HDTenEightyP/NetNews huggingface dataset:
From: kwieman@.stern.nyu.edu (Karl Wieman)
Newsgroups: comp.dcom.sys.cisco
Subject: Access Lists and FTP
Date: 10 Nov 92 14:35:26 GMT
Organization: NYU Stern School of Business

I am attempting to restrict the use of ftp.  I would like for hosts on subnet
A to be able to ftp to other subnets, but not for anybody to ftp "in" to
subnet A.  I have managed to restrict ftp access to subnet A, and users on this
subnet are able to connect to other hosts with ftp.  However, when they try
to 'get' a file it fails to make the necessary connection.

Has anyone successfully accomplished this level of security ?  If so could you
let me know what kind of access list you used ?

Thanks,

Karl Wieman
kwieman@stern.nyu.edu
Newsgroups: comp.dcom.sys.cisco
Subject: Re: Sun NFS and Ciscos 
From: bmiller@cabell.vcu.edu (Bryan E. Miller)
Date: Fri, 13 Nov 1992 14:52:31 GMT
Expires: Tue, 1 Dec 1992 05:00:00 GMT
Organization: Virginia Commonwealth University


Fellow netters,

I have the following setup in one of our departments.  We have a
cisco AGS+ with a Token Ring card connected to a Banyan Token Ring
network.  The ring runs at 4mb.  The Banyan server has an IBM
Token Ring board installed.  The server has Server-Server LAN and
TCP/IP routing options installed.  The 40 PC's connected to the
ring are running IBANYAN PC/TCP.

I'm looking for suggestions on the optimal way of configuring the
AGS+, the Banyan server, and the PC's.  I assume because of IBANYAN
that I'll need to define a VINES interface.  We have two name servers 
defined in the server.  Also, the AGS+ has Banyan routing turned on, and 
all Banyan related functions appear to be working properly.  The help
I'm requesting is specifically related to the TCP/IP components.


   Ethernet
   128.172.1.x   |
                 |   ----------        -------
                 |   |        |       /       \    --------
                 |---| cisco  |      /         \   |      |
                 |   | AGS+   |------   4mb     |--|Banyan|
                 |   |        |      \         /   |      |
                 |   ----------       \       /    --------
                 |                     -------
                 |
                 |                     128.172.159.x
                 |                     40 PC's 
                 |


If you have any experience with this kind of setup, I'd love to hear
from you.  

Thanks.

Bryan Miller
Virginia Commonwealth University
From: willis@cs.athabascau.ca (Tony Willis)
Newsgroups: comp.dcom.sys.cisco
Subject: automount problem
Keywords: automount, cisco
Date: 12 Nov 92 22:04:21 GMT
Organization: Athabasca University

Hi there

I have a cisco router which I have set up as an internet firewall. I need
to make a hole in the wall so that I can allow a local machine
to automount a file system on a machine at an internet remote site.

I added the following to my access control list

access-list 101 permit tcp rrr.rrr.rrr.rrr 0.0.0.0 lll.lll.lll.lll 0.0.0.0
access-list 101 permit udp rrr.rrr.rrr.rrr 0.0.0.0 lll.lll.lll.lll 0.0.0.0

where rrr.rrr.rrr.rrr is the remote machine ip address and lll.lll.lll.lll is
the local machine address. My understanding is that this should
allow all packets from the remote machine back into my site.

However, this appears not to work. Is there something else I need
todo in order to allow the nfs mount of the remote file system to
take place?

Thanks,

Tony Willis

twillis@drao.nrc.ca
Newsgroups: comp.dcom.sys.cisco
From: thg@hprnd.rose.hp.com (Terry Gong)
Subject: Need Info on ciscoWorks
Date: Wed, 11 Nov 1992 07:26:24 GMT
Organization: HP - Systems Technology Division
X-Newsreader: TIN [version 1.1.8 PL6]

What is the part number and what is the cost for ciscoWorks?
Anyone have any information on this new product -- like
what it does, what system does it run on, etc.?

Thanks,
Terry Gong
thg@hprnd.rose.hp.com
From: pcorless@cisco.com (Peter Corless)
Newsgroups: comp.dcom.sys.cisco
Subject: Re: cisco and DS3
Date: 5 Nov 1992 04:21:29 GMT
Organization: Computer Science Lab, SRI International
Distribution: world
Reply-To: pcorless@cisco.com (Peter Corless)
NNTP-Posting-Host: corless-mac.cisco.com

In response to post:
From: battle@umbc4.umbc.edu (Rick)
Subject: cisco and DS3

> The local telephone company, C&P of Maryland provides
> a pair of BNC coax connectors for a DS3 line.  If I want
> to connect a cisco router to this interface what must I do?
> 
> Thanks
> 
> Rick

Rick:

Cisco makes a High Speed Serial Interface (HSSI) for connection to
DS3 (T3) speed communications equipment.

The DSU (Data Service Unit) will physically connect to the C&P Telephone
wiring. DSu devices that support our HSSI interface are available now
or in the future from T3Plus Networking, Kentrox, and Digital Link.

The HSSI interface requires an AGS+/3 or AGS+/4 with a cBus controller.
The interface itself consists of two parts: the CSC-HSCI (HSSI interface
card) and the APP-LHS (HSSI applique). In addition, the HSSI requires software
version 8.3 or later.

Let me know if you have any more questions!

-Peter Corless.
 Cisco Customer Service
 US Federal Business Representative
 ----------------------------------
 e-mail: pcorless@cisco.com
 phone:  (415) 903-8723
 fax:    (415) 903-8080


Newsgroups: comp.dcom.sys.cisco
From: Dan Schlitt <dan@sci.ccny.cuny.edu>
Subject: Cisco timekeeping
Date: 4 Nov 92 09:01:05 -0500
X-Note1: mail msgid was <9211041401.AA15342@sci.sci.ccny.cuny.edu>
X-Note2: message-id generated by recnews

How do folks keep the date on a cisco router in sync with other clocks
on the network.  We run NTP on some of our servers and synchronize
other hosts to them in a variety of ways.  I have looked through the
documentation that I have and see no way to automatically correct
the time on a router.

I have asked my local "expert" and he is as much in the dark as I am.
What suggestions are out there?

/dan
From: ehall@cmpny.sscnet.ucla.edu (Eric Hall)
Subject: Re: Subnetting class C
Reply-To: ehall@cmpny.sscnet.ucla.edu (Eric Hall)
Organization: Network Computing Magazine
Date: Fri, 06 Nov 92 02:55:34 GMT

> ip route 192.111.108.33 255.255.255.240 <remote-gw-ip-addr
>
>  or
>
>  ip route 192.111.108.33 255.255.255.240 <interface>

You can't specify a subnet in the IP ROUTE statement. You can only specify addresses. Therefore, you 
can't specify multiple class C subnets, because they aren't separately identifiably by the real address.

Or at least, I haven't been able to do it.

Eric Hall
Dir, East Coast Labs
Network Computing Magazine
516-562-5288
Newsgroups: comp.dcom.sys.cisco
From: TOSDRST@ge1vm.schdy.ge.com
Subject: NO SUBJECT
Date: 05 Nov 92 14:16:54 EDT
X-Note1: mail msgid was <9211051918.AA13211@aitgw.ge.com>
X-Note2: message-id generated by recnews

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
From:
Subject: NO SUBJECT
 VM/CMS TCP ONLY supports CLIENT TFTP... CISCO is a CLIENT..therfore
 you need a TFTP SERVER platform to do TFTP with the CISCO client.
 Don Smith..GE Schenectady Megacenter
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
From The Desk of Don Smith.
*** Forwarding note from SMTP    --GE1VM    11/05/92 13:07 ***
=========================================================================
Received: from misery.ge.com by GE1VM.SCHDY.GE.COM (IBM VM SMTP V2R1) with TCP;
   Thu, 05 Nov 92 13:07:52 EDT
Received: from aitgw.GE.COM by misery.ge.com (5.65/GE Internal Gateway 1.10)
with SMTP
	id AA21833; Thu, 5 Nov 92 13:08:55 -0500
Received: from spot.Colorado.EDU by aitgw.ge.com (5.65/GE Gateway 1.6)
	id AA10906; Thu, 5 Nov 92 13:09:28 -0500
Received: by spot.Colorado.EDU id AA16764
  (5.65c+/IDA-1.4.4/CNS-2.1 for cisco-ml1); Thu, 5 Nov 1992 09:40:47 -0700
Received: from last-call.cisco.com by spot.Colorado.EDU with SMTP id AA16692
  (5.65c+/IDA-1.4.4/CNS-2.1 for <cisco@spot.colorado.edu>); Thu, 5 Nov 1992
09:40:41 -0700
Received: by last-call.cisco.com; Thu, 5 Nov 92 08:37:41 -0800
Date: Thu, 5 Nov 92 08:37:41 -0800
From: Bruce Pinsky <bpinsky@cisco.com>
Message-Id: <9211051637.AA12269@last-call.cisco.com>
To: cisco@spot.colorado.edu, HOLTZMAN@sjuvm.bitnet
Subject: Re: 516-CS / loading config files from CMS host / help

Michael S. Holtzman writes:

==>Greetings. I am trying to load my 516-CS comm server from a VM/CMS host,
which
==>claims to support TFTP, but the cisco always times-out (time-outs?)  Has
==>anybody done this, and what is the secret.
==>
==>Also, what software would I need on a PC to load the cisco over the network?
==>
==>Thanx in advance.
==>

One piece of PC software that supports TFTP server is the TCP/IP implementation
from FTP Software, Inc.  Try them at 508-794-4488.

One thing to remember is that a PC doesn't multi-task very well and TFTP from
a PC under a load is not very reliable.

+-------------------------+-----------------------+---------------------------+
+      ||        ||       +                       + Bruce Pinsky              +
+      ||        ||       + Cisco Systems, Inc.   + Customer Engineer         +
+     ||||      ||||      + 1525 O'Brien Drive    + Phone: (800) 553-24HR     +
+ ..:||||||:..:||||||:..  + Menlo Park, CA        + Fax:   (415) 903-8787     +
+   Cisco Systems Inc.    +                       + E-mail: bpinsky@cisco.com +
+-------------------------+-----------------------+---------------------------+
|                 ** The Science of Networking Networks **                    |
+-----------------------------------------------------------------------------+
From: nabil@ogicse.ogi.edu (Aaron Nabil)
Newsgroups: comp.dcom.sys.cisco
Subject: for sale: CSC/2 to CSC/3 upgrade $2000
Date: 11 Nov 92 10:00:49 GMT
Article-I.D.: ogicse.45655
Distribution: world
Organization: Explosive Space Modulators - R - Us

I have a CSC/3 processor stripped from a CGS that was parted out. I'd like
to get $2000 for it.  Drop me a line if you can use it.
-- 
Aaron
nabil@cse.ogi.edu
Newsgroups: comp.dcom.sys.cisco
From: chbeck@anl.gov (Chuck Beck)
Subject: Dial up routing with 500-cs
Followup-To: comp.dcom.sys.cisco
Organization: Argonne National Lab
Date: Tue, 10 Nov 1992 13:36:13 GMT

Can the Cisco 500 series, when used as a dial up router, route other
protocols than IP? (mainly IPX, etc)

These thoughts are only my own. CHBeck@anl.gov
Newsgroups: comp.dcom.sys.cisco
From: watt-alan@net.yale.edu (Alan Watt)
Subject: Re: Cisco timekeeping
Originator: swatt@mickey.CS.Yale.Edu
Organization: Yale University, Computing & Information Systems
Date: Wed, 11 Nov 1992 15:39:25 GMT


In article <721443670.28214@news.Colorado.EDU>, dan@sci.ccny.cuny.edu (Dan Schlitt) writes:
|> How do folks keep the date on a cisco router in sync with other clocks
|> on the network.  We run NTP on some of our servers and synchronize
|> other hosts to them in a variety of ways.  I have looked through the
|> documentation that I have and see no way to automatically correct
|> the time on a router.
|> 
|> I have asked my local "expert" and he is as much in the dark as I am.
|> What suggestions are out there?
|> 
|> /dan

When did ciscos start keeping real time?  I'm only aware of an uptime
clock.
-- 
  Alan S. Watt
  Yale University			Computing and Information Systems
  Box 2112 Yale Station			(203) 432-6602
  New Haven, CT  06520-2112		Watt-Alan@Yale.Edu
Newsgroups: comp.dcom.sys.cisco
From: Bruce Pinsky <bpinsky@cisco.com>
Subject: Re: 516-CS / loading config files from CMS host / help
Date: 5 Nov 92 08:37:41 -0800
X-Note1: mail msgid was <9211051637.AA12269@last-call.cisco.com>
X-Note2: message-id generated by recnews

Michael S. Holtzman writes:

==>Greetings. I am trying to load my 516-CS comm server from a VM/CMS host, which
==>claims to support TFTP, but the cisco always times-out (time-outs?)  Has
==>anybody done this, and what is the secret.
==>
==>Also, what software would I need on a PC to load the cisco over the network?
==>
==>Thanx in advance.
==>

One piece of PC software that supports TFTP server is the TCP/IP implementation
from FTP Software, Inc.  Try them at 508-794-4488.

One thing to remember is that a PC doesn't multi-task very well and TFTP from
a PC under a load is not very reliable.

+-------------------------+-----------------------+---------------------------+
+      ||        ||       +                       + Bruce Pinsky              +
+      ||        ||       + Cisco Systems, Inc.   + Customer Engineer         +
+     ||||      ||||      + 1525 O'Brien Drive    + Phone: (800) 553-24HR     +
+ ..:||||||:..:||||||:..  + Menlo Park, CA        + Fax:   (415) 903-8787     +
+   Cisco Systems Inc.    +                       + E-mail: bpinsky@cisco.com +
+-------------------------+-----------------------+---------------------------+
|                 ** The Science of Networking Networks **                    |
+-----------------------------------------------------------------------------+
From: Dan Pike <dpike@oavax.csuchico.edu>
Newsgroups: comp.dcom.lans.ethernet
Subject: Cabletron's Spectrum Lan Management
Date: 11 Nov 1992 18:36:45 GMT
Organization: California State University, Chico
Distribution: world
NNTP-Posting-Host: dan-mac.csuchico.edu
X-UserAgent: Nuntius v1.1.1d9
X-XXMessage-ID: <A72693885B014069@dan-mac.csuchico.edu>
X-XXDate: Wed, 11 Nov 92 17:40:08 GMT

We have been using Cabletron's PC OV software for the last couple of
years to monitor our ethernet network.  I won't say that it has been a
wonderful management solution, but it has gotten us by.  We will be
adding a couple thousand workstations within the next few
years(networking our residence halls) and are thinking about going to
UNIX based management using Spectrum software.  
Does anyone who has used Spectrum have any information on its management
capabilities.  The main problem that we had with PC OV was with the
reporting of statistics.  We tried to take the information that we
acquired from statistics logging and put it into a database
application(Microsoft Excel) that would give us graphs showing network
capacity and utilization.  Our manager doesn't want to see numbers.  She
would like to see a graph showing our maximum capacity compared to
current utilization.
We would like to know whether Spectrum has the capability of giving us
this kind of information.  We are going to San Jose in January to look at
the product, but I would like to have input from people who have used it
and put it to the test.  We would appreciate any help that you can offer.
 

Dan Pike
Network Specialist
California State University, Chico
dpike@oavax.csuchico.edu
Newsgroups: comp.dcom.lans.ethernet
From: rich@grebyn.com (Richard Lawrence)
Subject: Re: Are the 3C501 cards any good?
Organization: Grebyn Timesharing
Date: Wed, 11 Nov 1992 02:29:26 GMT

In article <9NOV199215465488@elroy.uh.edu> st1r8@elroy.uh.edu (Guillot, Burt J.) writes:
>I recently bought two 3C501 cards for $35/each recently.  I am using them
>with Netware Lite and they seem to run okay, although a bit slow.  The
>docs claim they can go 10 megabit/second, yet, when I run Norton's Network
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

They can SIGNAL at 10Mhz. There is a crystal on the board that goes that
fast. They can't even think about sending that fast.

>performance test, I only get around 22-40K/sec rating (I believe).  My
>uncle has some 1 megabit/second card and he gets around the same rate.
>Shouldn't I be able to get ten times what he gets?

Absolutely not. Keep in mind the following:

1) Nobody gets 10mbit/second anyway, even if they have cards that can
really do it. One of the realities of ethernet.

2) Netware Lite is not what you use during performance benchmarks.

3) Lots of companies lie outrageously about the performance of their
systems (this is not limited to ethernet, computers, or even devices - I
know lots of people who lie about their *own* performances. :-) ).

It's interesting that your uncle has a card that is rated at
1mbit/second. That either means that there was a misprint in the
literature or somebody was unusually honest. It would be nice if
ethernet devices were supplied with sustained transfer rate information,
but it's not a nice world. :-(. Many cards that claim to signal at X bps
were rated that way by sending 1 packet and then multiplying out - not a
real world situation.

>For the price, they seem to perform well, I just thought they'd be a
>little faster.  They are 8-bit cards running on a 286/8 and a 8088 that
>has a 286/8 express card in it.

Let's face it, you're just not going to get performance out of this set
up. You have old cards with no buffer or DMA (if memory serves) and
machines that can't sustain a high data rate anyway. Don't worry about
it too much. If they get the job done for cheap, then what the heck.

>I might consider buying a few more at the same price in the future, but
>I wanted to know if there are any other cards around the same price that
>could do better ... Basically, what I'm asking is ... is the 3C501 network
>card good or bad ... why or why not?

It is no longer good compared to the cards on the market today. Of
course, most of the cards on the market today cost considerably more. 

>If I want to add computers to my little network later, do I have to
>use 3C501 cards, or can I use any other cards that allow BNC cabling?

Any cards will do.
-- 
Rich Lawrence, Synoptics Systems Engineer  DOD#9630  rich@grebyn.com
     '92 Seca II "Yuri"  CI$:71101,2272  GEnie:R.LAWRENCE14
   216 years ago my government gave me certain inalienable rights.
     Since then, they've been trying to correct their mistake.
Newsgroups: comp.dcom.lans.ethernet
From: ssw@bronze.ucs.indiana.edu (steven wallace)
Subject: Re: Thin-wire - twisted-pair converter
Organization: Indiana University
Date: Tue, 10 Nov 1992 01:22:02 GMT

In <1992Nov9.143704.26176@doug.cae.wisc.edu> orchard@eceserv0.ece.wisc.edu (Bruce Orchard) writes:

>We are about to move into an addition to our building.  Most of
>the old part of the building is wired with thin-wire Ethernet
>but the new part will be wired with twisted-pair Ethernet.
>Some of the rooms in the new part will have several workstations
>moved from the old part.  The workstations are now wired with
>thin-wire Ethernet.  Most of the workstations have an AUI 
>interface, some have a thin-wire interface, and at most a few have
>twisted-pair interfaces.

>Here are the options I have thought of:

>1.  Put twisted-pair transceivers on all the workstations and
>    use a twisted pair hub in the room with the workstations.
>    Unfortunately, a few of the workstations have only the
>    thin-wire interface.

>2.  Use a twisted-pair - thin-wire converter such as is made by
>    Cabletron and Milan.  These are not true repeaters and
>    have a limit of 10 connections on the thin-wire side.
>    I do not expect the limit of 10 to be a problem.
>    The thin-wire segment does not count as an Ethernet
>    segment.

Beware of these twisted pair to thinwire converters.  They don't jam
after detecting a collision and this can cause BIG problems.  I've seen
two Sun workstations with cross mounted file systems connected to a
short thinwire segment incapacitated when attached to a building
ethernet via one of these.

We are getting Asante (sp?) repeaters (8 twisted pair, 1 BNC) for $200.
This is about the price of the converters, more functional, and it
works.

>3.  Use a true repeater with interfaces for twisted pair and
>    thin-wire such as is made by Allied Telesis.  This makes
>    the thin-wire segment count as an Ethernet segment, but I 
>    do not expect to exceed the 5 segment limit.  The thin-wire
>    segment can have 30 connections, the same as any other 
>    thin-wire segment.

>I am leaning to either option 2 or option 3.  The repeater
>for option 3 costs about $100-$200 more than the converters
>in option 2 (I don't have firm quotes).  

>Are there advantages or disadvantages of options 2 or 3
>I have not thought of?

>How well to the converters (option 2) work?

>Bruce Orchard (orchard@ece.wisc.edu)
-- 
====================================================================
Steven Wallace, N9LKJ         |  wallaces@ucs.indiana.edu (internet)
Acting Associate Director     |  wallaces@iubacs          (bitnet)
Network Systems UCS           |  (812) 855 - 0960         (voice)
From: ctoomey@ccvax.ucd.ie
Newsgroups: comp.dcom.lans.ethernet
Subject: Re: Late Collisions (Exsqueeze me?)
Date: 12 Nov 92 02:31:11 GMT
Organization: University College Dublin

> NIC (Novell/Anthem BustMastering NE2100) in the fileserver, using the `MONITOR'
                     ^^^^

Ooops, Freudian slip there ;-)  Should have read `BusMastering' - the other is
a fascinating concept though, non?

Ciao,

	- Colm Toomey -
Newsgroups: comp.dcom.lans.ethernet
From: hambel@cbnewsj.cb.att.com (george.a.hambel)
Subject: Re: What do you think of 3com's ELNK III?
Organization: AT&T
Distribution: usa
Date: Tue, 10 Nov 1992 14:28:05 GMT
Keywords: 3Com NIC ELNKIII

In article  rohrernl@helix.nih.gov (Nathan Rohrer) writes:
>Are they really that much faster than previous 3Com cards?  Has anyone 
>experienced major problems with them?  We're thinking about upgrading all

There was an article in Lan Times a little while ago about the card.
It's not too technical, but from the article you can gather that
the technology, although very simple is quite remarkable.  The
basic shceme of the card is to get rid of the buffer memory that
the old 3COM cards had.  In order to be effecient as a bus master,
the dynamically change the thresholds of the FIFO to meet the
latency requirements of the bus.  I haven't played with one of
the cards, but from what I've seen, it's a good card.  3COM 
usually builds good stuff, so it would be a good buy over 
something like the new AMD card.

-----------------------------------------------------
|George A. Hambel		hambel@aloft.att.com|
|AT&T Bell Laboratories		215-439-6050        |
-----------------------------------------------------
Newsgroups: comp.dcom.lans.ethernet
From: rpw3@rigden.wpd.sgi.com (Rob Warnock)
Subject: Re: Re: packet drops on repeaters?
Organization: Silicon Graphics, Inc.  Mountain View, CA
Date: Fri, 6 Nov 1992 12:30:48 GMT

rich@grebyn.com (Richard Lawrence) writes:
+---------------
| rpw3@rigden.wpd.sgi.com (Rob Warnock) writes:
| >             ... What is much more likely these days is to see loaded
| >nets with collision rates of several hundred percent yet find *no* excess
| >collisions (>15 attempts/packet) and no packet loss.
| 
| What about "morning boot time" for a workgroup?  Especially in
| engineering environments after the (shudder) Morning Meeting.
+---------------

No problem.

Try a hard one: Just after the power comes back from a power fail and
everybody's workstation boots *exactly* at the same time?

Still no problem.

Notice I am not talking about lack of load on the net. Certainly any network
can see load peaks approching 100%. I'm just saying that Ethernet doesn't
"collapse" under such loads and it *does* continue to more-or-less fairly
share the bandwidth. *OF COURSE* if 1000 workstations all try to use the
same 10 Mb/s at the same time, they're gonna see something less than 10 Kb/s
each, and of course that's going to *feel* like "collapse" to anyone who
usually uses the net when it's idle. But that's not "collapse"; it's called
"sharing"...


-Rob

-----
Rob Warnock, MS-9U/510		rpw3@sgi.com
Silicon Graphics, Inc.		(415)390-1673
2011 N. Shoreline Blvd.
Mountain View, CA  94043