HDTenEightyP/NetNews huggingface dataset:
From: pushp-m@CERF.NET (Pushpendra Mohta)
Newsgroups: comp.dcom.sys.cisco
Subject: Re: Tacacs-server authneticate slip
Date: 12 Aug 92 21:08:20 GMT
X-Usmail: CERFnet, P.O. BOX 85608, San Diego, CA 92186-9784
X-Mailer: ELM [version 2.3 PL11]

Evan R. Wetstone writes:
>>
>>Has anyone gotten the command "tacacs-server authenticate slip" to work?
>>
>>I'm trying to find some mechanism to allow and control SLIP access to our
>>terminal server on the same lines that I allow unauthenticated (but address-
>>filtered) telnet access.  The manual suggests that "tacacs-server
>>authenticate slip" would be the way to do this.
>>
>>I can't get it to work at all.  On some of our lines (which require tacacs
>>authentication to log into) the terminal server will send a "SLIPON" message
>>to the tacacs server.  Watching this with our Sniffer, I can see that it 
>>sends the tacacs message with just a userid.  On our other lines, which do
>>not require tacacs logins, no message gets sent at all.  In no case does
>>the terminal server ever prompt for a userid and password to enable SLIP.
>>
>>Our terminal server is a CSC/2 running 8.3(3.1 )
>>
>>Any pointers will be appreciated.
>>
>>-- 
>>Evan 
>>
This works here:

tacacs-server host a.b.c.d
tacacs-server attempts 5
tacacs-server retransmit 3
tacacs-server timeout 3
tacacs-server extended
tacacs-server authenticate slip


line 2
location SDSC-452-abcd
login tacacs
exec-timeout  30 0
flowcontrol hardware in
flowcontrol hardware out
modem RI-is-CD
session-timeout 30  output
stopbits 1
txspeed 57600
rxspeed 57600
slip address dynamic
telnet transparent

Depending on the tacacsd server you are using, you may need to create
an entry with the username in all caps in the passwd file.

Also, the TS must have some way of translation the username 
into an IP address either using a "ip host username ip-address"
command or using DNS.

Actually, reading your message again, I think you want no first level
authentication but only authenticated slip. This may not be 
possible .....

--pushpendra

Pushpendra Mohta	pushp@cerf.net		+1 619 455 3908 
CERFNet         				+1 800 876 2373
Newsgroups: comp.dcom.sys.cisco
From: Petri Ojala <ojala@fuug.fi>
Subject: IGS/R dying due arp - known problem ?
Organization: Finnish UNIX Users' Group / EUnet Finland
Distribution: comp
Date: 22 Aug 92 12:32:46


We have IGS/R running old 8.2(8) software release.  Sometimes it dies 
due a lot of ARP packets.  First it used to die (debug output from
other router on the same ethernet) to the following packets
(sent several times per second):

PROBE: input request 128.214.245.4
IP ARP: rcvd req src 192.98.63.9 0000.0c01.85bc, dst 128.214.245.4
IP ARP: sent rep src 128.214.245.4 0000.0c01.27d7, dst 192.98.63.9 0000.0c01.85bc

After disabling probe arp on the interfaces the system died to:

IP ARP: rcvd req src 192.98.63.9 0000.0c01.85bc, dst 128.214.245.4
IP ARP: sent rep src 128.214.245.4 0000.0c01.27d7, dst 192.98.63.9 0000.0c01.85bc

We are going to update the software but is this a known problem under
8.2(8) ?  What kind of a bug or device in the ethernet might cause
this kind of behaviour ?  (I'm just curious..)

Regards,
Petri Ojala
FUUG/EUnet Finland
Newsgroups: comp.dcom.sys.cisco
From: Gary Kunis <gkunis@cisco.com>
Subject: Re:Multiple subnet problem /dan@sci.ccny.cuny.edu
Date: 12 Aug 92 08:37:51 -0700


Dan,

In response to your query...

------------------------------------------------------------------
>The cisco is currently routing one subnet of the bridged network to
>the second ethernet.  That leaves me with two problems for the other
>subnets.  Routing them to the outside world and routing between them.
>Can I get my cisco to solve these problems using secondary addresses
>or some such.
-------------------------------------------------------------------
The Cisco s/w offers you the capability of supporting more than
one subnet on an ethernet segment.  You can use the secondary address
facility to handle the problem of handling more than one subnet
on an Ethernet segment.

Here is an example:

interface ethernet 0
ip address 130.12.2.1 255.255.255.0
ip address 130.12.34.1 255.255.255.0 secondary
ip address 130.12.161.1 255.255.255.0 secondary
ip address 192.12.34.1 255.255.255.0 secondary

as you can see, we have handled addressing for 3 subnets of the
class B and for a class C located on the same Ethernet segment.

 -- Gary --          
:wq
From: dumic@cc.swarthmore.edu (Mark J. Dumic)
Newsgroups: comp.dcom.sys.cisco
Subject: Token Ring Net off of Ethernet port
Date: 19 Aug 92 21:50:59 GMT
Followup-To: comp.dcom.sys.cisco
Organization: Swarthmore College

Swarthmore College has just installed an AGS+ with several  MEC-6 Ethernet
cards and we are routing TCP/IP using IGRP with an 8-bit subnet mask.  On
one of our Ethernet ports we have a gateway computer (Apollo) attached to a
token ring with about a dozen other Apollos using TCP/IP on the Token Ring.
 The gateway worked fine in our previous bridged environment using routed
with static routing- the question is how do I  setup the Cisco to provide
Internet access to the token ring?  Can I specify static routes on the
Cisco to accomplish this?  Do I want to assign the token ring it's own
8-bit subnet or try to breakup the host address space on the current subnet
to do this?  

If my ethernet is 130.58.67.0 and the gateway is 130.58.67.10 and the token
ring is assigned a new 8-bit subnet of 130.58.68.0,
will the following static route do the trick:

ip route 130.58.68.0 130.58.67.10

Will the Cisco know to route traffic for 130.58.68.0 to the gateway
computer via the cisco port associated with 130.58.67.0 in this case?
Newsgroups: comp.dcom.sys.cisco
From: Tony Li <tli@cisco.com>
Subject: problem with rip
Date: 20 Aug 92 00:50:14 -0700


Hi,

    We have a strange problem with our router MGS 2E6T.  On one serial
    link we are connectet to a partner in London. On this link we use
    static routing with RIP.

    On the ethernet we are connectet to an other Router to the
    Internet. On this link we also could reach London.

    The link works fine. But suddenly the configuration-file in the
    RAM swap to a new entry and takes the link over the Internet.

You are encountering a known bug in 8.2(7) and 8.3(1).  Please upgrade
your router.

Thanks,
Tony
From: sgvax.dnet%sgvax%"a1::limmg".dnet@mrgate.dnet
Newsgroups: comp.dcom.sys.cisco
Subject: parallel route problem
Date: 17 Aug 92 04:37:10 GMT

From:	NAME: MARGARET LIM                  
	FUNC: REGIONAL TECHNICAL SUPPORT      
	TEL: 770-7157                         <LIMMG AT A1 AT SGVAX>
To:	"CISCO@SPOT.COLORADO.EDU"@ESDS01@MRGATE







Author:	MARGARET LIM                  
Date:	14-Aug-1992
Posted-date: 17-Aug-1992


Hi,

               MBCISCO serial 0 ------------ serial 1 SYCISCO
                       serial 1 ------------ serial 2 

  I have set up two 48K circuits between our router in Melbourne 
and Sydney, both links have LAT compression on and load balancing 
using bridge-group 1 circuit 1. The root is at SYCISCO and a sh 
span tells me that at MBCISCO serial 0 is in blocking mode 
,whereas all the rest are in forwarding mode. 

Today about 2:15PM local time one of those lines went down for 
about five minutes.  According to the manual when a line goes 
down it "DYNAMICALLY" redirects traffic onto the other line.  Not 
only did this not happen but when the line came up we had some 
type of broadcast storm that effectively dropped both lines for 
about 1 minute.

  Effectively what seems to have happened is half the site 
continued to operate until the broadcast storm but the other half 
was dead in the water.

Any ideas? FYI- both boxes are running rel8.3.3.


Regards,
Mag
Newsgroups: comp.dcom.sys.cisco
From: exubho@exu.ericsson.se
Subject: AGS+ SystemBus and cBus
Date: 07 Aug 92 13:02:39 -0500



Hi,

I am looking into purchasing an AGS+ router to solve many networking
problems we are expericencing at this time.  In looking at this, I
have heard that the AGS+ has a backplane that operates at 500 Mbps. 
First of all, can anyone confirm this for me, and if so, is it the
cBus or the SystemBus and does anyone run their networks utilizing
this throughput?

Many thanks in advance.

Blake Holman
Ericsson Network Systems, Inc.
Richardson, Texas
(214) 997-6784
Newsgroups: comp.dcom.sys.cisco
From: Eman Schaffer <eschaffe@cisco.com>
Subject: [kquinlan@CVEDG.Prime.COM: x25 route, "alias" clause]
Date: 17 Aug 92 16:21:36 -0700


Hi Kevin,

> I would like to get our CGS 3 router to accept X25 calls for 2 addresses.
> > I was working on this when we upgraded from 8.2 to 9.0(1) today.
> 
> In the 8.2 config I had an X25 route phrase like this:
> 
> x25 route ^23421234567890 alias Null0
> 
> To be frank, I do not know if this does what I want, because I had not
> tested it before the new PROMS arrived. However it is a bit academic,
> as (from my experimentation) 9.0(1) will not accept the null interface
> in an X25 route command. I get told "Must be running X.25 - Null0" -
> fair enough, but 8.2 didn't complain!
> 

Correct, 9.0 and 8.3 do not accept NULL in this command anymore.
They require a serial line number instead.

> What I would like to do is to set up the router to accept calls that
> are addressed to an X121 number other than that applied to the serial
> interfaces, I understood from the manual that this is what the "alias"
> clause would do.  But if I cannot give the null interface, what

Sure enough.

> interface should I use?  What does the interface name mean when an
> alias is specified?  Is it for calls that come in that interface only,
> or is the call sent back to that interface? Or does the call appear to
> come from that interface?
> 

an alias route is valid only for calls that come in on the named
interface.

Example: x25 route .* alias serial 0

If a call comes in on interface serial 0 and matches the
alias' x121-pattern (and any cud pattern) or in my example any x121
address, the call will be accepted for the given type of connectivity.


> In case anyone from Cisco says that I should ask them, I should say
> that our local UK technical support people cannot help, and asking the
> net seemed like the next quickest route.  But in case anyone is

Please feel free to ask the net any time.

> interested; it is my view that the manual (including the 9.0 manual)
> is a little vague on this point. 
> 

I totaly agree here and I will submit a documentation bug to correct
this problem.

Thanks,
Eman Schaffer
Customer Engineering

> Kevin Quinlan
> -- 
> 
>  	(Kevin Quinlan)
>  	kquinlan@cvedg.Prime.COM
> 	kquinlan@uk.co.cv.edg
> 
> 
Newsgroups: comp.dcom.sys.cisco
From: roes@phcoms.seri.philips.nl.seri.philips.nl (Aloys Roes)
Subject: Experiences with CPT for remote printing
Keywords: CPT
Organization: SERI-MPN Network Services, Philips C&P, Eindhoven, The Netherlands
X-Newsreader: Tin 1.1 PL4
Date: Wed, 12 Aug 1992 15:23:42 GMT

   Hello net,

For remote printing we have following configuration installed:

                 ---
     +-----+      |                             +-------+
     | VAX +------+                             |       +----
     +-----+      |    +------+                 |       +------
                  +----+router+------ WAN ------+Trouter+-------
     +-----+      |    +------+                 |       +      +-------+
     | CPT +------+                             |       +------+Printer|
     +-----+      |                             +-------+      +-------+
                  |
                 ---
The CPT, router and Trouter are all cisco's (8.2/8.3). The VAX has a LAT queue
defined. The CPT translates LAT to telnet and sends the data directly to a
port on the Trouter using a definition like:

translate lat TLPRFR1 tcp 130.142.250.2 port 6009 Stream quiet max-users 1

This all works but with a some problems that makes that the queue is
regularly 'stalled' with the message 'data set hangup'. We must stop and
start the queue and clear the line on the Trouter where the printer is
connected to. Result is that printfiles restart from the beginning (annoying
if you send a bill twice though we can use the money :-) ). 

Does anyone have a similar setup? Any comments? Alternative sulutions?

The remote site is an sales office. Maybe some PC's but no unix/vms
systems around. 

Please respond to me. I'll summarize interesting info to the net.

Thanks,
--
Aloys Roes,                           <>    Email: roes@seri.philips.nl
Philips SERI-MPN,                     /\    SERI : roes:phcoms
P.O.Box 218, Bldg VN-513,             \/    Tel. : + 31 (0)40 784 899 
5600 MD  Eindhoven, The Netherlands.  <>    Fax. : + 31 (0)40 782 900
From: billw@regal.cisco.com (WilliamChops Westfield)
Newsgroups: comp.dcom.sys.cisco
Subject: Re: Tacacs-server authneticate slip
Date: 20 Aug 92 02:22:33 GMT


    I'm trying to find some mechanism to allow and control SLIP access to
    our terminal server on the same lines that I allow unauthenticated
    (but address-filtered) telnet access.  The manual suggests that
    "tacacs-server authenticate slip" would be the way to do this.

    I can't get it to work at all.  On some of our lines (which require
    tacacs authentication to log into) the terminal server will send a
    "SLIPON" message to the tacacs server.  Watching this with our
    Sniffer, I can see that it sends the tacacs message with just a
    userid.  On our other lines, which do not require tacacs logins, no
    message gets sent at all.  In no case does the terminal server ever
    prompt for a userid and password to enable SLIP.

The terminal server is behaving as expected.

First of all, "tacacs-server authenticate <anything>" only works on
lines that a user has already logged in on.  This is because:

"tacacs authenticate <anything>" never asks the user for any additional
data.  It sends a tacacs request with the userid and name (which it
already knows), and the other information (like, this user is turning
on SLIP.)  The tacacs server is supposed to be able to tell from this
information whether that user is allowed to execute that operation.
(The tacacs server that cisco provides always accepts SLIPON requests.)

If you want SLIP access to be authenticated on all lines, you might
try setting "slip address dynamic" on the lines, which causes the address
that the user wants to be authenticated with a separate password (more
similar to a tacacs login.)  This results in up to three tacacs requests:
one to log in, one to assign a SLIP address, and one to turn slip on.

Bill Westfield
cisco Systems.
Newsgroups: comp.dcom.sys.cisco
From: Richard Frawley <rfrawley@cisco.com>
Subject: Please include me.
Date: 12 Aug 92 16:34:02 MDT
X-Mailer: ELM [version 2.3 PL11]

Hi,

Please add me to the mailing list.

rfrawley@cisco.com

Richard Frawley
Cisco Systems Australia
Newsgroups: comp.dcom.sys.cisco
From: Bill Chen <chen@watsun.cc.columbia.edu>
Subject: Source route translational bridging
Date: 21 Aug 92 09:19:00 EDT


Hi,

Has anyone tried cisco's source route translational bridging (between
Ethernet and Token Ring) feature in 9.0.1? We have a PS/2 with OS/2
1.3 EE, using Comm Mgr and LU6.2 on ether trying to talk to a 3174 on
a token ring with a AGS+ in between and there are a large number of
"packets too large for translational bridging" errors. We had a tty
session once but then it never worked again. I've been talking to
cisco, but so far, not much help. Thanks.

Bill

Columbia University

Newsgroups: comp.dcom.sys.cisco,comp.protocols.tcp-ip
From: karl@thuja.gsfc.nasa.gov (Karl A. Anderson)
Subject: What terminal server should I buy?
Organization: NASA/GSFC Laboratory for Terrestrial Physics
Date: Wed, 12 Aug 1992 21:49:23 GMT

I need to buy a terminal or communications server to meet the following 
requirements:

- Ethernet interface with choice of thin- or thick-ethernet
  connections;
- Minimum of 16 dial-in ports, with ability to add more;
- Dial-in speeds of up to 38.4 Kbps;
- Minimum of 1 MB RAM, expandable;
- Security features (ID/password at least, maybe logging too)
- Support for LAT, SLIP/cSLIP/PPP, DNS, SNMP

3Com, Cisco, Telebit and Xylogics (Annex) all appear to offer products 
that meet the minimum requirements.  Are there any other vendors?  Does 
anybody have any recommendations (comp.dcom.sys.cisco readers are 
allowed to recommend Cisco :^}) or caveats, either specific or general?  
Please respond by email, as I don't ordinarily take these groups.  TIA.
-- 
Karl A. Anderson		| Internet: karl@thuja.gsfc.nasa.gov
NASA/GSFC code 920.2 (HSTX)	| voice: (301) 286-3815
Greenbelt, MD 20771		| #include "std_disclaimer"
Newsgroups: comp.dcom.sys.cisco
From: ej@cc.univie.ac.at (Ewald Jenisch)
Subject: Re: anyone using STUN to connect FEPs?
Organization: Vienna University
Date: Fri, 14 Aug 1992 10:57:07 GMT

djc@scimitar.unx.sas.com (David J. Cherveny) writes:


>So, how did you get around the 2k limit?  Tweek some VTAM parameters?


Sorry to say, but we couldn't get around the 2K limit :-(

We didn't tweak VTAM. In fact in our case it's a CICS application that
wants to send blocks as large as 5000 bytes with the 'dont fragment'
bit set.  (Sorry if that isn't the exact term in SNA-lingo, but I'm
not a SNA-guru anyway)

In fact we finally stopped our tests, thinking of multiplexing the
line or even use a separate line for connecting FEPs that transfer
frames that large. (Bye, bye multiprotocol WAN for now; at least for
'large-frame-SNA' :-( )


What would be very interesting: Does anybody out there know, whether
some cisco-box (IGS?) CAN correctly handle frames that large? We've
done our tests on a CGS, AGS and AGS+ -- these boxes can't do the
trick due to the hardware limitation I mentioned in my previous
posting.

-ewald


--
Ewald Jenisch                      |  E-mail: ewald.jenisch@cc.univie.ac.at 
Vienna University Computer Center  |          z00ejr01@awiuni11.bitnet
Universitaetsstrasse 7             |  Tel: +43 (222) 43-61-11 x251  Fax x170
A-1010 Vienna, Austria             |  NIC-Handle: EJ63



	







Newsgroups: comp.dcom.sys.cisco
From: Gary Kunis <gkunis@cisco.com>
Subject: Re: Token Ring Net off of Ethernet port 
Date: 20 Aug 92 08:04:42 -0700


MArk,

We used static routes to interconnect Domain Rings to the
rest of our network at Boeing.  Define a static route on
the Apollo system acting as a gateway via route add.  Define
the gateway as the adjacent Cisco router on the Ethernet.

On the Cisco router, you must define a static route pointing
to the subnetwork beyond the Apollo acting as a gateway, and
then redistribute this static announcement via the selected 
rouitn protocol.

Here is an example:

router igrp {a/s}
network 130.12.0.0
redistribute static routes
default-metric 10000 10 255 1 1500
route 192.34.54.0  130.12.1.1

  -- gary --
Newsgroups: comp.dcom.sys.cisco
From: corbato@cosmic.physics.utah.edu (Steve Corbato)
Subject: Packet type prioritization (TCP/IP and DECnet) 
Originator: corbato@cosmic.physics.utah.edu
Organization: Cosmic Ray Physics Group, University of Utah
Date: Tue, 18 Aug 92 00:30:34 GMT

I apologize if this is an FAQ or an RTFM, but I only have the 8.2(3) PROM's
in my two Cisco boxes and the accompanying documentation.

On a 56 kbaud link, I'm looking to prioritize TCP/IP telnet packets over
ftp packets.  Is this possible under more recent releases of Cisco
firmware?  Likewise, in DECnet, is there any way to prioritize remote login
packets over copy packets?

Thanks,
-- 
Steve Corbato		          corbato@cosmic.physics.utah.edu (Internet)
Cosmic Ray Physics Group          utahco::corbato, 47623::corbato (HEPnet, NSI)
Physics Dept., Univ. of Utah      corbato@utahcca (BITnet)
Salt Lake City UT 84112 USA       (801) 581-5053 (office), -4801 (Fax)
Newsgroups: comp.dcom.sys.cisco
From: Joel P. Bion <jpbion@cisco.com>
Subject: Re: Source route translational bridging
Date: 21 Aug 92 08:38:52 -0700

Bill --

	Many versions of Comm. Manager routinely ignores the 'largest
frame' field returned in explorers. As such, they will ignore an
explorer or reply to it coming from the 'transparent bridged'
(Ethernet) world and send frames that are too large to be sent to an
ethernet. Fragmentation is not possible. You need to manually
configure the PS/2s. There is a caveat to this effect in the 9.0
documentation on SR/TLB.

-Joel
   Date: Fri, 21 Aug 92 09:19:00 EDT
   From: Bill Chen <chen@watsun.cc.columbia.edu>


   Hi,

   Has anyone tried cisco's source route translational bridging (between
   Ethernet and Token Ring) feature in 9.0.1? We have a PS/2 with OS/2
   1.3 EE, using Comm Mgr and LU6.2 on ether trying to talk to a 3174 on
   a token ring with a AGS+ in between and there are a large number of
   "packets too large for translational bridging" errors. We had a tty
   session once but then it never worked again. I've been talking to
   cisco, but so far, not much help. Thanks.

   Bill

   Columbia University


Newsgroups: comp.dcom.sys.cisco
From: Dan Schlitt <dan@sci.ccny.cuny.edu>
Subject: Multiple subnet problem
Date: 11 Aug 92 13:19:55 -0400

I am new to the game of using cisco routers and am not familiar with
all of the things that I might be able to do with our MGS/2.  I am
almost certain that what I need to do can't be done.  But if I don't
ask I won't discover that I am wrong.

The design of this network is not of my choice so don't ask me why we
have done such a silly thing as we have.  That just won't be helpful.

I have a large bridged network -- part fddi and part ethernet -- with
at least two and perhaps as many as 5 subnets connected to it.  The
number beyond two depends on how I connect some currently unconnected
networks.  I have a cisco router that connects this mess to a well
designed ethernet with a couple of hosts, a router to the outside
world and at Telebit Netblazer that uses dialup PPP to connect some
other disconnected pieces of our network.

The cisco is currently routing one subnet of the bridged network to
the second ethernet.  That leaves me with two problems for the other
subnets.  Routing them to the outside world and routing between them.
Can I get my cisco to solve these problems using secondary addresses
or some such?

If it is important we are using RIP for routing.

Thanks for any help.

/dan
Newsgroups: comp.dcom.sys.cisco
From: koelman@cuby.stc.nl (Ton Koelman)
Subject: Dial on Demand
Reply-To: koelman@stc.nato.int
Organization: SHAPE Technical Centre, NL
Date: Wed, 19 Aug 1992 12:21:46 GMT


Which release supports dial on demand with DTR signalling?
We'd like to use it with an ISDN Terminal adapter.
What about support for Hayes or V.25bis?

thanks.

--
Ton Koelman   e-mail: koelman@stc.nato.int (NeXT Mail Welcome!)
SHAPE Technical Centre, P.O. Box 174, 2501 CD  The Hague
The Netherlands  (voice: 31-70-3142429, fax: 31-70-3142111)
Newsgroups: comp.dcom.sys.cisco
From: exubho@exu.ericsson.se
Subject: cisco <-> 3COM
Date: 13 Aug 92 13:57:25 -0500


Hi!  I have a question about multi-vendor connectivity.  I have a
cisco IGS/R router sitting on a T-1 running between Dallas and
Anaheim.  I have the same thing running in Anaheim.

For disaster recovery planning, I would like to use a 3COM
NetBuilder II as a backup to the cisco router in case of failure to
get us by until we can get the cisco fixed.  Has anyone been able to
get the cisco to talk with a 3COM NetBuilder over a serial link like
this?  If so, can you give me some pointers?  I have tried this with
some rudimentary default settings and cannot seem to get it to work.

Any help would be appreciated.

Blake Holman
Ericsson Network Systems, Inc.
Richardson, Texas
(214) 997-6784
Newsgroups: comp.dcom.sys.cisco