GroupStudy.com GroupStudy.com - A virtual community of network engineers
 Home  BookStore  StudyNotes  Links  Archives  StudyRooms  HelpWanted  Discounts  Login
RE: summarization except for 1 address posted 04/01/2005
[Chronological Index] [Thread Index] [Top] [Date Prev][Date Next] [Thread Prev][Thread Next]


Hello,

Simple solution

Access-list 70 deny 192.168.5.0 0.0.0.255
Access-list 70 permit any

Route-map SUP permit 10
Match ip address 70
Router Bgp 
Aggregate-address 192.168.0.0 0.0.224.255 suppress-map SUP

sh ip bgp
BGP table version is 9, local router ID is 192.168.31.1
Status codes: s suppressed, d damped, h history, * valid, > best, i -
internal
Origin codes: i - IGP, e - EGP, ? - incomplete

   Network          Next Hop            Metric LocPrf Weight Path
*> 192.168.0.0/19   0.0.0.0                            32768 i
s> 192.168.1.0      0.0.0.0                  0         32768 i
*> 192.168.5.0      0.0.0.0                  0         32768 i
s> 192.168.12.0     0.0.0.0                  0         32768 i
s> 192.168.31.0     0.0.0.0                  0         32768 i

You may be also need to add as-set to aggregate-address command to
prevent summary-address back annonce 

-----Original Message-----
From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
Michael Bernstein
Sent: Thursday, March 31, 2005 2:39 AM
To: security@xxxxxxxxxxxxxx
Subject: summarization except for 1 address

Is there a way to summarize many addresses except for one address that
falls in between the group - for
example:

192.168.1.0/24
192.168.5.0/24
192.168.12.0/24
192.168.31.0/24

So this summary would be:

192.168.1.0 255.255.224.0

256-32 = 224

Is this correct? So say we don't want to summarize the 192.168.5.0
address. How is that excluded?

Thanks.
Mike



		
__________________________________
Do you Yahoo!? 
Make Yahoo! your home page
http://www.yahoo.com/r/hs


From security-owner@xxxxxxxxxxxxxx Fri Apr  1 05:54:11 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j31AsBJb002090
	GroupStudy Mailer; Fri, 1 Apr 2005 05:54:11 -0500
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j31AsBKG002088
	for GroupStudy Mailer; Fri, 1 Apr 2005 05:54:11 -0500
Received: from amthqex01.amt.ru (amthqex01.amt.ru [212.233.69.9]) by
  groupstudy.com (8.12.11/8.12.10) with ESMTP id j31AsANA002043
  GroupStudy Mailer; Fri, 1 Apr 2005 05:54:10 -0500
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Subject: RE: summarization except for 1 address
Date: Fri, 1 Apr 2005 14:51:59 +0400
Message-ID: <8B5577ED1D5D2F4AA0E4651EC41C6DC7039C67FC@xxxxxxxxxxxxxxxx>
Thread-Topic: summarization except for 1 address
Thread-Index: AcU1fYd67G9Ur0FNRJSODqIGOVfkAABGB7BwAASmE3A=
From: "Ilyasov, Sergey" <silyasov@xxxxxx>
To: <security@xxxxxxxxxxxxxx>
Content-Transfer-Encoding: 7bit
X-MIME-Autoconverted: from quoted-printable to 8bit by groupstudy.com id
  j31AsANA002043
X-ASK-Info: Whitelist match [from silyasov@xxx\.ru] (2005/04/01 05:54:11)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: "Ilyasov, Sergey" <silyasov@xxxxxx>

Mistake,
Aggregate-address must contain ordinary mask not wild
Right command 
aggregate-address 192.168.0.0 255.255.224.0 suppress-map SUP
-----Original Message-----
From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
Ilyasov, Sergey
Sent: Friday, April 01, 2005 1:02 PM
To: Michael Bernstein; security@xxxxxxxxxxxxxx
Subject: RE: summarization except for 1 address

Hello,

Simple solution

Access-list 70 deny 192.168.5.0 0.0.0.255 Access-list 70 permit any

Route-map SUP permit 10
Match ip address 70
Router Bgp
Aggregate-address 192.168.0.0 0.0.224.255 suppress-map SUP

sh ip bgp
BGP table version is 9, local router ID is 192.168.31.1 Status codes: s
suppressed, d damped, h history, * valid, > best, i - internal Origin
codes: i - IGP, e - EGP, ? - incomplete

   Network          Next Hop            Metric LocPrf Weight Path
*> 192.168.0.0/19   0.0.0.0                            32768 i
s> 192.168.1.0      0.0.0.0                  0         32768 i
*> 192.168.5.0      0.0.0.0                  0         32768 i
s> 192.168.12.0     0.0.0.0                  0         32768 i
s> 192.168.31.0     0.0.0.0                  0         32768 i

You may be also need to add as-set to aggregate-address command to
prevent summary-address back annonce 

-----Original Message-----
From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
Michael Bernstein
Sent: Thursday, March 31, 2005 2:39 AM
To: security@xxxxxxxxxxxxxx
Subject: summarization except for 1 address

Is there a way to summarize many addresses except for one address that
falls in between the group - for
example:

192.168.1.0/24
192.168.5.0/24
192.168.12.0/24
192.168.31.0/24

So this summary would be:

192.168.1.0 255.255.224.0

256-32 = 224

Is this correct? So say we don't want to summarize the 192.168.5.0
address. How is that excluded?

Thanks.
Mike



		
__________________________________
Do you Yahoo!? 
Make Yahoo! your home page
http://www.yahoo.com/r/hs


From security-owner@xxxxxxxxxxxxxx Fri Apr  1 06:43:19 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j31BhJ0G007186
	GroupStudy Mailer; Fri, 1 Apr 2005 06:43:19 -0500
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j31BhJ67007184
	for GroupStudy Mailer; Fri, 1 Apr 2005 06:43:19 -0500
Received: from extsxt1.commander.com (xt1.commander.com
  [203.191.175.172]) by groupstudy.com (8.12.11/8.12.10) with ESMTP id
  j31BhGNJ007147 GroupStudy Mailer; Fri, 1 Apr 2005 06:43:17 -0500
Received: from sydsex3.commander.com ([203.191.175.167]) by
  extsxt1.commander.com with InterScan Messaging Security Suite; Fri, 01
  Apr 2005 21:37:42 +1000
Received: from sydsex2.commander.com ([172.17.0.232]) by
  sydsex3.commander.com with Microsoft SMTPSVC(6.0.3790.211); Fri, 1 Apr
  2005 21:42:54 +1000
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Subject: RADIUS ISDN callback - help!
Date: Fri, 1 Apr 2005 21:43:07 +1000
Message-ID: <FFA88AD888E2CE46A915A87A352B7233389636@xxxxxxxxxxxxxxxxxxxxx>
Thread-Topic: RADIUS ISDN callback - help!
Thread-Index: AcTzBVV5Rt0D2sGrTt68goahHJZv/gAVstnwENP5KAA=
From: "Hosking, Darren" <dhosking@xxxxxxxxxxxxx>
To: <security@xxxxxxxxxxxxxx>
X-OriginalArrivalTime: 01 Apr 2005 11:42:54.0666 (UTC)
  FILETIME=[F15F52A0:01C536AF]
X-Converted-To-Plain-Text: from multipart/alternative by GroupStudy
X-Converted-To-Plain-Text: Alternative section used was text/plain
X-ASK-Info: Whitelist match [from dhosking@xxxxxxxxx\.com] (2005/04/01 06:43:19)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: "Hosking, Darren" <dhosking@xxxxxxxxxxxxx>

I can't get RADIUS callback to work and have tried everything! TACACS
works fine and RADIUS works if I have a fallback to local but it doesn't
work using RADIUS alone and the problem appears to be that the callback
server can't authenticate will the callback client.



I've searched the net and the only thing I can find is adding the
following to the TACACS server so it can authenticate when it calls
back.



Any suggestions? Has anyone got this working?



Yusuf solutions all have fallback to local.



Logs and configs are below.



            Thanks, Darren



Cisco av-pair RADIUS attributes:



lcp:send-auth=2

lcp:send-name=r5

lcp:send-secret=pass7



R5:



aaa authentication ppp TAC group tacacs+

aaa authentication ppp RAD group radius

aaa authorization network TAC group tacacs+

aaa authorization network RAD group radius



interface BRI0/0

 ip address 192.168.2.2 255.255.255.252

 encapsulation ppp

 dialer idle-timeout 30

 dialer callback-secure

 dialer-group 1

 isdn switch-type basic-net3

 ppp callback accept

 ppp authentication chap callin RAD

 ppp authorization RAD

 no clns route-cache

!



R7:



interface BRI0

 ip address 192.168.2.1 255.255.255.252

 encapsulation ppp

 dialer idle-timeout 30

 dialer map ip 192.168.2.2 name r5 broadcast 90003000

 dialer-group 1

 isdn switch-type basic-net3

 ppp callback request

 ppp authentication chap callin optional

!



*Mar  7 01:15:49.523: AAA/BIND(00000094): Bind i/f BRI0/0:1

*Mar  7 01:15:49.527: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state
to up

*Mar  7 01:15:49.531: BR0/0:1 PPP: Using dialer call direction

*Mar  7 01:15:49.531: BR0/0:1 PPP: Treating connection as a callin

*Mar  7 01:15:49.683: BR0/0:1 PPP: Authorization required

*Mar  7 01:15:49.695: BR0/0:1 CHAP: O CHALLENGE id 94 len 23 from "r5"

*Mar  7 01:15:49.707: BR0/0:1 CHAP: I RESPONSE id 94 len 23 from "r7"

*Mar  7 01:15:49.707: AAA/AUTHEN/PPP (00000094): Pick method list 'RAD'

*Mar  7 01:15:49.711: BR0/0:1 PPP: Sent CHAP LOGIN Request

*Mar  7 01:15:49.711: RADIUS/ENCODE(00000094):Orig. component type =
ISDN

*Mar  7 01:15:49.711: RADIUS(00000094): Storing nasport 30001 in rad_db

*Mar  7 01:15:49.711: RADIUS(00000094): Config NAS IP: 0.0.0.0

*Mar  7 01:15:49.711: RADIUS/ENCODE(00000094): acct_session_id: 135

*Mar  7 01:15:49.711: RADIUS(00000094): sending

*Mar  7 01:15:49.711: RADIUS/ENCODE: Best Local IP-Address 150.50.111.5
for Radius-Server 150.50.111.100

*Mar  7 01:15:49.711: RADIUS(00000094): Send Access-Request to
150.50.111.100:1645 id 1645/49, len 110

*Mar  7 01:15:49.715: RADIUS:  authenticator E3 5C 5A 9E B1 D4 ED F9 -
ED 84 D5 89 DD 49 21 B8

*Mar  7 01:15:49.715: RADIUS:  Framed-Protocol     [7]   6   PPP
[1]

*Mar  7 01:15:49.715: RADIUS:  User-Name           [1]   4   "r7"

*Mar  7 01:15:49.715: RADIUS:  CHAP-Password       [3]   19  *

*Mar  7 01:15:49.715: RADIUS:  Vendor, Cisco       [26]  16

*Mar  7 01:15:49.715: RADIUS:   cisco-nas-port     [2]   10  "BRI0/0:1"

*Mar  7 01:15:49.715: RADIUS:  NAS-Port            [5]   6   30001


*Mar  7 01:15:49.715: RADIUS:  NAS-Port-Type       [61]  6   ISDN
[2]

*Mar  7 01:15:49.715: RADIUS:  Calling-Station-Id  [31]  11  "390000000"

*Mar  7 01:15:49.715: RADIUS:  Called-Station-Id   [30]  10  "90003000"

*Mar  7 01:15:49.719: RADIUS:  Service-Type        [6]   6   Framed
[2]

*Mar  7 01:15:49.719: RADIUS:  NAS-IP-Address      [4]   6
150.50.111.5

*Mar  7 01:15:49.727: RADIUS: Received from id 1645/49
150.50.111.100:1645, Access-Accept, len 312

*Mar  7 01:15:49.731: RADIUS:  authenticator D3 4D 20 F5 7F EF D0 15 -
CB E2 E2 21 36 DA A4 7A

*Mar  7 01:15:49.731: RADIUS:  Vendor, Cisco       [26]  41

*Mar  7 01:15:49.731: RADIUS:   Cisco AVpair       [1]   35
"arap:callback-dialstring=90003010"

*Mar  7 01:15:49.731: RADIUS:  Vendor, Cisco       [26]  41

*Mar  7 01:15:49.731: RADIUS:   Cisco AVpair       [1]   35
"slip:callback-dialstring=90003010"

*Mar  7 01:15:49.731: RADIUS:  Vendor, Cisco       [26]  42

*Mar  7 01:15:49.731: RADIUS:   Cisco AVpair       [1]   36
"shell:callback-dialstring=90003010"

*Mar  7 01:15:49.731: RADIUS:  Vendor, Cisco       [26]  40

*Mar  7 01:15:49.731: RADIUS:   Cisco AVpair       [1]   34
"lcp:callback-dialstring=90003010"

*Mar  7 01:15:49.731: RADIUS:  Service-Type        [6]   6   Framed
[2]

*Mar  7 01:15:49.731: RADIUS:  Framed-Protocol     [7]   6   PPP
[1]

*Mar  7 01:15:49.735: RADIUS:  Vendor, Cisco       [26]  23

*Mar  7 01:15:49.735: RADIUS:   Cisco AVpair       [1]   17
"lcp:send-auth=2"

*Mar  7 01:15:49.735: RADIUS:  Vendor, Cisco       [26]  24

*Mar  7 01:15:49.735: RADIUS:   Cisco AVpair       [1]   18
"lcp:send-name=r5"

*Mar  7 01:15:49.735: RADIUS:  Vendor, Cisco       [26]  29

*Mar  7 01:15:49.735: RADIUS:   Cisco AVpair       [1]   23
"lcp:send-secret=pass7"

*Mar  7 01:15:49.735: RADIUS:  Framed-IP-Address   [8]   6
255.255.255.255

*Mar  7 01:15:49.735: RADIUS:  Class               [25]  34

*Mar  7 01:15:49.735: RADIUS:   43 49 53 43 4F 41 43 53 3A 30 30 30 32
61 37 31  [CISCOACS:0002a71]

*Mar  7 01:15:49.739: RADIUS:   35 2F 39 36 33 32 36 66 30 35 2F 33 30
30 30 31  [5/96326f05/30001]

*Mar  7 01:15:49.739: RADIUS(00000094): Received from id 1645/49

*Mar  7 01:15:49.739: RADIUS/DECODE: VSA send-auth=2 maps to chap

*Mar  7 01:15:49.743: BR0/0:1 PPP: Received LOGIN Response PASS

*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: callback-dialstring

*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: callback-dialstring

*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: callback-dialstring

*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: callback-dialstring

*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: service-type

*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: Framed-Protocol

*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: send-auth

*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: send-name

*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: send-secret

*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: addr

*Mar  7 01:15:49.759: BR0/0:1 AAA/AUTHOR/LCP: Process Author

*Mar  7 01:15:49.759: BR0/0:1 AAA/AUTHOR/LCP: Process Attr:
callback-dialstring

*Mar  7 01:15:49.759: BR0/0:1 AAA/AUTHOR/LCP: Process Attr: service-type

*Mar  7 01:15:49.759: BR0/0:1 AAA/AUTHOR/LCP: Process Attr: send-name

*Mar  7 01:15:49.759: BR0/0:1 AAA/AUTHOR/LCP: Process Attr: send-secret

*Mar  7 01:15:49.759: BR0/0:1 CHAP: O SUCCESS id 94 len 4

*Mar  7 01:15:49.763: BR0/0:1 PPP/AAA: Saving a copy of the
authorization data

*Mar  7 01:15:49.763: BR0/0:1 PPP/AAA: Copying acct-sess-id to the
callback author data

*Mar  7 01:15:50.763: %LINEPROTO-5-UPDOWN: Line protocol on Interface
BRI0/0:1, changed state to up

*Mar  7 01:15:50.767: %ISDN-6-CONNECT: Interface BRI0/0:1 is now
connected to 390000000 r7

*Mar  7 01:15:50.767: %ISDN-6-DISCONNECT: Interface BRI0/0:1
disconnected from 390000000 r7, call lasted 1 seconds

*Mar  7 01:15:50.879: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state
to down

*Mar  7 01:15:51.879: %LINEPROTO-5-UPDOWN: Line protocol on Interface
BRI0/0:1, changed state to down

*Mar  7 01:16:05.063: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state
to up

*Mar  7 01:16:05.063: BR0/0:1 PPP/AAA: Using authorization data from a
prior call

*Mar  7 01:16:05.067: AAA/BIND(00000095): Bind i/f BRI0/0:1

*Mar  7 01:16:05.067: BR0/0:1 PPP(00000095): Replacing Acct Session Id
from PPP Callback Author Data

*Mar  7 01:16:05.071: BR0/0:1 PPP: Using dialer call direction

*Mar  7 01:16:05.071: BR0/0:1 PPP: Treating connection as a callout

*Mar  7 01:16:05.071: BR0/0:1 PPP: Authorization required

*Mar  7 01:16:05.071: BR0/0:1 PPP: No remote authentication for callback

*Mar  7 01:16:05.071: BR0/0:1 AAA/AUTHOR/LCP: Authorization succeeds
trivially

*Mar  7 01:16:05.091: BR0/0:1 CHAP: I CHALLENGE id 40 len 23 from "r7"

*Mar  7 01:16:05.091: AAA/AUTHEN/PPP (00000095): Pick method list 'RAD'

*Mar  7 01:16:05.091: RADIUS/ENCODE(00000095): sendauth, failing over

*Mar  7 01:16:05.091: RADIUS/ENCODE(00000095): send packet; BEGIN

*Mar  7 01:16:05.091: BR0/0:1 CHAP: Unable to authenticate for peer

*Mar  7 01:16:05.103: %ISDN-6-CONNECT: Interface BRI0/0:1 is now
connected to 90003010 unknown

*Mar  7 01:16:05.215: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state
to down



----------------------------------------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error please notify the
system manager. Please note that any views or opinions presented in this
email are solely those of the author and do not necessarily represent
those of the company. The recipient should check this email and any
attachments for the presence of viruses. The company accepts no
liability for any damage caused by any virus transmitted by this email.
----------------------------------------------------


From security-owner@xxxxxxxxxxxxxx Fri Apr  1 10:36:29 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j31FaTtU021916
	GroupStudy Mailer; Fri, 1 Apr 2005 10:36:29 -0500
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j31FaTp7021914
	for GroupStudy Mailer; Fri, 1 Apr 2005 10:36:29 -0500
Received: from mail.o2.co.uk (piglet.london.ongenie.net
  [193.113.160.15]) by groupstudy.com (8.12.11/8.12.10) with ESMTP id
  j31FaRkI021872 GroupStudy Mailer; Fri, 1 Apr 2005 10:36:27 -0500
Received: from [137.213.254.241] by mail.o2.co.uk with HTTP; Fri, 1 Apr
  2005 16:38:08 +0100
Date: Fri, 1 Apr 2005 16:38:08 +0100
Message-ID: <42402344000047C7@xxxxxxxxxxxxxxxxxxxxxxxxx>
In-Reply-To: <FFA88AD888E2CE46A915A87A352B7233389636@xxxxxxxxxxxxxxxxxxxxx>
From: jtolvane@xxxxxxxx
Subject: RE: RADIUS ISDN callback - help!
To: security@xxxxxxxxxxxxxx
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-15"
Content-Transfer-Encoding: 7bit
X-MIME-Autoconverted: from quoted-printable to 8bit by groupstudy.com id
  j31FaRkI021872
X-ASK-Info: Whitelist match [from jtolvane@xx\.co\.uk] (2005/04/01 10:36:28)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: jtolvane@xxxxxxxx

Well,

from your debugs the issue seems to be that when R5 calls back to R7, R7
decides to send an authentication request to R5:

>*Mar  7 01:16:05.091: BR0/0:1 CHAP: I CHALLENGE id 40 len 23 from "r7"

which consequently, R5 is unable to respond to and the call is terminated..
if you do "debug isdn q931" on both routers you should probably see that
R7 terminates the call....

I'd love to try this but I haven't got access to the right kit at the moment...
can you try to ditch the "callin" bit from the ppp authentication line on
R7 since that seems to make R7 authenticate anyone doing an inbound call..
which is what happens here..

Also,

http://www.cisco.com/en/US/tech/tk713/tk507/technologies_configuration_example09186a00800946ff.shtml

I would have thought that the example config here is what you are after???
Or did I get the wrong end of the stick.

Good luck :-)
>-- Original Message --
>Subject: RADIUS ISDN callback - help!
>Date: Fri, 1 Apr 2005 21:43:07 +1000
>From: "Hosking, Darren" <dhosking@xxxxxxxxxxxxx>
>To: <security@xxxxxxxxxxxxxx>
>Reply-To: "Hosking, Darren" <dhosking@xxxxxxxxxxxxx>
>
>
>I can't get RADIUS callback to work and have tried everything! TACACS
>works fine and RADIUS works if I have a fallback to local but it doesn't
>work using RADIUS alone and the problem appears to be that the callback
>server can't authenticate will the callback client.
>
>
>
>I've searched the net and the only thing I can find is adding the
>following to the TACACS server so it can authenticate when it calls
>back.
>
>
>
>Any suggestions? Has anyone got this working?
>
>
>
>Yusuf solutions all have fallback to local.
>
>
>
>Logs and configs are below.
>
>
>
>            Thanks, Darren
>
>
>
>Cisco av-pair RADIUS attributes:
>
>
>
>lcp:send-auth=2
>
>lcp:send-name=r5
>
>lcp:send-secret=pass7
>
>
>
>R5:
>
>
>
>aaa authentication ppp TAC group tacacs+
>
>aaa authentication ppp RAD group radius
>
>aaa authorization network TAC group tacacs+
>
>aaa authorization network RAD group radius
>
>
>
>interface BRI0/0
>
> ip address 192.168.2.2 255.255.255.252
>
> encapsulation ppp
>
> dialer idle-timeout 30
>
> dialer callback-secure
>
> dialer-group 1
>
> isdn switch-type basic-net3
>
> ppp callback accept
>
> ppp authentication chap callin RAD
>
> ppp authorization RAD
>
> no clns route-cache
>
>!
>
>
>
>R7:
>
>
>
>interface BRI0
>
> ip address 192.168.2.1 255.255.255.252
>
> encapsulation ppp
>
> dialer idle-timeout 30
>
> dialer map ip 192.168.2.2 name r5 broadcast 90003000
>
> dialer-group 1
>
> isdn switch-type basic-net3
>
> ppp callback request
>
> ppp authentication chap callin optional
>
>!
>
>
>
>*Mar  7 01:15:49.523: AAA/BIND(00000094): Bind i/f BRI0/0:1
>
>*Mar  7 01:15:49.527: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state
>to up
>
>*Mar  7 01:15:49.531: BR0/0:1 PPP: Using dialer call direction
>
>*Mar  7 01:15:49.531: BR0/0:1 PPP: Treating connection as a callin
>
>*Mar  7 01:15:49.683: BR0/0:1 PPP: Authorization required
>
>*Mar  7 01:15:49.695: BR0/0:1 CHAP: O CHALLENGE id 94 len 23 from "r5"
>
>*Mar  7 01:15:49.707: BR0/0:1 CHAP: I RESPONSE id 94 len 23 from "r7"
>
>*Mar  7 01:15:49.707: AAA/AUTHEN/PPP (00000094): Pick method list 'RAD'
>
>*Mar  7 01:15:49.711: BR0/0:1 PPP: Sent CHAP LOGIN Request
>
>*Mar  7 01:15:49.711: RADIUS/ENCODE(00000094):Orig. component type =
>ISDN
>
>*Mar  7 01:15:49.711: RADIUS(00000094): Storing nasport 30001 in rad_db
>
>*Mar  7 01:15:49.711: RADIUS(00000094): Config NAS IP: 0.0.0.0
>
>*Mar  7 01:15:49.711: RADIUS/ENCODE(00000094): acct_session_id: 135
>
>*Mar  7 01:15:49.711: RADIUS(00000094): sending
>
>*Mar  7 01:15:49.711: RADIUS/ENCODE: Best Local IP-Address 150.50.111.5
>for Radius-Server 150.50.111.100
>
>*Mar  7 01:15:49.711: RADIUS(00000094): Send Access-Request to
>150.50.111.100:1645 id 1645/49, len 110
>
>*Mar  7 01:15:49.715: RADIUS:  authenticator E3 5C 5A 9E B1 D4 ED F9 -
>ED 84 D5 89 DD 49 21 B8
>
>*Mar  7 01:15:49.715: RADIUS:  Framed-Protocol     [7]   6   PPP
>[1]
>
>*Mar  7 01:15:49.715: RADIUS:  User-Name           [1]   4   "r7"
>
>*Mar  7 01:15:49.715: RADIUS:  CHAP-Password       [3]   19  *
>
>*Mar  7 01:15:49.715: RADIUS:  Vendor, Cisco       [26]  16
>
>*Mar  7 01:15:49.715: RADIUS:   cisco-nas-port     [2]   10  "BRI0/0:1"
>
>*Mar  7 01:15:49.715: RADIUS:  NAS-Port            [5]   6   30001
>
>
>*Mar  7 01:15:49.715: RADIUS:  NAS-Port-Type       [61]  6   ISDN
>[2]
>
>*Mar  7 01:15:49.715: RADIUS:  Calling-Station-Id  [31]  11  "390000000"
>
>*Mar  7 01:15:49.715: RADIUS:  Called-Station-Id   [30]  10  "90003000"
>
>*Mar  7 01:15:49.719: RADIUS:  Service-Type        [6]   6   Framed
>[2]
>
>*Mar  7 01:15:49.719: RADIUS:  NAS-IP-Address      [4]   6
>150.50.111.5
>
>*Mar  7 01:15:49.727: RADIUS: Received from id 1645/49
>150.50.111.100:1645, Access-Accept, len 312
>
>*Mar  7 01:15:49.731: RADIUS:  authenticator D3 4D 20 F5 7F EF D0 15 -
>CB E2 E2 21 36 DA A4 7A
>
>*Mar  7 01:15:49.731: RADIUS:  Vendor, Cisco       [26]  41
>
>*Mar  7 01:15:49.731: RADIUS:   Cisco AVpair       [1]   35
>"arap:callback-dialstring=90003010"
>
>*Mar  7 01:15:49.731: RADIUS:  Vendor, Cisco       [26]  41
>
>*Mar  7 01:15:49.731: RADIUS:   Cisco AVpair       [1]   35
>"slip:callback-dialstring=90003010"
>
>*Mar  7 01:15:49.731: RADIUS:  Vendor, Cisco       [26]  42
>
>*Mar  7 01:15:49.731: RADIUS:   Cisco AVpair       [1]   36
>"shell:callback-dialstring=90003010"
>
>*Mar  7 01:15:49.731: RADIUS:  Vendor, Cisco       [26]  40
>
>*Mar  7 01:15:49.731: RADIUS:   Cisco AVpair       [1]   34
>"lcp:callback-dialstring=90003010"
>
>*Mar  7 01:15:49.731: RADIUS:  Service-Type        [6]   6   Framed
>[2]
>
>*Mar  7 01:15:49.731: RADIUS:  Framed-Protocol     [7]   6   PPP
>[1]
>
>*Mar  7 01:15:49.735: RADIUS:  Vendor, Cisco       [26]  23
>
>*Mar  7 01:15:49.735: RADIUS:   Cisco AVpair       [1]   17
>"lcp:send-auth=2"
>
>*Mar  7 01:15:49.735: RADIUS:  Vendor, Cisco       [26]  24
>
>*Mar  7 01:15:49.735: RADIUS:   Cisco AVpair       [1]   18
>"lcp:send-name=r5"
>
>*Mar  7 01:15:49.735: RADIUS:  Vendor, Cisco       [26]  29
>
>*Mar  7 01:15:49.735: RADIUS:   Cisco AVpair       [1]   23
>"lcp:send-secret=pass7"
>
>*Mar  7 01:15:49.735: RADIUS:  Framed-IP-Address   [8]   6
>255.255.255.255
>
>*Mar  7 01:15:49.735: RADIUS:  Class               [25]  34
>
>*Mar  7 01:15:49.735: RADIUS:   43 49 53 43 4F 41 43 53 3A 30 30 30 32
>61 37 31  [CISCOACS:0002a71]
>
>*Mar  7 01:15:49.739: RADIUS:   35 2F 39 36 33 32 36 66 30 35 2F 33 30
>30 30 31  [5/96326f05/30001]
>
>*Mar  7 01:15:49.739: RADIUS(00000094): Received from id 1645/49
>
>*Mar  7 01:15:49.739: RADIUS/DECODE: VSA send-auth=2 maps to chap
>
>*Mar  7 01:15:49.743: BR0/0:1 PPP: Received LOGIN Response PASS
>
>*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: callback-dialstring
>
>*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: callback-dialstring
>
>*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: callback-dialstring
>
>*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: callback-dialstring
>
>*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: service-type
>
>*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: Framed-Protocol
>
>*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: send-auth
>
>*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: send-name
>
>*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: send-secret
>
>*Mar  7 01:15:49.743: BR0/0:1 PPP/AAA: Check Attr: addr
>
>*Mar  7 01:15:49.759: BR0/0:1 AAA/AUTHOR/LCP: Process Author
>
>*Mar  7 01:15:49.759: BR0/0:1 AAA/AUTHOR/LCP: Process Attr:
>callback-dialstring
>
>*Mar  7 01:15:49.759: BR0/0:1 AAA/AUTHOR/LCP: Process Attr: service-type
>
>*Mar  7 01:15:49.759: BR0/0:1 AAA/AUTHOR/LCP: Process Attr: send-name
>
>*Mar  7 01:15:49.759: BR0/0:1 AAA/AUTHOR/LCP: Process Attr: send-secret
>
>*Mar  7 01:15:49.759: BR0/0:1 CHAP: O SUCCESS id 94 len 4
>
>*Mar  7 01:15:49.763: BR0/0:1 PPP/AAA: Saving a copy of the
>authorization data
>
>*Mar  7 01:15:49.763: BR0/0:1 PPP/AAA: Copying acct-sess-id to the
>callback author data
>
>*Mar  7 01:15:50.763: %LINEPROTO-5-UPDOWN: Line protocol on Interface
>BRI0/0:1, changed state to up
>
>*Mar  7 01:15:50.767: %ISDN-6-CONNECT: Interface BRI0/0:1 is now
>connected to 390000000 r7
>
>*Mar  7 01:15:50.767: %ISDN-6-DISCONNECT: Interface BRI0/0:1
>disconnected from 390000000 r7, call lasted 1 seconds
>
>*Mar  7 01:15:50.879: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state
>to down
>
>*Mar  7 01:15:51.879: %LINEPROTO-5-UPDOWN: Line protocol on Interface
>BRI0/0:1, changed state to down
>
>*Mar  7 01:16:05.063: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state
>to up
>
>*Mar  7 01:16:05.063: BR0/0:1 PPP/AAA: Using authorization data from a
>prior call
>
>*Mar  7 01:16:05.067: AAA/BIND(00000095): Bind i/f BRI0/0:1
>
>*Mar  7 01:16:05.067: BR0/0:1 PPP(00000095): Replacing Acct Session Id
>from PPP Callback Author Data
>
>*Mar  7 01:16:05.071: BR0/0:1 PPP: Using dialer call direction
>
>*Mar  7 01:16:05.071: BR0/0:1 PPP: Treating connection as a callout
>
>*Mar  7 01:16:05.071: BR0/0:1 PPP: Authorization required
>
>*Mar  7 01:16:05.071: BR0/0:1 PPP: No remote authentication for callback
>
>*Mar  7 01:16:05.071: BR0/0:1 AAA/AUTHOR/LCP: Authorization succeeds
>trivially
>
>*Mar  7 01:16:05.091: BR0/0:1 CHAP: I CHALLENGE id 40 len 23 from "r7"
>
>*Mar  7 01:16:05.091: AAA/AUTHEN/PPP (00000095): Pick method list 'RAD'
>
>*Mar  7 01:16:05.091: RADIUS/ENCODE(00000095): sendauth, failing over
>
>*Mar  7 01:16:05.091: RADIUS/ENCODE(00000095): send packet; BEGIN
>
>*Mar  7 01:16:05.091: BR0/0:1 CHAP: Unable to authenticate for peer
>
>*Mar  7 01:16:05.103: %ISDN-6-CONNECT: Interface BRI0/0:1 is now
>connected to 90003010 unknown
>
>*Mar  7 01:16:05.215: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state
>to down
>
>
>
>----------------------------------------------------
>This email and any files transmitted with it are confidential and
>intended solely for the use of the individual or entity to whom they are
>addressed. If you have received this email in error please notify the
>system manager. Please note that any views or opinions presented in this
>email are solely those of the author and do not necessarily represent
>those of the company. The recipient should check this email and any
>attachments for the presence of viruses. The company accepts no
>liability for any damage caused by any virus transmitted by this email.
>----------------------------------------------------
>


________________________________________
For a wide range of mobile phones,free upgrades,accessories and tariffs plus
special deals when you buy online,visit www.o2.co.uk/shop <http://www.o2.co.uk/shop>


From security-owner@xxxxxxxxxxxxxx Fri Apr  1 11:11:11 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j31GBBxC029958
	GroupStudy Mailer; Fri, 1 Apr 2005 11:11:11 -0500
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j31GBB85029956
	for GroupStudy Mailer; Fri, 1 Apr 2005 11:11:11 -0500
Received: from web31602.mail.mud.yahoo.com (web31602.mail.mud.yahoo.com
  [68.142.198.148]) by groupstudy.com (8.12.11/8.12.10) with SMTP id
  j31GBBgm029909 GroupStudy Mailer; Fri, 1 Apr 2005 11:11:11 -0500
Received: (qmail 83892 invoked by uid 60001); 1 Apr 2005 16:11:04 -0000
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com;
  b=xpmGGfEQd/iC5jAnp0b24nKBTRKcwe6yL/jKbXEHmRm09oOI3CbmKVLHTqZqbf56g6NgZONXBzUQLox/973x/Pdcpga4brjR9IyGc6rgJbiAHMH9yikEuYh/HwqSVWUFrZtiunip1rCjvPSEAalqAqVmqaMLC7dXG+h5BTarQGs=
   ;
Message-ID: <20050401161104.83890.qmail@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
Received: from [196.204.136.2] by web31602.mail.mud.yahoo.com via HTTP;
  Fri, 01 Apr 2005 08:11:04 PST
Date: Fri, 1 Apr 2005 08:11:04 -0800 (PST)
From: CCIE CCIE <hope_ccie@xxxxxxxxx>
Subject: add me to msn hope_ccie@xxxxxxxxxxx
To: security@xxxxxxxxxxxxxx
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Converted-To-Plain-Text: from multipart/alternative by GroupStudy
X-Converted-To-Plain-Text: Alternative section used was text/plain
X-ASK-Info: Whitelist match [from hope_ccie@xxxxx\.com] (2005/04/01 11:11:11)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: CCIE CCIE <hope_ccie@xxxxxxxxx>

pls add me to ur msn list
 
hope_ccie@xxxxxxxxxxx
 

		
---------------------------------
Do you Yahoo!?
 Yahoo! Mail - 250MB free storage. Do more. Manage less.


From security-owner@xxxxxxxxxxxxxx Fri Apr  1 13:48:30 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j31ImUZI018336
	GroupStudy Mailer; Fri, 1 Apr 2005 13:48:30 -0500
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j31ImUX1018334
	for GroupStudy Mailer; Fri, 1 Apr 2005 13:48:30 -0500
Received: from sccrmhc12.comcast.net (sccrmhc12.comcast.net
  [204.127.202.56]) by groupstudy.com (8.12.11/8.12.10) with ESMTP id
  j31IkKRm017985 GroupStudy Mailer; Fri, 1 Apr 2005 13:46:20 -0500
Received: from 204.127.205.147 ([204.127.205.147]) by comcast.net
  (sccrmhc12) with SMTP id <2005040118461301200peuhqe>; Fri, 1 Apr 2005
  18:46:13 +0000
Received: from [69.105.229.189] by 204.127.205.147; Fri, 01 Apr 2005
  18:46:12 +0000
From: michaellzhou@xxxxxxxxxxx
To: CCIE CCIE <hope_ccie@xxxxxxxxx>, security@xxxxxxxxxxxxxx
Subject: Re: add me to msn hope_ccie@xxxxxxxxxxx
Date: Fri, 01 Apr 2005 18:46:12 +0000
Message-Id: <040120051846.28968.424D96F4000E4DAF0000712822007621949A01089604040A0E080C0703@xxxxxxxxxxx>
X-Mailer: AT&T Message Center Version 1 (Dec 17 2004)
X-Authenticated-Sender: bWljaGFlbGx6aG91QGNvbWNhc3QubmV0
X-ASK-Info: Message Queued (2005/04/01 13:46:21)
X-ASK-Info: Confirmed by User (2005/04/01 13:48:30)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: michaellzhou@xxxxxxxxxxx

Please add me.
My Email: michaellzhou@xxxxxxxxxxx

Thank you,
Michael


> pls add me to ur msn list
>  
> hope_ccie@xxxxxxxxxxx
>  
> 
> 		
> ---------------------------------
> Do you Yahoo!?
>  Yahoo! Mail - 250MB free storage. Do more. Manage less.


From security-owner@xxxxxxxxxxxxxx Fri Apr  1 15:16:23 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j31KGNbm025319
	GroupStudy Mailer; Fri, 1 Apr 2005 15:16:23 -0500
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j31KGNxq025317
	for GroupStudy Mailer; Fri, 1 Apr 2005 15:16:23 -0500
Received: from sj-iport-3.cisco.com (sj-iport-3-in.cisco.com
  [171.71.176.72]) by groupstudy.com (8.12.11/8.12.10) with ESMTP id
  j31KGMJA025292 GroupStudy Mailer; Fri, 1 Apr 2005 15:16:23 -0500
Received: from sj-core-2.cisco.com (171.71.177.254) by
  sj-iport-3.cisco.com with ESMTP; 01 Apr 2005 12:16:15 -0800
X-IronPort-AV: i="3.91,141,1110182400";  d="scan'208";
  a="244280824:sNHT23926224"
Received: from arahman-w2k.cisco.com ([10.32.14.149]) by
  sj-core-2.cisco.com (8.12.10/8.12.6) with ESMTP id j31KGCgF029355 for
  <security@xxxxxxxxxxxxxx>; Fri, 1 Apr 2005 12:16:13 -0800 (PST)
Message-Id: <4.3.2.7.2.20050401115007.02431458@xxxxxxxxxxxxxxxxxxxxx>
X-Sender: arahman@xxxxxxxxxxxxxxxxxxxxx
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2
Date: Fri, 01 Apr 2005 12:16:12 -0800
To: security@xxxxxxxxxxxxxx
From: Arif Rahman <arahman@xxxxxxxxx>
Subject: Failed 2nd attempt
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-PMX-Version: 4.7.0.111621
X-from-outside-Cisco: [10.32.14.149]
X-ASK-Info: Whitelist match [from arahman@xxxxx\.com] (2005/04/01 15:16:23)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: Arif Rahman <arahman@xxxxxxxxx>

Folks
hope everybody is doing fine. Failed on monday, spent couple of days to 
settle down. Simply I did not expect this. Going over two times, I feel I 
have necessary technical knowledge to make it but time was killer, too many 
things to complete within 8 hrs.

Those who already tried, if you have same feeling I would encourage you to 
let CCIE program to know about this.

Those who are preparing, first of all good luck. For tips, I would say 
follow the blue print word by word, review/lab configuration example from 
CCO as much as possible. Good time management on lab exam is real key.

Thank you,
Arifur Rahman
CCIE #13508
System Test Engineer, CRS group
Cisco Systems, INC.


From security-owner@xxxxxxxxxxxxxx Fri Apr  1 16:34:24 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j31LYOWU000847
	GroupStudy Mailer; Fri, 1 Apr 2005 16:34:24 -0500
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j31LYOOd000845
	for GroupStudy Mailer; Fri, 1 Apr 2005 16:34:24 -0500
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.200]) by
  groupstudy.com (8.12.11/8.12.10) with ESMTP id j31LYNOH000823
  GroupStudy Mailer; Fri, 1 Apr 2005 16:34:23 -0500
Received: by wproxy.gmail.com with SMTP id 58so995479wri for
  <security@xxxxxxxxxxxxxx>; Fri, 01 Apr 2005 13:34:15 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
  h=received:return-receipt-to:from:to:subject:date:message-id:mime-version:content-type:content-transfer-encoding:x-priority:x-msmail-priority:x-mailer:in-reply-to:thread-index:importance:x-mimeole:disposition-notification-to;
  b=BQ/EUhi5eFX6OOPaaUdXWV3cgH0TPGF/E088ny5CHl4KZoFGIU+LAdOfkxnKhfa1Kzwf3IJfWB/htQTSYjc45w6z1sKxmhe5nzIH3eUHQFnJG+KPEPbfWJetzIBEGooRwQtY+nnC1m35H9N0Z5zrF/KOseXp1ZmnL4ruxbxeXbA=
Received: by 10.54.56.10 with SMTP id e10mr330544wra; Fri, 01 Apr 2005
  13:34:15 -0800 (PST)
Received: from t403602004 ([80.229.26.61]) by mx.gmail.com with ESMTP id
  g3sm336862wra.2005.04.01.13.34.14; Fri, 01 Apr 2005 13:34:15 -0800
  (PST)
From: "Jennifer Bellucci" <jenniferbellucci@xxxxxxxxx>
To: <michaellzhou@xxxxxxxxxxx>, "'CCIE CCIE'" <hope_ccie@xxxxxxxxx>,
        <security@xxxxxxxxxxxxxx>
Subject: RE: add me to msn hope_ccie@xxxxxxxxxxx
Date: Fri, 1 Apr 2005 22:34:14 +0100
Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAACoM+X6b/HUGEJKJJ9lXBIcKAAAAQAAAAu2I+OsvMIU6EvFKtrcujMAEAAAAA@xxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
In-Reply-To: <040120051846.28968.424D96F4000E4DAF0000712822007621949A01089604040A0E080C0703@xxxxxxxxxxx>
Thread-Index: AcU28KBW4rV4VNF9RzSNQDiwIMoB7QAEdtKQ
X-ASK-Info: Whitelist match [from jenniferbellucci@xxxxx\.com] (2005/04/01 16:34:23)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: "Jennifer Bellucci" <jenniferbellucci@xxxxxxxxx>

Please add me to...jennifer_bellucci@xxxxxxxxxxx

-----Original Message-----
From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
michaellzhou@xxxxxxxxxxx
Sent: 01 April 2005 19:46
To: CCIE CCIE; security@xxxxxxxxxxxxxx
Subject: Re: add me to msn hope_ccie@xxxxxxxxxxx

Please add me.
My Email: michaellzhou@xxxxxxxxxxx

Thank you,
Michael


> pls add me to ur msn list
>  
> hope_ccie@xxxxxxxxxxx
>  
> 
> 		
> ---------------------------------
> Do you Yahoo!?
>  Yahoo! Mail - 250MB free storage. Do more. Manage less.


From security-owner@xxxxxxxxxxxxxx Fri Apr  1 17:49:16 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j31MnGKH007654
	GroupStudy Mailer; Fri, 1 Apr 2005 17:49:16 -0500
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j31MnGqi007652
	for GroupStudy Mailer; Fri, 1 Apr 2005 17:49:16 -0500
Received: from OMC3-S41.phx.gbl (omc3-s41.bay6.hotmail.com
  [65.54.249.115]) by groupstudy.com (8.12.11/8.12.10) with ESMTP id
  j31MlYfa007508 GroupStudy Mailer; Fri, 1 Apr 2005 17:47:35 -0500
Received: from hotmail.com ([65.54.175.33]) by OMC3-S41.phx.gbl with
  Microsoft SMTPSVC(6.0.3790.211); Fri, 1 Apr 2005 14:47:26 -0800
Received: from mail pickup service by hotmail.com with Microsoft
  SMTPSVC; Fri, 1 Apr 2005 14:47:26 -0800
Message-ID: <BAY104-F234D7A63CCDAE6FB9C4B6987380@xxxxxxx>
Received: from 65.54.175.204 by by104fd.bay104.hotmail.msn.com with
  HTTP; Fri, 01 Apr 2005 22:47:26 GMT
X-Originating-IP: [65.54.175.204]
X-Originating-Email: [dot_oni@xxxxxxxxxxx]
X-Sender: dot_oni@xxxxxxxxxxx
In-Reply-To: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAACoM+X6b/HUGEJKJJ9lXBIcKAAAAQAAAAu2I+OsvMIU6EvFKtrcujMAEAAAAA@xxxxxxxxx>
From: "Dotun Oni" <dot_oni@xxxxxxxxxxx>
To: michaellzhou@xxxxxxxxxxx, security@xxxxxxxxxxxxxx
Subject: RE: add me to msn hope_ccie@xxxxxxxxxxx
Date: Fri, 01 Apr 2005 14:47:26 -0800
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 01 Apr 2005 22:47:26.0566 (UTC)
  FILETIME=[C6E07060:01C5370C]
X-ASK-Info: Message Queued (2005/04/01 17:47:35)
X-ASK-Info: Confirmed by User (2005/04/01 17:49:15)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: "Dotun Oni" <dot_oni@xxxxxxxxxxx>

pls. add me: dot_oni@xxxxxxxxxxx

From: "Jennifer Bellucci" <jenniferbellucci@xxxxxxxxx>
Reply-To: "Jennifer Bellucci" <jenniferbellucci@xxxxxxxxx>
To: <michaellzhou@xxxxxxxxxxx>, "'CCIE CCIE'" <hope_ccie@xxxxxxxxx>,        
<security@xxxxxxxxxxxxxx>
Subject: RE: add me to msn hope_ccie@xxxxxxxxxxx
Date: Fri, 1 Apr 2005 22:34:14 +0100

Please add me to...jennifer_bellucci@xxxxxxxxxxx

-----Original Message-----
From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
michaellzhou@xxxxxxxxxxx
Sent: 01 April 2005 19:46
To: CCIE CCIE; security@xxxxxxxxxxxxxx
Subject: Re: add me to msn hope_ccie@xxxxxxxxxxx

Please add me.
My Email: michaellzhou@xxxxxxxxxxx

Thank you,
Michael


 > pls add me to ur msn list
 >
 > hope_ccie@xxxxxxxxxxx
 >
 >
 >
 > ---------------------------------
 > Do you Yahoo!?
 >  Yahoo! Mail - 250MB free storage. Do more. Manage less.


From security-owner@xxxxxxxxxxxxxx Sat Apr  2 01:35:05 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j326Z5Q5023860
	GroupStudy Mailer; Sat, 2 Apr 2005 01:35:05 -0500
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j326Z5UJ023858
	for GroupStudy Mailer; Sat, 2 Apr 2005 01:35:05 -0500
Received: from mspnet04.netcogov.com (mspnet04.netcogov.com
  [207.218.42.245]) by groupstudy.com (8.12.11/8.12.10) with ESMTP id
  j326Z4Xd023837 GroupStudy Mailer; Sat, 2 Apr 2005 01:35:05 -0500
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Subject: RE: add me to msn hope_ccie@xxxxxxxxxxx
Date: Sat, 2 Apr 2005 00:34:54 -0600
Message-ID: <B6621ED4D0AD394BBA73CA657DFD89761C5665@xxxxxxxxxxxxxxxxxxxx>
Thread-Topic: add me to msn hope_ccie@xxxxxxxxxxx
Thread-Index: AcU3E3k04hR4yDY2SJy1m0NfejoriwAOm4Bw
From: "Church, Chuck" <cchurch@xxxxxxxxxxxx>
To: <security@xxxxxxxxxxxxxx>
Content-Transfer-Encoding: 7bit
X-MIME-Autoconverted: from quoted-printable to 8bit by groupstudy.com id
  j326Z4Xd023837
X-ASK-Info: Whitelist match [from cchurch@xxxxxxxx\.com] (2005/04/02 01:35:05)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: "Church, Chuck" <cchurch@xxxxxxxxxxxx>

What exactly are you people adding yourselves to? 


Chuck Church
Lead Design Engineer
CCIE #8776, MCNE, MCSE
Netco Government Services - Design & Implementation Team
1210 N. Parker Rd.
Greenville, SC 29609
Home office: 864-335-9473
Cell: 703-819-3495
cchurch@xxxxxxxxxxxx
PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D 


-----Original Message-----
From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
Dotun Oni
Sent: Friday, April 01, 2005 5:47 PM
To: michaellzhou@xxxxxxxxxxx; security@xxxxxxxxxxxxxx
Subject: RE: add me to msn hope_ccie@xxxxxxxxxxx

pls. add me: dot_oni@xxxxxxxxxxx

From: "Jennifer Bellucci" <jenniferbellucci@xxxxxxxxx>
Reply-To: "Jennifer Bellucci" <jenniferbellucci@xxxxxxxxx>
To: <michaellzhou@xxxxxxxxxxx>, "'CCIE CCIE'" <hope_ccie@xxxxxxxxx>,

<security@xxxxxxxxxxxxxx>
Subject: RE: add me to msn hope_ccie@xxxxxxxxxxx
Date: Fri, 1 Apr 2005 22:34:14 +0100

Please add me to...jennifer_bellucci@xxxxxxxxxxx

-----Original Message-----
From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
michaellzhou@xxxxxxxxxxx
Sent: 01 April 2005 19:46
To: CCIE CCIE; security@xxxxxxxxxxxxxx
Subject: Re: add me to msn hope_ccie@xxxxxxxxxxx

Please add me.
My Email: michaellzhou@xxxxxxxxxxx

Thank you,
Michael


 > pls add me to ur msn list
 >
 > hope_ccie@xxxxxxxxxxx
 >
 >
 >
 > ---------------------------------
 > Do you Yahoo!?
 >  Yahoo! Mail - 250MB free storage. Do more. Manage less.


From security-owner@xxxxxxxxxxxxxx Sun Apr  3 03:54:35 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j337sZsR030187
	GroupStudy Mailer; Sun, 3 Apr 2005 03:54:35 -0400
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j337sZha030185
	for GroupStudy Mailer; Sun, 3 Apr 2005 03:54:35 -0400
Received: from smtp3.telecom.co.nz (ish6.telecom.co.nz [146.171.13.196])
  by groupstudy.com (8.12.11/8.12.10) with ESMTP id j337sXVm030164
  GroupStudy Mailer; Sun, 3 Apr 2005 03:54:34 -0400
Received: from aksmtpmdr1 (ish2-internal [146.171.1.20]) by
  smtp3.telecom.co.nz (Postfix) with ESMTP id EE35C1A4C for
  <security@xxxxxxxxxxxxxx>; Sun,  3 Apr 2005 19:50:35 +1200 (NZST)
Received: from 146.171.227.24 by aksmtpmdr1 with ESMTP (Tumbleweed MMS
  SMTP Relay); Sun, 03 Apr 2005 19:54:06 +1200
X-Server-Uuid: 50880B64-500D-4147-A4F0-826C22747D83
Received: from AUNSWA003.au.tcnz.net ([10.136.168.51]) by
  akexsmtp01.telecom.tcnz.net with Microsoft SMTPSVC(6.0.3790.211); Sun,
  3 Apr 2005 19:54:06 +1200
Received: from aunswa001.au.tcnz.net ([10.136.168.49]) by
  AUNSWA003.au.tcnz.net with Microsoft SMTPSVC(5.0.2195.6747); Sun, 3
  Apr 2005 17:54:06 +1000
content-class: urn:content-classes:message
MIME-Version: 1.0
Subject: RE: add me to msn hope_ccie@xxxxxxxxxxx
Date: Sun, 3 Apr 2005 17:54:05 +1000
Message-ID: <65EF78D54917DB4AACD9FED358BAE64D527398@xxxxxxxxxxxxxxxxxxxxx>
Thread-Topic: add me to msn hope_ccie@xxxxxxxxxxx
Thread-Index: AcU22BA0wnTnXHDcQMeGLdRYUNFOAwBShGhg
From: "Matt Hill" <Matt.Hill@xxxxxxxxxxx>
To: security@xxxxxxxxxxxxxx
X-OriginalArrivalTime: 03 Apr 2005 07:54:06.0265 (UTC)
  FILETIME=[4F6F1290:01C53822]
X-WSS-ID: 6E517E941LO29561032-01-01
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-MIME-Autoconverted: from quoted-printable to 8bit by groupstudy.com id
  j337sXVm030164
X-ASK-Info: Whitelist match [from matt\.hill@xxxx\.com\.au] (2005/04/03 03:54:35)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: "Matt Hill" <Matt.Hill@xxxxxxxxxxx>

No thanks...

I get enough spam as it is.  I hope everyone is ignoring these automated
messages.

Cheers,
Matt

-----Original Message-----
From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
CCIE CCIE
Sent: Friday, 1 April 2005 4:11 PM
To: security@xxxxxxxxxxxxxx
Subject: add me to msn hope_ccie@xxxxxxxxxxx

pls add me to ur msn list
 
hope_ccie@xxxxxxxxxxx
 
		
---------------------------------
Do you Yahoo!?
 Yahoo! Mail - 250MB free storage. Do more. Manage less.


This communication, including any attachments, is confidential. If 
 you are not the intended recipient, you should not read it - please 
 contact me immediately, destroy it, and do not copy or use any part of 
 this communication or disclose anything about it.


From security-owner@xxxxxxxxxxxxxx Sun Apr  3 09:18:31 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j33DIV20018286
	GroupStudy Mailer; Sun, 3 Apr 2005 09:18:31 -0400
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j33DIVWX018284
	for GroupStudy Mailer; Sun, 3 Apr 2005 09:18:31 -0400
Received: from sccrmhc14.comcast.net (sccrmhc14.comcast.net
  [204.127.202.59]) by groupstudy.com (8.12.11/8.12.10) with ESMTP id
  j33DIU1S018263 GroupStudy Mailer; Sun, 3 Apr 2005 09:18:30 -0400
Message-Id: <200504031318.j33DIU1S018263@xxxxxxxxxxxxxx>
Received: from cameron (c-24-1-90-87.hsd1.tx.comcast.net[24.1.90.87]) by
  comcast.net (sccrmhc14) with SMTP id <2005040313182301400dn0o4e>; Sun,
  3 Apr 2005 13:18:23 +0000
From: "Joe" <jfh6200@xxxxxxxxxxx>
To: <security@xxxxxxxxxxxxxx>
Subject: NOW AVAILABLE: Cisco PIX OS 7.0 and ASDM 5.0!
Date: Sun, 3 Apr 2005 08:18:29 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: AcU33fIZhsH6DKgJQIaND2eBPwwffQAcBALwAAA/S9A=
X-Converted-To-Plain-Text: from multipart/alternative by GroupStudy
X-Converted-To-Plain-Text: Alternative section used was text/plain
X-ASK-Info: Whitelist match [from jfh6200@xxxxxxx\.net] (2005/04/03 09:18:31)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: "Joe" <jfh6200@xxxxxxxxxxx>

Hello everyone!

 

Cisco PIX Security Appliance Software v7.0 and Cisco Adaptive Security
Device Manager v5.0 (next generation version of the popular Cisco PIX Device
Manager) are NOW AVAILABLE for download from the Cisco.com Software Center!

 

Highlights of these releases include:

 

Advanced Firewall Services
- Advanced web-based threat inspection and mitigation services
- Instant messaging, peer-to-peer, and tunneling application blocking
- Cisco Modular Policy Framework with flow-based security policies
- Inspection engines for services including ESMTP, ICMP, and SunRPC
- Enhanced FTP inspection engine with command filtering support
- GTP inspection services for protecting 3G Mobile Wireless networks
- Enhanced voice/multimedia inspection (Fax over IP, GKRCS, and more!)
- Multiple security context support (virtual firewalling)
- Transparent firewall support (Layer 2/secure bridge firewalling)
- Outbound and time-based Access Control Lists (ACLs)

 

Robust Remote Access and Site-to-Site IPSec VPN Services
- Remote access VPN client security posture enforcement
- Automatic software upgrades for Cisco VPN Clients
- TCP-based NAT transparency support for Cisco VPN Clients
- OSPF routing and Quality of Service (QoS) over VPN tunnels
- Native integration with popular authentication services such as Microsoft
Active Directory, Kerberos, LDAP, and RSA SecurID
- Improved X.509 PKI support including manual enrollment, certificate
chaining, and 4096-bit RSA key support

 

High Availability Services
- Active/Active stateful failover with asymmetric routing support
- Stateful failover for site-to-site and remote access VPN connections
- Zero-downtime software upgrades between maintenance releases

 

Intelligent Networking Services
- IPv6 support, with dual stack IPv4/IPv6 support
- PIM Sparse Mode multicast routing support
- Quality of Service (QoS) support with Low Latency Queuing (LLQ) and
Policing support
- Increased VLAN port density on all supported platforms

 

Flexible Management Solutions
- Comprehensive Web-based management and monitoring using ASDM v5.0
- Improved management and monitoring via SSHv2, SCP, and SNMPv2c
- Support for over 10 new SNMP MIBs, including the Cisco IPSec Flow
Monitoring MIB, SNMPv2 MIB, Entity MIB, and more
- Configuration rollback with support for multiple configs in flash
- CLI usability enhancements with command completion, inline help, etc.
- Dedicated out-of-band management interface capability
- SMTP-based email alerts for critical events
- Scheduled system reloads

 

Additional ASDM Enhancements
- Improved navigation with new task-based GUI design
- Real-time syslog viewer with regular expression-based filtering
- Improved policy editing with new wizards and visualization tools
- Powerful search feature helps locate features quickly in ASDM
- Online software upgrade feature simplifies PIX/ASDM software upgrades
- Launcher application accelerates ASDM startup time and simplifies
multi-device management and monitoring for small businesses
- Increased overall application performance

 

Useful Links

Cisco.com Software Center page for PIX software releases:
http://www.cisco.com/cgi-bin/tablebuild.pl/pix

 

Product documentation:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_70/index.
htm
http://www.cisco.com/univercd/cc/td/doc/product/netsec/secmgmt/asdm/v_5_0/in
dex.htm

 

Cisco PIX 515/515E Memory Upgrade Product Bulletin:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod_bulletin0900aecd8
023c8d4.html

 

Cisco PIX Security Appliance Software v7.0 datasheet:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet090
0aecd80225ae1.html

 

Cisco Adaptive Security Device Manager v5.0 datasheet:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet091
86a008014871d.html

 

Cisco PIX Security Appliance licensing datasheet:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet091
86a00800b0d85.html


From security-owner@xxxxxxxxxxxxxx Sun Apr  3 19:33:23 2005
Received: from groupstudy.com (groupstudy.com [127.0.0.1])
	by groupstudy.com (8.12.11/8.12.10) with ESMTP id j33NXNGp011000
	GroupStudy Mailer; Sun, 3 Apr 2005 19:33:23 -0400
Received: (from listserver@xxxxxxxxx)
	by groupstudy.com (8.12.11/8.12.11/Submit) id j33NXNKE010998
	for GroupStudy Mailer; Sun, 3 Apr 2005 19:33:23 -0400
Received: from pop-a065d10.pas.sa.earthlink.net
  (pop-a065d10.pas.sa.earthlink.net [207.217.121.251]) by groupstudy.com
  (8.12.11/8.12.10) with ESMTP id j33NXMhh010975 GroupStudy Mailer; Sun,
  3 Apr 2005 19:33:22 -0400
Received: from user-0cdflmg.cable.mindspring.com ([24.215.214.208]
  helo=acomp2) by pop-a065d10.pas.sa.earthlink.net with esmtp (Exim 3.36
  #10) id 1DIEak-0000df-00 for security@xxxxxxxxxxxxxx; Sun, 03 Apr 2005
  16:33:18 -0700
From: "Bill Wharton" <bill_wharton@xxxxxxxxxxxxxxxx>
To: <security@xxxxxxxxxxxxxx>
Subject: cisco product catalog
Date: Sun, 3 Apr 2005 19:33:17 -0400
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
Thread-Index: AcU4pYMGn+IOBWMjTWGNcxS8o6tUVA==
Message-Id: <E1DIEak-0000df-00@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
X-Converted-To-Plain-Text: from multipart/alternative by GroupStudy
X-Converted-To-Plain-Text: Alternative section used was text/plain
X-ASK-Info: Whitelist match [from bill_wharton@xxxxxxxx\.cjb\.net] (2005/04/03 19:33:23)
Sender: nobody@xxxxxxxxxxxxxx
Precedence: bulk
Reply-To: "Bill Wharton" <bill_wharton@xxxxxxxxxxxxxxxx>

Does anybody have the cisco product catalog CD from 2 yrs ago? That stuff is
useful when looking up products which are no longer documented on cisco.com