Re: Loosing easy points in the LAB - ISDN

From: joshua lauer (jslauer@hotmail.com)
Date: Sat Oct 16 2004 - 18:21:39 GMT-3


Couldnt you just remove the dialer information from R5? that would prevent
R5 from dialing. Just leave off the LDN right?

jl

Josh Lauer

----- Original Message -----
From: <jean.paul.baaklini@accenture.com>
To: <ccielab@groupstudy.com>
Sent: Saturday, October 16, 2004 2:23 PM
Subject: FW: Loosing easy points in the LAB - ISDN

> Vasselin,
>
> If they say allow only ping traffic to bring the line up, then allowing
> all traffic would cause you to get 0% on the whole question bundle.
>
> I would use:
> Dialer-list 1 protocol ip list 100
>
> Accessl-list 100 permit icmp any any echo
> Accessl-list 100 permit icmp any any echo-reply
>
> ppp chap password cisco would make the local router use cisco as a
> password as a default password for every peer intead of checking the
> local database, but you shouldn't have it on both routers if the peer is
> not doing any authentication but just replying to a challenge. Or is R3
> authenticating R5 too?
>
> I think that your multilink conf is correct, I wouldn't add
> dialer load-threshold 128 either on R3 though, let R5 bring the second
> channel when needed.
>
> Cheers,
> JP
>
> -----Original Message-----
> From: Vesselin Kostov [mailto:V.Kostov@cnsys.bg]
> Sent: 16 October 2004 19:08
> To: Baaklini, Jean paul
> Subject: RE: Loosing easy points in the LAB - ISDN
>
> Hi Jean,
>
> I hope I am not violating the NDA since this wasn't exactly in my LAB
> and this configuration is in every Cisco book..
>
> Anyway, I have also:
> dialer-list 1 protocol ip permit
> dialer-group 1
> I thought it was enough to use "ppp chap password cisco"
>
> Do you say I have to use "username R5 password cisco"?
> And how do you think I have to make the access lists if I define the
> interesting traffic for example from network 10.0.0.0 and also have to
> permit the ping tests between the routers?
> I am really not sure about that :)
>
>
>
> -----Original Message-----
> From: jean.paul.baaklini@accenture.com
> [mailto:jean.paul.baaklini@accenture.com]
> Sent: Saturday, October 16, 2004 9:00 PM
> To: Vesselin Kostov; ccielab@groupstudy.com
> Subject: RE: Loosing easy points in the LAB - ISDN
>
> Hi Vasselin,
>
> There's no dialer-group on R5 to bind the dialer-list to the interface.
> Besides that we don't see your dialer-list here, have you included echo
> AND echo-reply?
>
> Have you created username/password on the routers?
>
> Cheers,
> JP
>
> BTW, you shouldn't say what was on your exam, think of the NDA mate.
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Vesselin Kostov
> Sent: 16 October 2004 18:52
> To: studygroup
> Subject: Loosing easy points in the LAB - ISDN
>
> Hi guys,
>
> What do you think about loosing points in the LAB that you think you
> deserve?
> Did that happen to you?
>
> I was just making simple ISDN configuration and I thought how many
> things could get wrong in such a task. Let's say I have that:
>
> "Configure ISDN on R3 and R5.
> Configure authentication which is not transmitting the whole password
> across the network. Use password 'cisco'.
> When the link utilization reaches 50%, the second link should be brought
> up.
> The routers R3 and R5 should ping the remote end of the ISDN link. Only
> R5 should be able to dial."
>
> Well, that is pretty simple... But then I started thinking....
> Here is the config:
>
> R5:
> interface BRI0/0
> ip address 192.168.35.5 255.255.255.0
> encapsulation ppp
> dialer idle-timeout 0
> dialer map ip 192.168.57.0 name R3 broadcast 1122334455
> dialer map ip 192.168.35.3 name R3 broadcast 1122334455
> dialer load-threshold 128 either
> isdn switch-type basic-net3
> ppp authentication chap
> ppp chap password cisco
> ppp multilink
>
> R3:
> interface BRI0/0
> ip address 192.168.35.3 255.255.255.0
> encapsulation ppp
> dialer idle-timeout 0
> dialer map ip 192.168.35.5 name R5 broadcast 11223344
> dialer load-threshold 128 either
> isdn switch-type basic-net3
> ppp authentication chap
> ppp chap password cisco
> ppp multilink
> !
>
> So, a lot of questions appeared:
> Am I using the right authentication?
> Am I using the right encryption type?
> What is the difference between " dialer load-threshold 128 either",
> "multilink load-threshold 128 either" and "ppp multilink load-threshold
> 128 either"? What is the right command between these three?
> Am I doing the right map?
>
> May be these questions are stupid... May be my configuration is
> correct... But I know it isn't since I had similar configuration in my
> LAB and got zero points. What if I have that one next time? I know it is
> working, but still the most important thing is the POINTS!!!
> What do you think about it?
> What is the right configuration?
> Did you also loose the "easy" points?
>
> p.s While we are still on ISDN I would like to ask you when would you
> use the following command:
> "no peer neighbor-route"
>
> ###########################################
>
> This message has been scanned by F-Secure Anti-Virus for Microsoft
> Exchange.
>
> ###########################################
> .
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> This message is for the designated recipient only and may contain
> privileged, proprietary, or otherwise private information. If you have
> received it in error, please notify the sender immediately and delete
> the original. Any other use of the email by you is prohibited.
>
> .
>
>
> ###########################################
>
> This message has been scanned by F-Secure Anti-Virus for Microsoft
> Exchange.
>
> ###########################################
> .
>
>
> This message is for the designated recipient only and may contain
> privileged, proprietary, or otherwise private information. If you have
> received it in error, please notify the sender immediately and delete the
> original. Any other use of the email by you is prohibited.
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sat Nov 06 2004 - 17:11:48 GMT-3