Anyone familiar with VRF aware IPSEC ?
I am trying to establish two tunnels  with two sites having
overlapping IP addresses. I want to configure all NATing in the
Hub router.

I have 2 connections between 2 Cat 6500's. One is gig and the other is FE
I have BGP peering between these 2 routers but I want all traffic to use the
GIG link unless it fails.
How do I get all traffic inclding BGP across the GIG link unless it stops

Any help on this would be appreciated.
If I want to implement dynamic outside NAT but my 2 x outside sites have
the same IP ranges is there a workaround.
                    --------Site 1 ---192.168.1.X

All,
  I'm looking at switchport security on the Cisco switches we have on
campus,  2950s & 4500s.  I'm confused about the difference between the
following commands

I have CBWFQ set up on an interface.  I've been playing with using
various settings to do interesting BW mgmt.  One of my queues has a
nested class-map and the counters don't seem to match up in show
policy-map interface:

What type of fiber connector is on the NP-1F-D-MM FDDI module ?  I have
not seen this type before, it is not an SC,ST,LC.
Thanks

I am looking for some Cisco monitoring software.  I need to monitor
approximately 40 devices (Cisco Access Points, 2950's, 4500 series, and
a few other devices).  I need this software to provide trending
information, and hopefully reports that I can generate (previous day,

I get the following error message when trying to connect to a remote
site:
"The client did not match the firewall policy configured on the central
site VPN device.  Cisco Systems Integrated Client should be enabled or

If I have exec-timeout on line defined as exec-timeout 0 1, and on serial
int on that line dialer-idle timeout 0, which will take priority?
Ivana

PIX has a feature called implicit rule.
When there is no acceslist, outside traffic from a interface with a higher
security-level is allowed to a lower security-interface.
But traffic from a lower security-level to a higher securitylevel is not

I have started this post...
http://groups.google.com/group/comp.dcom.sys.cisco/browse_thread/thread/d4d0a333
4d914821/e043e1b3a4d50264?lnk=raot#e043e1b3a4d50264
nobody is replying anymore. I guess it has fell down the list. I cannot
connect to the internet via T1. I am just setting ...

After IOS upgrade to 12.4(4)T on my 2811 router that among other things
serves as IOS VPN Server for Cisco VPN clients I'm able to connect and work
with hosts located in my corporate LAN fast as I was before IOS upgrade, but
when I telnet into any of devices (cisco or not) I get ...

I 've got a problem with Catalyst 2980G. Ports on it have been flapping.
This problem concern only one switch in my network only one vlan. There are
no errors on this ports, it seems like broadcast or unicast is flooding but
I don't know how to fix it.

I'm using an 7206 as BRAS behind an IP based DSLAM
PPPoE sessions are terminated against radius properly.
Specific radius attributes in request-accept are received by cisco
(debugging comfirms) but ignored

here's what i need:
prioritize traffic over a 100Mbps metropolitan area network -- give things
running over particular ports & between particular machines higher priority
over others.  Is 'class of service' what's relevant here?  It's my