Author Archive

May
17

I would like to thank the over 600 people who RSVP’d for INE’s 2013 Party at the Hard Rock Cafe in Orlando during Cisco Live. Registration is closed as of today for our party but I wanted to be the first to let everyone know about the grand prize giveaway we are doing. On top of the standard giveaway prizes (iPads, MacBook Airs, AAP Memberships, Bootcamps, etc) we are giving away a Harley Davidson 2013 XL 1200X Forty-Eight to a lucky winner during our party.

Sportster Forty Eight

On top of the Harley Davidson 2013 XL 1200X Forty-Eight we’re having a second grand prize giveaway. Details on the second grand prize giveaway will be revealed after the drawing for the winner of the Harley Davidson at the party.

As a side note I don’t personally ride anymore but that bike really does look cool when it’s all blacked out.

Tags: ,

May
10

Our new CCIE Security Version 4 Technology Labs and Solutions are now available in your members’ site account for customers who owned the previous CCIE Security Volume 1 or 2 workbooks. The labs are in the new HTML format like our Data Center material to ensure you always have the most up to date material along with allowing for advanced features (bookmarking, highlight tasks, etc). The full scale mock labs are in development now and are included with the Security workbook as we are doing away with the volume naming structure (Volume I, II, III, etc) and have gone to a single workbook.

Here is what is available in your members’ site account:

Section 1: System Hardening and Availability

  • Routing Protocol Authentication with RIPv2
  • Routing Protocol Authentication with OSPF
  • Routing Protocol Authentication with EIGRP
  • Routing Protocol Authentication with BGP4
  • Route Filtering with EIGRP
  • Route Filtering with OSPF
  • Route Filtering with RIPv2
  • Control Plane Policing
  • Control Plane Protection
  • Management Plane Protection
  • Disabling Unnecessary Services
  • Controlling Device Access
  • CPU Protection Mechanisms
  • Selective Packet Discard
  • Controlling Device Services
  • Transit Traffic Control with Flexible Packet Matching
  • Congestion Management
  • IOS File System Security
  • Network Telemetry Identification and Classification of Security Events
  • BGP TTL Security Hack
  • IPv6 Selective Packet Discard
  • Continue Reading

    Tags: , ,

    May
    10

    I offered one iPad Mini but in the end I’m giving three iPad Mini’s away. The first one to the person who answered it first as stated in my original blog post. The second one to the first person to answer it and explain why point-to-multipoint resolved it which is also worthy of an iPad Mini. Finally a third to a very detailed answer that is just too good not to give an iPad Mini for. Next time we’ll do the first answer and the best answer.

    Here are the winner’s answers in order listed above:


    Continue Reading

    May
    10

    There was an interesting post on IEOC yesterday in regards to an OSPF virtual link. Below is the original post and questions to win at the bottom of this post.

    Okay, I have never came across anything like this before. On R2 and R3 connected via serial with HDLC. OSPF network type default to P2P. I configured VL using the OSPF RIDs of both routers. R3 VL comes up and R2 VL is down. I changed just about every option which makes logical sense and nothing works. I reboot and clear process and still nothing. Out of shear desperation I changed the network-types to P2MP on both sides and voila it works. I tried testing broadcast and that doesn’t work. Only difference I can find is the mask changed from /24 to /32 in the LSA…as it should. But I am not sure why this has any bearing on the VL coming up.

    Rack1R2#show ip ospf vir

    Virtual Link OSPF_VL8 to router 222.255.255.255 is down

    Rack1R3#show ip ospf vir
    Virtual Link OSPF_VL0 to router 150.1.2.2 is up

    Rack1R2(config)#int s0/1/0
    Rack1R2(config-if)#ip ospf network p
    Rack1R2(config-if)#ip ospf network point-to-m
    *May 9 15:28:40.599: %OSPF-5-ADJCHG: Process 1, Nbr 222.255.255.255 on Serial0/1/0 from FULL to DOWN, Neighbor Down: Interface down or detached
    *May 9 15:28:41.007: %OSPF-5-ADJCHG: Process 1, Nbr 222.255.255.255 on Serial0/1/0 from LOADING to FULL, Loading Done
    Rack1R2(config-if)#
    *May 9 15:28:46.815: %OSPF-5-ADJCHG: Process 1, Nbr 222.255.255.255 on OSPF_VL8 from LOADING to FULL, Loading Done
    Any thoughts??

    Continue Reading

    Tags: ,

    May
    06

    Our new “CCIE Data Center – Implementing Nexus” course is now available in AAP and members site accounts. The course is just under 18 hours in length and covers the Nexus 7k, 5k and 2k platforms. It’ll be available for direct purchase in the next few hours.

    http://www.ine.com/all-access-pass/training/playlist/ccie-dc-implementing-nexus

    Nexus

    Tags: , ,

    May
    06

    I recently added a couple Catalyst 3850′s to my development rack as we are starting to develop them internally. I’ll do a few more detailed blog posts on the Catalyst 3850 in the near future but I just wanted to show how simple it is to perform basic QoS functions using the MQC on the 3850. Below is the configuration to limit VLAN 15 traffic received on a trunk link from a router to 512k.

    class-map match-any test
      match vlan  15
    !
    policy-map test
     class test
        police cir 512000
    !
    interface GigabitEthernet1/0/5
     switchport mode trunk
     load-interval 30
     service-policy input test
    

    Not only is it extremely simple to configure and intuitive from an IOS perspective but you actually get output from the show policy-map command.

    Rack1SW1#sho policy-map interface g1/0/5
     GigabitEthernet1/0/5 
    
      Service-policy input: test
    
        Class-map: test (match-any)
          Match: vlan  15
          police:
              cir 512000 bps, bc 16000 bytes
            conformed 18935704 bytes; actions:
              transmit
            exceeded 761225593 bytes; actions:
              drop
            conformed 0000 bps, exceed 0000 bps
    
        Class-map: class-default (match-any)
          Match: any
    Rack1SW1#
    

    I can’t imagine having to use the 3750 or 3560 switch anymore after working on the 3850 much less doing QoS on them. Basically if you know the IOS then you already know how to configure the 3850.

    Rack1SW1#sho ver | in Software
    Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.02.01.SE RELEASE SOFTWARE (fc1)
    Rack1SW1#
    

    Tags:

    May
    02

    Now that we’re at 12 full Service Provider CCIE racks and going to 16 racks I’ve had the price of the rentals dropped from 30 tokens to 18 tokens to be more in line with utilization. Another reason the prices were lowered – I received a lot of requests on Twitter to lower the price ;)

    Tags: , ,

    May
    02

    The top contributors in May for the following forums will receive their choice of either an iPad or Samsung Galaxy Note 10.1 tablet. The top overall contributor for IEOC for May will receive their choice of an Apple Macbook Air (13″ 256GB) or Google Pixel with 4G LTE.

    CCIE Routing & Switching Technical

    CCIE Service Provider Technical

    CCIE Security Technical

    CCIE Voice Technical

    CCIE Data Center Technical

    Additionally the best CCIE success story (most details, inspirational, etc) post on IEOC in May will also receive their choice of either an iPad or Samsung Galaxy Note 10.1 tablet.

    Good Luck!

    May
    01

    Just a couple slides to show everyone from Cisco’s OpenFlow presentation that looks interesting for just about everyone reading this post.

    The CSR1000v is here now. IOS XR4U (XR VR) has been around for a while. Is vIOS IOU? How about vNXOS, is it Titanium or something new? Seems that vIOS will be IOU and vNXOS is Titanium.

    From what I’m hearing this is being delivered as an “appliance”. A web interface is used to deploy topologies simular to GNS3 and web IOU. The future looks bright!

    Tags: ,

    Apr
    28

    Over the past 4 or 5 months with the Security CCIE lab change to version 4 the second most popular CCIE track behind Routing & Switching is now the Service Provider CCIE. The Voice CCIE is still very close but the Service Provider CCIE is really starting to edge it out. Below are just some of the Service Provider CCIE’s submitted to our success list for their free personalized CCIE polo shirt from INE in the past few weeks:

    Dario Barinic, CCIE 25071
    Rachit Gupta, CCIE 29824
    Tim Gregory, CCIE 38334
    Azam Poulatov, CCIE 19024
    Rajinder Singh, CCIE 35062
    Alexey Sannikov, CCIE 38671
    Aaron Foss, CCIE 18761
    Mahinder Singh, CCIE 27485
    Sajjad Akram, CCIE 38675
    Nuno Marques, CCIE 38295
    Osama Saeed Abdelmonem Aboelfath, CCIE 38590

    Many are already CCIE’s so the SP is their second or third CCIE. Their stories can be found here and some here on IEOC.

    In addition to the increased passing rate for the SP CCIE our current SP CCIE Bootcamps in the US are sold out as of this weekend. We’ll add another SP Bootcamp in Chicago to the schedule sometime this week. We’ve increased capacity to 16 for the SP bootcamps which should help with the demand. Also we’ll be adding more Voice CCIE bootcamps as the next two are also sold out.

    For those who maybe unfamiliar with the SP CCIE the track is really one of the best tracks out there and it a logical step after the Routing & Switching CCIE. Most Routing & Switching CCIE’s that continue onto the SP CCIE after a short break seem to be able to obtain it within 5 or 6 months. Excluding the IOS XR routers, the hardware is cheap and nearly 80% can be done either in GNS3, IOU or on the new CSR1000v (preferred option). The best part of the Service Provider CCIE is that it doesn’t focus on peripheral topics like QoS, Security, System Management, IP Services, etc. A couple SP CCIE workbooks on the market include these topics that aren’t cover in the SP lab exam as the material appears to be repackaged R&S lab material so just ignore those topics when preparing for the SP.

    Lastly the topics that are covered in the lab are not just for service providers but for most large enterprise networks today. This is another reason for the increased demand as enterprise networks today are run more like service provider networks (VRFs, Dot1q tunnels, MPLS VPNs, L2TPv3, etc). 70% of the students in the bootcamps are from large enterprise networks and not service providers.

    Tags: ,

    Categories

    CCIE Bloggers