Jump to content

Robot

Members
  • Posts

    82
  • Joined

  • Last visited

Everything posted by Robot

  1. OK. If you do show access-lists does it print line numbers at the start of each statement? If so you can then do some thing like the following (copied from cisco site : Configuring IP Access Lists - Cisco Systems) Example. Router#show access-list Extended IP access list 101 10 permit tcp any any 20 permit udp any any 30 permit icmp any any Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#ip access-list extended 101 Router(config-ext-nacl)#5 deny tcp any any eq telnet Router(config-ext-nacl)#exit Router(config)#exit Router# Router#show access-list Extended IP access list 101 5 deny tcp any any eq telnet 10 permit tcp any any 20 permit udp any any 30 permit icmp any any
  2. What version of ISO is the router currently running? After ISO release 12.3, sequence numbering was introduced for both numbered and named ACLs, meaning that you can edit the order of statements, remove individual statements and add statements to any line in the ACL. Pre 12.3, you can remove lines from a named ACL, but that's it if I remember correctly. If you have a setup you have inherited, it may be worth writing a whole new ACL and applying that instead of editing what you have got? then you can write it as required and know the score. If you would like help doing this just ask.
  3. Hello, The router gets the packet, looks at the destination ip in the packet and looks in its table for a network that would include this dest ip address. The entry with the longest match (longest prefix) will be selected. The 0.0.0.0 0.0.0.0 route will only be used if no other routes in the table are found for that destination.
  4. solarwinds have a IP tracking tool that is free. As long as your DNS is tidy it works well. Download SolarWinds FREE IP Address Tracker!
  5. The cloud is an evil entity taking away the control I have over the services that my colleagues need to function. Whilst I do get to finger point if something goes wrong, it is also the bane of my life contacting "cloud support", having to go through first line then second line whilst said colleagues stand over my shoulder complaining that the downtime is impacting their commission, or that their blackberry has stopped receiving their emails due to something in "the cloud" breaking their connection to BES. This was said slightly in jest, but mostly while trying not to cry.
  6. Only just started playing this. Will pop on and have a look around. un = burningphallus
  7. I am a fan. I like Rickys wrong sayings like "get two birds stoned at once."
  8. ISSUE RESOLVED: Thanks for looking. I am wanting to start using GVRP in our network, and have fallen at the first hurdle. [All kit is HP with latest Firmware. port 23 on Switch-1 is connected to port 26 on Switch-2] On Switch-1 I have turned GVRP on & Created VLANs 70 & 128. On port 23 I have Untagged VLAN 1 -- Tagged VLAN 70 -- Tagged VLAN 128. On Switch-2 I have turned GVRP on & untagged port 26 On VLAN 1 On port 26 I have used the command #unknow-vlans learn After a #sh vlans there is still only vlan1 in the list, no 70 or 128... Am I correct in thinking that port 26 on Switch-2 should receive frames tagged with VIDs for 128 & 70, and therefore add them to its VLAN database as I have issued the learn command? or am I missing something. Thanks.
  9. Thanks. Will use some when riding my bike
  10. I found routing protocols one of the easier bits to get my head around. The bit I’m having difficulty getting my head around is the WAN section (chapter 4 I think). Final CCNA exam booked for 30th June
  11. Hello, (I did notice a thread form a while ago posted by Duke, but after being in contact with him, he is still experiencing this issue. So I thought I would ask you guys again.) I am having an issue where - when a users my documents folder is redirected to a DFS share, windows explorer requires a manual refresh after creating a new folder, file, etc. (Interestingly, not when making a new briefcase) I have tried a number of MS knowledge base articles, a hot-fix and a registry change, all with no success. (( http:// support.microsoft.com/?kbid=823291 ; http:// support.microsoft.com/kb/873392 )) The problem only occurs when going through the my documents icon. If I map a home drive for the user to the exact same location (IE - H:\DFS\user\documents) , open that drive and make new folders, then there is no problem. Mapping my documents to H:\ also resolves the issue, however, as we need folder sync and people logging on off site with cached profiles this is not a workable solution (as H: will not map and there will be no access to their docs.) Has anyone managed to figure a fix for this? Thanks, Pete.
  12. Hello, Unfortunately getting Xen-tools to play with Ubuntu is not quite that straight forward This blog post off the Citrix site details the steps you must take to make it play ball. Installing Ubuntu on XenServer I have done this on all the ubuntu server vms we have here with success, bar the one where I made a typo
  13. I have made mead a few times following these instructions with success . My Apple Mead Or Homemade Apple Honey Wine Recipe
  14. Well, the fast link places the port into forwarding mode regardless, so it acts as a normal port. I would have it off on all ports. That does mean however that after a switch is turned on all ports will be placed in listening state, so no PCs will be able to talk across the LAN. This only takes about 30 seconds to sort out using STP on CISCO switches (faster with RSTP) tho so it is not a major issue. but it does mean things like DHCP leases, GP settings, may not be picked up by PCs attached to non fast link ports, if the PC is turned on while the switch is sorting out its ports.
  15. Hello, I'm by no means an expert! but ... Regards Hello's, Age and other messages, I would suggest leaving them as default, but if you do change them on one, you will have to change them on all the others. I would change the bridge priority on a switch that you want to become the root bridge to a value lower than others in the LAN (other wise the switches will decide among themselves by lowest MAC address and you could get some unnecessarily long routes across you LAN) And ... Fast Link. This should only be enabled on ports that definitely do not link to other switches. This Fast Link places the port into forwarding state, effectively disabling spanning tree on that port, so if you have this enabled on a port linking to another switch you’re going to get some loops. So keep timers as default, change root bridge to desired switch, keep "fast link" off links between all switches.
  16. Robot

    Cycling

    I'm cycling to work every day on my new bike and loving it! Its a bit busy around the city centre though so I have to be on my toes.
  17. Voting by post - About my vote, produced by The Electoral Commission edit: argh tooo slow
  18. Indeed it is! I have recently recived the following ... The Practice of System Administration, Network Warrior, The Book Of Xen, Professional Xen Virtualization, Learning Perl, Linux Pocket Guide. Should have fun reading throught that Is there a recommended book thread (both computer related and other wise) around here?
  19. Right. Yes we would be wanting to migrate users. I will have a look at making the new domain and creating the trust. Is the issue of causing upset regards AD etc only present when making a new domain server using the same domain name as the previous domian then? thanks.
  20. Yep that is what i would do normaly. sorry i forgot to mention that they are to be built on a hypervisor, with other machines on said hypervisor currently needed in production. If needed i have a look at VLANing the traffic for the new DC VMs off the main subnet, was just seeing if it could be done easily without seperating the traffic.
  21. Hello, After some advice regards building a new domain. We currently have a domain controller in and working(SBS2003). We are looking to build a completely new domain(2008R2) whilst using the same subnet address. I am aware that I cannot just install 2008, and start installing & setting up AD/DNS/etc without causing problems on the current DC. What would be the best way to go about building this new domain while not affecting the network? Thanks.
  22. just done the survey & got 100% green. Issues were: Crime, Democracy, Environment & Health/NHS.
  23. It does make me very small. I'm getting really interested in space. I worked out from an iPhone app last night which twinkle in the sky was Mars and I got all excited. Planning on getting a telescope soon
  24. Thanks very much! I will have a look at this on Monday
  25. I would be wanting to run it remotely but only to select PCs in the domain, so would also need to target them somehow.
×
×
  • Create New...