ?I am the same person, with the same Hertz Number One Club member. I am the rightful owner of both the award coupons, and I want a Hertz automobile for three consecutive days. Surely you will let me keep the same car, so I don?t have to come back to the airport in the middle of my Bay Area vacation.?

?That?s not the way our system works here, Mr. Kaufman,? she replied.

?But it should work that way, don?t you agree??, I asked, appealing to her sense of elementary logic, simple concern and practical customer care.

?I don?t make the rules here, Mr. Kaufman. I just follow them. What time will you be returning the car after the first day??

Somewhere within the heart of Hertz, a group of senior rule-makers live comfortably with their precise policy of ?one airline, one coupon, one car, no exceptions?.

But somewhere close to this customer?s heart lies frustration, inconvenience and incredible disbelief.

I?m not the type of customer who gives up in these situations. When my first ?one-day? reservation began, I had a long chat with the most senior Hertz rental manager I could find. He let me keep the same car for all three days.

Someone at Hertz Rent-A-Car was listening.

Key Learning Point
--------------------------------------------------------------------------------

Elementary logic and practical customer care are the best rules to use in many situations. At Nordstroms clothing store, famous for excellent service, they simply tell the staff: `The rule is to use your common sense. There are no other rules.'

Action Steps
--------------------------------------------------------------------------------

If your rules and regulations don't make sense to your customers, they need to be rewritten. If you can see logic where your customers cannot, it's not your customers' sight that needs refocusing.

Ron Kaufman is an internationally acclaimed educator and motivator for partnerships and quality customer service. He is author of the bestselling "UP Your Service!" and founder of "UP Your Service College". Visit http://www.UpYourService.com for more such Customer Service articles, subscribe to his Newsletter, or to buy his bestselling Books, Videos, Audio CDs on Customer Service from his secure Online Store. You can also watch Ron live or listen to him at http://www.RonKaufman.com.

Assume the Life of a Local in a San Francisco Vacation Rental

2008-05-09T22:46:00.000-07:00

Perhaps you live in a small town and you've always felt that something was missing; you'd like to know what it's like to enjoy a vibrant urban atmosphere if only for a little while. Or, you live in the suburbs of a large metropolis but hate all the driving that you have to do, not to mention the weather. Satisfy your yearnings by holing up in one of America's most colorful cities, ensuring an authentic experience by choosing to stay in a unique vacation rental rather than a hotel.

Not that there's anything wrong with hotels, but sometimes it's fun to try something different. Vacation rentals are definitely a change from the usual thing, considering that they come in all shapes and sizes and provide access to all different corners of the city. Depending on your personal taste and budget, you could end up in any number of charming, one-of-a-kind places that will add to your holiday in all kinds of ways.

For example, if a high rise apartment in the heart of one of San Francisco's funky neighborhoods, perhaps within walking distance to Fisherman's Wharf, Union Square or Lombard Street, sounds like your kind of set-up, this is perfectly possible. Choose a modern, stylish two-bedroom space in the heart of the city that not only looks out across the skyline and the bay, but connects you to a whole world of vacation opportunities. As you ride the elevator to your privileged perch high above the milieu, you might even allow yourself to pretend that this is your life; you are a San Franciscan.

This will be especially easy thanks to the little things your rental will provide. Shop for groceries at the corner market and fill your pantry, this will let you save money and feel super cozy at the same time as you and your companions fix a home-cooked meal after a day of sightseeing. Your comfortable bed, the big closets, plenty of towels and sheets, an entertainment center, wireless internet and all the other details will come together to create an experience you may not have been expecting. Within a couple of days, you feel totally at home.

If you'd prefer a larger spot, perhaps for the whole family, consider a house that sits near Golden Gate Park. A real yard, a driveway, and plenty of room for everyone to eat, sleep, and coexist peacefully will catapult this trip into the stratosphere. No more fighting over the remote control or arguing about sleeper sofas; this home away from home will create a sense of utter harmony and provide the perfect foundation for all city explorations. There are all sorts of restaurants nearby, including Thai, Indian, vegan and raw, but if the BBQ grill out back is calling out to the chef of the house, feel free to stay in for an evening of your own culinary design. Vacation rentals are all about choices, as you will soon see.

We all know that San Francisco isn't the cheapest place to live or visit, but there are ways to find good deals. Start researching early in order to snag a bargain vacation rental or a special offer, and ask around as far as activities go. Walking through the park, stumbling upon a hole in wall eatery in Chinatown and window shopping are all easy on the pocketbook, so be creative and you're sure to emerge from this trip with money still in the bank.

On that note, it's best to start now. Go online to seek out the San Francisco Vacation Rental that will best complement your upcoming trip and prepare to try a new lifestyle on for size, if only temporarily.

HomeAway.com will take care of all your vacation rental needs.

San Francisco Gets Serious About Arts Education

2008-05-09T00:19:00.000-07:00

The Arts Education Master Plan

September 28 was the beginning of a new era for arts education in San Francisco schools. The San Francisco Unified School district and the City are partnering on a historic effort to bring back the arts for all students. The Arts Education Master Plan will revitalize the education of San Francisco?s young citizens by capturing the diverse cultural and artistic energy of a city that is internationally renowned for its love of the arts.

At 10:30 a.m. at the San Francisco Performing Arts Library and Museum, Mayor Gavin Newsom, SFUSD?s Interim Superintendent Gwen Chan, and SF Arts Commission President P.J. Johnston joined members of the Board of Supervisors and SFUSD Board of Education, arts providers from across the city and students from Lowell High School, Claire Lilienthal and George Washington Carver Academic Elementary Schools in celebration of the Arts Education Master Plan.

"This master plan is a living document that exemplifies the partnership between the City and the school district on arts education," said Mayor Newsom. "San Francisco's efforts are unprecedented - and over the next few months, we will witness 'order of magnitude' changes in the arts education that children receive," continued the Mayor.

The Arts Education Master Plan is San Francisco Unified School District's blueprint for integrating the arts into each student's daily curriculum. The Plan calls for a sequential, comprehensive arts education program that reflects the high quality of San Francisco's artistic landscape in the areas of dance, drama, music, visual arts and literary arts.
The guiding principle of this plan is that all students deserve both access to and equity in arts education and each school community, no matter the neighborhood or academic emphasis, will be called upon to embrace the notion that every student must be provided with the arts as an integral part of the academic day.

Interim Superintendent Gwen Chan said ?In San Francisco, we are committed to providing every student with a well-rounded education. For too many years, some students have not had opportunities to develop artistic literacy. Every school and every student will benefit from this plan.?

Community Involvement

The Master Plan reflects the views of more than 1,500 students, parents, teachers, administrators, arts providers, and civic and business leaders. Proposition H approved by San Francisco voters in 2004, became the catalyst, making the Arts Education Master Plan, completed in August 2006, a funded mandate. The extensive increase in arts education spending, programming, support and resources that the Plan recommends will be funded largely by Prop H funds. Additional funding, such as the new State funding for the arts, will be aligned to the Arts Education Master Plan.

The new plan will hopefully keep San Francisco school students in touch with the vibrant artistic community around them and help them to take advantage of the many enriching opportunities for art in the classroom and beyond. San Francisco schools are ready to implement the new curriculum program at all levels to ensure a consistent and fulfilling learning experience for all students. Students, parents, and teachers at San Francisco schools are confident that the Arts Education Master Plan will mark their community as one committed to continued arts education.

Stacy Andell is a staff writer for Schools K-12, providing free, in-depth reports on all U.S. public and private K-12 schools. For more information on San Francisco schools visit http://www.schoolsk-12.com/california/san-francisco/index.html

San Francisco Group Travel Guide

2008-05-08T00:05:00.000-07:00

San Francisco's abundance of museums, outdoor activities and culturally diverse neighborhoods combined with a yearlong temperate climate make the city the ideal destination for group meetings and large conventions. Its no wonder tourism has become San Francisco's largest revenue generator - the city isn't too far from being perfectly well-rounded. San Francisco has previously shown strength in four travel industry sectors: commercial, meeting and group, and leisure. In the early 1980s, many large corporations left San Francisco because high-operating costs threatened profitability.

Time permitting, your group will get the best grasp of contemporary San Francisco by visiting as many of the city's neighborhoods as possible. Alamo square, Chinatown, Fisherman's Wharf, Mission District and Pacific Heights should not be overlooked, nor should Nob Hill, Richmond District or Sacramento Street. The city's progressive nature is underscored when the food, arts and culture of these places come together to form such an admirable whole, and there's certainly no danger of your group being at a loss for entertainment.

Know More About: San Francisco Group Travel Guide

Get More Information On: Group Travel Guide

San Francisco- Fisherman's Wharf

2008-05-07T04:41:00.000-07:00

After truly leaving my heart in San Francisco, we visited again a year and a half later. This time we opted to stay right on Fisherman's Wharf. This we found to be just as, if not even more, enjoyable as staying on Union Square. We booked through the Radisson at Fisherman's Wharf and were very happy with it. I had read mixed reviews about it. Some people were so unhappy that they switched hotels the second night. I found no validation for this. The staff was awesome, the location couldn't be beat. I'm not really sure nor do I remember why they didn't like it but oh well, I'm glad it didn't deter me. I've written before about San Francisco stating that we don't rent a car when there, well, we didn't this time either and again I found no reason to. I suppose if you were to drive up into the Wine Country from there you would need one for that but once again we were on our way to Hawaii and only had a few days in the city. We found plenty to do right there. A must see is Pier 39. Actually you hear it before you see it. The most awesome sea lions all basking, playing and barking if you will, just waiting for you to snap their picture. The food and shopping is nice too. We ate at Bubba Gump's and had excellent service. We took the Alcatraz tour one day and have added this to the must see list as well. The particular day we went, it was rainy and grey. (Not an unusual day out there I hear.) Truthfully that only added to the ambience of the infamous Rock. Definitely get the headsets that point out interesting tidbits about the prison. Take your time there and make sure to take in the short cinema they have. It is all so very interesting. You won't be disappointed.

Book your stay at great SanfranciscoHotels or find LowAirfare and deals on Lastminutetravel online.

George Quick, San Francisco-based Performance Coach, Launches Website

2008-05-05T23:36:00.000-07:00

San Francisco, California, September 1, 2006 ? a San Francisco-based performance coach who coaches actors, singers, executives, etc., has launched his website at www.performancecoachsf.com. George Quick, a San Francisco theatre director and actor, who most recently directed Jay Kuo?s new hit musical Insignificant Others, at San Francisco?s New Conservatory Theatre Center, has been performing and directing in San Francisco since 1979. Earlier this season he appeared in the role of Kenny in the west coast premiere of Richard Kramer?s Theatre District also at The New Conservatory Theatre Center. Besides coaching singers on the technical aspects of vocal production and acting a song, Mr. Quick works with actors who want to improve their casting possibilities, executives who need to make a speech and even realtors working on improving their sales techniques.

George Quick has been a professional actor since 1975. During the late 1970s, he studied at The American Academy of Dramatic Arts, in New York. George began his directing career in 1992. Over the past twenty years, he has coached singers, actors, dancers, clergy, executives, lawyers and sales professionals, using performance, presentation and vocal techniques, together with tools for creating more satisfying interactions, whether in a large auditorium, a conference room, a cabaret, a recording studio, a sanctuary or one on one. Mr. Quick?s students at the high school level have consistently garnered top honors at local, regional and national speech competitions.

George began working as an actor and a musician during the 1970s at Knott?s Berry Farm?s Birdcage Theatre. Quick says, ?at that time, we did six shows a day and before each show we would ?pitch? the show around the park to get people to come to each performance. Very old fashioned street corner barking in teams of two. This one task, repeated half a dozen times each day, taught me self-confidence (and unrepentant salesmanship). We had fun getting people to come see the show while we gave them an idea of how fun the show itself was going to be. We also had to learn to use our voices properly, since in addition to hollering on the street corner, we performed the show six times per day!?

After studying at the American Academy of Dramatic Arts in New York, George Quick came back to California where he appeared in numerous plays and musicals in the San Francisco Bay Area from 1979 to 1983 -- such award winning original productions as Marco Polo and Berlin 1932; while working as a cabaret singer in San Francisco and Los Angeles. As an actor, George appeared in many productions throughout Southern California from 1983 to 1996. In 1993, he became the founding executive director of The Musical Theatre Company in Orange County, California where he produced, directed and performed in many musical productions including of Man Of La Mancha and Sunday In The Park With George (garnered him a Drama-Logue Award for best performance in a musical). Meanwhile, he continued his private coaching while directing critically acclaimed productions of The Music Man, Sweeney Todd and A Little Night Music, among others. In 1997, George returned to San Francisco, continuing his acting and directing career. In addition to such productions as the west coast premieres of The Harvey Milk Show (he played Harvey), A Man Of No Importance (director) and A New Brain (director), he has directed or acted in Chess, Passion, and Key West at The New Conservatory Theatre Center, where he served as Managing Director from 2000 to 2004. In 2004, he filled in as the Business Representative for the San Francisco office of Actors? Equity Association for about one year. George is currently directing the upcoming workshop production of Jay Kuo?s newest musical Homeland for a very limited engagement in December here in San Francisco.

?Within the past several years it has dawned on me that performing - acting and singing - hold even more significance for life than I previously thought,? says Quick. ?While I?ve always realized the value of teaching acting and speech techniques to executives and sales professionals, etc., as well as to actors and singers; there is something more to it than that ? these skills of story telling, letting go of the result and living in the moment are essential skills for living a fully realized life! I?ve started this business to discover where those ideas can take my clients and me in the months and years to come. I think we can make a big difference in the world.?

Mr. Quick accepts students of all kinds and has prices to fit all budgets, including special rates for sessions purchased in advance and full-time student discounts. To find out more about his performance coaching, pricing or to schedule an appointment, Mr. Quick recommends that people visit his website at www.performancecoachsf.com to get a more detailed look at his coaching practice.

George Quick is a San Francisco based performance coach. George has been a professional actor for over 30 years, a performance coach for 15 years and a professional theatre director for more than 10 years. George is a voice coach, executive speech coach and an acting teacher.

How to Find San Francisco DUI Lawyer

2008-05-03T01:03:00.000-07:00

DUI or Drunk Driving offense in San Francisco is considered a criminal offense. The legal proceedings can be long wounded. Sometimes the person arrested under dui, himself/herself makes things more complicated by telling or saying things which are not in the interest of the case in hand and the same statements can be used as an evidence against him/her in the court as and when the matter goes for trial.

Anyway without wasting time, I will begin with San Francisco DUI Lawyer. But before that let us discuss San Francisco Dui laws so that the role of San Francisco DUI Lawyer can be understood more clearly and easily.?

As per San Francisco DUI Law if you are arrested on suspicion of DUI in San Francisco first thing, your Driver's License will be confiscated by the police offer making the arrest. Make sure within ten days you request a hearing in the Motor Vehicle Department so that you can get a temporary driver's license. If you don't request a hearing within the given period of time your Driver's License will be automatically suspended. Remember you have only ten business days to request a hearing.?

Like I informed you earlier its considered a criminal offense and can have severe outcomes like heavy fines, increased insurance cost and possible jail time besides community service and Alcohol Reduction Risk Course. People have lost their jobs because of dui arrests. Your life goes out of gear for being caught driving under influence even once.

While hiring a San Francisco DUI Lawyer you should make sure that his/her area of practice is exclusively DUI and not general. Expertise of a San Francisco DUI Lawyer will be far greater and sharper than a general lawyer. He will have a better insight and understanding about the subject and progress of your case. He/she will build and develop the case in your favor right from the day he/she is hired.?

An effective San Francisco DUI Lawyer firm will be well supported by technical staff. Technical staff like people who know about the intoxilyzer machine, accuracy of Blood Alcohol Content test and about credibility of various machines used to perform these road side tests.?

One can also look at the past records of San Francisco DUI Lawyer he/she intends to hire. Ask him questions. Take free consultation. See if you can vibe. Its important. See if your dui lawyer is ready to make a contract. Is he/she ready to put everything in writing?? These are some of the basic points to consider while hiring San Francisco DUI Lawyer

Purva Mewar operates two dwi/dwi attorney websites. How to find a suitable San Francisco DUI Lawyer and Austin DWI Attorney. Read about laws related to dui/dwi in various states in the US and learn how to find a competent dui/dwi lawyer.

San Francisco Web Development

2008-05-01T00:14:00.000-07:00

A bad website is a deterrent to a website visitor and he leaves the website as soon as he visits the website. The main culprits of a bad website are bad web design, bad navigation and irrelevant content. If you have a website your primary objective is to attract target customers to your site. A website design company provides a professional touch to the website design. A professional web design company is equipped with the proper tools and relevant experience to design a website that is powerful as well as effective. The company insures that expert professionals do the job so as to provide quality and creativity of the website. It is necessary that the content of the website is written in a manner which attracts the right kind of attention from the target audience. The content should be search engine friendly, without any spelling and grammatical errors. The web content should be able to attract the target audience's attention and convey the message that the website wants to give and be consistent. #10 is a San Francisco web development company that provides efficient web design services and offer a slick, sweet and user friendly website. The main reason why you should employ a web design company is that it offers a cost effective solution to the client. As a client you get easily accessible website that has high search visibility. The website is visually attractive with relevant content and has all the requisite links to the main content. A good content should answer the visitor's queries about the product or service which the website is advertising. #10 is the perfect company for development of web in San Francisco as it offers web design and development services to the client. The company offers web design solutions that emanate character and professionalism. As a client your feedback and inputs are taken into account through the whole designing process. #10 makes sure that your website stands out among the plethora of competitor's websites. The good website attracts quality website traffic and a visitor who stays and explores the site, as they find the site interesting and attractive enough. Web development San Francisco services include a wide variety of promotion and marketing strategies. Long term maintenance and innovation are the two worthwhile qualities of the ecommerce solutions provided by #10. Visit the site www.web-design.nr10.com to get a search engine optimized and user-friendly navigation website.

Tom is a well known author and has been writing content for web design site for so many years. His content is worth reading as it gives you an insight about different web design. For more information visit www.web-design.nr10.com

Romantic

2008-05-01T00:11:00.000-07:00

San Francisco is one of the most romantic cities to visit in California. There are a number of things for couples, both young and old, to see and do in the city. In this article, we will go in depth and cover some of the best romantic spots and attractions that San Francisco has to offer. We will also take the time cover some of the area?s finest restaurants.

Part 1: See the City

When anybody comes to a new city for a vacation, the first thing that they want to do is see the city and take in all the sights and sounds it has to offer. In the case of San Francisco, there are a number of world famous tourist attractions, such as the Golden Gate Bridge or the Alcatraz Prison (maybe not the most romantic spot, but a very interesting visit regardless) that you should take the time to see. A must stop location for all couples who visit the city is Fisherman?s Wharf. The area is the number one travel destination for those looking to relax in a lively atmosphere filled with street music and entertainment, shopping, and casual dining. A walk along the Wharf and the various piers during sunset is one of the most romantic things you can do in the city. Also, be sure to take a ride in the cable cars that will help you get anywhere you need to go around the city quickly. These cable cars cannot be found anywhere else in the world.

When in the Bay Area, no trip is complete without taking the time to visit the Golden Gate Bridge. The bridge features a parking lot?many couples will park and take a long walk along the sidewalks. If you do plan on walking the bridge, be sure to bring a jacket as it is often colder and much windier on the bridge, than it is in the city. There are also a good number of both biking and walking tours that will take you around the city and across the Golden Gate Bridge.

Part 2: Dining

San Francisco is very well known for the number of top notch restaurants it offers. Since we can?t possibly touch on all of them, we will briefly mention a few of the most popular ones. Cote Sud is a great restaurant to enjoy French cuisine and was voted the best French restaurant in the Bay Area in both 2004 and 2005. A. Sabella's Seafood and Steaks is another top restaurant in the area and is perfect for any seafood lover. A Sabella?s was voted the best restaurant in Fisherman?s Wharf by the San Francisco Chronicle and is a great place to go for a romantic night out.

San Francisco is a wonderful city for couples to visit and is thought by many to be one of the most romantic places on the West Coast. There is a lot to do and see, but the whole environment is laid back and the weather is just perfect all year round, so be sure to spend a lot of your time outdoors just walking through the city, resting on one of the area?s many sandy beaches, or taking in the sites and sounds San Francisco has to offer.

Ron Zvagelsky has a degree in Business Administration from the University of Southern California. He graduated Magna Cum Laude in May 2006. He is currently the Chief Executive Officer of PlanJam.com -- where you can find romantic date ideas in San Francisco.

Choosing a San Francisco Dental Insurance Plan

2008-04-08T01:54:00.000-07:00

Choosing a San Francisco Dental Insurance Plan

In the United States, there are a large number of Americans who are without dental insurance. Dental insurance is often the key to obtaining professional dental care. Without it, many are unable to afford a trip to the dentist. If you are currently without dental insurance, whether your employer does not offer it or if you are unemployed, you may want to consider obtaining your own dental insurance plan.

Before you can go out and purchase a dental insurance plan, there are a number of different factors that you should consider. Where you live is one of those factors. Where you live may have an impact on the dental insurance companies in which you are able to do business with. For instance, if you live in or around the San Francisco area, you will want to consider doing business with a San Francisco dental insurance company. A San Francisco dental insurance company is defined as a company that either operates out of the area or services it.

If you are currently unfamiliar with at least one San Francisco dental insurance company, you will need to start familiarizing yourself with all of your available options. To learn about dental insurance companies in the San Francisco area, you are advised to either pick up your local phone or use to internet to do the research. Whether you use your local phone book or the internet, you should easily be able to obtain the contact information of at least one San Francisco dental insurance company.

Once you have found a dental insurance company that you would like to do business with, you will then have to decide on a San Francisco dental insurance plan. You will find that most insurance companies have a number of different available plans for you to choose from. Sometimes there are so many San Francisco dental insurance plans to choose from that you may not know which one is right for you. Before officially choosing a San Francisco dental insurance plan, you are advised to research and examine each plan.

If, after examining each San Francisco dental insurance plan that is available, you are still unable to make a decision, you may want to consider seeking assistance from a dental insurance representative. Most dental insurance representatives would be more that willing to assist you with understanding which plan is the best one for your needs. However, before that assistance can be offered, you may need to provide your insurance representative with a little bit of background on yourself, your family, or your health.

Regardless of which San Francisco dental insurance plan you choose, you can still benefit from having one. All dental insurance plans, no matter how much or how little they cover, should be able to offer you assistance. Instead of having to suffer through another toothache or pay for your own dental work, you are encouraged to at least consider obtaining dental insurance. If you have never had dental insurance, you may be surprised with just how much money you can save.

Ashton Skylar is a writer for Free Insurance Quotes 4 You.com where you will discover great information on San Francisco Dental Insurance Plan and other related information.

Hiring a San Francisco Moving Company: What to Consider

2008-03-30T22:09:00.000-07:00

Hiring a San Francisco Moving Company: What to Consider

Moving is becoming a fact of life. This is because a large number of individuals make the decision to move, each year. If you are planning on relocating now or in the near future, you may want to think about using a professional moving company. If you are planning on moving to or from the San Francisco area, you may want to hire the services of a San Francisco moving company.

When it comes to hiring the services of a San Francisco moving company, it is easier said than done. Unfortunately, there are too many individuals who feel that it is easy to hire a professional mover. While this may be true, you should not hire the first San Francisco moving company that you come across. Instead, you are advised to examine all of your available options. This includes researching and examining a number of different San Francisco moving companies. This research may take some time, but, in most cases, you will find that it pay offs in the end.

When it comes to researching and examining San Francisco moving companies, there are a number of different methods that you could use. One of those methods involves contacting the San Francisco moving company that you would like more information. This can easily be done by contacting the moving company directly. To do this, you will need to acquire the moving company's contact information. Once you have obtained that information, you are advised to place a phone call to their main office.

In addition to directly contacting the office of a San Francisco moving company, you should also be able to research and examine that company by visiting their online website, if they have one. To find the website of a professional moving company, you will want to perform a standard internet search. If that company has an online website, that website should appear in your search results. Once you are at the website of a San Francisco moving company, you should be able to find important information. If you have any additional questions, you should be able to email or call the moving company for answers.

When examining a San Francisco moving company, you will want to determine exactly how much their service will cost. To obtain the exact cost of service, you may need to offer a little bit of information. That information should include how much stuff you have to move and where you plan on moving to. If you do not know how much you are bringing with you or where you plan on moving to yet, you may want to wait until you have that information. Without this detailed information, you may only be provided with an inaccurate estimate.

It is also important to consider the services that are offered by the San Francisco moving company of your choice and the amount of time it will take them to move you. These factors are all important, especially when it comes to finding a reputable San Francisco moving company to do business with.

Ted Garvin is a writer for Froggy Moving.com where you can find the best San Francisco Moving Company around, and other related information

Cisco CCNP Certification Exam Tutorial: Making The Most Of Cisco's CCNP Program Changes

2008-03-28T22:15:00.001-07:00

Cisco has announced major changes to the CCNP program. Learn how to benefit from these changes and make a plan for exam success from Chris Bryant, CCIE #12933.

As you probably know by now, Cisco's making some sweeping changes in their Cisco Certified Network Professional (CCNP) program. Two longtime exams are being retired at the end of the year, two are being revised, and two new exams will be making their debut in late 2006.

If you're currently working on the CCNP or even thinking about it, the one thing you must NOT do is postpone your studies. On occasion, some certification exam candidates postpone their studies when they hear of an exam change. Cisco has announced these CCNP changes well ahead of time, and you've got plenty of time to pass some CCNP exams by the end of the year - and they still count toward the CCNP!

Let's take an exam-by-exam look at the current and future CCNP programs.

The BSCI exam is being updated, with the current exam being retired at the end of 2006.

The BCMSN exam is being updated, with the current exam being retired at the end of 2006.

The BCRAN exam is being retired at the end of 2006, and it will be replaced by the Implementing Secure Converged Wide Area Networks (642-825) exam.

The CIT exam is being retired at the end of 2006, and it will be replaced by the Optimizing Converged Cisco Networks (642-845) exam.

Any CCNP certification exam you take by the end of 2006 does count toward your CCNP, so there is no reason to postpone your studies. You never get anywhere by waiting!

The one thing you can't do is take the current exam version and then take the new one and have both count toward the CCNP. The CCNP has a three-exam path and a four-exam path, and here are the four exam qualifications you must fulfill to become a CCNP with the four-exam path:

Current BSCI (642-801) or Revised BSCI (642-901)

Current BCMSN (642-811) or Revised BCMSN (642-812)

Current BCRAN (642-821) or New ISCW (642-825)

Current CIT (642-831) or New ONT (642-845)

If your choose the three-exam path, just replace the first two exams shown above with the current Composite exam (642-891) or revised Composite exam (642-892). Cisco expects to release the revised Composite exam in November 2006.

Whether you choose to finish your CCNP in 2006, or start now and finish in 2007, hit those books! Never let exam version changes slow your studies - the only way to progress is to move forward!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage (http://www.thebryantadvantage.com).

For a copy of his FREE "How To Pass The CCNA" or "CCNP" ebook, visit the website and download your copies! Daily exam questions and tutorials now available through RSS feed!

Cisco CCNA / CCNP Home Lab Tutorial: The 2520 Router

2008-03-28T22:13:00.000-07:00

Choosing where to begin with your Cisco CCNA / CCNP home lab is tough! Learn all about the 2520 and its various uses in a Cisco lab from Chris Bryant, CCIE #12933.

I hear from CCNA and CCNP candidates every day, and the most common question is "What routers and switches should I buy for my home lab?" There is no one right answer to this question, since every test candidate has a different budget. There are also CCNA candidates who want to go on to the CCNP and want to know what routers and switches are best for future study. Again, there's no one right answer, but there are routers that fit every budget and every study plan - and the Cisco 2520 router is the king of home study labs.

The 2520 has four serial ports, one ethernet port, and a BRI port. You can use a 2520 as a frame relay switch, and still have ports to spare to practice routing protocols and directly connected serial interfaces. I know ISDN home simulators are still expensive if bought new, but you can get a used one on eBay and go from there. Even if you choose not to buy an ISDN simulator now, the 2520 gives you that opportunity for future home lab growth - and "planning for future growth" is important when it comes to your home lab as well as production networks!

2520s are also remarkably affordable. Check your favorite online auction site for prices. You may also want to search on the phrase ?frame relay switch?.

I know that getting started on your Cisco home lab can be a little scary, but it's a vital part of being totally prepared to pass the CCNA and CCNP exams. Hands-on work is imperative in learning any skill - after all, great chefs don't learn to cook on kitchen simulators! Visit online auction sites and used Cisco equipment resellers and see what's out there - and if you're wondering where to start, the 2520 is a great way to start building your own Cisco home lab!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage (http://www.thebryantadvantage.com).

For a copy of his FREE "How To Pass The CCNA" or "CCNP" ebook, visit the website and download your copies! Daily exam questions and tutorials now available through RSS feed!

San Francisco Uses Weighed Student Formulas to Track School Needs

2008-03-27T22:04:00.000-07:00

What Weighted Student Formulas Do

One of the primary features of the WSF is that it allows San Francisco Schools more flexibility than the previous system, called the "staffing ratios" model. Through staffing ratios, the central office basically directed school sites to spend the bulk of their resources in a particular way, through allocations of staff and a small supplies budget. This system gave schools little control over their financial resources. Under the WSF, each school site receives a budget denominated in dollars instead of positions and decides what staff and non-staff items to purchase with those dollars. Under this approach, each school has more room to design and use innovative instructional programs that match the specific characteristics and needs of its students, parents, and community. Central administration helps and monitors schools in a number of important ways, but it shares more decisions with principals and local school governance teams called School Site Councils--the people who are most familiar with what their schools need.

Resources are also distributed based on the specific needs of each SFUSD student. We all know that different students have different educational needs, which often mean educational services with different price tags. A student with special education needs or a student who does not speak English requires more than a native speaker of English with no special education needs. Some schools enroll students from family backgrounds with lower incomes who on average start school at a disadvantage compared to students from middle class or affluent families. The new formula reflects these needs by channeling funds to specific student characteristics such as grade level, special education needs, needs of English Language Learners (ELL's), and socioeconomic status.

Finally, the WSF distributes basic education resources more consistently on a per-pupil basis across schools, and all stakeholders are better able to see and understand how resources are allocated and spent in each school. Did you know how much each student at each school received under the old budget system? Did you know whether or not one school received a higher share of public resources than others? The WSF makes the largest part of the District's budget more transparent. The public can now see exactly why each school gets the resources it does and that the school is being treated like every other school in the District following a common set of principles.

What Do Schools Do

Schools' added responsibilities primarily involve developing their budgets and school academic plans. Each school's principal and School Site Council discuss their school's needs, challenges, and priorities and build its budget accordingly for the upcoming school year. They determine the number of each type of staff they need as well as their non-staff requirements. During the year, schools can revisit their original decisions by requesting budget transfers. This requires ongoing evaluation of how the original plan is working out. In short, giving schools more flexibility means more responsibility. But these are responsibilities that will build dialogue and awareness among more members of each school community - especially responsibilities to think creatively and in many cases to make different choices than the central administration may have made for them previously.

To make this initiative work, principals and site teams have needed training and technical assistance. School Site Council members have of course needed information on a number of questions -- about developing an academic achievement plan, financial management, how to include local teams in decision-making, or simply how to use the software to build their budgets. The District sees building the capacity of principals and School Site Councils as crucial to the successful implementation of a WSF and has offered training and vehicles for technical assistance through each step of the WSF process. Additional training and outreach to School Site Councils will continue to be provided and refined in the future.

Stacy Andell is a staff writer for Schools K-12, providing free, in-depth reports on all U.S. public and private K-12 schools. Stacy has a nose for research and writes stimulating news and views on school issues. For more information on San Francisco schools visit http://www.schoolsk-12.com/California/San-Francisco/index.html

San Francisco 49ers Preseason

2008-03-26T23:05:00.000-07:00

In less than a couple weeks the San Francisco 49ers will be playing their first game of the season at Arizona but their defense is still unstable regarding aspects as scheme and personnel.

49ers coach Mike Nolan said during a conference call last Sunday that he is still distressed by the lack of a pass rush and shoddy tackling that have been palpable in consecutive exhibition losses. This includes the preseason game against the Dallas Cowboys were they defeated the San Francisco 49ers 17-7 at the Texas Stadium on Saturday night.

San Francisco's coach said that the tackling problems were especially evident in the linebacking corps and he would do whatever was necessary to solidify the unit.

The "Niners" opened with a 4-3 scheme against Dallas having football rookie Melvin Oliver lining up at defensive end replacing Brandon Moore the injured left outside linebacker, who missed the game because of a knee strain. However Moore will be moved back inside and resume competing for playing time with linebackers Jeff Ulbrich and Derek Smith.

According to Nolan, it isn't clear either if Tony Parrish will recover his starting job as strong safety after coming back from a leg fracture that left him out of the last seven games played in 2005.

Seven players were waived by the San Francisco 49ers last Sunday with the intention of trimming their roster to 75 players. This list includes: rookie tight end Onye Ibekwe, tackle Jerry DeLoach, linebacker Renauld Williams, cornerback Gabe Franklin, kickers Andrew Jacas and Luis Berlanga and wide receiver C.J. Brewer.

The 49ers must reduce the roster to the season-opening limit of 53 by Saturday.

Julie Smith is one of the most recognized copy writers on Sports Betting and currently writes for Instant Action Sports. Feel free to reprint this article in its entirety on your site, make sure to leave all links in place and do not modify any of the content.

San Francisco And Romance

2008-03-26T23:00:00.000-07:00

If you're looking for a romantic vacation or honeymoon, perhaps you should consider visiting San Francisco, California. This great city offers a little something for everyone in addition to some very romantic destinations. There have even been songs about how romantic San Francisco is. Tony Bennett left his heart there if memory serves and who could resist a view of the Golden Gate Bridge when there's a full moon?

San Francisco has been designated one of the most romantic cities in America don't you think it's time your found out why? It could have something to do with the climate, the beautiful Golden Gate Bridge, the many beaches around that are great for talking long walks at sunset or the many parks in the area where romantic couples can walk together, hike, bike, and simply enjoy being together. In addition to activities such as this, there are other ways in which to enjoy the great outdoors of San Francisco as a couple. You could take a sunset cruise in the San Francisco bay is you want to make a very romantic night of it.

If you want to have a truly romantic experience you could schedule a couples massage at one of the many day spas in the area. This is an experience that neither of you would be likely to forget anytime soon. While there are spas across the country, there are quite possibly as many spas as there are Starbuck's in the city of San Francisco so you can be a lot more selective in the one you choose.

Another romantic thing to do while vacationing in San Francisco is to tour the various vineyards in the area. While San Francisco is not literally part of wine country, it is only a stone's throw away from some of the most famous vineyards in America. It would be a literal sin to come so close and not tour these American legacies. Check with the wineries you want to visit ahead of time, as some require appointments for tours. Rest assured that visiting the beautiful countryside and enjoying the tasting of various wines will make for quite the romantic outing. Be sure to taste responsibly.

Still need some romantic activities? Try a picnic in Golden Gate Park. After your picnic, perhaps you can rent a rowboat and take a trip around the lake or bicycles. Use your imagination and let your sense of romance rule the day. Walk into a flower shop and buy every daisy in the store (that may be a little dramatic, but you get the picture). The most romantic things that have ever happened in my life, were not planned, they were spur of the moment gestures that touched me far more than any contrived venture ever could.

Take your loved one to the Equinox, which is a revolving restaurant and bar at the top of the Hyatt Regency Hotel. While the dining experience can be pricey, the spectacular view will take some of the sting out of the meal. Besides is there really a price that is too high to pay for romance?

If either of you have the slightest interest in art, San Francisco is full of museums and galleries that should appeal to your artistic nature and provide plenty of topics for discussion. Even if you aren't a fan of traditional art, you may actually surprise yourself by liking the art you find in this diverse city.

Any trip to San Francisco would have to be determined to be a romantic dud if it didn't include a trip to either Fisherman's Wharf, China Town, or Little Italy. These areas provide great food, beautiful and interesting sites, as well as a taste of cultural diversity that is hard to find in this day and age. It would be like traveling to New Orleans and not visiting the French Quarter. I whole-heartedly recommend devoting one entire day of your trip to one of these places if not each of them. Fisherman's Wharf is by far my favorite to visit for the sights and sounds, but both China Town and Little Italy have great things to offer as well. Plus, the food is too good to pass on without at least giving it serious thought.

Romance is a state of mind; it's just much easier to get to that mental place in a city like San Francisco. Take a trip with your beloved and see what all the talk is about.

123 San Francisco Central has been providing information and resourses for people online who are looking for more information on San Francisco.... For more information on San Francisco visit: http://www.123sanfranciscocentral.com/san-francisco

Cisco / Microsoft Computer Certification: Be Ready For Your Opportunity

2008-03-24T22:53:00.000-07:00

If you're in Information Technology or want to break in, you've got to be ready when opportunity comes along - and you do that by planning ahead and working today. Learn how from Chris Bryant, CCIE #12933.

I was reading The Big Moo: Stop Trying To Be Perfect and Start Being Remarkable this morning, and I?d recommend a copy of this to anyone who wants to improve their career and their future. And that?s all of us, right?

There was one particular line that really stood out to me: Betting on change is always the safest bet available. That describes life perfectly, but it also describes a career in Information Technology perfectly as well. There is no field in the world that has the constant and never-ending changes that IT does. And every single one of us can look at this as a massive opportunity for personal and professional growth.

Is that how you?re looking at it? I remember when I passed my first certification exam back in 1997. Man, I thought I knew it all then! But I quickly learned that you?ve got to keep learning in IT. I also learned that if you?re willing to put in the work and make the sacrifices, there?s no other field with the limitless potential for growth and excellence.

Like everyone else, my career has had its ups and downs, but I always kept learning and growing. Today, I?ve got my dream job, working with students and customers just like you ? to help you create your own future.

The next 18 months are filled with endless possibilities, particularly with the rapid growth of VoIP and Microsoft Vista on the horizon. There will be those who rationalize their inertia, saying ?I?ll never have to support those, so I don?t need to learn them."

There will also be those who see VoIP and Vista as enormous opportunities to learn and advance in their careers and their lives. These people will get started today, learning the fundamentals of Cisco and advancing their networking knowledge in order to be ready for opportunities as they come along.

You can?t start studying and learning when the opportunity arrives ? you?ve got to be ready when opportunity knocks. If you?ve been putting off studying for a Cisco or other computer certification ? and I know the summer is a really good time for putting off studying ? get back on track today.

Because you never know what opportunities are going to come along ? but you do know that when they do, you?ve got to be ready to take advantage. After all, opportunity really does knock only once!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage , home of free CCNA and CCNP tutorials! Pass the CCNA exam with Chris Bryant!

Cisco CCNA / CCNP Certification Exam Tutorial: Troubleshooting EIGRP

2008-03-23T22:22:00.000-07:00

Part of becoming a CCNA and CCNP is learning what to look for when you're troubleshooting. Learn how to debug and troubleshoot EIGRP with Chris Bryant, CCIE #12933.

Part of earning your CCNA and CCNP - especially passing the difficult CIT exam - is becoming a master network troubleshooter. Today, we'll take a look at troubleshooting EIGRP and spotting common errors.

Most adjacency issues are easily resolved - mistyped IP address, bad wildcard mask in the neighbor statement, mistyped EIGRP AS number, and so forth. You know the AS number has to match, but always double-check that. Next, check the wildcard mask to make sure the correct interfaces are EIGRP-enabled. In the following example, we've configured three loopbacks on R2 and want to advertise all three loopbacks via EIGRP, but R4 only sees one.

R2(config)#int loopback1

R2(config-if)#ip address 10.1.1.1 255.255.255.0

R2(config-if)#int loopback2

R2(config-if)#ip address 10.1.2.1 255.255.255.0

R2(config-if)#int loopback3

R2(config-if)#ip address 10.1.3.1 255.255.255.0

R2(config-if)#router eigrp 100

R2(config-router)#no auto

R2(config-router)#network 10.1.1.0 0.0.0.255

R2(config-router)#network 172.12.23.0 0.0.0.255

R4#show ip route eigrp

10.0.0.0/24 is subnetted, 1 subnets

D 10.1.1.0 [90/409600] via 172.12.23.2, 00:00:25, Ethernet0

We know it's not an adjacency issue, because R4 has to have an adjacency to get the route. Perhaps the config on R2 is the problem.

R2(config-if)#router eigrp 100

R2(config-router)#no auto

R2(config-router)#network 10.1.1.0 0.0.0.255

R2(config-router)#network 172.12.23.0 0.0.0.255

The only one of the three networks that matches that network statement is 10.1.1.0 /24. As a result, the networks 10.1.2.0 /24 and 10.1.3.0 /24 will not be advertised.

We could use a network statement with 10.1.0.0 0.0.255.255 to successfully advertise the loopbacks, but by breaking the three networks down into binary, we can see that the three networks have the first 22 bits in common. Therefore, a better wildcard mask to use is 0.0.3.255.

R2(config-router)#no network 10.1.1.0 0.0.0.255

R2(config-router)#network 10.1.0.0 0.0.3.255

R4#show ip route eigrp

10.0.0.0/24 is subnetted, 3 subnets

D 10.1.3.0 [90/409600] via 172.12.23.2, 00:00:36, Ethernet0

D 10.1.2.0 [90/409600] via 172.12.23.2, 00:00:36, Ethernet0

D 10.1.1.0 [90/409600] via 172.12.23.2, 00:00:36, Ethernet0

Another factor that must match between potential EIGRP neighbors is the K-metrics, or metric weights. Let's change the EIGRP metric weights on R2 and watch the effect on its adjacency with R4.

R2(config)#router eigrp 100

R2(config-router)#metric weights 0 1 2 3 4 5 ?

03:33:18: %DUAL-5-NBRCHANGE: IP-EIGRP 100: Neighbor 172.12.23.4 (Ethernet0) is down: metric changed

03:33:20: %DUAL-5-NBRCHANGE: IP-EIGRP 100: Neighbor 172.12.23.4 (Ethernet0) is down: K-value mismatch

The adjacency goes down, and the router's kind enough to tell you that it's the result of the metrics changing. We'll also see that message on R4, but just in case you don't see it, debug eigrp packet will indicate the K-value mismatch as well.

R4#debug eigrp packet

EIGRP Packets debugging is on

(UPDATE, REQUEST, QUERY, REPLY, HELLO, IPXSAP, PROBE, ACK)

3w2d: EIGRP: Received HELLO on Ethernet0 nbr 172.12.23.2

3w2d: AS 100, Flags 0x0, Seq 0/0 idbQ 0/0

3w2d: K-value mismatch

3w2d: %DUAL-5-NBRCHANGE: IP-EIGRP 100: Neighbor 172.12.23.2 (Ethernet0) is down:K-value mismatch

The changed K-values will also appear in the running configuration. This is one time when you don't have to depend on debugs to know what the problem is - the router's going to scream at you until you fix it!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage , home of free CCNA and CCNP tutorials! Pass the CCNA exam with Chris Bryant!

Inexpensive Salsa Dance Classes in San Francisco

2008-03-23T22:21:00.000-07:00

Dance SF is the top salsa dance school that caters to the needs of aspiring salsa dancers.

Our classes are only $50 for a 4-week dance program taught by experienced salsa dance instructors. IF you are looking for a location near you in the San Francisco Bay Area, check out http://www.dancesf.com/home.htm.

Whether you are young or old we have salsa dance classes for everyone! But you shouldn't only use those moves in the dance studio. Why not go out to a local salsa dance club and show off those new moves! It's a great way to improve upon your newly acquired skill but it's also a great way to mingle and meet new people.

While you're at the club, party it up! The best way to improve is to dance with everybody, everywhere, anytime. You're just starting out? You're not expected to be Fred Astaire! Dance with as many people as you possibly can, and don't be afraid to ask that great dancer that you see in the club for a dance, or for some pointers. When asking people more advanced than yourself, be mindful of Salsa Etiquette for Beginners (which you'll learn in your Dance Class at www.dancesf.com). Even if you have a partner, don't only dance with them! It pays to learn to lead and follow from a variety of people, spread yourself around. You will learn FASTER!

While taking dance classes make sure you at least get out to a salsa dance club at least once a week (preferably more). Not only is it a blast to go out dancing, but in the beginning it can help reinforce those things you learn in class. Nothing is like some real world practice. It also helps you get used to the music which is played in the clubs, which by and large, is faster than what you will find in your typical salsa class! Check out Beginner Friendly Clubs listed on www.dancesf.com to find places to go out that are better bets for beginner dancers in the San Francisco Bay Area!

Evan Margolin is the president of DanceSF, the premiere salsa dancing academy in the San Francisco Bay Area. Learn to dance at the studio or in your own home with his Learn to Salsa DVDs. Find out more by visiting http://www.DanceSF.com

Learn to Salsa Dance San Francisco Style!

2008-03-20T22:45:00.000-07:00

Learn to salsa dance in the most beautiful part of San Francisco!

Learn how to salsa dance with experienced instructors and be able to enjoy the cities hottest nightlife. The salsa dance circuit has taken San Francisco by storm. Now you can be a part of it by taking the Dance SF salsa dance classes! Find out more by visiting www.dancesf.com!

These classes are suitable for absolute beginners but there are also intermediate classes available for students that already have experience in salsa dance and know the basics taught in the beginner's class.

Group classes at the beginner and intermediate levels of salsa start on a monthly basis. But the best part of these classes is that they are held at locations throughout the San Francisco Bay Area, which makes accessibility easy for everyone!

Each salsa dance class session is four weeks long, and they are progressive classes that meet once a week - usually on Wednesdays. These classes are for everyone. No partner and no experience are necessary! Drop-ins are accepted ($15 drop-in fee). Register On-line, and save money! Go to www.DanceSF.com

The salsa dance class is taught by Tianne Frias who danced for nine years with the acclaimed Robert Moses' KIN. In her earlier dance careers she started with Argentine Tango. Later, her interest spread to all the ballroom dances... now with an emphasis on Club-Style Salsa.

Tianne is trained in modern dance, ballroom, ballet and yoga, which have given her the natural flare for salsa dance. Having taught and performed internationally she has many years of experience. At the European Round Dance Festival, her students had commented, "Tianne's enthusiasm and love of dance took hold of the group and was reflected in three intense and enjoyable training sessions." Tianne has a natural love for dance and it shows in her classes.

To join these highly acclaimed classes, sign up by visiting the website at http://www.DanceSF.com

Or you can call or email for more information at: info@dancesf.com or 415-668-9936

Cisco CCNA Certification Exam Tutorial: Port-Based Authentication

2008-03-19T23:02:00.000-07:00

To pass your CCNA exam and earn this coveted certification, you must understand the details of port-based authentication. This knowledge has a great deal of value in production networks as well, since this authentication scheme is regularly implemented. Let's take a look at this particular CCNA skill.

Consider a situation where you have a server that will be connected to your switch, and you want the port to shut down if a device with a different MAC address that that of the switch attempts to connect to that port. You could also have a situation where you have someone who has a connection to a switch port in his office, and he wants to make sure that only his laptop can use that port.

Both of these examples are real-world situations, and there are two solutions for each. First, we could create a static MAC entry for that particular switch port. I don't recommend this, mainly because both you and I have better things to do than manage static MAC entries. The better solution is to configure port-based authentication on the switch.

The Cisco switch uses MAC addresses to enforce port security. With port security, only devices with certain MAC addresses can connect to the port successfully. This is another reason source MACs are looked at before the destination MAC is examined. If the source MAC is non-secure and port-based authentication is in effect, the destination does not matter, as the frame will not be forwarded. In essence, the source MAC address serves as the password.

MAC addresses that are allowed to successfully communicate with the switch port are secure MAC addresses. The default number of secure MAC addresses is 1, but a maximum of 132 secure MACs can be configured.

When a non-secure MAC address attempts to communicate with the switch port, one of three actions will occur, depending on the port security mode. In Protect mode, frames with non-secure MAC addresses are dropped. There is no notification that a violation has occurred. The port will continue to switch frames for the secure MAC address.

In Restrict mode, the same action is taken, but a syslog message is logged via SNMP, which is a messaging protocol used by Cisco routers.

In Shutdown mode, the interface goes into error-disabled state, the port LED will go out, and a syslog message is logged. The port has to be manually reopened. Shutdown mode is the default port-security mode.

Port-based authentication is just one of the many switching skills you'll have to demonstrate to earn your CCNA certification. Make sure you know the basics shown here, including the action of each particular mode, and you're on your way to CCNA exam success!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

You can also join his RSS feed and visit his blog, which is updated several times daily with new Cisco certification articles, free tutorials, and daily CCN

Cisco CCNA / CCNP Exam Tutorial: EIGRP Dual Queries, SIA, And Stub Routers

2008-03-18T23:31:00.000-07:00

EIGRP is a major subject of the CCNA exam, and Cisco goes into even more detail with EIGRP on your CCNP exams. Part of that detail is the purpose and configuration of EIGRP stub routers.

A problem with EIGRP comes in when a successor is lost and there is no feasible successor. DUAL doesn't give up that easily, though. DUAL will mark the route as Active, indicating that the route is being calculated and cannot be used to route data, and will send out a Query message.

A DUAL Query is basically one neighbor asking another, "Hey, do you know how to get to this network I just lost my route to?" If that neighbor has a route, the query will be answered with that route; if the neighbor doesn't have such a route, that neighbor will ask its neighbors. The process continues until a downstream router replies with the desired route, or the EIGRP downstream routers run out of neighbors to ask.

It's a good idea to limit the scope of your DUAL queries, otherwise routes may go into Stuck In Active state during this reconfiguration. Route summarization helps to limit queries, as does configuration of EIGRP stub routers.

While EIGRP does not have the stub area options that OSPF does, EIGRP does allow a router to be configured as stub. This is commonly done with a hub-and-spoke configuration where the spoke routers do not have the resources to keep a full routing table. Since the spoke's next hop will always be the hub, all the spoke really needs is a default route. For this reason, the only neighbor an EIGRP stub router can have is the hub router. (Obviously, the hub would never be configured as stub.)

Configuring EIGRP stub routers also combats the SIA problem. EIGRP stub routers are not queried for routes when the hub does not have a feasible successor for a successor route that has gone down.

By default, EIGRP stub routers advertise information about two types of routes back to the hub - directly connected networks and summary routes. To change this default, use the eigrp stub command followed by the types of routes you want the stub to advertise back to the hub. (The eigrp stub command run by itself configures the router as stub.)

R1(config)#router eigrp 100

R1(config-router)#eigrp stub ?

connected Do advertise connected routes

receive-only Set IP-EIGRP as receive only neighbor

static Do advertise static routes

summary Do advertise summary routes

Assume a network where R5 is the hub and R4, R6, and R7 are spokes. As long as the spokes have a neighbor relationship only with the hub, they can be configured as stub routers. They will then advertise their directly connected networks and summary routes back to the hub and will receive only a default route back from the hub. If R5 loses a successor and has no feasible successor, it will not send a query packet to any of the stub routers.

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage , home of free CCNA and CCNP tutorials! Pass the CCNA exam with Chris Bryant!

Cisco CCNA / CCNP Certification Exam Tutorial: ISDN And Multilink PPP

2008-03-18T23:27:00.000-07:00

ISDN is a huge topic on both your Cisco CCNA and BCRAN CCNP exams. While many ISDN topics seem straightforward, it's the details that make the difference in the exam room and working with ISDN in production networks. Configuring and troubleshooting multilink PPP is just one of the skills you'll need to pass both of these demanding exams.

With BRI, we've got two B-channels to carry data, and both of them have a 64-kbps capacity. You might think it would be a good idea to have both channels in operation before one reaches capacity, and it is a great idea Problem is, it's not a default behavior of ISDN. The second b-channel will not begin to carry traffic until the first one reaches capacity.

With Multilink PPP (MLP), a bandwidth capacity can be set that will allow the second b-channel to bear data before the first channel reaches capacity. The configuration for MLP is simple, but often misconfigured. We'll use our good friend IOS Help to verify the measurement this command uses.

Enabling MLP is a three-step process:

Enable PPP on the link

Enable MLP with the command ppp multilink

Define the threshold at which the second b-channel should start carrying data with the dialer load-threshold command.

Let's say you wanted the second b-channel to start carrying data when the first channel reaches 75% of capacity. It would make sense that the command to do so would be dialer load-threshold 75... but it's not.

R1(config)#int bri0

R1(config-if)#ppp multilink

R1(config-if)#dialer load-threshold ?

<1-255> Load threshold to place another call

The dialer load-threshold value is based on 255, not 100. To have this command bring the line up at a certain percentage, multiply that percentage in decimal format by 255. Below, I multiplied 255 by .75 (75%) to arrive at 191.

R1(config-if)#dialer load-threshold 191 ?

either Threshold decision based on max of inbound and outbound traffic

inbound Threshold decision based on inbound traffic only

outbound Threshold decision based on outbound traffic only

R1(config-if)#dialer load-threshold 191 either

As illustrated by IOS Help in the above configuration, dialer load-threshold has additional options as well. You can configure the interface to consider only incoming, outgoing, or all traffic when calculating when to bring the next channel up.

Configuring Multilink PPP is just one of the skills you'll need to earn your CCNA and pass the CCNP BCRAN exam. Don't underestimate ISDN on Cisco's certification exams!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage , home of free CCNA and CCNP tutorials! Pass the CCNA exam with Chris Bryant!

Cisco CCNA / CCNP Certification Exam Review: Protocol Basics

2008-03-17T23:23:00.001-07:00

To earn your Cisco CCNA certification and pass the BSCI CCNP exam, you have to know your protocol basics like the back of your hand! To help you review these important concepts, here's a quick look at the basics of RIPv1, RIPv2, IGRP, and EIGRP.

RIPv1: Broadcasts updates every 30 seconds to the address 255.255.255.255. RIPv1 is a classful protocol, and it does not recognize VLSM, nor does it carry subnet masking information in its routing updates. Update contains entire RIP routing table. Uses Bellman-Ford algorithm. Allows equal-cost load-balancing by default. Max hop count is 15. Does not support clear-text or MD5 authentication of routing updates. Updates carry 25 routes maximum.

RIPv2: Multicasts updates every 30 seconds to the address 224.0.0.9. RIPv2 is a classless protocol, allowing the use of subnet masks. Update contains entire RIP routing table. Uses Bellman-Ford algorithm. Allows equal-cost load-balancing by default. Max hop count is 15. Supports clear-text and MD5 authentication of routing updates. Updates carry 25 routes maximum.

IGRP: Broadcasts updates every 90 seconds to the address 255.255.255.255. IGRP is a Cisco-proprietary protocol, and is also a classful protocol and does not recognize subnet masking. Update contains entire routing table. Uses Bellman-Ford algorithm. Equal-cost load-balancing on by default; unequal-cost load-sharing can be used with the variance command. Max hop count is 100.

EIGRP: Multicasts full routing table only when an adjacency is first formed. Multicasts updates only when there is a change in the network topology, and then only advertises the change. Multicasts to 224.0.0.10 and allows the use of subnet masks. Uses DUAL routing algorithm. Unequal-cost load-sharing available with the variance command.

By mastering the basics of these protocols, you're laying the foundation for success in the exam room and when working on production networks. Pay attention to the details and the payoff is "CCNA" and "CCNP" behind your name!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage , home of free CCNA and CCNP tutorials! Pass the CCNA exam with Chris Bryant!

Cisco CCNA / CCNP / BCMSN Exam Review: Trunking And Trunking Protocols

2008-03-16T22:30:00.000-07:00

To earn your CCNA or CCNP certification, you've got to understand the basics of trunking. This isn't just a CCNA topic - you must have an advanced understanding of trunking and etherchannels to pass the BCMSN exam and earn your CCNP as well. Before we address those advanced topics, though, you need to master the fundamentals!

A trunk allows inter-VLAN traffic to flow between directly connected switches. By default, a trunk port is a member of all VLANs, so traffic for any and all VLANs can travel across this trunk. That includes broadcast traffic!

The default mode of a switch port does differ between models, so always check your documentation. On Cisco 2950 switches, every single port is in dynamic desirable mode by default, meaning that every port is actively attempting to trunk. On these switches, the only action needed from us is to physically connect them with a crossover cable. In just a few seconds, the port light turns green and the trunk is up and running. The command show interface trunk will verify trunking.

How does the receiving switch know what VLAN the frame belongs to? The frames are tagged by the transmitting switch with a VLAN ID, reflecting the number of the VLAN whose member ports should receive this frame. When the frame arrives at the remote switch, that switch will examine this ID and then forward the frame appropriately.

There are two major trunking protocols you must understand and compare successfully, those being ISL and IEEE 802.1Q. Let's take a look at the details of ISL first.

ISL is a Cisco-proprietary trunking protocol, making it unsuitable for a multivendor environment. That's one drawback, but there are others. ISL will place both a header and trailer onto the frame, encapsulating it. This increases the overhead on the trunk line.

You know that the default VLAN is also known as the "native VLAN", and another drawback to ISL is that ISL does not use the concept of the native VLAN. This means that every single frame transmitted across the trunk will be encapsulated.

The 26-byte header that is added to the frame by ISL contains the VLAN ID; the 4-byte trailer contains a Cyclical Redundancy Check (CRC) value. The CRC is a frame validity scheme that checks the frame's integrity.

In turn, this encapsulation leads to another potential issue. ISL encapsulation adds 30 bytes total to the size of the frame, potentially making them too large for the switch to handle. (The maximum size for an Ethernet frame is 1518 bytes.)

IEEE 802.1q differs substantially from ISL. In contrast to ISL, dot1q does not encapsulate frames. A 4-byte header is added to the frame, resulting in less overhead than ISL. If the frame is destined for hosts residing in the native VLAN, that header isn't added. Since the header is only 4 bytes in size, and isn't even placed on every frame, using dot1q lessens the chance of oversized frames. When the remote port receives an untagged frame, the switch knows that these untagged frames are destined for the native VLAN.

Knowing the details is the difference between passing and failing your CCNA and CCNP exams. Keep studying, get some hands-on practice, and you're on your way to Cisco certification success!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage , home of free CCNA and CCNP tutorials! Pass the CCNA exam with Chris Bryant!

Cisco CCNP / BSCI Exam Tutorial: 10 ISIS Details You Must Know!

2008-03-16T22:28:00.000-07:00

Earning your CCNP certification and passing the BSCI exam depends on knowing the details of many Cisco technologies, ISIS chief among them. To help you prepare for exam success, here's a list of ISIS terminology and basic concepts that will help you pass this tough exam. Enjoy!

ISIS Terms:

Domain: section of the network under common administrative control

Area: logical segment of the network composed of contiguous routers and their data links

Intermediate System: A router.

End System: A host device.

The four levels of ISIS routing:

Level 0: ES-IS routing in the same subnet.

Level 1: IS-IS routing in the same area.

Level 2: IS-IS routing in the same domain.

Level 3: Inter-domain routing performed by InterDomain Routing Protocol (IDRP).

ISIS Adjacency Possibilities:

L1: Can form adjacency with any L1 in the same area and any L1/L2 in the same area.

L2: Can form adjacency with any L2 in any area, and with an L1/L2 in any area.

L1/L2: Can form adjacency with any L1 in the same area, L1/L2 in any area, and L2 in any area.

A router interface's SNPA (Subnetwork Point Of Attachment) is its highest DLCI number if it's on a Frame network, and its MAC address if the interface is on an Ethernet segment.

ISIS Hello Types:

ESH: ES Hello - Sent by End Systems to discover a router.

ISH: IS Hello - Send by Intermediate Systems to announce their presence. End Systems listen for these.

IIH: IS-to-IS Hello - Send by one IS to be heard by another IS. These hellos makes IS-IS adjacencies possible.

Best of luck on your CCNP exams!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage , home of free CCNA and CCNP tutorials! Pass the CCNP exam with Chris Bryant!

Cisco CCNA Certification Exam Tutorial: Keep Your Most Important Appointment

2008-03-14T03:12:00.000-07:00

Imagine this. You have an appointment with a client to work on a server or router install. A few minutes before you're scheduled to be there, you decide there's something really good on TV you'd like to watch. Or you decide to go to the gym, or play a game, or do anything else except go see the client. Even if you weren't going to get fired for not showing up, it's certainly unfair to the client. You've got a professional obligation, and you should be there on time.

Now, what's this got to do with you becoming a CCNA or CCNP? Plenty. Because when it comes to your study time, you're the client. You owe it to yourself to show up. You would never blow off an appointment to meet a client to get some important work done.

First, though, you have to make that appointment with yourself! Schedule your CCNA / CCNP study time, and keep that appointment as you would with a client. Turn off the TV, your cell, your iPod, and everything else electronic that you carry around. Believe it or not, the world can survive with being in contact with you for an hour or so! You might even like it!

Getting certified isn't about how many hours, days, or weeks you spend studying. It's about how much quality time you put in. Be honest with yourself and realize that you're better off with 45 minutes of uninterrupted study as you would be with three hours of constantly interrupted study.

Don't blow off an appointment to yourself, either. Schedule the time, be there on time, get your study done, and you're one step closer to your CCNA and CCNP!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage (http://www.thebryantadvantage.com), home of free CCNA and CCNP tutorials! For my FREE "How To Pass The CCNA" or "CCNP" ebook, visit the website and download your copies. Get your CCNA study guide from The Bryant Advantage!

Cisco CCNP Certification / BCMSN Exam Tutorial: The HSRP MAC Address

2008-03-12T22:27:00.000-07:00

To pass the BCMSN exam and earn your CCNP, you've got to know HSRP inside and out! Part of that is knowing how the MAC address of the virtual router is derived, and another part is knowing how to change this address. We'll look at both features in this tutorial.

We've got two routers on a segment running HSRP, so first we need to find out what the MAC address of the HSRP virtual router is. The show command for HSRP is show standby, and it's the first command you should run while configuring and troubleshooting HSRP. Let's run it on both routers and compare results.

R2#show standby

Ethernet0 - Group 5

Local state is Standby, priority 100

Hellotime 3 sec, holdtime 10 sec

Next hello sent in 0.776

Virtual IP address is 172.12.23.10 configured

Active router is 172.12.23.3, priority 100 expires in 9.568

Standby router is local

1 state changes, last state change 00:00:22

R3#show standby

Ethernet0 - Group 5

Local state is Active, priority 100

Hellotime 3 sec, holdtime 10 sec

Next hello sent in 2.592

Virtual IP address is 172.12.23.10 configured

Active router is local

Standby router is 172.12.23.2 expires in 8.020

Virtual mac address is 0000.0c07.ac05

2 state changes, last state change 00:02:08

R3 is in Active state, while R2 is in Standby. The hosts are using the 172.12.123.10 address as their gateway, but R3 is actually handling the workload. R2 will take over if R3 becomes unavailable.

An IP address was statically assigned to the virtual router, but not a MAC address. However, there is a MAC address under the show standby output on R3, the active router. How did the HSRP process arrive at a MAC of 00-00-0c-07-ac-05?

Well, most of the work is already done before the configuration is even begun. The MAC address 00-00-0c-07-ac-xx is reserved for HSRP, and xx is the group number in hexadecimal. That's a good skill to have for the exam, so make sure you're comfortable with hex conversions. The group number is 5, which is expressed as 05 with a two-bit hex character. If the group number had been 17, we'd see 11 at the end of the MAC address - one unit of 16, one unit of 1.

On rare occasions, you may have to change the MAC address assigned to the virtual router. This is done with the standby mac-address command. Just make sure you're not duplicating a MAC address that's already on your network!

R2(config-if)#standby 5 mac-address 0000.1111.2222

1d12h: %STANDBY-6-STATECHANGE: Ethernet0 Group 5 state Active -> Learn

R2#show standby

Ethernet0 - Group 5

Local state is Active, priority 150, may preempt

Hellotime 4 sec, holdtime 12 sec

Next hello sent in 3.476

Virtual IP address is 172.12.23.10 configured

Active router is local

Standby router is 172.12.23.3 expires in 10.204

Virtual mac address is 0000.1111.2222 configured

4 state changes, last state change 00:00:00

1d12h: %STANDBY-6-STATECHANGE: Ethernet0 Group 5 state Listen -> Active

The MAC address will take a few seconds to change, and the HSRP routers will go into Learn state for that time period.

A real-world HSRP troubleshooting note: If you see constant state changes with your HSRP configuration, do what you should always do when troubleshooting - check the physical layer first. Best of luck on your BCMSN exam!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage , home of free CCNA and CCNP tutorials! Pass the CCNA exam with Chris Bryant

Cisco CCNP Certification / BSCI Exam Tutorial: An Introduction To BGP

2008-03-12T22:26:00.000-07:00

When you're studying for the BSCI exam on the way to earning your CCNP certification, it's safe to say that BGP is like nothing you've studied to this point. BGP is an external routing protocol used primarily by Internet Service Providers (ISPs). Unless you work for an ISP today or in the future, you may have little or no prior exposure to BGP. Understanding BGP is a great addition to your skill set - and you have to know the basics well to pass the BSCI exam.

Note that I said "the basics". BGP is a very complex protocol, and when you pursue your CCIE, you'll see what I'm talking about. As with all things Cisco, though, when broken down into smaller pieces, BGP becomes quite understandable. You will need to know the basics of BGP as presented in this chapter to pass your BSCI exam - so let's get started.

BGP Defined:

"An Internet protocol that enables groups of routers (called autonomous systems) to share routing information so that efficient, loop-free routes can be established. BGP is commonly used within and between Internet Service Providers (ISPs)."

There are a couple of terms in there that apply to the protocols you've mastered so far in your studies. The term "autonomous system" applies to IGRP and EIGRP as well as BGP; you'll be indicating a BGP AS in your configurations just as you did with IGRP and EIGRP. And we're always looking for efficient, loop-free routes, right? As it did with IGRP and EIGRP, "autonomous system" simply refers to a group of routers that is managed by a single administrative body. An autonomous system will use an Interior Gateway Protocol (IGP) such as OSPF or EIGRP to route packets inside the AS; outside the AS, an Exterior Gateway Protocol (EGP) such as BGP will be used.

BGP shares some characteristics with some routing protocols you've already studied. BGP supports VLSM, summarization, and CIDR. Like EIGRP, BGP will send full updates when two routers initially become neighbors and will send only partial updates after that. BGP does create and maintain neighbor relationships before exchanging routes, and keepalives are sent to keep this relationship alive.

BGP has some major differences from the IGPs we've studied to this point. You'll hear BGP referred to as a path-vector protocol. As opposed to distance-vector protocols that exchange relatively simple information about available routes, BGP routers will exchange extensive information about networks to allow the routers to make more intelligent routing decisions. This additional BGP path information comes in the form of attributes, and these path attributes are contained in the updates sent by BGP routers. Attributes themselves are broken up into two classes, well-known and optional.

BGP also keeps a routing table separate from the IP routing table.

We'll take a look at BGP attributes in future BSCI tutorials. In the meantime, keep studying!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage , home of free CCNA and CCNP tutorials! Pass the CCNP exam with Chris Bryant!

Cisco CCNA Certification Exam Tutorial: Distance Vector Command Review

2008-03-11T22:01:00.000-07:00

Part of studying for CCNA exam success is keeping all these new commands straight in your head! And let's face it, there are a lot of commands you need to know in order to pass the CCNA exam and earn that certification. Here's a review of some very important distance vector and static routing commands you need to know, along with their proper usage and console output.

Bandwidth IGRP makes a default assumption that any Serial interface running IGRP is connected to a T1 line, which runs at 1544 KBPS. With equal-cost load-balancing enabled by default, this may be an undesirable assumption.

To alter IGRP's assumption, use the bandwidth command on the serial interface in question. Note that this command does NOT actually affect the bandwidth available to the interface; it merely changes IGRP's assumption of the bandwidth. R2#conf t

R2(config)#int s0

R2(config-if)#bandwidth 512

Clear ip route *

This command clears your routing table of all non-static and non-connected routes. In a lab environment, it's very handy because it forces your routers running routing protocols to send and request updates, rather than waiting for the regularly scheduled updates. R2#clear ip route *

Debug ip igrp events

Debug ip igrp events allows you to see IGRP updates being sent and requested. Here, the debug is run and then the routing table is cleared. The router immediately broadcasts update requests via the IGRP-enabled interfaces.

R2#debug ip igrp event

IGRP event debugging is on

R2#clear ip route *

06:02:51: IGRP: broadcasting request on BRI0

06:02:51: IGRP: broadcasting request on Serial0.123

Debug ip igrp transactions

To configure IGRP unequal-cost load-sharing with the variance command, you've got to know the metric of the less-desirable routes. EIGRP keeps these in its topology table; IGRP has no such table.

To get the metrics of routes not in the routing table, run debug ip igrp transactions. To force IGRP updates, the routing table below was cleared with clear ip route *.

R2#debug ip igrp transactions

IGRP protocol debugging is on

R2#clear ip route *

06:05:33: IGRP: received update from 172.12.123.1 on Serial0.123

06:05:33: subnet 172.12.123.0, metric 10476 (neighbor 8476)

06:05:33: network 1.0.0.0, metric 8976 (neighbor 501)

06:05:33: IGRP: edition is now 3

06:05:33: IGRP: sending update to 255.255.255.255 via BRI0 (172.12.12.2)

06:05:33: network 1.0.0.0, metric=8976

06:05:33: IGRP: sending update to 255.255.255.255 via Serial0.123 (172.12.123.2) - suppressing null update

06:05:34: IGRP: received update from 172.12.12.1 on BRI0

06:05:34: subnet 172.12.13.0, metric 160250 (neighbor 8476)

06:05:34: network 1.0.0.0, metric 158750 (neighbor 501)

Debug ip rip

R2#debug ip rip

IP protocol debugging is on

R2#clear ip route *

6:14:53: RIP: received v2 update from 172.23.23.3 on Ethernet0

6:14:53: 1.0.0.0/8 via 0.0.0.0 in 16 hops (inaccessible)

6:14:53: 1.1.1.1/32 via 0.0.0.0 in 2 hops

6:14:53: 172.12.0.0/16 via 0.0.0.0 in 16 hops (inaccessible)

6:14:53: 172.12.12.2/32 via 0.0.0.0 in 2 hops

6:14:53: 172.12.13.0/30 via 0.0.0.0 in 1 hops

6:14:53: 172.12.123.0/24 via 0.0.0.0 in 1 hops

6:14:53: 172.23.0.0/16 via 0.0.0.0 in 16 hops (inaccessible)

Run debug ip rip to troubleshoot routing update problems, RIP authentication problems, and to view the routing update contents. Clear ip route * was run to clear the routing table and to force a RIP update.

Ip route R2#conf t

R2(config)#ip route 1.1.1.1 255.255.255.255 172.12.123.1

R2(config)#ip route 1.1.1.1 255.255.255.255 serial0

To configure a static route to a given destination IP address, use the ip route command. The destination is followed by a subnet mask, and that can be followed by either the next-hop IP address or the exit interface on the local router.

Ip route 0.0.0.0 0.0.0.0

R2#conf t

R2(config)#ip route 0.0.0.0 0.0.0.0 172.12.123.1

R2(config)#ip route 0.0.0.0 0.0.0.0 ethernet0

To configure a default static route, use either of these two commands.

You could have any number for the first "0.0.0.0", since the second set of zeroes is the subnet mask. This means that any destination will match this route statement.

That's a good review to get started with! I'll be back tomorrow with Part II of this CCNA exam command review!

Cisco CCNA Certification Exam Tutorial: Configuring And Troubleshooting VTP

2008-03-10T22:22:00.000-07:00

Not only is your CCNA exam going to have questions on VLAN trunking protocol, almost any network that has more than one VLAN is going to have VTP running. Whether you're planning on passing the CCNA exam or just brushing up on your networking skills, this VTP tutorial will help you learn the basics of this important protocol.

VTP allows switches to advertise VLAN information between other members of the same VTP domain. VTP allows a consistent view of the switched network across all switches. When a VLAN is created on one switch in a VTP server, all other VTP devices in the domain are notified of that VLAN's existence. VTP servers will know about every VLAN, even VLANs that have no members on that switch.

Switches run VTP in one of three modes. In server mode, VLANs can be created, modified, and deleted on a VTP server. When these actions are taken, the changes are advertised to all switches in the VTP domain. VTP Servers keep VLAN configuration information upon reboot.

In client mode, the switch cannot modify, create, or delete VLANs. VTP clients cannot retain VLAN configuration information upon reboot; they have to obtain this information from a VTP server.

In real-world networks, this is generally done to centralize the creation and deletion of VLANs. An interesting side effect of the server/client methodology is that if a VLAN is only to have ports on the VTP client switch, the VLAN must still first be created on the VTP server. The VTP client will learn about the VLAN from the VTP server, and ports can then be placed into that VLAN.

The third VTP mode is transparent mode. VTP switches in this mode ignore VTP messages. They do forward the VTP advertisements received from other switches. VLANs can be created, deleted, and modified on a transparent server, but those changes are not advertised to the other switches in the VTP domain.

For switches running VTP to successfully exchange VLAN information, three things have to happen. I've listed them for you in the order that you'll see them in the real world.

The VTP domain name must match. This is case-sensitive. "CISCO" and "cisco" are two different domains.

To distribute information about a newly-created VLAN, the switch upon which that VLAN is created must be in Server mode.

Learning VTP isn't just a good idea for passing your CCNA exams, it's a skill you must have to be effective in configuring and troubleshooting VLANs. I wish you the best in both of these pursuits!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage, home of free CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.

You can also join his RSS feed and visit his blog, which is updated several times daily with new Cisco certification articles, free tutorials, and daily CCN

Cisco CCNP / BSCI Exam Tutorial: Ten IP Routing Details You Must Know!

2008-03-10T22:21:00.000-07:00

To pass the BSCI exam and earn your CCNP, you've got to keep a lot of details in mind. It's easy to overlook the "simpler" protocols and services such as static routing and distance vector protocols. With this in mind, here's a quick review of some details you should know for success in the exam room and real-world networks!

When packets need to be routed, the routing table is parsed for the longest prefix match if multiple paths exist with the same prefix length, the route with the lowest AD is preferred. If there are still multiple valid paths, equal-cost load-sharing goes into effect.

The ip route command is used to create static routes the command ip route 0.0.0.0 0.0.0.0 < next-hop-IP or local exit interface> creates a default static route.

A static route with a next-hop IP address has an AD of one, while a static route with a local exit interface has an AD of zero.

A floating static route is a static route with an AD higher than that of the dynamic routing protocols running on the router, ensuring that the static route can only be used if the routing protocol goes down.

On-Demand Routing (ODR) is only appropriate in a hub-and-spoke network. The spokes effectively become stub routers. ODR uses Cisco Discovery Protocol (CDP) to send route information.

To propagate a default route with IP routing, use the ip default-network command. To do so with IP routing disabled, use ip default-gateway. You can also redistribute a static route into most protocols, but not IGRP. IGRP does not understand a static route to 0.0.0.0.

The ip helper-address command takes certain broadcasts and translates then into unicasts in order to allow the router to forward them. These default ports are:

TIME, port 37

TACACS, port 49

DNS, port 53

BOOTP/DHCP Server, port 67

BOOTP/DHCP Client, port 68

TFTP, port 69

NetBIOS name service, port 137

NetBIOS datagram services, port 138

To name other ports, use the ip forward-protocol command. To remove any of these ports from the default list, use the no ip forward-protocol command.

ICMP Router Discovery Protocol (IRDP) hosts hear multicast Hellos from routers, allowing host-router discovery. HSRP routers create a virtual router that hosts think is a real router. Both protocols help networks cut over to a functional router quickly when their primary router goes down.

Cisco CCNP / BCMSN Exam Tutorial: Changing The Active Router In HSRP

2008-03-09T22:13:00.000-07:00

To pass the BCMSN exam and earn your CCNP certification, you've got to know HSRP inside and out. While the operation and basic commands of HSRP are pretty simple, there are some important details that are easily overlooked but are vital in getting HSRP to work the way you want it to. Let's take a look at using the priority command correctly on both the exam and in production networks.

A key value in the show standby command is the priority. The default is 100, and the router with the highest priority will be the primary HSRP router. We'll raise the default priority on R2 and see the results. R3 is currently the Active router and R2 the standby, so let's raise the priority on R2 and see what happens.

R2(config)#interface ethernet0

R2(config-if)#standby 5 priority 150

R2#show standby

Ethernet0 - Group 5

Local state is Standby, priority 150

Hellotime 4 sec, holdtime 12 sec

Next hello sent in 0.896

Virtual IP address is 172.12.23.10 configured

Active router is 172.12.23.3, priority 100 expires in 8.072

Standby router is local

1 state changes, last state change 00:14:24

R2 now has a higher priority, but R3 is still the active router. R2 will not take over as the HSRP primary until R3 goes down - OR the preempt option is configured on R2.

R2(config-if)#standby 5 priority 150 preempt

1d11h: %STANDBY-6-STATECHANGE: Ethernet0 Group 5 state Standby -> Active

R2#show standby

Ethernet0 - Group 5

Local state is Active, priority 150, may preempt

Hellotime 4 sec, holdtime 12 sec

Next hello sent in 1.844

Virtual IP address is 172.12.23.10 configured

Active router is local

Standby router is 172.12.23.3 expires in 10.204

Virtual mac address is 0000.0c07.ac05

2 state changes, last state change 00:00:13

In just a few seconds, a message appears that the local state has changed from standby to active. Show standby confirms that R2, the local router, is now the active router - the primary. R3 is now the standby. So if anyone tells you that you have to take a router down to change the Active router, they're wrong - you just have to use the preempt option on the standby priority command.

Another vital part of HSRP configurations is knowing how to change the MAC address of the virtual router, as well as interface tracking. We'll look at those features in the next part of my HSRP tutorial!

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage (http://www.thebryantadvantage.com), home of free CCNP and CCNA tutorials! For my FREE "How To Pass The CCNA" or "CCNP" ebook, visit the website and download your copies. Pass your CCNP exam with The Bryant Advantage

CCNA Certification Exam Tutorial: Cisco Switching Modes

2008-03-07T21:18:00.000-08:00

To pass the CCNA exam and earn this important certification, you've got to know switching inside and out. While you're learning all the basic switching theory, make sure to spend some time with the one of three switching modes Cisco routers can use.

Store-and-Forward is exactly what it sounds like. The entire frame will be stored before it is forwarded. This mode allows for the greatest amount of error checking, since a CRC (Cyclical Redundancy Check) is run against the frame before it is forwarded. If the frame contains an error, it is discarded. If there's no problem with the frame, the frame is then forwarded to its proper destination.

While store-and-forward does perform error checking, the delay in processing the frame while this error check is run results in higher latency than the other modes you're about to read about. The latency time can also vary, since not all frames are the same size.

Cut-through switching copies only the destination MAC address into its memory before beginning to forward the frame. Since the frame is being forwarded as soon as the destination MAC is read, there is less latency than store-and-forward. The drawback is that there is no error checking.

There is a middle ground, fragment-free switching. Only part of the frame is copied to memory before it is forwarded, but it's the first 64 bytes of the frame, not just the destination MAC. (Why? Because if there is a problem with the frame, it's most likely in the first 64 bytes.) There is a little more error checking than cut-through, but not as much latency as with store-and-forward.

Note that the latency of both cut-through and fragment-free is fixed; these modes always look at the first six or 64 bytes, respectively. Store-and-forward's latency depends on the size of the frame. Learning the similarities and differences between these modes is an often-overlooked part of CCNA studies. Spend some time studying this important CCNA topic - you'll be glad you did!

Cisco CCNA Certification Exam Tutorial: Access List Details You Must Know!

2008-03-05T22:05:00.000-08:00

To pass the CCNA exam, you have to be able to write and troubleshoot access lists. As you climb the ladder toward the CCNP and CCIE, you'll see more and more uses for ACLs. Therefore, you had better know the basics!

The use of "host" and "any" confuses some newcomers to ACLs, so let's take a look at that first.

It is acceptable to configure a wildcard mask of all ones or all zeroes. A wildcard mask of 0.0.0.0 means the address specified in the ACL line must be matched exactly a wildcard mask of 255.255.255.255 means that all addresses will match the line.

Wildcard masks have the option of using the word host to represent a wildcard mask of 0.0.0.0. Consider a configuration where only packets from IP source 10.1.1.1 should be allowed and all other packets denied. The following ACLs both do that.

R3#conf t

R3(config)#access-list 6 permit 10.1.1.1 0.0.0.0

R3(config)#conf t

R3(config)#access-list 7 permit host 10.1.1.1

The keyword any can be used to represent a wildcard mask of 255.255.255.255.

R3(config)#access-list 15 permit any

Another often overlooked detail is the order of the lines in an ACL. Even in a two- or three-line ACL, the order of the lines in an ACL is vital.

Consider a situation where packets sourced from 172.18.18.0 /24 will be denied, but all others will be permitted. The following ACL would do that.

R3#conf t

R3(config)#access-list 15 deny 172.18.18.0 0.0.0.255

R3(config)#access-list 15 permit any

The previous example also illustrates the importance of configuring the ACL with the lines in the correct order to get the desired results. What would be the result if the lines were reversed?

R3#conf t

R3(config)#access-list 15 permit any

R3(config)#access-list 15 deny 172.18.18.0 0.0.0.255

If the lines were reversed, traffic from 172.18.18.0 /24 would be matched against the first line of the ACL. The first line is "permit any", meaning all traffic is permitted. The traffic from 172.18.18.0/24 matches that line, the traffic is permitted, and the ACL stops running. The statement denying the traffic from 172.18.18.0 is never run.

The key to writing and troubleshoot access lists is to take just an extra moment to read it over and make sure it's going to do what you intend it to do. It's better to realize your mistake on paper instead of once the ACL's been applied to an interface!

San Francisco Dog Friendly Landlords May Get The Cookie

2008-03-05T22:03:00.000-08:00

A new tax break may aid in the battle to reduce the number of unwanted dogs in San Francisco if it becomes law. The idea, currently in the hands of the city animal welfare commission, would offer a reduction in tax of either 5 percent of the monthly rent or $200 per month, whichever is less, according to local television station KGO-TV.

The article claims that the number one reason cats and dogs end up in the city's shelters is landlord rejection. With San Francisco home to many pet lovers who are also largely renters, the problem is huge.

There is even a little optimism from the landlord community. Janan New, SF Apartment Association, is quoted in the KGO-TV piece as saying, "It seems like something positive, a breath of fresh air, compared to the usual antagonism we suffer at the Board of Supervisors."

Dog Pictures, dog training tips, travel, dog podcasts, pet health help and more - everything but the dog breath!

See for yourself at www.DogExplorer.com

Cisco CCNA Certification Exam Tutorial: Configuring Dialer Profiles

2008-03-04T21:20:00.001-08:00

The most common method of configuring ISDN is with dialer maps, but dial information can also be configured on a logical interface. To pass the CCNA exam, you must know how to configure and troubleshoot both dialer maps and dialer profiles.

Dialer Profiles allow different dialing information to be configured onto logical interfaces. The logical interfaces may have different dialing destinations, different remote router names, etc., but they'll be using the same physical interface.

Dialer strings are used on dialer profiles. Note that each logical interface has a different IP address, a different remote router to dial, and a different dialer string, but they will be using the same physical interface to dial out. The commands dialer pool and dialer pool-member are used to link the logical and physical interfaces. The number following each command must match for the logical interface to correctly bind to the physical interface.

R1(config)#interface dialer0

R1(config-if)#ip address 172.16.1.1 255.255.255.0

R1(config-if)#encapsulation ppp

<. The encapsulation type is placed on both the logical and physical interfaces. >

R1(config-if)#dialer remote-name Remote0

R1(config-if)#dialer pool 1

< places logical interface into dialer pool >

R1(config-if)#dialer string 5551212

< number dialed to contact router Remote0 >

R1(config-if)#dialer-group 1

< links logical interface to dialer-list 1 >

R1(config)#interface dialer1

R1(config-if)#ip address 172.16.1.2 255.255.255.0

R1(config-if)#encapsulation ppp

R1(config-if)#dialer remote-name Remote1

R1(config-if)#dialer pool 1

R1(config-if)#dialer string 5551234

R1(config-if)#dialer-group 1

R1(config)#interface bri0

R1(config-if)#no ip address

< With dialer profiles, IP addresses are assigned to logical interfaces. >

R1(config-if)#encapsulation ppp

< The encapsulation type is place on both the logical and physical interfaces.>

R1(config-if)#dialer pool-member 1

< The number associated with this command should match the number configured with the dialer pool number on the logical dialer interfaces. >

R1(config-if)#isdn spid1 0835866101

R1(config-if)#isdn spid2 0835866301

When configuring dialer profiles, the encapsulation type should be placed on both the physical BRI interface and the logical dialer interfaces. The SPIDs are configured on the physical interface as well.

Configuring dialer profiles can be a little tricky at first, and the best way to master this skill is to get real hands-on practice in your own CCNA / CCNP home lab or a rack rental service. Either way, hands-on is the best practice. Best of luck in your CCNA studies!

Cisco CCNP Certification / BCMSN Exam Tutorial: Writing QoS Policy

2008-03-03T21:34:00.000-08:00

QoS - Quality of Service - is a huge topic on both the BCMSN exam and real-world networks. QoS is so big today that Cisco's created separate specialist certifications that cover nothing but QoS! It can be an overwhelming topic at first, but master the fundamentals and you're on your way to exam and job success.

If you work with QoS at any level - and sooner or later, you will - you've got to know how to write and apply QoS policies.

Creating and applying such a policy is a three-step process.

1. Create a QoS class to identify the traffic that will be affected by the policy.

2. Create a QoS policy containing the actions to be taken by traffic identified by the class.

3. Apply the policy to the appropriate interfaces.

If the phrase "identify the traffic" sounds like it's time to write an access-list, you're right! Writing an ACL is one of two ways to classify traffic, and is the more common of the two. Before we get to the less-common method, let's take a look at how to use an ACL to classify traffic.

You can use either a standard or extended ACL with QoS policies. The ACL will be written separately, and then called from the class map.

SW1(config)#access-list 105 permit tcp any any eq 80

SW1(config)#class-map WEBTRAFFIC

SW1(config-cmap)#match access-group 105

Now that we've identified the traffic to be affected by the policy, we better get around to writing the policy! QoS policies are configured with the policy-map command, and each clause of the policy will contain an action to be taken to traffic matching that clause.

SW1(config)#policy-map LIMIT_WEBTRAFFIC_BANDWIDTH

SW1(config-pmap)#class WEBTRAFFIC

SW1(config-pmap-c)#police 5000000 exceed-action drop

SW1(config-pmap-c)#exit

This is a simple policy, but it illustrates the logic of QoS policies. The policy map LIMIT_WEBTRAFFIC_BANDWIDTH calls the map-class WEBTRAFFIC. We already know that all WWW traffic will match that map class, so any WWW traffic that exceeds the stated bandwidth limitation will be dropped.

Finally, apply the policy to the appropriate interface.

SW1(config-if)#service-policy LIMIT_WEBTRAFFIC_BANDWIDTH in

Getting your CCNP is a great way to boost your career, and learning QoS is a tremendous addition to your skill set. Like I said, learn the fundamentals, don't get overwhelmed by looking at QoS as a whole, and you're on your way to success!

Cisco CCNP Certification / BSCI Exam Tutorial: Comparing IRDP And HSRP

2008-03-03T21:33:00.000-08:00

To pass the BSCI exam, you need to know the difference between IRDP and HSRP. While they have the same basic function, the operation and configuration of each are totally different.

The aim of both is to allow hosts to quickly discover a standby router when the primary router fails. IRDP is commonly used by Windows DHCP clients and several Unix variations, but you do see it in Cisco routers as well. IRDP is defined in RFC 1256.

IRDP routers will multicast Hello messages that host devices hear. If a host hears from more than one IRDP router, it will choose one as its primary and will start using the other router if the primary it's chosen goes down.

HSRP is a Cisco-proprietary protocol that is designed for quick cutover to a secondary router if the primary fails, but the host devices don't "see" either the primary or secondary router. The hosts use a virtual router as their default gateway. This virtual router has its own IP and MAC address! All the while, the router chosen as the primary is actually the one doing the routing. If the primary router goes down, the secondary router quickly takes over with no major interruption to network services.

The HSRP routers communicate by multicasting updates to 224.0.0.2, and its through these hellos that the HSRP routers decide which router is primary and which is secondary. HSRP is defined in RFC 2281.

The configuration of each of these will be covered in a future tutorial. In the meantime, I urge you to read the RFCs mentioned in this article, and visit www.cisco.com/univercd to read about the configurations and options available for both of these vital protocols.

Cisco CCNA Certification Exam Tutorial: Frame Relay DLCIs And Mappings

2008-03-02T21:44:00.000-08:00

Passing the CCNA is tough, and one of the toughest parts is keeping all the acronyms straight! Frame Relay has plenty of those, and today we're going to examine what DLCIs do and how they're mapped on a Cisco router.

Frame Relay VCs use Data-Link Connection Identifiers (DLCI - pronounced "del-see") as their addresses. Unlike other Cisco technologies, VCs have only a single DLCI in their header. They do not have a source and destination. DLCIs have local significance only. DLCI numbers are not advertised to other routers, and other routers can use the same DLCI numbers without causing connectivity issues.

Cisco uses the term global addressing to describe a technique by which a router in a frame relay network is reached via the same DLCI number from each router in the network. For example, in a 25-router network, the same DLCI number would be used to reach "Router A" by each router.

Global Addressing is an organizational tool that does not affect the fact that DLCIs have local significance only.

The locally significant DLCI must be mapped to the destination router's IP address. There are two options for this, Inverse ARP and static mapping.

In both of the following examples, the single physical Serial interface on Router 1 is configured with two logical connections through the frame relay cloud, one to Router 2 and one to Router 3.

Inverse ARP runs by default once Frame Relay is enabled, and starts working as soon as you open the interface. By running show frame-relay map after enabling Frame Relay, two dynamic mappings are shown on this router. If a dynamic mapping is shown, Inverse ARP performed it.

R1#show frame map

Serial0 (up): ip 200.1.1.2 dlci 122(0x7A,0x1CA0), dynamic,

broadcast,, status defined, active

Serial0 (up): ip 200.1.1.3 dlci 123(0x7B,0x1CB0), dynamic,

broadcast,, status defined, active

Static mappings require the use of a frame map statement. To use static mappings, turn Inverse ARP off with the no frame-relay inverse-arp statement, and configure a frame map statement for each remote destination that maps the local DLCI to the remote IP address. Frame Relay requires the broadcast keyword to send broadcasts to the remote device.

R1#conf t

R1(config)#interface serial0

R1(config-if)#no frame-relay inverse-arp

R1(config-if)#frame map ip 200.1.1.2 122 broadcast

R1(config-if)#frame map ip 200.1.1.3 123 broadcast

The syntax of the frame map statement maps the remote IP address to the local DLCI. Broadcasts will not be transmitted by default; the broadcast option must be configured.

R1#show frame map

Serial0 (up): ip 200.1.1.2 dlci 122(0x7A,0x1CA0), static,

broadcast,

CISCO, status defined, active

Serial0 (up): ip 200.1.1.3 dlci 123(0x7B,0x1CB0), static,

broadcast,

CISCO, status defined, active

Hands-on practice is the best way to prepare for CCNA exam success. Working with Frame Relay in a lab environment practically guarantees that you'll truly master the concepts shown here - and then you're on your way to the CCNA and becoming a master network engineer.

Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage , home of free CCNA and CCNP tutorials! Pass the CCNA exam with Chris Bryant!

Cisco CCNP / BCMSN Exam Tutorial: Switches, QoS, And Cisco's Networking Model

2008-02-29T21:37:00.000-08:00

QoS is a big topic on your BCMSN and CCNP exams, and for good reason. As more and more traffic flows through today's networks, accurately applying QoS to both your routers and switches becomes more important.

Note the phrase "accurately applying". You must have a plan in place before you start configuring QoS on your switches, and to create such a plan you should use Cisco's Three-layer Hierarchical Model.

This model breaks switches down into three main groups - Access, Distribution, and Core. You're familiar with these groups from your CCNA studies, and now you've got to apply this knowledge.

The QoS workload should be borne by the Access and Distribution layers, because the Core layer switches need to be left alone as much as possible to their primary purpose - switching!

Traffic should generally be classified and marked at the Access layer. This allows traffic to be assigned the desired QoS values and carry that value throughout the network.

If you choose to change CoS-DSCP mappings, this will generally be done at the Distribution layer. Since distribution layer switches will be receiving frames and packets with QoS values from the access layer switches, the appropriate "trust" and "no trust" statements should be configured on the appropriate distribution layer switches.

Any traffic received by core switches should already be classified and marked as needed. The key with core switches is to use a simple queuing setup to keep the switching process fast. Fast, fast, fast!

Real-world note - Low Latency Queuing (LLQ) is an excellent choice for core switches. The name says it all - low latency! The configuration of LLQ is not a BCMSN topic, but a quick search on the term low latency queuing will quickly bring up several Cisco LLQ configuration documents.

Knowing the three layers of Cisco's networking model and the basic QoS operation and commands is vital to passing the CCNP exams, but even more importantly, you've got to apply this knowledge carefully and accurately to make QoS work for you in today's production networks.

GoArticles: Chris Bryant, CCIE #12933, is the owner of The Bryant Advantage (http://www.thebryantadvantage.com), home of free CCNA and CCNP tutorials! For my FREE "How To Pass The CCNA" or "CCNP" ebook, visit the website and download your copies. Get your CCNA study guide from The Bryant Advantage!

Cisco CCNA / CCNP Home Lab Tutorial: The 2501 Router

2008-02-29T21:36:00.000-08:00

To be truly prepared for your CCNA and CCNP exams, you need real hands-on experience with real Cisco routers and switches. However, a production network is a really bad place to practice your configurations, but an excellent way to get fired and/or sued. The key to becoming a true CCNA and CCNP is assembling your own Cisco home lab.

You don't have to spend a lot of money to do so; used Cisco equipment is cheaper than ever. It's robust as well - I've bought literally hundreds of used routers and switches over the years and have had very few problems. I owe much of my skill to practicing configurations and troubleshooting in my own home lab.

2501 routers are fantastic for CCNA and CCNP home labs. They come with two serial interfaces, allowing you to connect one interface directly to another router (you'll need a DTE/DCE cable for that, too) while connecting another to a frame relay switch if you like. If you don't have a frame relay switch, you can connect a 2501 directly to two other routers via the serial interfaces.

You also have an AUI port, which requires a transceiver to operate as your Ethernet interface. Transceivers are pretty cheap and readily available from Cisco resellers and ebay vendors, so pick one up for each 2503 you decide to buy.

2501 routers don't come with BRI interfaces, but not every router in your lab has to be ISDN-ready. If you choose not to have ISDN in your lab at all, 2501s are the way to go. If you do want to run ISDN and have an ISDN simulator device, you can get two 2503s and the rest of your routers can be 2501.

All in all, 2501 routers are great for your CCNA / CCNP home lab. They cost less than $100 each on ebay, so they're also very affordable. There's no better training than training on your own CCNA or CCNP home lab, and you can always sell the equipment later if you like. Basically, you're renting the routers and switches, and the experience you get by working with the real deal is invaluable.

Cisco CCNP / BCSI Exam Tutorial: Broadcasts And The IP Helper-Address Command

2008-02-27T21:40:00.000-08:00

While routers accept and generate broadcasts, they do not forward them. This can be quite a problem when a broadcast needs to get to a device such as a DHCP or TFTP server that's on one side of a router with other subnets on the other side.

If a PC attempts to locate a DNS server with a broadcast, the broadcast will be stopped by the router and will never get to the DNS server. By configuring the ip helper-address command on the router, UDP broadcasts such as this will be translated into a unicast by the router, making the communication possible. The command should be configured on the interface that will be receiving the broadcasts.

R1(config)#int e0

R1(config-if)#ip helper-address ?

A.B.C.D IP destination address

R1(config-if)#ip helper-address 100.1.1.2

Now, you may be wondering if this command covers all UDP services. Sorry, you're not getting off that easy! The command does forward eight common UDP service broadcasts, though.

TIME, port 37

TACACS, port 49

DNS, port 53

BOOTP/DHCP Server, port 67

BOOTP/DHCP Client, port 68

TFTP, port 69

NetBIOS name service, port 137

NetBIOS datagram service, port 138

That's going to cover most scenarios where the ip helper-address command will be useful, but what about those situations where the broadcast you need forwarded is not on this list? You can use the ip forward-protocol command to add any UDP port number to the list.

Additionally, to remove protocols from the default list, use the no ip forward-protocol command. In the following example, we'll add the Network Time Protocol port to the forwarding list while removing the NetBIOS ports. Remember, you can use IOS Help to get a list of commonly filtered ports!

R1(config)#ip forward-protocol udp ?

<0-65535> Port number

biff Biff (mail notification, comsat, 512)

bootpc Bootstrap Protocol (BOOTP) client (68)

bootps Bootstrap Protocol (BOOTP) server (67)

discard Discard (9)

dnsix DNSIX security protocol auditing (195)

domain Domain Name Service (DNS, 53)

echo Echo (7)

isakmp Internet Security Association and Key Management Protocol (500)

mobile-ip Mobile IP registration (434)

nameserver IEN116 name service (obsolete, 42)

netbios-dgm NetBios datagram service (138)

netbios-ns NetBios name service (137)

netbios-ss NetBios session service (139)

ntp Network Time Protocol (123)

pim-auto-rp PIM Auto-RP (496)

rip Routing Information Protocol (router, in.routed, 520)

snmp Simple Network Management Protocol (161)

snmptrap SNMP Traps (162)

sunrpc Sun Remote Procedure Call (111)

syslog System Logger (514)

tacacs TAC Access Control System (49)

talk Talk (517)

tftp Trivial File Transfer Protocol (69)

time Time (37)

who Who service (rwho, 513)

xdmcp X Display Manager Control Protocol (177)

R1(config)#ip forward-protocol udp 123

R1(config)#no ip forward-protocol udp 137

R1(config)#no ip forward-protocol udp 138 As you can see, the ip helper-address command helps work around the fact that broadcasts aren't forwarded by routers by default, and if you just need to send one or two broadcast types, the other types can be turned off easily.

Cisco CCNA Certification Exam Tutorial: ISDN Details You Must Know

2008-02-26T21:24:00.000-08:00

CCNA exam success depends partially on knowing the details of ISDN, and there are plenty of them! To help you review for your CCNA exam, here are a few ISDN details that you must know on exam day. (They help in the real world, too - and there are still plenty of ISDN networks out there!

The Cisco-proprietary version of HDLC is the default encapsulation type for serial and ISDN interfaces.

R2#show interface serial0

Serial0 is up, line protocol is up

Hardware is HD64570

MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255

Encapsulation HDLC, loopback not set, keepalive set (10 sec)

While there's only one D-channel in BRI, PRI (US) and PRI (EU), the bandwidth of that D-channel does vary from BRI to PRI. It's 16 kbps in BRI and 64 kbps in both PRI versions.

The global command isdn switch-type must be configured before you can even begin to have ISDN work. show isdn status will tell you whether or not you've done this correctly.

R2#show isdn status

**** No Global ISDN Switchtype currently defined ****

ISDN BRI0 interface

dsl 0, interface ISDN Switchtype = none

Layer 1 Status:

DEACTIVATED

Layer 2 Status:

Layer 2 NOT Activated

Layer 3 Status:

0 Active Layer 3 Call(s)

PAP allows passwords to be different; CHAP requires that they be the same.

PAP requires the "ppp pap sent-username" interface-level command. CHAP has no equivalent command.

Define interesting traffic with dialer-list and link that list to the interface with dialer-group.

R2#conf t

R2(config)#dialer-list 1 proto ip permit

R2(config)#int bri0

R2(config-if)#dialer-group 1

The dialer idle-timeout value is expressed in seconds, not minutes. (Even IOS Help isn't totally clear on this.)

R2(config)#int bri0

R2(config-if)#dialer-group 1

R2(config-if)#dialer idle-timeout ?

<1-2147483> Idle timeout before disconnecting a call

R2(config-if)#dialer idle-timeout 120

Dialer map maps a remote IP address to a remote phone number. You never dial the local router's phone number.

dialer load-threshold requires the ppp multilink command to be configured, and the value of dialer load-threshold is expressed as a ratio of 255, NOT 100. For example, if you want the second b-channel to come up when the first reaches 50% of capacity, the value to express with dialer load-threshold would be 50% of 255 - which equals 127.

R2(config)#int bri0

R2(config-if)#encap ppp

R2(config-if)#ppp multilink

R2(config-if)#dialer load-threshold ?

<1-255> Load threshold to place another call

Success on the CCNA exam depends on knowing the details. Keep studying, keep practicing on real Cisco routers and switches, keep a positive attitude, and you're on your way to CCNA exam success!