Walking With Cisco

Strategic to nail CCIE Lab exam.

2009-01-22T07:08:00.000-08:00

From: Yap Chee Yuen <cyyap@trainpro.com.my>
Date: Mon, Jan 19, 2009 at 2:43 AM
Subject: I would like to tell a bit about my strategic to nail this exam.
To: ccielab@groupstudy.com

Dear GS,

I hope this email is not too late. I am just trill and still enjoying my
holiday with my family right after I got my result. I finally nail my R&S
last week in Hong Kong. It took me 3 attempts to nail it. My first attempt
was in April 2008.

I subscribe to GS since 2007 but mainly as observer and I hardly make any
post but this forum is the most updated IMHO and I recommend to all CCIE
candidate. Thank to Paul Borghese for this excellent forum.

The material that I use for my study include

Soup to Nut by Narbik Kocharians

Advanced Technology Workbook by Narbik Kocharians

BSCI - Cisco Training Kit

BCMSN - Cisco Training Kit

ONT - Cisco Training Kit

ISCW - Cisco Training Kit

BGP - Cisco Training Kit

QOS - Cisco Training Kit

MPLS - Cisco Training Kit

CCIE Practical Studies Vol 1 by Karl Solie

CCIE Practical Studies Vol 2 by Karl Solie and Leah Lynch

IPExpert Vol 9.0 proctor lab

Full CCIE rack from my office

GNS3 running Ubuntu for revision at home

I cover the above material inside out and have a good understanding on the
basic.

For CCIE R&S specifically, I attend Narbik bootcamp in Dubai (Paid) during
March 2008 and second time in Kuala Lumpur (FOC) during November 2008.

I figure out that, thing I did differently in my third attempt compare to my
previous two attempt were:

1. Get very familiar with DocCd.
http://www.cisco.com/web/psa/products/index.html During my revision I read
almost all links related to R&S. Previously I just skim through.

2. Get access to ASET, this facility is provided to Cisco Partner FOC.
The topology in ASET and the way they grade the solution help a lot. I am
ignorance about this facility until someone in GS mention it. You need to
approach the correct local Cisco staff.

3. Repeat
http://www.micronicstraining.com/ccie-routing-switching-lab.html Narbik
Advance Tech Lab trice and cross reference with DocCD. This help me to
remember and understand the solution.

4. Do proctor lab using http://www.ipexpert.com/ IPExpert workbook.
This help to piece all technology together and time myself.

5. Take a 3 week off from work and concentrate on my study.
Previously, I did not have this privilege.

6. Support from my classmate. You need this to motivate each other and
challenge our knowledge.

7. Use this strategy
http://pushkarbhatkoti.wordpress.com/2008/07/28/how-to-nail-the-ccie-voice-l
ab-notes-from-passed-guy/ - I adapt to use with R&S, thank Radioactive Frog

8. Use this blog http://blog.internetworkexpert.com/ , I found many
good tips.

I would like to take this opportunity to thanks my family, all the authors
above, my classmate, the webmaster of GS, Hong Kong proctor and most
importantly Mr.Narbik Kocharians for his excellent class and humors. I have
requested him to come back to Malaysia in June 2009 for another class.

I am looking forward for SP track soon, but I need a break with my family
now.

Thank you

Yap Chee Yuen

CCIE R&S 23109

Blogs and organic groups at http://www.ccie.net

______________________________

_________________________________________
Subscription information may be found at:
http://www.groupstudy.com/list/CCIELab.html

My Article Collections 3 (OSPF)

2008-12-25T00:56:00.000-08:00

1- How to configure OSPF Cost

2- OSPF Cost

3- OSPF cost calculation pitfall with high bandwidth interfaces *

4- OSPF Capability Transit

5- Gotcha's with OSPF Neighborship

6- OSPF Cost Metric and LSA's

7- Fun with OSPF Type 5 LSAs

8- Configuring OSPF Demand

My Article Collections 2

2008-12-14T23:49:00.000-08:00

1- Lock down Cisco switch port security

2- port in error-disabled state

3- Errdisable Port State Recovery on the Cisco IOS Platforms

4- Cisco switchport port security

5- Switchport port-security - what we must KNOW

6- Secure your network with Switchport Port-Security!!!

My Article Collections 1

2008-12-12T07:36:00.000-08:00

1- Local user name authentication

2- Cisco administration 101: Learn 10 commands to configure on a new router

3- How to configure a Local username Database in the Cisco IOS

4- How to configure Passwords to secure your Cisco Router

5- Telnet, Console and AUX Port Passwords on Cisco Routers Configuration Example

6- Be aware of how easily someone can crack a Cisco IOS password

7- Protect your router from a dictionary DoS attack

8- Router Configuration 101: Setting up the Router

9- Configure local authentication with AAA

10- AAA

OSPF 1

2008-02-01T00:31:00.000-08:00

*Link-State Advertisement (LSA)
-Link-State Database
-SPF Algorithm
-Shortest Path First (SPF) Tree
-Routing Table

*1-Neighbor Table (Adjacency database)
2-Topology Table(LSDB, All routers within an area have an identical LSDB, RoadMap)
3-Routing Table(Forwarding database)

* Link-State routing requires a hierarchical network structure that is enforced by OSPF.
This two hierarchy consists of the following :
- Transit Area (backbone or area 0)
- Regular Areas (nonbackbone areas)

Welcome to Network Managers

2007-12-06T19:55:00.000-08:00

Welcome to Network Managers

Securing Cisco Routers by Disabling Unused Services

2007-12-01T19:29:00.000-08:00

Read Here

KNET LAB

2007-11-21T00:51:00.000-08:00

Play it

BGP Sample Configuration

2007-11-13T00:11:00.001-08:00

BGP Sample Configuration

Exploiting Cisco Routers

2007-11-12T20:59:00.000-08:00

- Exploiting Cisco Routers: Part 1 - Mark Wolfgang 2003-09-29

- Exploiting Cisco Routers: Part 2Mark Wolfgang 2003-12-01

Scaling EIGRP Networks with Stub Routers

2007-11-12T00:45:00.000-08:00

- EIGRP Stub Router Functionality

- EIGRP Stub Routing by Christ Bryant, CCIE #12933

- NetworkingStrategies.com/EIGRP

- Scaling EIGRP Networks with Stub Routers

- TechExam.net Forum

Router & WAN Monitoring

2007-10-31T19:22:00.000-07:00

Why is WAN Monitoring Important?

WAN links are usually the most expensive part of the network, and managing bandwidth allocation can be complex. Oversubscribing to bandwidth could mean that the company is paying for more bandwidth than required, and undersubscribing could result in congestion and unacceptable network performance. WAN Monitoring and Router Monitoring thus become very critical. Network managers need to optimize the quality of service by balancing throughput, committed information rate (CIR) and burst rate with congestion, response time, and discards.

Reference
- Router & WAN Monitoring
- Switch Monitoring
- NetFlow Analyzer Plugin

Understanding And Configuring DHCP Snooping

2007-10-30T03:16:00.000-07:00

Configure Your Catalyst for a More Secure Layer 2

By Chris Bryant, CCIE #12933

Mitigating IP DHCP Snooping

Cisco DHCP Snooping with ISC DHCPd

Tutorial: Split Horizon And Hub-And-Spoke Networks

2007-10-29T00:23:00.000-07:00

- Tutorial : Split Horizon And Hub-And-Spoke Networks

- Troubleshooting EIGRP and Disabling Split Horizon

- Troubleshooting EIGRP

- EIGRP FAQ

What is GNS3 ?

2007-10-08T19:57:00.000-07:00

GNS3 is a graphical network simulator that allows you to design complex network topologies and to launch simulations on them.

To allow complete simulations, GNS3 is strongly linked with :

Dynamips, an IOS emulator which allows users to run IOS binary images from Cisco Systems.
Dynagen, a text-based front-end for Dynamips.

GNS3 is an open source product that may be used on multiple platforms, including Windows, Linux, and MacOS X.

Features overview

Designing high quality complex network topologies.
Emulating Cisco routers.
Simulating simple Ethernet, ATM and Frame Relay switches.
Load-balancing between multiple hypervisors.
Load and save in Dynagen's INI-like format.
Image export (JPEG, PNG, BMP and XPM).

Important notice: users must provide their own Cisco IOS to use GNS3.

More information

Cisco 7200 Simulator

2007-10-08T19:53:00.000-07:00

Started in August 2005 a project to emulate a Cisco 7200 on a traditionnal PC. Now, it also supports Cisco 3600 series (3620, 3640 and 3660), 3700 series (3725, 3745) and 2600 series (2610 to 2650XM, 2691).

The goals of this emulator are mainly:

To be used as a training platform, with software used in real world. It would allow people to become more familiar with Cisco devices, Cisco being the world leader in networking technologies ;
Test and experiment the numerous and powerful features of Cisco IOS ;
Check quickly configurations to be deployed later on real routers.

Of course, this emulator cannot replace a real router: you should be able to get a performance of about 1 kpps (depending on your host machine), to be compared to the 100 kpps delivered by a NPE-100 (the oldest NPE model). So, it is simply a complementary tool to real labs for administrators of Cisco networks or people wanting to pass their CCNA/CCNP/CCIE exams.

Via here and More details

Cisco Password Decryption

2007-08-21T19:22:00.000-07:00

There are two kinds of Cisco passwords: Type 7 Passwords and Type 5 Passwords. Most of the passwords are encrypted using a rather weak algorithm (Type 7) that can be reversed. But some are encrypted using a strong encryption algorithm (Type 5), which is quite difficult to break. Both passwords can be recovered, but the second ones only with considerable efforts and resources.

Cisco Type 7 Passwords

If in your router configuration file you see a password with a '7' in the second field of the string, that password is encrypted using Cisco's weak proprietary algorithm. These kinds of hashes are generated through the "enable password" command.

Cisco Type 5 Passwords

Enable secret passwords are hashed using the MD5 algorithm instead of the weak Cisco proprietary algorithm. If the password string contains a '5' in the second field of the router's configuration command that means you have a Type 5 password.

Reference Links
- http://www.fastcrack.com/ciscopd7.html
- http://www.tech-faq.com/cisco-decrypt-password.shtml
- http://www.hackingciscoexposed.com/?link=contents