We have a Cisco Router 831 and it's working fine. I have a question
regarding the difference between what I commonly think of as 'port
forwarding' versus a simple 'permit' applied within an access-list to an
interface, ie: 'access-list xxx permit tcp any any eq telnet'.

Where do i get information on traffic characteristics on cisco devices
(routers, PIX, MLS etc) with regards to the following:
- connection (TCP/UDP) blocking probability
- bandwidth / load curve

          I am pretty new to this.I have 2 questions on this :
1. Is it possible to receive a route from the internet with "reserved
communities" set on the route ?
If yes,

I just created a map between to routers, i added
crypto ipsec transform-set
crypto isakmp key
and last added the crypto map

do you have to run the same ios version on hsrp neighbors?

Does anyone knows if i can disable STP on the vlan connecting router and
FWSM module in a 65xx ? It seems that spanning-tree is enable by default
on this vlan and we are trying to minimize the number of STP instances
on our router.

I'm getting started on the self-study exam certification guide for 642-521.
Occasionally I run into some difficulties while experimenting with my Cisco
Pix box. One of them is as follows:
I cannot connect to my PIX box via SSH. But if I go

On a Cisco router 831 how can I tell if we have 'Cisco IOS Firewall
Software'?
In the white paper 'Cisco 800 Series Routers, Internet Security for Small
Businesses' it says the following:

How can I make it so I can SSH into a PIX from the outside interface?
Would I just type the following in?
ca gen rsa key 1024
ca save all

I do not have a WAN alanizer. I am interrested in some Frame Relay
captures. Can someone send me some? I have a lot of sniffers to
visualize them, included Ethereal, Sniffer Pro, ...
For me, the perfect capture will be a ping (Echo Request/Echo Reply)

Is it possible to create 501 ?
Hi
I need to limit access to some of our employees, when they use VPN access.
Is it possible to let some users have fully access to the internal network,

On a 1721 router I have the following issue:
After establishing VPN connection (with an XP, using Cisco VPN client
v.4.0) some of the host names on the network (single domain,
AD-Integrated DNS zones, 2 DNS servers) return the LAN IP address

One of our customers keeps a pool of spare switches (eg 2950) and
routers (eg 2621) to support their fleet. Recently the pool has become
very small compared to the number of devices it is intended to cover.
Can anyone link me to a document which defines a recommended spares

I am looking for a way to manage accounts with different privilege
levels on multiple Cisco routers and switches. Ideally set them up on a
central server and have the devices authenticate against that, including
handing over the allowed commands to the device. It needs to support ...

hows this for a question :o)
I work for a company that has purchased a 3005 concentrator and wants to
roll out cheap VPN routers to it's home workers rather than the expensive
Cisco 83x range. So I was wondering if :