I was not able to get a seat for my 2nd attempt in all over ASIA (Sydney, Tokyo, Hong Kong) due to no more space available up to October 18, 2009 (Version 3.0). So I decided to go over the version 4.0 CCIE R&S by December 3, 2009 in Hong Kong.

I purchased the INE’s Volume 4.0 workbook. Below are my log on each lab tickets.  Sharing to you my thoughts.

Internetwork Expert’s R&S Lab Workbook Volume IV Logs – Lab 1

Ticket 1: VOIP Quality issue

-Think of a QOS policy configuration on the LLQ!
-Check for asymetric routing issue. Do traceroute.
-Do show frame-relay pvc xxx, check for  CIR, BC, Fragment size.
-Verify applied service policy and map-class frame-relay if any.
-Check for the queueing strategy on the interface. LLQ is “Conversation 40″, minimum bandwidth reservation is “Conversation 41″ on the  show policy-map interface command.
-Ping test with higher MTU size to check for fragmentation if working.

Ticket 2: OSPF load balancing.

-It is critical that the adjancency database to be sync, check individual database of the advertising router (show ip ospf data router adv <rid>)
-OSPF does not install routes on the routing table with different DB entries and interface types.
-Watch OSPF adjacencies can still be form even on a different network types, as long as timers are match. Here p2p and broadcast types can form adjacendy.
-Check basic connectivity.
-show ip route
-Check OSPF topology table on the LSA type.
-show ip ospf database router self-originate/advertising-router xxxx.
-debug ip bgp

Ticket 3: BGP Peering.

-BGP TTL Security HOPs. Nice TTL security feature for BGP. Sets outgoing TTL to 255 and the Incoming TTL equals to 255-x, where x is the TTL hops on the command “neighbor <iP> ttl-security hops x”.
-Without TTL security hops feature, OUT TTL is 1 by default and Incoming is 0. So it means ebgp sessions can be established from anywhere on the network.
-Check basic connectivity.
-Check for any filtering issue on tcp port 179.
-Debug ip packet detail ACL, ACL matches TCP source and destinations ports.

Ticket 4: Connectivity Issue

-Watch out for inconsistent RB for a vlan. Check spann tree guard root command. Check L2 diagram for the any spanning tree diagram (root down, down to up).
-Do basic ping test.
-Check for VACL’s applied on the switch.
-Verify CDP neighbors.
-Check interface ACL’s applied.
-show spanning tree vlan and verify proper tree distribution or path from the ROOT down.

Ticket 5. Old Backup
-check for frame relay mapping issue
-Check for EIGRP router-id should be unique throughout the entire EIGRP domain.
-RIP – Check out send and receive versions.
-Check for IN and OUT filters within the protocol by issuing the command show ip protocols.
-Can use temporary* static route to test connectivity issue.
-Basic ping test, -Verify CDP neighbors.
-Prefix not installed on the routing table – 1. check AD, 2. Distribute-list Filtering. 3. Same Router ID Filtering External Routes.

Ticket 6. BGP prefix

-check out for cluster id issue. If your router-id is taken by other IBGP neighbor, you can establish neighborship but does not exchange bgp routes. (this case the RR has same RID with the client. So the client does not receive any bgp routes from the RR due to CLUSTER-LIST loop.
-To fix this, issue a unique bgp cluster-id on the router bgp process.
-clear bgp neighborship using soft-in
-debug ip bgp xxxx updates

Ticket 7. DHCP

-Use debugging technique for DHCP to gather information.
-Use logging buffer.
-debug ip dhcp server packets
-debug ip dhcp server events
-show ip dhcp.
-check doc cd
-use all options ? command technique.


Ticket 8. Port Security Violation

-By default port security violation allows only 1 MAC address.
-If you use FHRP with port security be sure to allow at least 2 MAC address on the switch port.
-Else use standby use-bia on the Router port for it not to use any other MAC address.
-Be sure to shut/no shut switch port to re-enable interface with error-disable state.
-Show port-security interface f0/1
-logging console debugging.

Ticket 9. IPV6

-RIPng uses the link local address as next hop interface.
-Make sure to map the link local address on the frame map statement.
-Check IPV6 routing table
-Ping test.

Ticket 10. Multicast

-ping testing usually is automatically source on the loopback interface (sparse-dense), so make sure the loopback interface has ip pim mode on it.
-mtrace back from last hop router to the source.
-check for RP configs
-use process switch for troubleshooting and debug ip mpacket
-check for any RFP issue, use static mroute if needed only.
-mtrace from destination back to source.
-check rpf failure for the RP and source separately!
-check mroute table.
-show ip igmp groups
-show ip igmp rp mappings

I was wondering why one of my Lab routers had no boot image installed on the flash, while it can still boot up an image.

This is what I found out, a hidden IOS boot image on the flash drive.

Rack2R2#sh flash: | i bin
Rack2R2#sh ver | i flash:
System image file is “flash:c1841-adventerprisek9-mz.124-19b.bin”
Rack2R2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Rack2R2(config)#no secure boot-image
Rack2R2(config)#
Rack2R2#sh flash: | i bin
1 25648872 Jul 26 2009 17:45:30 +00:00 c1841-adventerprisek9-mz.124-19b.bin
Rack2R2#

I have a customer that is complaining a lot of CRC and input errors on the interface.
This has been diagnosed with the help of Cisco's Output Interpreter.

R1#sh int s0/0/0
Serial0/0/0 is up, line protocol is up
 Hardware is GT96K Serial
 Description: R1
 MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,
 reliability 255/255, txload 39/255, rxload 38/255
 Encapsulation FRAME-RELAY IETF, loopback not set
 Keepalive set (10 sec)
 Carrier delay is 15 sec
 LMI enq sent  1146, LMI stat recvd 1146, LMI upd recvd 0, DTE LMI up
 LMI enq recvd 0, LMI stat sent  0, LMI upd sent  0
 LMI DLCI 1023  LMI type is CISCO  frame relay DTE
 FR SVC disabled, LAPF state down
 Broadcast queue 0/64, broadcasts sent/dropped 603/0, interface broadcasts 412
 Last input 00:00:00, output 00:00:00, output hang never
 Last clearing of "show interface" counters 03:10:56
 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 751448
 Queueing strategy: weighted fair
 Output queue: 63/1000/64/751448 (size/max total/threshold/drops)
 Conversations  1/3/256 (active/max active/max total)
 Reserved Conversations 0/0 (allocated/max allocated)
 Available Bandwidth 1158 kilobits/sec
 5 minute input rate 235000 bits/sec, 22 packets/sec
 5 minute output rate 237000 bits/sec, 21 packets/sec
 34006 packets input, 39923277 bytes, 0 no buffer
 Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
 4 input errors, 4 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
 38081 packets output, 42136153 bytes, 0 underruns
 0 output errors, 0 collisions, 0 interface resets
 0 output buffer failures, 0 output buffers swapped out
 0 carrier transitions
 DCD=up  DSR=up  DTR=up  RTS=up  CTS=up
R1#

If you paste this on the CISCO OUTPUT Interpreter you would get the following:

SHOW INTERFACE SERIAL NOTIFICATIONS (if any)

Interface Serial0/0/0 (up/up)
  WARNING: The counters for this interface have not been cleared for 3 hours 10
  minutes 56 seconds.
  TRY THIS: Use the 'clear counters Serial0/0/0' command to ensure current information
  is being displayed. This will assist when troubleshooting serial interface issues.

  WARNING: This interface has a high number of output drops.
  The input rate to this interface has exceeded the bandwidth available on the
  serial link.
  TRY THIS:
  1. Minimize periodic broadcast traffic like routing and Service Advertising
     Protocol (SAP) updates (if applicable) by using access lists or by other
     means.
  2. Turn off fast switching for heavily used protocols. For example, turn off
     IP fast switching by using the 'no ip route-cache' interface configuration
     command.
  3. Implement priority queuing on slower serial links.
  4. Submit the output from 'show buffers' to Output Interpreter to determine
     if buffers need to be tuned.
  REFERENCE: For more information see: Troubleshooting Output Drops

  WARNING: This interface has received a high number (0.01176% of input packets)
  of packets with incorrect CRCs (corrupted data).
  Problems that may cause this symptom include:
  a. Noisy serial line
  b. Serial cable is too long or cable from the CSU/DSU to the router is not
     shielded
  c. SCTE mode is not enabled on the DSU
  d. The CSU line clock is incorrectly configured
  e. A Ones density problem on the link (incorrect framing or coding
     specification), exists
  f. Verify the queuing strategies are the same on both ends of the link.
  TRY THIS:
  1. Ensure that the line is clean enough for transmission requirements. Shield
     the cable if necessary.
  2. Make sure the cable is within the recommended length (no more than 50 feet
     [15.24 meters], or 25 feet [7.62 meters] for the link).
  3. Ensure that all devices are properly configured for a common line clock.
     Set serial clock transmit external (SCTE) on the local and remote DSU. If
     you are attempting serial connections at speeds greater than 64 kbps with
     a CSU/DSU that does not support (SCTE), you might have to invert the
     transmit clock on the router. Inverting the transmit clock compensates
     for phase-shifts between the data and clock signals.
  4. Make certain that the local and remote CSU/DSU are configured for the
     same framing and coding scheme as that used by the leased-line or other
     carrier service (for example, ESF/B8ZS).
  5. Contact your leased-line or other carrier service and have them perform
     integrity tests on the line.

REFERENCE: For more information on Serial Lines, see:
  Troubleshooting Serial Line Problems
  Configuring Serial Interfaces
  Troubleshooting Serial Lines
  Loopback Tests for T1/56K Lines

REFERENCE: For more information on Frame-Relay, see:
  Frame Relay
  Configuring Frame Relay
  Configuring and Troubleshooting Frame Relay
  Configuring and Troubleshooting Frame Relay Broadcase Queue
  Troubleshooting Frame Relay Networks
SHOW INTERFACE SERIAL NOTIFICATIONS (if any) Interface Serial0/0/0 (up/up) WARNING: The counters for this interface have not been cleared for 3 hours 10 minutes 56 seconds. TRY THIS: Use the ‘clear counters Serial0/0/0′ command to ensure current information is being displayed. This will assist when troubleshooting serial interface issues. WARNING: This interface has a high number of output drops. The input rate to this interface has exceeded the bandwidth available on the serial link. TRY THIS: 1. Minimize periodic broadcast traffic like routing and Service Advertising Protocol (SAP) updates (if applicable) by using access lists or by other means. 2. Turn off fast switching for heavily used protocols. For example, turn off IP fast switching by using the ‘no ip route-cache’ interface configuration command. 3. Implement priority queuing on slower serial links. 4. Submit the output from ‘show buffers’ to Output Interpreter to determine if buffers need to be tuned. REFERENCE: For more information see: Troubleshooting Output Drops WARNING: This interface has received a high number (0.01176% of input packets) of packets with incorrect CRCs (corrupted data). Problems that may cause this symptom include: a. Noisy serial line b. Serial cable is too long or cable from the CSU/DSU to the router is not shielded c. SCTE mode is not enabled on the DSU d. The CSU line clock is incorrectly configured e. A Ones density problem on the link (incorrect framing or coding specification), exists f. Verify the queuing strategies are the same on both ends of the link. TRY THIS: 1. Ensure that the line is clean enough for transmission requirements. Shield the cable if necessary. 2. Make sure the cable is within the recommended length (no more than 50 feet [15.24 meters], or 25 feet [7.62 meters] for the link). 3. Ensure that all devices are properly configured for a common line clock. Set serial clock transmit external (SCTE) on the local and remote DSU. If you are attempting serial connections at speeds greater than 64 kbps with a CSU/DSU that does not support (SCTE), you might have to invert the transmit clock on the router. Inverting the transmit clock compensates for phase-shifts between the data and clock signals. 4. Make certain that the local and remote CSU/DSU are configured for the same framing and coding scheme as that used by the leased-line or other carrier service (for example, ESF/B8ZS). 5. Contact your leased-line or other carrier service and have them perform integrity tests on the line. REFERENCE: For more information on Serial Lines, see: Troubleshooting Serial Line Problems Configuring Serial Interfaces Troubleshooting Serial Lines Loopback Tests for T1/56K Lines REFERENCE: For more information on Frame-Relay, see: Frame Relay Configuring Frame Relay Configuring and Troubleshooting Frame Relay Configuring and Troubleshooting Frame Relay Broadcase Queue Troubleshooting Frame Relay Networks

conf t
alias exec r show ip route
alias exec ss show run | s ^router
alias exec sr show run | b ^router
alias exec s show ip int brief
alias exec su show ip int brief | e unassigned

alias exec r6 show ipv6 route
alias exec s6 show ipv6 int brief
alias exec rc show run
alias exec i show run interface
alias exec b show ip bgp

alias exec o show ip ospf
alias exec e shwo ip eigrp
alias exec c config term
alias exec pm show policy-map
alias exec rm show route-map

alias exec al show access-list
alias exec pl show ip prefix-list
alias exec m show ip mroute
alias exec pp show ip pim
alias exec cm show class-map

alias exec v show vlan brief
alias exec pb ping 255.255.255.255
alias exec ciop clear ip ospf proce
alias exec cien clear ip eigrp nei
alias exec cib clear ip bgp *

alias exec cir clear ip route *
alias exec t show int trunk
end
wr

Remember that IPv6 is composed of 128 bits. This is commonly expressed by 16′s in 8 groups (8 * 16 = 128).
Example IPv6 address: FEC0:0:0:A:125:23FF:FEE2:1F53 (count the “:” it is a group by 8)

Summarization Tidbits:

Example:

Summarize the following addresses:
FEC0:0:0:A:125:23FF:FEE2:1F53 and
FEC0:0:0:E:10A:9FFF:FED7:D3

0000 0000 0000 1010 – A
0000 0000 0000 1110 – E
0000 0000 0000 1000 – 8 – common mask

FEC0 + 0 + 0 = 48 bit position
16 + 16 + 16 = 48,

+ (12 zeros common between A and E, as per above)
48 + 12 = 60

+ (1 bit for the 8 – common mask)
60 + 1 = 61  <—total bit position, this is your MASK.

Answer: FEC0:0:0:8::/61

Gets?

The upcoming Version 4.0 of Cisco CCIE® Routing and Switching certification will test hands-on troubleshooting, Multiprotocol Label Switching (MPLS), and VPN networking.

To reflect the growth of the network as a service platform, Cisco is revising the certification requirements for CCIE Routing & Switching (CCIE R&S)–the expert level certification for network engineers. The new requirements were developed with assistance from Cisco enterprise customers and reflect the expectations of employers across industries.

The competencies required for CCIE R&S v4.0 certification were released on May 5, 2009, and are available on the Cisco Learning Network under the CCIE R&S v4.0 Written Exam topics and CCIE R&S v4.0 Lab Exam topics. Exams based on the new requirements are scheduled for release on October 18, 2009, and will immediately replace the currently available v3.0 exams. Candidates who plan to take their exams on October 18, 2009, or later should prepare using the new v4.0 exam topics.

Both the written and lab exams will be refreshed with new questions and will cover MPLS and VPN networking. The written exam will add scenario-based questions to the multiple choice questions, and the lab will now require hands-on troubleshooting of preconfigured networks, in addition to configuration. Exam duration and pricing will remain the same, with the two-hour written exam at USD$350 and the eight-hour lab at USD$1400. A beta version of the new CCIE R&S v4.0 written exam (351-001) will be available to all customers in the July–August 2009 timeframe at a discounted price of USD$50. An announcement will be made when scheduling begins.

https://cisco.hosted.jivesoftware.com/docs/DOC-4605

What Cisco proprietary STP feature configured in a switch prevents it from becoming a transit node under most circumstances? 
Answer (Highlight to answer):  Uplink-Fast

Q5. Accoring to RFC specifications, what is the exact Administratively Scope Multicast address used in common/real practice?

Answer (Highlight to answer):  239.15.0.0/16 (but for CCIE exam its is 239.0.0.0/8)

Q4. IGMP packets are designated by which IP protocol number?

Answer (Highlight to answer): 2 (two)

Q3. The member ports of a switch’s local EtherChannel are set to on. In order to successfully form an Which PIM forwarding mode uses a flood and prune method, with a 3 minute cycle?

Answer (Highlight to answer): PIM dense-mode

Q2. The member ports of a switch’s local EtherChannel are set to “on”. In order to successfully form an EtherChannel link, the remote switch’ member ports should be set to what mode?

Answer (Highlight to answer): Mode “On”

I am posting 1-2 question(s) of the for the CCIE RS core knowledge exam every day. This will be short and brief, can be answered is few words. I will call it “banner qotd”.

banner qotd – New CISCO IOS command. ( -:).

Q1. In EIGRP, it uses a multicast flow timer and a retransmission timeout to control the Reliable Transport Protocol. What is the average elapse time, measured in milliseconds (ms), between the transmission of  a packet and the receipt of the acknowledgment?

Answer (Highlight to answer):  SRTT (smooth round trip time)



Found this compilation from IE. This is extremely a must to master! Read on!

Where the $%#@ is it? Some Popular DOC-CD Locations

Hello faithful blog readers. We all know there are some real treasures in the DOC-CD that can assist dramatically in the lab exam. Here are some of our reader’s favorites. Thanks to my friend Ruhann over in South Africa for the post idea!

All navigation begins from http://www.cisco.com/web/psa/products/tsd_products_support_configure.html

I. Bridging and Switching

a. Integrated and Concurrent Routing and Bridging

Cisco IOS Software – 12.4 Family – 12.4 Mainline – C.G. – Cisco IOS Bridging and IBM Networking Configuration Guide, Release 12.4 – Part 1: Bridging – Configuring Transparent Bridging

II. IP IGP Routing

III. BGP

a. Best Path Selection

Cisco IOS Software – 12.2 S Family – 12.2 SB – C.G. – Cisco IOS IP Configuration Guide, Release 12.2 – Part 2: IP Routing Protocols – Configuring BGP – How BGP Selects Paths

b. Community Values

Cisco IOS Software – 12.4 Family – 12.4 Mainline – C.G. -  Cisco IOS IP Routing Protocols Configuration Guide, Release 12.4 – Part 1: BGP – Connecting to a Service Provider Using External BGP

c. Regular Expressions

Cisco IOS Software – 12.4 Family – 12.4 Mainline – C.G. – Cisco IOS Terminal Services Configuration Guide, Release 12.4 – Appendixes – Regular Expressions

IV. IP and IOS Features

a. NTP

Cisco IOS Software – 12.4 Family – 12.4 Mainline – C.G. – Cisco IOS Network Management Configuration Guide, Release 12.4 – Performing Basic System Management – Setting Time and Calendar Services

b. HSRP

Cisco IOS Software – 12.4 Family – 12.4 Mainline – C.G. – Cisco IOS IP Application Services Configuration Guide, Release 12.4 – Part 1: First Hop Redundancy Protocols

V. IP Multicast

a. Intermediate IP Multicast Helper

Cisco IOS Software – 12.4 Family – 12.4 Mainline – C.G. -Cisco IOS IP Multicast Configuration Guide, Release 12.4 – Configuring an Intermediate IP Multicast Helper Between Broadcast-Only Networks

VI. QoS

a. RTP Port Range

Cisco IOS Software – 12.4 Family – 12.4 Mainline – C.G. -Cisco IOS Quality of Service Solutions Configuration Guide, Release 12.4  – Part 2: Congestion Management – Congestion Management Overview – IP RTP Priority

VII. Security

a. ACL Favorites

Security – Firewall Appliances – Cisco ASA 5500 Series Adaptive Security Appliances – C.G. – Cisco Security Appliance Command Line Configuration Guide, Version 8.0 – Reference – Addresses, Protocols, and Ports

b. Control Plane Policing (CoPP)

Cisco IOS Software – 12.4 Family – 12.4 Mainline – C.G. -Cisco IOS Quality of Service Solutions Configuration Guide, Release 12.4  – Part 4: Policing and Shaping – Configuring Traffic Policing – Control Plane Policing

http://blog.internetworkexpert.com/2008/12/08/doc-cd/

CCIE Lab Strategy: A Structured Approach
http://classroom.internetworkexpert.com/p73138523/

Emerging Technologies: IPv6 and the CCIE Lab
http://classroom.internetworkexpert.com/p23982603/

CCIE Catalyst QoS
http://classroom.internetworkexpert.com/p95576427/

CCIE Route Redistribution Demystified
http://classroom.internetworkexpert.com/p42549585/

CCIE Routing and Switching Multicast
https://ine.webex.com/ine/lsr.php?AT=pb&SP=TC&rID=66637&act=pb&rKey=7B093AE190FBBBF4

The links above are very helpful on my CCIE Lab Preparation.

I’m sharing to you what I call “Gold Mine”.

I encoutered this on my NMC Graded labs. They asked this on the switching and bridging portion. I reliazed now, this was originally from the BGP section. Not only “?” but I think any escape charters will do, like “!”.

Rack1SW1(config)#vtp domain HELLO-WORLD??
WORD

Rack1SW1(config)#vtp domain HELLO-WORLD??!
Changing VTP domain name from CISCO-A to HELLO-WORLD??!
Rack1SW1(config)#
*Mar  1 00:04:48.411: %SW_VLAN-6-VTP_DOMAIN_NAME_CHG: VTP domain name changed to HELLO-WORLD??!.
Rack1SW1(config)#do show vtp status | i Domain
VTP Domain Name                 : HELLO-WORLD??!
Rack1SW1(config)#

My 2 cents.

Please note that “ASET” and “Assessor” are two different things.

Cisco Assessor:

• 4 hour timed labs
• Must be purchased
• “all-or-nothing” scoring similar to actual Cisco CCIE lab
• Content direct from, or approved by, Cisco CCIE team
• See the last page of this lab guide for more information

Cisco Advanced Sales Engineer Training (ASET) Labs:

• “Full” labs designed to take approximately 8 hours to complete
• “Modular” labs can take 1-4 hours to complete depending on topics
• No cost
• No time limit on sessions (depends on how you have been set up)
• Partial credit scoring
• Need to be granted access by a Cisco Partner or a Cisco SE
• Please see http://www.cisco.com/warp/public/765/download/pep/aset.html for more
information

CCIE R/S Lab Sample Open-Ended Exam Questions
By Anthony Sequeira, #15626

Here are some samples for the many, many different open-ended questions Cisco could ask for the R/S track. Please notice there is no need for panic if you are using one of our recommended study approaches. Also, we have received information that these questions will be computer-based and you will answer them before the configuration portion.

Bridging and Switching
• Explain the advantages of MSTP (802.1s).
• Explain the advantages of RSTP (802.1w).
• Explain the differences between 802.1Q and ISL.

IP IGP Routing
• Explain the advantages presented by the DUAL algorithm in EIGRP.
• Why does OSPF use a DR in an Ethernet LAN environment?
• Why does OSPF feature different network types for use in an NBMA area of your network?

BGP
• What issues can the use of a peer group solve in BGP?
IP and IOS Features
• How can a Cisco router assist a client PC to obtain a DHCP address from a DHCP server located on a remote subnet?
• What issue does HSRP help solve?

IP Multicast
• Discuss issues that exist with the PIM Dense-Mode protocol.

QoS
• Describe differences between Custom Queuing and Class-Based Weighted Fair Queuing.
• What are the advantages presented by DSCP markings when compared to the legacy IP Precedence approach?

Security
• Describe the basic operation of CBAC on a Cisco router.

hxxp://blog.internetworkexpert.com/2009/01/14/ccie-rs-lab-sample-oral-exam-questions/

I am taking advantage as a CISCO Gold Partner. I am eligible for taking free CCIE Labs under the ASET Program. Read on below. If you think your sponsoring company is a Premier, Silver or Gold Cisco partner, then you are eligible for this program. Pls contact your Cisco representative.

Details and Prerequisites

Today’s internetworking environment continues to become more complex as the frontiers of technology move forward. To remain competitive, resellers are placing ever-increasing demands on their internetworking support professionals. These demands promote the need for expanded reseller technical training to provide a solid foundation for selling and supporting Cisco networking solutions. With that, the WW Channels Organization provides the Advanced SE Training Initiative (ASET). This initiative is to help provide guidance and support to certified partners who may need help meeting these challenging demands.

Program Details
ASET is remote access based training largely specific to post-sales build, configure, test, troubleshoot and debug efforts. The training covers a broad range of topics and general knowledge. (OSPF and BGP routing, to name just a few) General LAN/WAN knowledge, including data encapsulation and layering; windowing, flow control, and relation to delay; error detection and recovery; link-state, distance-vector, and switching algorithms; and management, monitoring, and fault isolation.

Knowledge of a variety of corporate technologies-including major services provided by Desktop, WAN, and Internet groups as well as the functions, addressing structures, and routing, switching, and bridging implications of each of their protocols. Knowledge of Cisco specific technologies, including router/switch platforms, architectures, and applications; communication servers; protocol translation and applications; configuration commands and system/network impact; and LAN/WAN interfaces, capabilities and applications.

Participation
To take advantage of Advanced SE Training, a partner must have the sponsorship of their local Cisco WW Channels SE. This means that the partner SE and the local Cisco SE must prepare a technical readiness plan which includes the following:

  1. The evaluation of the partner SE’s level of technical expertise. This allows the local Cisco SE to provide suggestions on classes to take, books to read, and web links to online trainings. Usually this is done before the candidate attempts the written exam. Then a second evaluation is conducted before the attempt at the lab exam.
  2. Suggest attendance in a Cisco Certification Study Group hosted by the local Cisco office. By joining the local CCSG the partner SE can participate in discussions on various topics pertaining to the CCIE Written Exam or other Cisco Career Certifications. Many of the CCSG’s have guest speakers discuss areas of specialization such as TAC engineers, Lead SE and Product Managers.
  3. Outline a partner SE’s ability to devote the self study time and ability to apply practical study methods.
    Practice

Lab Prerequisites
After completing the initial steps provided by the local Cisco office, the following prerequisites must be met before an ASET Practice Lab can be scheduled:

  1. Successfully pass the CCIE Written Exam.
  2. Schedule a CCIE Lab Exam.

Candidates should always keep their sponsoring Cisco SE Up to date on their progress.

If all prerequisites are completed:

To request access to Practice Racks online, contact your sponsoring Cisco Channels SE for scheduling.

For more information on Cisco’s WW Channels ASET Program, please send e-mail to aset-reg@cisco.com.

http://www.cisco.com/warp/public/765/download/pep/aset_qualify.html

For qualified CISCO powered network partner, there is a free CCIE RS and Security 4 hour lab by ASET Labgear.

Click here to register:  http://cpn.labgear.net/ccieprep/

Happy Labbing!

Effective February 1, 2009, Cisco will introduce a new type of question format to CCIE Routing and Switching lab exams. In addition to the live configuration scenarios, candidates will be asked a series of four or five open-ended questions, drawn from a pool of questions based on the material covered on the lab blueprint. No new topics are being added. The exams are not been increased in difficulty and the well-prepared candidate should have no trouble answering the questions. The length of the exam will remain eight hours. Candidates will need to achieve a passing score on both the open-ended questions and the lab portion in order to pass the lab and become certified. Other CCIE tracks will change over the next year, with exact dates announced in advance.

Effective February 17th, 2009, candidates will also see two other changes in CCIE written exams. First, candidates will now be required to answer each question before moving on to the next question; candidates will no longer be allowed to skip a question and come back to it at a later time. Second, there will be an update to the score report. The overall exam score and the exam passing score will now be reported as a scaled score, on a scale from 300-1000. This change will not affect the difficulty of the current set of exams and will assure CCIE written exams will be consistent with Cisco’s other career certification exams.

Below are my checklist for troubleshooting. The layer 1up approached.

-Administratively down interface?
-IP address correctly applied to an interface? Swapped?
-Check for unwanted secondary ip address?
-Trunk or Access port ethernet interface?
-Vlan association to an interface correct?
-Watch out for tricky IP address name and vlan number?
-Frame-relay lmi type must match -  Cisco, ANSI, Q933a?
-Switchport? or No Switchport?
-Subnet mask consistent?
-Ip routing enabled or not needed?
-Consistent VTP Domain, Password?
-Unwanted dynamic routing protocol running on a router?
-Subnet zero not configured?
-Ip classless configured?
-Ip cef enabled?
-Frame-relay map DLCI mapping correct?

Please feel free to add.

We always see a /32 host route every time we use PPP. What if you dont like and want it? What will you do?

Diagram:

R1-s0/1<<—–Serial-Connection——>s0/1-R2

Answer Configuration: use “no peer neighbor-route” interface command.

R1 and R2

interface Serial0/1
 ip address 12.12.12.x 255.255.255.0
 encapsulation ppp
 no peer neighbor-route

Routing Table: Before

     12.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C       12.12.12.0/24 is directly connected, Serial0/1
C       12.12.12.2/32 is directly connected, Serial0/1 <<<<< Get rid of this!
After:

Gateway of last resort is not set

     12.0.0.0/24 is subnetted, 1 subnets
C       12.12.12.0 is directly connected, Serial0/1

Verification:

R1#ping 12.12.12.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.12.12.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/38/56 ms
R1# ping 12.12.12.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 12.12.12.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 52/68/120 ms
R1#

Show to know:

R1#sh int s0/1 | i Open
  Encapsulation PPP, LCP Open
  Open: IPCP, CDPCP, crc 16, loopback not set
R1#

Diagram:

R4-s0/1<<——–Serial-back-2-back———>>s0/1-R5

Question:

Configure PPP on the Serial connection between R4 and R5 using dialer
interfaces.

Answer:

R4 and R5

interface Serial0/1
 no ip address
 encapsulation ppp
 dialer in-band
 dialer pool-member 1
 pulse-time 1

interface Dialer0
 ip address 45.45.45.x 255.255.255.0
 encapsulation ppp
 dialer pool 1
 dialer idle-timeout 0
 dialer persistent
 end

Routing Table:

C       45.45.45.x/32 is directly connected, Dialer0
C       45.45.45.0/24 is directly connected, Dialer0

R4#sh dialer

Se0/1 - dialer type = IN-BAND SYNC NO-PARITY
Dialer pool 1, priority 0
Idle timer (never), Fast idle timer (20 secs)
Wait for carrier (30 secs), Re-enable (15 secs)
Dialer state is data link layer up
Interface bound to profile Di0
Time until disconnect never
Connected to <unknown phone number> (<unknown phone number>)

Di0 - dialer type = DIALER PROFILE
Idle timer (never), Fast idle timer (20 secs)
Wait for carrier (30 secs), Re-enable (15 secs)
Dialer state is data link layer up
Number of active calls = 1
Dial String      Successes   Failures    Last DNIS   Last status

My motivation of this trivia questions is to save myself from the unknown. I’ll do my best to post very quickly those small things that can never be discounted on the real lab.

Question:

• SW1 and SW2 should see each other as CDP neighbors via SW3
across the routed link that connects them.

Diagram:

SW1———-f0/1–SW3–f0/2———SW2

Answer:

SW2:

interface FastEthernet0/1
l2protocol-tunnel cdp
no cdp enable

interface FastEthernet0/2
l2protocol-tunnel cdp
no cdp enable

Question: On Router1, the users should be able to see the *number of packets and bytes IP packets in *transit* outbound interfaces to/from vlan 1 switched through router.  Statistics should be broken down based on destination and source IP address.

Final configuration:
R1:

interface fast0/0
  ip accounting output-packets

Verification:

On R1 ping any reachable host via this router.

R1#ping 172.20.0.6 

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.20.0.6, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/4 ms

Show to know:

R5#sho ip accounting
   Source           Destination              Packets               Bytes
 172.20.0.3       172.20.0.4                     386               46616
 172.16.107.1     232.19.19.19                   360               36000

Accounting data age is 11
R5#sho ip accounting
   Source           Destination              Packets               Bytes
 172.20.0.3       172.20.0.4                     439               53044
 172.16.107.1     232.19.19.19                   410               41000

Accounting data age is 13

By Anthony Sequeira, #15626

“Proctor, Proctor, give me the news, I got a bad case of Multicast blues!”

Are the proctors helpful or not? Many have plenty of opinions on this. At the very least, let’s consider some tips that might help us in working with them…

  • Be polite! If you are confrontational, they are going to be far less likely to care about you and your silly question about the lab ☺ An example of politeness that I used was to always preface my question with a comment like “I am so sorry to bother you…” or “May I take a moment of your time?”
  • Demonstrate your mastery of the subject matter in your question. Politely stress that your issue is vagueness or grammar in the task – DO NOT give any indication that it is the material you are struggling with. And while you might be a bit upset that the grammar in the lab is poor, certainly do not go to great lengths to point that out! The proctor you are speaking to may have written that task, and they might take great pride in it! Here is an example of demonstrating your mastery on a subject – “Sir, I am considering the use of Root Guard for this task as I believe it meets the requirements, yet I am concerned about the request that the interface must be Shut Down by a violation. Technically Root Guard does not do this. Root Guard blocks the port using what is termed a root-inconsistent state. Is it still a viable solution even though I am not truly shutting down the port?” You are going to get a lot further with the proctor that way then this way – “Should I use Root Guard for this task?”
  • Do not be afraid to visit a proctor two or three times about the same question. I did this in the Multicast section and eventually got the guidance I needed.
  • If you are getting nowhere with a particular proctor, try another one if that is possible at your testing center.
  • Immediately following a lab attempt, spend some time with the proctors to pick their brains about ways you can improve, their grading system, etc. They are very willing to help typically!
  • Do not attempt to bribe your proctors. They might take your money – BUT THEY DO NOT GRADE YOUR EXAM! Someone in another time zone grades your exam! ☺

Do you have other tips? Let us know in the comments! Thanks for reading my dear friends! And special thanks to Chris from my Mocklab Workshop for the sample proctor question! He asked it the correct way of course. ☺

Cross posted from http://blog.internetworkexpert.com/2008/10/15/tips-for-working-with-the-proctors/#comment-10175

Questions and Answers:

1. Advertise only odd network

210.8.40.0
210.8.41.0
210.8.42.0
210.8.43.0

even 40,42

40 0010 1000
42 0010 1010
0000 0010

odd 41,43

41 0010 1001
43 0010 1011
0000 0010

answer:
acl odd  210.8.41.0 0.0.2.x
acl even 210.8.40.0 0.0.2.x

x = 0 = route
x = 255 = host

dont care = 1
stings of 32 bits

————-

2. pick only even /24 from 202.78.0.0 / 16
make as few line as possible, permit no more no less.

202.78.00000000.0
202.78.00000010.0
202.78.x.0

0  0000 0000
2  0000 0010
4  0000 0100
6  0000 0110
8  0000 1000
10 0000 1010

1111 1110 = mask = 254

answer : 202.78.0.0 0.0.254.0

even: acl permit 202.78.0.0 0.0.254.0  .0 on last octed means a route!
odd : acl permit 202.78.1.0 0.0.254.0  .0 on last octed means a route!

————–

3. Group / Summarize: is a few lines a possible

172.16.31.0
172.16.32.0
172.16.33.0
172.16.34.0

answer:

31.0

32.0 /22
deny 35.0

acl deny   172.16.35.0 0.0.0.0
acl permit 172.16.31.0 0.0.0.0
acl permit 172.16.32.0 0.0.3.0

31 0001 1111

32 0010 0000
33 0010 0001

34 0010 0010
35 0010 0011 <<—-not present!

0000 0011 Mask = (3) , 2 bit position difference, so 2 to the 2 is 4, thats 32-35.

Tip: You can over permit but make sure you deny the over permitted route.

—————–

4.  Group / Summarize: is a few lines a possible

172.16.31.0

172.16.32.0
172.16.33.0
172.16.34.0
172.16.35.0

172.16.36.0
172.16.37.0

answers:

acl permit 172.16.31.0 0.0.0.0
acl permit 172.16.32.0 0.0.3.0
acl permit 172.16.36.0 0.0.1.0

or

acl deny   172.16.38.0 0.0.1.0
acl permit 172.16.31.0 0.0.0.0
acl permit 172.16.32.0 0.0.7.0

Tip: Depends on how you group the routing according the position, will result in same 3 line answer.

——————–

5. Summarize in as few lines a possible.

168.192.3.0  /24
168.192.14.0 /24
168.208.11.0 /24
168.208.14.0 /24
168.208.3.0  /24
168.192.11.0 /24

answer, group first.

168.192.3.0  /24
168.192.11.0 /24
168.208.3.0  /24
168.208.11.0 /24

168.192.14.0 /24
168.208.14.0 /24

then,

192 1100 0000
208 1101 0000
0001 0000 mask = 16

3   0000 0011
11  0000 1011
0000 1000 mask = 8

14  0000 1110

answer:
acl permit 168.192.3.0   0.16.8.0
acl permit 168.192.14.0  0.16.0.0

———
5. summarize in as few lines as possible

207.49.164.0 /24
208.49.164.0 /24
205.49.165.0 /24
207.49.165.0 /24
192.49.164.0 /24

answer, group!

192.49.164.0 /24
208.49.164.0 /24
192 1100 0000
208 1101 0000
0001 0000 mask 16

207.49.164.0 /24 <-stand alone.

207.49.165.0 /24
205.49.165.0 /24
205  1100 1101
207  1100 1111
0000 0010 mask 2

answer:

acl permit 192.49.164.0 16.0.0.0
acl permit 205.49.165.0 2.0.0.0
acl permit 207.49.164.0 0.0.0.0

or

192.49.164.0 /24
208.49.164.0 /24
192 1100 0000
208 1101 0000
0001 0000 mask 16

207.49.164.0 /24
207.49.165.0 /24

164 1010 0100
165 1010 0101
0000 0001 mask 1

205.49.165.0 /24 <-stand alone.

so, another answer is:

acl permit 192.49.164.0 16.0.0.0
acl permit 207.49.164.0 0.0.1.0
acl permit 205.49.165.0 0.0.0.0

————–
7. Create an ACLin as few line as possible

182.17.73.0

182.17.77.0
182.81.73.0
182.81.77.0
190.17.73.0
190.81.73.0
190.17.77.0
190.81.77.0

190 1011 1110
182 1011 0110
0000 1000 mask 8

17 0001 0001
81 0101 0001
0100 0000 mask 64

73 0100 1001
77 0100 1101
0000 0100 mask = 4

In every octet there is a differnce, so we can put this on a

single entry!

answer:

acl permit 182.17.73.0 8.64.4.0

checking tip: put the middle network say 190.81.73.0 and

mask, the router should put the lowest IP address (

182.17.73.0) to the running config. This will ensure you that

you have computed correctly the mask.

———–

I can’t help it, I have a feeling this should come out and be part of the exam. Therefore this should be a must for all CCIE candidate to master!

Post with Hon Ming, CCIE#15908 and Jay Yarborugh, CCIE # 15281.

ccie-pilots-boot-campers

ccie-pilots-boot-campers

CCIE Instructor: Jacky Hon Ming Chan, CCIE # 15908

From left to right: Mar, Mon, Erick, Daniel, Elfred, Jacky(CCIE), Jovi, Sherwin, Reggie.

CCIE labs changing from UniversCD to Cisco Documentation

On Sept 24 2008 CCIE labs will no longer support using the UniversCD documentation for the lab exam.

All labs are migrating to Cisco Documentation only. For those scheduled to take the CCIE lab prior to Sept 24 access will still be available for UniversCD.

The Cisco Documentation pages have the same information that currently resides on UniversCD, please refer to the links on the CCIE web pages to view these pages and become familiar with the new format.

After Sept 24 2008 only the Cisco Documentation web pages will be available for CCIE labs.

Cross posted: http://www.cisco.com/web/learning/le3/ccie/announcements/index.html#universcd

« Previous PageNext Page »