<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>SecNet: Security &#38; Networking</title>
	<atom:link href="http://secnet.wordpress.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://secnet.wordpress.com</link>
	<description>For Security and Networking Professionals</description>
	<lastBuildDate>Wed, 24 Aug 2011 21:52:56 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
<cloud domain='secnet.wordpress.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://s2.wp.com/i/buttonw-com.png</url>
		<title>SecNet: Security &#38; Networking</title>
		<link>http://secnet.wordpress.com</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://secnet.wordpress.com/osd.xml" title="SecNet: Security &#38; Networking" />
	<atom:link rel='hub' href='http://secnet.wordpress.com/?pushpress=hub'/>
		<item>
		<title>Ensuring Cisco Logs Include Timestamp with Local Time</title>
		<link>http://secnet.wordpress.com/2011/08/03/ensuring-cisco-logs-include-timestamp-with-local-time/</link>
		<comments>http://secnet.wordpress.com/2011/08/03/ensuring-cisco-logs-include-timestamp-with-local-time/#comments</comments>
		<pubDate>Wed, 03 Aug 2011 10:22:22 +0000</pubDate>
		<dc:creator>chandlerweb</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://secnet.wordpress.com/?p=53</guid>
		<description><![CDATA[Use the following commands to ensure timestamps use the local time accounting for daylight savings: conf t ntp server ntp update-calendar clock summer-time BST recurring last Sun Mar 1:00 last Sun Oct 2:00 service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=53&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>Use the following commands to ensure timestamps use the local time accounting for daylight savings:<br />
<code><br />
conf t<br />
ntp server<br />
ntp update-calendar<br />
clock summer-time BST recurring last Sun Mar 1:00 last Sun Oct 2:00<br />
service timestamps debug datetime msec localtime show-timezone<br />
service timestamps log datetime msec localtime show-timezone<br />
</code></p>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/secnet.wordpress.com/53/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/secnet.wordpress.com/53/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/secnet.wordpress.com/53/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/secnet.wordpress.com/53/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/secnet.wordpress.com/53/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/secnet.wordpress.com/53/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/secnet.wordpress.com/53/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/secnet.wordpress.com/53/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/secnet.wordpress.com/53/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/secnet.wordpress.com/53/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/secnet.wordpress.com/53/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/secnet.wordpress.com/53/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/secnet.wordpress.com/53/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/secnet.wordpress.com/53/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=53&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://secnet.wordpress.com/2011/08/03/ensuring-cisco-logs-include-timestamp-with-local-time/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/e475cc3e234b83b0aa86256cdd971ca1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">chandlerweb</media:title>
		</media:content>
	</item>
		<item>
		<title>Cisco IP Phone Network Loop [UNRESOLVED]</title>
		<link>http://secnet.wordpress.com/2011/08/03/cisco-ip-phone-network-loop-unresolved/</link>
		<comments>http://secnet.wordpress.com/2011/08/03/cisco-ip-phone-network-loop-unresolved/#comments</comments>
		<pubDate>Wed, 03 Aug 2011 10:13:03 +0000</pubDate>
		<dc:creator>chandlerweb</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://secnet.wordpress.com/?p=49</guid>
		<description><![CDATA[Problem 6509-E Edge switch runs 802.1X and PoE for Cisco IP Phones (7945G). If a user connects two wall jacks to the phone, it causes a network loop which affects everyone on that switch. I would like to know how to mitigate against this problem from a technical perspective. I know users can be educated [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=49&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p><strong>Problem</strong><br />
6509-E Edge switch runs 802.1X and PoE for Cisco IP Phones (7945G). If a user connects two wall jacks to the phone, it causes a network loop which affects everyone on that switch. I would like to know how to mitigate against this problem from a technical perspective. I know users can be educated but mistakes are bound to happen.</p>
<p><strong>Details / Evidence</strong><br />
The edge switch runs 802.1X port security and IP phones so there are three vlans at play:<br />
1111 Trusted VLAN (Authenicated users)<br />
2222 Guest VLAN (Unauthenticated users)<br />
3333 Voice VLAN</p>
<p>The edge switch runs BPDU Guard which was implemented to prevent this very scenario.</p>
<p>Logs are not available for the edge switch but the logs from the upsrtream switch are as follows:<br />
<code><br />
Aug  2 10:54:09.634: %SPANTREE-SW1_SP-2-RECV_PVID_ERR: Received BPDU with inconsistent peer vlan id 1111 on Port-channel6 VLAN2222.<br />
Aug  2 10:54:09.634: %SPANTREE-SW1_SP-2-BLOCK_PVID_PEER: Blocking Port-channel6 on VLAN1111. Inconsistent peer vlan.<br />
Aug  2 10:54:09.634: %SPANTREE-SW1_SP-2-BLOCK_PVID_LOCAL: Blocking Port-channel6 on VLAN2222. Inconsistent local vlan.</p>
<p>Aug  2 10:54:09.898: %LINK-3-UPDOWN: Interface Vlan1111, changed state to down<br />
Aug  2 10:54:09.902: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1111, changed state to down</p>
<p>Aug  2 10:54:36.629: %SPANTREE-SW1_SP-2-UNBLOCK_CONSIST_PORT: Unblocking Port-channel6 on VLAN1111. Port consistency restored.<br />
Aug  2 10:54:36.633: %SPANTREE-SW1_SP-2-UNBLOCK_CONSIST_PORT: Unblocking Port-channel6 on VLAN2222. Port consistency restored.</p>
<p>Aug  2 10:54:41.707: %SPANTREE-SW1_SP-2-RECV_PVID_ERR: Received BPDU with inconsistent peer vlan id 1111 on Port-channel6 VLAN2222.<br />
Aug  2 10:54:41.707: %SPANTREE-SW1_SP-2-BLOCK_PVID_PEER: Blocking Port-channel6 on VLAN1111. Inconsistent peer vlan.<br />
Aug  2 10:54:41.707: %SPANTREE-SW1_SP-2-BLOCK_PVID_LOCAL: Blocking Port-channel6 on VLAN2222. Inconsistent local vlan.</p>
<p>Aug  2 11:13:03.980: %SPANTREE-SW1_SP-2-UNBLOCK_CONSIST_PORT: Unblocking Port-channel6 on VLAN1111. Port consistency restored.<br />
Aug  2 11:13:03.980: %SPANTREE-SW1_SP-2-UNBLOCK_CONSIST_PORT: Unblocking Port-channel6 on VLAN2222. Port consistency restored.</p>
<p>Aug  2 11:13:34.272: %LINK-3-UPDOWN: Interface Vlan1111, changed state to up<br />
Aug  2 11:13:34.280: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1111, changed state to up<br />
</code></p>
<p><strong>Conclusions</strong><br />
This is unresolved so this is only conjecture at this point.</p>
<p>More to follow&#8230;.</p>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/secnet.wordpress.com/49/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/secnet.wordpress.com/49/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/secnet.wordpress.com/49/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/secnet.wordpress.com/49/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/secnet.wordpress.com/49/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/secnet.wordpress.com/49/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/secnet.wordpress.com/49/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/secnet.wordpress.com/49/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/secnet.wordpress.com/49/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/secnet.wordpress.com/49/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/secnet.wordpress.com/49/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/secnet.wordpress.com/49/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/secnet.wordpress.com/49/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/secnet.wordpress.com/49/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=49&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://secnet.wordpress.com/2011/08/03/cisco-ip-phone-network-loop-unresolved/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/e475cc3e234b83b0aa86256cdd971ca1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">chandlerweb</media:title>
		</media:content>
	</item>
		<item>
		<title>Backing Up Cisco Switch Configuration</title>
		<link>http://secnet.wordpress.com/2011/06/16/backing-up-cisco-switch-configuration/</link>
		<comments>http://secnet.wordpress.com/2011/06/16/backing-up-cisco-switch-configuration/#comments</comments>
		<pubDate>Thu, 16 Jun 2011 11:39:17 +0000</pubDate>
		<dc:creator>chandlerweb</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[backup]]></category>
		<category><![CDATA[Cisco]]></category>

		<guid isPermaLink="false">http://secnet.wordpress.com/?p=36</guid>
		<description><![CDATA[Backup the running configuration: copy run tftp specify the server tftp address and the destination filename backup the VLAN database copy const_nvram: tftp specify the source filename, tftp server address and the destination filename<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=36&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>Backup the running configuration:<br />
copy run tftp<br />
specify the server tftp address and the destination filename</p>
<p>backup the VLAN database<br />
copy const_nvram: tftp<br />
specify the source filename, tftp server address and the destination filename</p>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/secnet.wordpress.com/36/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/secnet.wordpress.com/36/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/secnet.wordpress.com/36/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/secnet.wordpress.com/36/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/secnet.wordpress.com/36/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/secnet.wordpress.com/36/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/secnet.wordpress.com/36/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/secnet.wordpress.com/36/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/secnet.wordpress.com/36/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/secnet.wordpress.com/36/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/secnet.wordpress.com/36/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/secnet.wordpress.com/36/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/secnet.wordpress.com/36/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/secnet.wordpress.com/36/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=36&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://secnet.wordpress.com/2011/06/16/backing-up-cisco-switch-configuration/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/e475cc3e234b83b0aa86256cdd971ca1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">chandlerweb</media:title>
		</media:content>
	</item>
		<item>
		<title>Cisco Unity 7 &#8211; Error when adding Subscriber</title>
		<link>http://secnet.wordpress.com/2011/06/07/cisco-unity-7-error-when-adding-subscriber/</link>
		<comments>http://secnet.wordpress.com/2011/06/07/cisco-unity-7-error-when-adding-subscriber/#comments</comments>
		<pubDate>Tue, 07 Jun 2011 11:36:31 +0000</pubDate>
		<dc:creator>chandlerweb</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://secnet.wordpress.com/?p=42</guid>
		<description><![CDATA[Version: Cisco Unity 7.0 Build 7.0(2)  Error fetching MailStore list (for server EMAIL). hr=0x8004010F (0x8004010f) Check that the AVDSGlobalCatalog is registered and running. Please see your Cisco Unity system administrator for more details.<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=42&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p><span style="font-family:ARIAL;font-size:x-small;"><strong>Version: Cisco Unity 7.0 Build 7.0(2) </strong></span></p>
<p><span style="font-family:ARIAL;font-size:x-small;"><strong>Error fetching MailStore list (for server EMAIL)</strong>.</span></p>
<p><span style="font-family:ARIAL;font-size:x-small;">hr=0x8004010F (0x8004010f)</span><br />
<span style="font-family:ARIAL;font-size:x-small;">Check that the AVDSGlobalCatalog is registered and running.</span></p>
<p><span style="font-family:ARIAL;font-size:x-small;">Please see your Cisco Unity system administrator for more details.</span></p>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/secnet.wordpress.com/42/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/secnet.wordpress.com/42/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/secnet.wordpress.com/42/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/secnet.wordpress.com/42/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/secnet.wordpress.com/42/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/secnet.wordpress.com/42/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/secnet.wordpress.com/42/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/secnet.wordpress.com/42/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/secnet.wordpress.com/42/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/secnet.wordpress.com/42/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/secnet.wordpress.com/42/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/secnet.wordpress.com/42/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/secnet.wordpress.com/42/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/secnet.wordpress.com/42/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=42&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://secnet.wordpress.com/2011/06/07/cisco-unity-7-error-when-adding-subscriber/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/e475cc3e234b83b0aa86256cdd971ca1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">chandlerweb</media:title>
		</media:content>
	</item>
		<item>
		<title>Configuring an IBM Baseboard Management Controller (BMC)</title>
		<link>http://secnet.wordpress.com/2011/06/06/configuring-an-ibm-baseboard-management-controller-bmc/</link>
		<comments>http://secnet.wordpress.com/2011/06/06/configuring-an-ibm-baseboard-management-controller-bmc/#comments</comments>
		<pubDate>Mon, 06 Jun 2011 10:12:37 +0000</pubDate>
		<dc:creator>chandlerweb</dc:creator>
				<category><![CDATA[Remote Administration]]></category>
		<category><![CDATA[BMC]]></category>
		<category><![CDATA[IBM]]></category>
		<category><![CDATA[MCS]]></category>

		<guid isPermaLink="false">http://secnet.wordpress.com/?p=32</guid>
		<description><![CDATA[From http://publib.boulder.ibm.com/infocenter/iseries/v6r1m0/index.jsp?topic=/rzahq/configurebmc.htm These steps are required only for System x products that do not also have a Remote Supervisor II (RSA II) service processor installed. Refer to worksheet item XSP1 in the iSCSI Network Planning Worksheets to determine which type of service professor is installed. From the main setup menu, highlight Advanced Setup using the up or down arrow [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=32&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>From <a href="http://publib.boulder.ibm.com/infocenter/iseries/v6r1m0/index.jsp?topic=/rzahq/configurebmc.htm" target="_blank">http://publib.boulder.ibm.com/infocenter/iseries/v6r1m0/index.jsp?topic=/rzahq/configurebmc.htm</a></p>
<p>These steps are required only for System x products that do not also have a Remote Supervisor II (RSA II) service processor installed.</p>
<div>Refer to worksheet item XSP1 in the <em>iSCSI Network Planning Worksheets</em> to determine which type of service professor is installed.</div>
<ol>
<li>From the main setup menu, highlight Advanced Setup using the up or down arrow keys and press Enter to select.</li>
<li>Look for RSA II Settings.
<ul>
<li>If RSA II Settings exist, this indicates RSA II hardware is installed and the Baseboard Management Controller does not need to be configured. In this case, skip to the <a href="http://publib.boulder.ibm.com/infocenter/iseries/v6r1m0/topic/rzahq/configurebmc.htm#configurebmc__lastbmcstep">last step</a> of this procedure.</li>
<li>If there are no RSA II Settings, RSA II hardware is not installed and you must continue with this procedure to configure the Baseboard Management Controller.</li>
</ul>
</li>
<li>Highlight Baseboard Management Controller (BMC) Settings using the up or down arrow keys and press Enter.</li>
<li>Highlight BMC Network Configuration using the up or down arrow keys and press Enter to select.</li>
<li>Highlight Static IP Address (worksheet item XSP4) using the up or down arrow keys and use the backspace key to position the cursor for entry of the IP address from the <em>iSCSI Network Planning Worksheets</em>.</li>
<li>Highlight Subnet Mask (worksheet item XSP5) using the up or down arrow keys and use the backspace key to position the cursor for entry of the subnet mask from the <em>iSCSI Network Planning Worksheets</em>.</li>
<li>Highlight Gateway (worksheet item XSP6) using the up or down arrow keys and use the backspace key to position the cursor for entry of the gateway address from the <em>iSCSI Network Planning Worksheets</em>.</li>
<li>Highlight Save Network Settings in BMC using the up or down arrow keys and press Enter to select and perform the action. This will bring up the <strong>BMC Settings saved!</strong> screen.</li>
<li>Press Enter to return to the Baseboard Management Controller (BMC) Settings menu.</li>
<li>Highlight User Account Settings using the up or down arrow keys and press Enter.</li>
<li>Highlight UserID 2 using the up or down arrow keys and press Enter.</li>
<li>On the UserID 2 Account Settings screen, highlight UserID 2 using the up or down arrow keys and use the left or right arrow keys to change the value to Enabled.</li>
<li>Highlight Username using the up or down arrow keys. Using the backspace key to position the cursor, fill in the field using the information from worksheet item XSP7 in the <em>iSCSI Network Planning Worksheets</em>.</li>
<li>Highlight Password using the up or down arrow keys. Using the backspace key to position the cursor, fill in the field using the information from worksheet item XSP8 in the <em>iSCSI Network Planning Worksheets</em>.</li>
<li>Highlight <strong>Confirm Password</strong> using the up or down arrow keys. Using the backspace key to position the cursor, fill in the same password as above.</li>
<li>Highlight Privileged Limit using the up or down arrow keys and use the left or right arrow keys to change the value toAdministrator.</li>
<li>Highlight Save User Account Settings to BMC using the up or down arrow keys and press Enter.</li>
<li>The BMC User Account Settings Saved! Screen will be displayed. Press Enter to return to the User Account Settingsmenu.</li>
<li>Press Esc to return to the Baseboard Management Controller (BMC) Settings menu.</li>
<li>Press Esc to return to the <em>Advanced Setup</em> menu.</li>
<li id="configurebmc__lastbmcstep">Press Esc to return to the main setup menu.</li>
</ol>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/secnet.wordpress.com/32/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/secnet.wordpress.com/32/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/secnet.wordpress.com/32/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/secnet.wordpress.com/32/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/secnet.wordpress.com/32/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/secnet.wordpress.com/32/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/secnet.wordpress.com/32/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/secnet.wordpress.com/32/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/secnet.wordpress.com/32/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/secnet.wordpress.com/32/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/secnet.wordpress.com/32/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/secnet.wordpress.com/32/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/secnet.wordpress.com/32/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/secnet.wordpress.com/32/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=32&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://secnet.wordpress.com/2011/06/06/configuring-an-ibm-baseboard-management-controller-bmc/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/e475cc3e234b83b0aa86256cdd971ca1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">chandlerweb</media:title>
		</media:content>
	</item>
		<item>
		<title>Ciscoworks Password recovery</title>
		<link>http://secnet.wordpress.com/2011/03/11/ciscoworks-password-recovery/</link>
		<comments>http://secnet.wordpress.com/2011/03/11/ciscoworks-password-recovery/#comments</comments>
		<pubDate>Fri, 11 Mar 2011 21:00:18 +0000</pubDate>
		<dc:creator>chandlerweb</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Ciscoworks]]></category>
		<category><![CDATA[Password Recovery]]></category>

		<guid isPermaLink="false">http://secnet.wordpress.com/?p=30</guid>
		<description><![CDATA[How to recover (reset) admin password when locked out of Ciscoworks web GUI The following has been clipped from http://www.techoh.com/2040-not-able-to-login-to-the-ciscoworks/ Problem: Sometimes, you are unable to login to the CiscoWorks in Windows platform. Solutions: To fix this issue, recover the password using below steps: 1) Login to the OS with the privilege user, i.e. login [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=30&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>How to recover (reset) admin password when locked out of Ciscoworks web GUI</p>
<p>The following has been clipped from http://www.techoh.com/2040-not-able-to-login-to-the-ciscoworks/</p>
<p>Problem: Sometimes, you are unable to login to the CiscoWorks in Windows platform.<br />
Solutions: To fix this issue, recover the password using below steps:</p>
<p>1) Login to the OS with the privilege user, i.e. login with “Root” as username on Solaris and “Administrator” as username on Windows.</p>
<p>2) Now, open the Command Prompt in Windows and run the below command:<br />
C:\net stop crmdmgtd<br />
For other OS:<br />
Solaris: #/etc/init.d/dmgtd stop<br />
HP-UX: #/sbin/init.d/dmgtd stop<br />
IBM AIX: #/etc/rc.dmgtd stop</p>
<p>3) Now, go to the file containing the admin password and then rename the “cwpass”file to “cwpass.old”:<br />
On Windows:<br />
C:\Program Files\CSCOpx\lib\classpath\com\cisco\nm\cmf\servlet\cwpass<br />
On Solaris:<br />
/opt/CSCOpx/lib/classpath/com/cisco/nm/cmf/servlet/cwpass</p>
<p>4) Go to the original admin password file and copy the file:<br />
On Windows:<br />
C:\Program Files\CSCOpx\lib\classpath\com\cisco\nm\cmf\servlet\orig\cwpass<br />
On Solaris:<br />
/opt/CSCOpx/lib/classpath/com/cisco/nm/cmf/servlet/orig/cwpass</p>
<p>5) After copying, paste the file in the below path:<br />
On Windows:<br />
C:\Program Files\CSCOpx\lib\classpath\com\cisco\nm\cmf\servlet\cwpass<br />
On Solaris:<br />
/opt/CSCOpx/lib/classpath/com/cisco/nm/cmf/servlet/cwpass</p>
<p>6) Then, restart all the Daemon Processes which you have stopped in the Step 2 using below commands:<br />
Windows: C:\net start crmdmgtd<br />
Solaris: #/etc/init.d/dmgtd start<br />
HP-UX: #/sbin/init.d/dmgtd start<br />
IBM AIX: #/etc/rc.dmgtd start</p>
<p>Now, administrator password has been reset to its factory default. So, use the factory default password to login and later change it.</p>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/secnet.wordpress.com/30/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/secnet.wordpress.com/30/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/secnet.wordpress.com/30/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/secnet.wordpress.com/30/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/secnet.wordpress.com/30/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/secnet.wordpress.com/30/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/secnet.wordpress.com/30/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/secnet.wordpress.com/30/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/secnet.wordpress.com/30/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/secnet.wordpress.com/30/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/secnet.wordpress.com/30/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/secnet.wordpress.com/30/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/secnet.wordpress.com/30/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/secnet.wordpress.com/30/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=30&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://secnet.wordpress.com/2011/03/11/ciscoworks-password-recovery/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/e475cc3e234b83b0aa86256cdd971ca1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">chandlerweb</media:title>
		</media:content>
	</item>
		<item>
		<title>Cisco WCS Password Recovery</title>
		<link>http://secnet.wordpress.com/2011/03/11/cisco-wcs-password-recovery/</link>
		<comments>http://secnet.wordpress.com/2011/03/11/cisco-wcs-password-recovery/#comments</comments>
		<pubDate>Fri, 11 Mar 2011 20:58:56 +0000</pubDate>
		<dc:creator>chandlerweb</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[Password Recovery]]></category>
		<category><![CDATA[WCS]]></category>

		<guid isPermaLink="false">http://secnet.wordpress.com/?p=26</guid>
		<description><![CDATA[Uh oh! You&#8217;ve locked yourself out of your Cisco Wireless Control Server because you&#8217;ve forgotten your password. Fear not! This is how you can perform a password recovery to gain access via the root account. WCS Version 6.0.181.0 C:\Program Files\WCS6.0.181.0\bin&#62;StopWCS A separate pop-up will appear with the following text&#8230;. Stopping WCS Health Monitor is stopped. [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=26&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>Uh oh! You&#8217;ve locked yourself out of your Cisco Wireless Control Server because you&#8217;ve forgotten your password. Fear not! This is how you can perform a password recovery to gain access via the root account.</p>
<p>WCS Version 6.0.181.0</p>
<p>C:\Program Files\WCS6.0.181.0\bin&gt;StopWCS</p>
<p>A separate pop-up will appear with the following text&#8230;.</p>
<p>Stopping WCS<br />
Health Monitor is stopped.<br />
WCS is stopped.<br />
Shutting down database server &#8230;<br />
Database server successfully shutdown.<br />
Apache server is stopped.<br />
WCS successfully shutdown.</p>
<p>C:\Program Files\WCS6.0.181.0\bin&gt;passwd root-user<br />
Starting database server &#8230;<br />
Database server is running.<br />
Initializing&#8230;<br />
Updating root password.<br />
This may take a few minutes&#8230;<br />
Successfully updated root user<br />
Shutting down database server &#8230;<br />
Database server successfully shutdown.</p>
<p>C:\Program Files\WCS6.0.181.0\bin&gt;StartWCS</p>
<p>A separate pop-up will appear with the following text&#8230;</p>
<p>Starting WCS<br />
WCS started successfully.</p>
<p>Close this dialogue and the command prompt. You should now have access to WCS via username root.</p>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/secnet.wordpress.com/26/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/secnet.wordpress.com/26/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/secnet.wordpress.com/26/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/secnet.wordpress.com/26/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/secnet.wordpress.com/26/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/secnet.wordpress.com/26/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/secnet.wordpress.com/26/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/secnet.wordpress.com/26/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/secnet.wordpress.com/26/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/secnet.wordpress.com/26/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/secnet.wordpress.com/26/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/secnet.wordpress.com/26/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/secnet.wordpress.com/26/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/secnet.wordpress.com/26/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=26&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://secnet.wordpress.com/2011/03/11/cisco-wcs-password-recovery/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/e475cc3e234b83b0aa86256cdd971ca1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">chandlerweb</media:title>
		</media:content>
	</item>
		<item>
		<title>Cisco WLC: Installing a 3rd Party SSL Certificate for Web Admin</title>
		<link>http://secnet.wordpress.com/2011/03/11/cisco-wlc-installing-a-3rd-party-ssl-certificate-for-web-admin/</link>
		<comments>http://secnet.wordpress.com/2011/03/11/cisco-wlc-installing-a-3rd-party-ssl-certificate-for-web-admin/#comments</comments>
		<pubDate>Fri, 11 Mar 2011 20:41:06 +0000</pubDate>
		<dc:creator>chandlerweb</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[Wireless]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[HTTPS]]></category>
		<category><![CDATA[SSL]]></category>
		<category><![CDATA[WLC]]></category>

		<guid isPermaLink="false">http://secnet.wordpress.com/?p=19</guid>
		<description><![CDATA[Many admins are happy to self-sign their SSL web admin page certificates but if you prefer that extra bit of assurance, or your Corporate Security Policy dictates they must be signed by your corporate Certificate Authority, this instruction is for you. The following instructions are largely based on the following article: http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00806e367a.shtml ===Generate a CSR [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=19&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>Many admins are happy to self-sign their SSL web admin page certificates but if you prefer that extra bit of assurance, or your Corporate Security Policy dictates they must be signed by your corporate Certificate Authority, this instruction is for you.</p>
<p>The following instructions are largely based on the following article:</p>
<p>http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00806e367a.shtml</p>
<p>===Generate a CSR using OpenSSL===</p>
<p>1. Install OpenSSL from here:</p>
<p>http://downloads.sourceforge.net/project/gnuwin32/openssl/0.9.8h-1/openssl-0.9.8h-1-setup.exe?use_mirror=voxel</p>
<p>2. Open a command prompt and go to C:\openssl\bin and execute openssl.exe</p>
<p>C:\&gt;cd openssl<br />
C:\OpenSSL&gt;cd bin<br />
C:\OpenSSL\bin&gt;openssl<br />
3. Generate a 1024 bit CSR (For Web Auth, it must be 2048 if requiring an Extended Validation certificate)</p>
<p>OpenSSL&gt; req -new -newkey rsa:1024 -nodes -keyout wlcadmin-key.pem -out wlcadmin-csr.pem<br />
Loading &#8216;screen&#8217; into random state &#8211; done<br />
Generating a 2048 bit RSA private key<br />
&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;+++<br />
&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.+++<br />
writing new private key to &#8216;wlcadmin-key.pem&#8217;<br />
&#8212;&#8211;<br />
You are about to be asked to enter information that will be incorporated<br />
into your certificate request.<br />
What you are about to enter is what is called a Distinguished Name or a DN.<br />
There are quite a few fields but you can leave some blank<br />
For some fields there will be a default value,<br />
If you enter &#8216;.&#8217;, the field will be left blank.<br />
&#8212;&#8211;<br />
Country Name (2 letter code) [AU]:GB<br />
State or Province Name (full name) [Some-State]:State<br />
Locality Name (eg, city) []:City<br />
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Company<br />
Organizational Unit Name (eg, section) []:Department<br />
Common Name (eg, YOUR name) []:wlcadmin<br />
Email Address []:email@address.com</p>
<p>Please enter the following &#8216;extra&#8217; attributes<br />
to be sent with your certificate request<br />
A challenge password []:<br />
An optional company name []:<br />
OpenSSL&gt;</p>
<p>You will now have one csr file and one key file generated in the C:\openssl\bin directory:<br />
wlcadmin-csr.pem<br />
wlcadmin-key.pem</p>
<p>===Sign the CSR file using your Corporate CA===<br />
At this point, we sent it to our Microsoft Certificate Services administrator who signed the certificate using the standard Web Server certificate template and returned a wlcadmin-signed.cer certificate file.</p>
<p>===Combine the signed certificate with the Private Key then Convert to a PEM File===<br />
OpenSSL&gt; pkcs12 -export -in wlcadmin-signed.cer -inkey wlcadmin-key.pem -out wlcadmin-signed.p12 -clcerts -passin pass:check123 -passout pass:check123<br />
Loading &#8216;screen&#8217; into random state &#8211; done<br />
OpenSSL&gt; pkcs12 -in wlcadmin-signed.p12 -out wlcadmin-final.pem -passin pass:check123 -passout pass:check123<br />
MAC verified OK<br />
OpenSSL&gt;</p>
<p>===Upload Signed Certificate to wlcadmin===<br />
Place certificate in a TFTP accessible location<br />
Go to wlcadmin &gt; Management &gt; HTTP<br />
On the HTTP Configuration page, check the Download SSL Certificate check box and complete the following fields:<br />
Server IP Address = TFTP server IP address<br />
Maximum Retries = 10<br />
Timeout = 6<br />
Certificate File Path = /<br />
Certificate File Name = wlcadmin-final.cer<br />
Certificate Password = check123 (this is the same as the -passout parameter in the final OpenSSL command)<br />
Click Apply to commit your changes.<br />
A pop up will appear saying &#8220;Are you sure you want to download Certificates from the specified Server?&#8221;. Click OK<br />
At the bottom of the screen it says &#8220;File transfer operation started&#8221;<br />
After a few seconds, it then says &#8220;File transfer operation completed successfully. For Certificates to take effect and SSL to work, you need to reboot system. Click Here to get redirected to reboot page&#8221;<br />
To reboot the controller for your changes to take effect, choose Commands &gt; Reboot &gt; Reboot &gt; Save and Reboot.<br />
Now log in and verify the certificate is presented correctly!</p>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/secnet.wordpress.com/19/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/secnet.wordpress.com/19/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/secnet.wordpress.com/19/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/secnet.wordpress.com/19/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/secnet.wordpress.com/19/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/secnet.wordpress.com/19/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/secnet.wordpress.com/19/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/secnet.wordpress.com/19/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/secnet.wordpress.com/19/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/secnet.wordpress.com/19/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/secnet.wordpress.com/19/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/secnet.wordpress.com/19/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/secnet.wordpress.com/19/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/secnet.wordpress.com/19/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=19&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://secnet.wordpress.com/2011/03/11/cisco-wlc-installing-a-3rd-party-ssl-certificate-for-web-admin/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/e475cc3e234b83b0aa86256cdd971ca1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">chandlerweb</media:title>
		</media:content>
	</item>
		<item>
		<title>EIGRP FAQ</title>
		<link>http://secnet.wordpress.com/2010/06/24/eigrp-faq/</link>
		<comments>http://secnet.wordpress.com/2010/06/24/eigrp-faq/#comments</comments>
		<pubDate>Thu, 24 Jun 2010 10:49:55 +0000</pubDate>
		<dc:creator>chandlerweb</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[Cisco]]></category>
		<category><![CDATA[EIGRP]]></category>

		<guid isPermaLink="false">http://secnet.wordpress.com/?p=21</guid>
		<description><![CDATA[The following content is from http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml Questions Introduction Does EIGRP require a default network to propagate a default route? Should I always use the eigrp log-neighbor-changes command when I configure EIGRP? Does EIGRP support secondary addresses? What debugging capabilities does EIGRP have? What does the word serno mean on the end of an EIGRP topology [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=21&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<address>The following content is from http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml</address>
<h2>Questions</h2>
<blockquote><p><strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#intro">Introduction</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#one">Does  EIGRP require a default network to propagate a default route?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#two">Should  I always use the eigrp log-neighbor-changes command when I configure  EIGRP?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#three">Does  EIGRP support secondary addresses?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#four">What  debugging capabilities does EIGRP have?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#q16">What  does the word serno mean on the end of an EIGRP topology entry when you  issue the show ip eigrp topology command?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#five">What  percent of bandwidth and processor resources does EIGRP use?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#six">Does  EIGRP support aggregation and variable length subnet masks?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#seven">Does  EIGRP support areas?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#eight">Can  I configure more than one EIGRP autonomous system on the same router?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#eight2">If  there are two EIGRP processes that run and two equal paths are learned,  one by each EIGRP process, do both routes get installed?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#nine">What  does the EIGRP stuck in active message mean?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#ten">What  does the neighbor statement in the EIGRP configuration section do?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#eleven">Why  does the EIGRP passive-interface command remove all neighbors for an  interface?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#twelve">Why  are routes received from one neighbor on a point-to-multipoint  interface that runs EIGRP not propagated to another neighbor on the same  point-to-multipoint interface?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#thirteen">When  I configure EIGRP, how can I configure a network statement with a mask?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#fourteen">I  have two routes: 172.16.1.0/24 and 172.16.1.0/28. How can I deny  172.16.1.0/28 while I allow 172.16.1.0/24 in EIGRP?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#fifteen">I  have a router that runs Cisco Express Forwarding (CEF) and EIGRP. Who  does load-balancing when there are multiple links to a destination?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#">How  can I use only one path when a router has two equal cost paths?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#me">What  is the difference in metric calculation between EIGRP and IGRP?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#aa">What  is the EIGRP Stub Routing feature?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#def">How  can I send a default route to the Stub router from the hub?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#tu">How  EIGRP behaves over a GRE tunnel compared to a directly connected  network?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#offset">What  is an offset-list, and how is it useful?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#">How  can I tag external routes in EIGRP?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#pdm">What  are the primary functions of the PDM?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#pbt">What  are the various load-balancing options available in EIGRP?</a></strong><br />
<strong><a href="http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a008012dac4.shtml#related">Related  Information</a></strong></p></blockquote>
<hr />
<h2><a name="intro">Introduction</a></h2>
<p><a name="intro"></p>
<p></a></p>
<p><a name="intro">This document contains frequently asked questions  (FAQs) about IP Enhanced Interior Gateway Routing Protocol (EIGRP).</a></p>
<h3><a name="one">Q. Does EIGRP require a default network to propagate a  default route?</a></h3>
<p><a name="one"></p>
<p></a></p>
<blockquote><p><a name="one"><strong>A.</strong> Although EIGRP can propagate a default route  using the default network method, it is not required. EIGRP  redistributes default routes directly.</a></p></blockquote>
<h3><a name="two">Q. Should I always use the eigrp log-neighbor-changes  command when I configure EIGRP?</a></h3>
<p><a name="two"></p>
<p></a></p>
<blockquote><p><a name="two"><strong>A.</strong> Yes, this command makes it easy to determine  why an EIGRP neighbor was reset. This reduces troubleshooting time.</a></p></blockquote>
<h3><a name="three">Q. Does EIGRP support secondary addresses?</a></h3>
<p><a name="three"></p>
<p></a></p>
<blockquote><p><a name="three"><strong>A.</strong> EIGRP does support secondary addresses.  Since EIGRP always sources data packets from the primary address, Cisco  recommends that you configure all routers on a particular subnet with  primary addresses that belong to the same subnet. Routers do not form  EIGRP neighbors over secondary networks. Therefore, if all of the  primary IP addresses of routers do not agree, problems can arise with  neighbor adjacencies.</a></p></blockquote>
<h3><a name="four">Q. What debugging capabilities does EIGRP have?</a></h3>
<p><a name="four"></p>
<p></a></p>
<blockquote><p><a name="four"><strong>A.</strong> There are protocol-independent and  -dependent <strong>debug</strong> commands. There is also a suite of <strong>show</strong> commands that display neighbor table status, topology table status, and  EIGRP traffic statistics. Some of these commands are:</a></p>
<ul>
<li><a href="http://www.cisco.com/en/US/docs/ios/12_0/np1/command/reference/1reigrp.html#wp1018589"><strong>show  ip eigrp neighbors</strong></a></li>
<li><a href="http://www.cisco.com/en/US/docs/ios/12_0/np1/command/reference/1reigrp.html#wp1018485"><strong>show  ip eigrp interfaces</strong></a></li>
<li><a href="http://www.cisco.com/en/US/docs/ios/12_0/np1/command/reference/1reigrp.html#wp1021269"><strong>show  ip eigrp topology</strong></a></li>
<li><a href="http://www.cisco.com/en/US/docs/ios/12_0/np1/command/reference/1reigrp.html#wp1018815"><strong>show  ip eigrp traffic</strong></a></li>
</ul>
</blockquote>
<h3><a name="q16">Q. What does the word serno mean on the end of an  EIGRP topology entry when you issue the show ip eigrp topology command?</a></h3>
<p><a name="q16"></p>
<p></a></p>
<blockquote><p><a name="q16"><strong>A.</strong> For example:</a></p>
<blockquote>
<pre><a name="q16"><strong>show ip eigrp topology</strong>
P 172.22.71.208/29, 2 successors, FD is 46163456
via 172.30.1.42 (46163456/45651456), Serial0.2, <strong>serno</strong> 7539273
via 172.30.2.49 (46163456/45651456), Serial2.6, <strong>serno</strong> 7539266</a></pre>
</blockquote>
<p><a name="q16">Serno stands for serial number. When DRDBs are threaded  to be sent, they are assigned a serial number from a circular number  space shared by all interfaces. If you display the topology table at the  time an entry is threaded, it shows you the serial number associated  with the DRDB.</a></p>
<p><a name="q16">Threading is the technique used inside the router to  queue items up for transmission to neighbors. The updates are not  created until it is time for them to go out the interface. Prior to  that, a linked list of pointers to items to send is created (for  example, the thread).</a></p>
<p><a name="q16">These sernos are local to the router and are not passed  with the routing update.</a></p></blockquote>
<h3><a name="five">Q. What percent of bandwidth and processor resources  does EIGRP use?</a></h3>
<p><a name="five"></p>
<p></a></p>
<blockquote><p><a name="five"><strong>A.</strong> EIGRP version 1 introduced a feature that  prevents any single EIGRP process from using more than fifty percent of  the configured bandwidth on any link during periods of network  convergence. Each AS or protocol (for instance, IP, IPX, or Appletalk)  serviced by EIGRP is a separate process. You can use the <strong>ip  bandwidth-percent eigrp interface</strong> configuration command in order to  properly configure the bandwidth statement on each WAN interface. Refer  to the </a><a href="http://www.cisco.com/en/US/tech/tk365/technologies_white_paper09186a0080094cb7.shtml">EIGRP  White Paper</a> for more details on how this feature works.</p>
<p>In addition, the implementation of partial and incremental updates  means that EIGRP sends routing information only when a topology change  occurs. This feature significantly reduces bandwidth use.</p>
<p>The feasible successor feature of EIGRP reduces the amount of  processor resources used by an autonomous system (AS). It requires only  the routers affected by a topology change to perform route  re-computation. The route re-computation only occurs for routes that  were affected, which reduces search time in complex data structures.</p></blockquote>
<h3><a name="six">Q. Does EIGRP support aggregation and variable length  subnet masks?</a></h3>
<p><a name="six"></p>
<p></a></p>
<blockquote><p><a name="six"><strong>A.</strong> Yes, EIGRP supports aggregation and variable  length subnet masks (VLSM). Unlike Open Shortest Path First (OSPF),  EIGRP allows summarization and aggregation at any point in the network.  EIGRP supports aggregation to any bit. This allows properly designed  EIGRP networks to scale exceptionally well without the use of areas.  EIGRP also supports automatic summarization of network addresses at  major network borders.</a></p></blockquote>
<h3><a name="seven">Q. Does EIGRP support areas?</a></h3>
<p><a name="seven"></p>
<p></a></p>
<blockquote><p><a name="seven"><strong>A.</strong> No, a single EIGRP process is analogous to  an area of a link-state protocol. However, within the process,  information can be filtered and aggregated at any interface boundary. In  order to bound the propagation of routing information, you can use  summarization to create a hierarchy.</a></p></blockquote>
<h3><a name="eight">Q. Can I configure more than one EIGRP autonomous  system on the same router?</a></h3>
<p><a name="eight"></p>
<p></a></p>
<blockquote><p><a name="eight"><strong>A.</strong> You can configure more than one EIGRP  autonomous system on the same router, but Cisco does not recommend it.  Multiple EIGRP autonomous systems on the same router that use mutual  redistribution can cause discrepancies in the EIGRP topology table.  Cisco recommends you configure only one EIGRP autonomous system in any  single autonomous system. Also use another protocol, such as BGP, in  order to connect the two EIGRP autonomous systems.</a></p></blockquote>
<h3><a name="eight2">Q. If there are two EIGRP processes that run and  two equal paths are learned, one by each EIGRP process, do both routes  get installed?</a></h3>
<p><a name="eight2"></p>
<p></a></p>
<blockquote><p><a name="eight2"><strong>A.</strong> No, only one route is installed. The  router installs the route that was learned through the EIGRP process  with the lower Autonomous System (AS) number. In Cisco IOS releases  earlier than 12.2(7)T, the router installed the path with the latest  timestamp received from either of the EIGRP processes. The change in  behavior is tracked by Cisco bug ID CSCdm47037.</a></p></blockquote>
<h3><a name="nine">Q. What does the EIGRP stuck in active message mean?</a></h3>
<p><a name="nine"></p>
<p></a></p>
<blockquote><p><a name="nine"><strong>A.</strong> When EIGRP returns a stuck in active (SIA)  message, it means that it has not received a reply to a query. EIGRP  sends a query when a route is lost and another feasible route does not  exist in the topology table. The SIA is caused by two sequential events:</a></p>
<ul>
<li><a name="nine">The route reported by the SIA has gone away.</a></li>
<li><a name="nine">An EIGRP neighbor (or neighbors) have not replied to  the query for that route.</a></li>
</ul>
<p><a name="nine">When the SIA occurs, the router clears the neighbor  that did not reply to the query. When this happens, determine which  neighbor has been cleared. Keep in mind that this router can be many  hops away. Refer to </a><a href="http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a008010f016.shtml">What  Does the EIGRP DUAL-3-SIA Error Message Mean?</a> for more information.</p></blockquote>
<h3><a name="ten">Q. What does the neighbor statement in the EIGRP  configuration section do?</a></h3>
<p><a name="ten"></p>
<p></a></p>
<blockquote><p><a name="ten"><strong>A.</strong> The <strong>neighbor</strong> command is used in EIGRP  in order to define a neighboring router with which to exchange routing  information. Due to the current behavior of this command, EIGRP  exchanges routing information with the neighbors in the form of unicast  packets whenever the <strong>neighbor</strong> command is configured for an  interface. EIGRP stops processing all multicast packets that come  inbound on that interface. Also, EIGRP stops sending multicast packets  on that interface.</a></p>
<p><a name="ten">The ideal behavior of this command is for EIGRP to  start sending EIGRP packets as unicast packets to the specified  neighbor, but not stop sending and receiving multicast packets on that  interface. Since the command does not behave as intended, the <strong>neighbor</strong> command should be used carefully, understanding the impact of the  command on the network.</a></p></blockquote>
<h3><a name="eleven">Q. Why does the EIGRP passive-interface command  remove all neighbors for an interface?</a></h3>
<p><a name="eleven"></p>
<p></a></p>
<blockquote><p><a name="eleven"><strong>A.</strong> The <strong>passive-interface</strong> command  disables the transmission and receipt of EIGRP hello packets on an  interface. Unlike IGRP or RIP, EIGRP sends hello packets in order to  form and sustain neighbor adjacencies. Without a neighbor adjacency,  EIGRP cannot exchange routes with a neighbor. Therefore, the <strong>passive-interface</strong> command prevents the exchange of routes on the interface. Although  EIGRP does not send or receive routing updates on an interface  configured with the <strong>passive-interface</strong> command, it still includes  the address of the interface in routing updates sent out of other  non-passive interfaces. Refer to </a><a href="http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080093f0a.shtml">How  Does the Passive Interface Feature Work in EIGRP?</a> for more  information.</p></blockquote>
<h3><a name="twelve">Q. Why are routes received from one neighbor on a  point-to-multipoint interface that runs EIGRP not propagated to another  neighbor on the same point-to-multipoint interface?</a></h3>
<p><a name="twelve"></p>
<p></a></p>
<blockquote><p><a name="twelve"><strong>A.</strong> The split horizon rule prohibits a router  from advertising a route through an interface that the router itself  uses to reach the destination. In order to disable the split horizon  behavior, use the <strong>no ip split-horizon eigrp <em>as-number</em></strong> interface command. Some important points to remember about EIGRP split  horizon are:</a></p>
<ul>
<li><a name="twelve">Split horizon behavior is turned on by default.</a></li>
<li><a name="twelve">When you change the EIGRP split horizon setting on  an interface, it resets all adjacencies with EIGRP neighbors reachable  over that interface.</a></li>
<li><a name="twelve">Split horizon should only be disabled on a hub site  in a hub-and-spoke network.</a></li>
<li><a name="twelve">Disabling split horizon on the spokes radically  increases EIGRP memory consumption on the hub router, as well as the  amount of traffic generated on the spoke routers.</a></li>
<li><a name="twelve">The EIGRP split horizon behavior is not controlled  or influenced by the <strong>ip split-horizon</strong> command.</a></li>
</ul>
<p><a name="twelve">For more details on split horizon and poison  reverse, refer to </a><a href="http://www.cisco.com/en/US/tech/tk365/technologies_white_paper09186a0080094cb7.shtml#splithorizon">Split  Horizon and Poison Reverse</a>. For more information on commands, refer  to <a href="http://www.cisco.com/en/US/docs/ios/12_2/iproute/command/reference/1rfeigrp.html">EIGRP  Commands</a>.</p></blockquote>
<h3><a name="thirteen">Q. When I configure EIGRP, how can I configure a  network statement with a mask?</a></h3>
<p><a name="thirteen"></p>
<p></a></p>
<blockquote><p><a name="thirteen"><strong>A.</strong> The optional network-mask argument was  first added to the network statement in Cisco IOS Software Release  12.0(4)T. The mask argument can be configured in any format (such as in a  network mask or in wild card bits). For example, you can use <strong>network  10.10.10.0 255.255.255.252</strong> or <strong>network 10.10.10.0 0.0.0.3</strong>.</a></p></blockquote>
<h3><a name="fourteen">Q. I have two routes: 172.16.1.0/24 and  172.16.1.0/28. How can I deny 172.16.1.0/28 while I allow 172.16.1.0/24  in EIGRP?</a></h3>
<p><a name="fourteen"></p>
<p></a></p>
<blockquote><p><a name="fourteen"><strong>A.</strong> In order to do this you need to use a  prefix-list as shown here:</a></p>
<blockquote>
<pre><a name="fourteen">router eigrp 100
       network 172.16.0.0
       <strong>distribute-list prefix test in</strong>
       auto-summary
       no eigrp log-neighbor-changes
       !
       <strong>ip prefix-list test seq 5 permit 172.16.1.0/24</strong>
</a></pre>
</blockquote>
<p><a name="fourteen">This allows only the 172.16.1.0/24 prefix and  therefore denies 172.16.1.0/28.</a></p>
<p><a name="fourteen"><strong>Note: </strong>The use of ACL and distribute-list  under EIGRP does not work in this case. This is because ACLs do not  check the mask, they just check the network portion. Since the network  portion is the same, when you allow 172.16.1.0/24, you also allow  172.16.1.0/28.</a></p></blockquote>
<h3><a name="fifteen">Q. I have a router that runs Cisco Express  Forwarding (CEF) and EIGRP. Who does load-balancing when there are  multiple links to a destination?</a></h3>
<p><a name="fifteen"></p>
<p></a></p>
<blockquote><p><a name="fifteen"><strong>A.</strong> The way in which CEF works is that CEF  does the switching of the packet based on the routing table which is  populated by the routing protocols such as EIGRP. In short, CEF does the  load-balancing once the routing protocol table is calculated. Refer to </a><a href="http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080094820.shtml">How  does load-balancing work?</a> for more details on load balancing.</p></blockquote>
<h3><a>Q. How can I use only one path when a router has two  equal cost paths?</a></h3>
<p><a></p>
<p></a></p>
<blockquote><p><a><strong>A.</strong> Configure the bandwidth value on the interfaces  to default, and increase the delay on the backup interface so that the  router does not see two equal cost paths.</a></p></blockquote>
<h3><a name="me">Q. What is the difference in metric calculation between  EIGRP and IGRP?</a></h3>
<p><a name="me"></p>
<p></a></p>
<blockquote><p><a name="me"><strong>A.</strong> The EIGRP metric is obtained when you multiply  the IGRP metric by 256. The IGRP uses only 24 bits in its update packet  for the metric field, but EIGRP uses 32 bits in its update packet for  the metric field. For example, the IGRP metric to a destination network  is 8586, but the EIGRP metric is 8586 x 256 = 2,198,016. Integer  division is used when you divide 10^7 by minimum BW, so the calculation  involves integer division, which leads to a variation from manual  calculation.</a></p></blockquote>
<h3><a name="aa">Q. What is the EIGRP Stub Routing feature?</a></h3>
<p><a name="aa"></p>
<p></a></p>
<blockquote><p><a name="aa"><strong>A.</strong> The Stub routing feature is used to conserve  bandwidth by summarizing and filtering routes. Only specified routes are  propagated from the remote (Stub) router to the distribution router  because of the Stub routing feature. For more information about the stub  routing feature, refer to </a><a href="http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/eigrpstb.html">EIGRP  Stub Routing</a>. The EIGRP stub feature can be configured on the  switch with the <strong>eigrp stub</strong> command, and it can be removed with  the <strong>no eigrp stub</strong>. When you remove the <strong>eigrp stub</strong> command  from the switch, the switch that runs the IP Base image throws the  error:</p>
<blockquote>
<pre>EIGRP is restricted to stub configurations only</pre>
</blockquote>
<p>This issue can be resolved if you upgrade to Advanced Enterprise  Images. This error is documented in <a href="http://wwwin-metrics.cisco.com/cgi-bin/ddtsdisp.cgi?id=CSCeh58135">CSCeh58135</a>.</p></blockquote>
<h3><a name="def">Q. How can I send a default route to the Stub router  from the hub?</a></h3>
<p><a name="def"></p>
<p></a></p>
<blockquote><p><a name="def"><strong>A.</strong> Do this under the outbound interface on the  hub router with the command <strong>ip summary-address eigrp X 0.0.0.0  0.0.0.0</strong>. This command suppresses all the more specific routes and  only sends the summary route. In the case of the 0.0.0.0 0.0.0.0, it  means it suppresses everything, and the only route that is in the  outbound update is 0.0.0.0/0. One drawback to this method is that EIGRP  installs a 0.0.0.0/0 route to Null0 is the local routing table with an  admin distance of 5.</a></p></blockquote>
<h3><a name="tu">Q. How EIGRP behaves over a GRE tunnel compared to a  directly connected network?</a></h3>
<p><a name="tu"></p>
<p></a></p>
<blockquote><p><a name="tu"><strong>A.</strong> EIGRP will use the same administrative  distance and metric calculation for the GRE tunnel. The cost calculation  is based on bandwidth and delay. The bandwidth and delay of the GRE  tunnel will be taken from the tunnel interface configured on the router.  The tunnel will also be treated like a directly connected network. If  there are two paths to reach a network either through a VLAN interface  or tunnel interface, EIGRP prefers the Virtual-Access Interface (VAI)  VLAN interface because the VLAN interface has greater bandwidth than the  tunnel interface. In order to influence the routing through the tunnel  interface, increase the bandwidth parameter of the tunnel interface, or  increase the delay parameter of the VLAN interface.</a></p></blockquote>
<h3><a name="offset">Q. What is an offset-list, and how is it useful?</a></h3>
<p><a name="offset"></p>
<p></a></p>
<blockquote><p><a name="offset"><strong>A.</strong> The offset-list is an feature used to  modify the composite metrics in EIGRP, for example, bandwidth and delay.  Since the bandwidth taken for the calculation is local to the router,  the value applied in the offset-list is not applicable to bandwidth, so  the offset-list affects only the delay value. The value configured in  the offset-list command is added to the delay value calculated by the  router for the route matched by an access-list. An offset-list is the  preferred method to influence a particular path that is advertised  and/or chosen.</a></p></blockquote>
<h3><a>Q. How can I tag external routes in EIGRP?</a></h3>
<p><a></p>
<p></a></p>
<blockquote><p><a><strong>A.</strong> You can tag only routes that EIGRP has learned  from another routing protocol.</a></p></blockquote>
<h3><a name="pdm">Q. What are the primary functions of the PDM?</a></h3>
<p><a name="pdm"></p>
<p></a></p>
<blockquote><p><a name="pdm"><strong>A.</strong> EIGRP supports 3 protocol suites: IP, IPv6,  and AppleTalk. Each of them has its own PDM. These are the primary  functions of PDM:</a></p>
<ul>
<li><a name="pdm">Maintaining the neighbor and yopology tables of EIGRP  routers that belong to that protocol suite</a></li>
<li><a name="pdm">Building and translating protocol specific packets for  DUAL</a></li>
<li><a name="pdm">Interfacing DUAL to the protocol specific routing  table</a></li>
<li><a name="pdm">Computing the metric and passing this information to  DUAL; DUAL handles only the picking of the feasible successors (FSs)</a></li>
<li><a name="pdm">Implement filtering and access-lLists.</a></li>
<li><a name="pdm">Perform redistribution functions to/from other routing  protocols.</a></li>
</ul>
</blockquote>
<h3><a name="pbt">Q. What are the various load-balancing options  available in EIGRP?</a></h3>
<p><a name="pbt"></p>
<p></a></p>
<blockquote><p><a name="pbt"><strong>A.</strong> The offset list can be used to modify the  metrics of routes that EIGRP learns through a particular interface, or  PBR can be used.</a></p></blockquote>
<hr />
<h2><a name="related">Related Information</a></h2>
<ul>
<li><strong><a href="http://www.cisco.com/en/US/tech/tk365/tk207/tsd_technology_support_sub-protocol_home.html">EIGRP  Support Page</a></strong></li>
<li><strong><a href="http://www.cisco.com/en/US/support/index.html">Technical Support  &amp; Documentation &#8211; Cisco Systems</a></strong></li>
</ul>
<hr />
<p><!-- PIDLMD --></p>
<hr />
<table width="100%">
<tbody>
<tr>
<td align="left">Updated: Jul 21, 2008</td>
<td align="right">Document ID: 1368</td>
</tr>
</tbody>
</table>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/secnet.wordpress.com/21/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/secnet.wordpress.com/21/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/secnet.wordpress.com/21/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/secnet.wordpress.com/21/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/secnet.wordpress.com/21/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/secnet.wordpress.com/21/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/secnet.wordpress.com/21/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/secnet.wordpress.com/21/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/secnet.wordpress.com/21/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/secnet.wordpress.com/21/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/secnet.wordpress.com/21/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/secnet.wordpress.com/21/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/secnet.wordpress.com/21/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/secnet.wordpress.com/21/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=21&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://secnet.wordpress.com/2010/06/24/eigrp-faq/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/e475cc3e234b83b0aa86256cdd971ca1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">chandlerweb</media:title>
		</media:content>
	</item>
		<item>
		<title>Adding DHCP Options to Microsoft DHCP Server</title>
		<link>http://secnet.wordpress.com/2010/06/21/adding-dhcp-options-to-microsoft-dhcp-server/</link>
		<comments>http://secnet.wordpress.com/2010/06/21/adding-dhcp-options-to-microsoft-dhcp-server/#comments</comments>
		<pubDate>Mon, 21 Jun 2010 09:50:03 +0000</pubDate>
		<dc:creator>chandlerweb</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[DHCP]]></category>

		<guid isPermaLink="false">http://secnet.wordpress.com/?p=17</guid>
		<description><![CDATA[The following solution is from http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_22971739.html Open Dhcp manager, right click on the dhcp server and select &#8220;set predefined options&#8221;. Type in Name such as Cisco CallManager, set data type to IP Address and put a check mark next to &#8220;array&#8221;, for code put in 150 then click ok. You can now either edit the [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=17&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></description>
			<content:encoded><![CDATA[<p>The following solution is from</p>
<p>http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Q_22971739.html</p>
<p>Open Dhcp manager, right click on the dhcp server and select  &#8220;set predefined options&#8221;. Type in Name such as Cisco CallManager, set data type to IP Address and put a check mark next to &#8220;array&#8221;, for code put in 150 then click ok.</p>
<p>You can now either edit the array values to predefine the ip addresses of your call manager or set it per scope.</p>
<p>Now when you configure scope options you should be able to select the newly created option 150 and put in the appropriate Ip addresses.</p>
<p>Hope this helps<br />
B</p>
<br />  <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/secnet.wordpress.com/17/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/secnet.wordpress.com/17/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/secnet.wordpress.com/17/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/secnet.wordpress.com/17/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gofacebook/secnet.wordpress.com/17/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/facebook/secnet.wordpress.com/17/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gotwitter/secnet.wordpress.com/17/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/twitter/secnet.wordpress.com/17/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/secnet.wordpress.com/17/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/secnet.wordpress.com/17/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/secnet.wordpress.com/17/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/secnet.wordpress.com/17/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/secnet.wordpress.com/17/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/secnet.wordpress.com/17/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=secnet.wordpress.com&amp;blog=485443&amp;post=17&amp;subd=secnet&amp;ref=&amp;feed=1" width="1" height="1" />]]></content:encoded>
			<wfw:commentRss>http://secnet.wordpress.com/2010/06/21/adding-dhcp-options-to-microsoft-dhcp-server/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/e475cc3e234b83b0aa86256cdd971ca1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">chandlerweb</media:title>
		</media:content>
	</item>
	</channel>
</rss>
