Recent Posts

Thursday, 12 October 2017

CCIE 400-101 Routing & Switching v5 Written #2

CCIE 400-101 Routing & Switching v5 (Written)




Related image
On today we are going to learn about next main topics we are going explain CCIE RSv4 to RSv5  changes in which these are the questions and notes that we are going to look over.

CCIE RSv4 to RSv5 changes that we should know are these follows:

What was the topics added in RSv5 ?

Ans:The Topics added to RSv5 Written are given in following simple points they are:
  • Describe basic software architecture difference between IOS and IOS XE.
  • Identify Cisco Express Forwarding concepts.
  • Explain General Network Challenges.
  • Explain IP, TCP, and UDP Operations
  • Describe Chassis Virtualization and Aggregation Technologies.
  • Explain PIM Snooping.
  • Describe WAN Rate-Based Ethernet Circuits.
  • Describe BGP Fast Convergence features.
  • IS-IS (IPv4 and IPv6)
  • Describe Basic Layer 2 VPN - Wireline.
  • Describe Basic Layer 2 VPN - LAN Services.
  • Describe GET VPN.
  • Describe IPv6 Networking Address Translation.
  • Use IOS Troubleshooting Tools.
  • Apply Troubleshooting Methodologies.
  • Interpret Packet Capture.
  • Implement and Troubleshoot Bidirectional Forwarding Detection.
  • Implement EIGRP (multi-address) Named mode.
  • Implement, Troubleshoot and Optimize EIGRP and OSPF convergence and scalability.
  • Implement and Troubleshoot DMVPN (Single hub).
  • Implement and Troubleshoot IPsec with pre-shared key.
  • Implement and Troubleshoot IPv6 First Hop Security.

Topics Moved from lab to written

  • Describe IPv6 Multicast.
  • Describe RIPv6 (RIPng).
  • Describe IPv6 Tunneling Techniques.
  • Describe Device security using IOS AAA with TACACS+ and RADIUS.
  • Describe 802.1 x
  • Describe Layer 2 QoS.
  • Identify Performance Routing.

Topics which are completely removed

  • Flexlink, ISL, Layer 2 Protocol Tunneling
  • Frame-Relay (LFI,FR Traffic shaping).
  • WCCP
  • IOS Firewall and IPS.
  • RITE, RM ON.
  • RGMP
  • RSVP QoS, WRR/SRR.

CCIE R & S v5 Topology changes

The Configuration portion of the exam is now delivered using virtual devices - just like the troubleshooting portion of the exam. Virtual routers and Virtual Switches will be used throughout the exam, supporting more realistic and bigger network topological that improve the reliability of the test while focusing on conceptual technologies - rather than testing specific hardware plat form peculiarities. 

Cisco's RSv5 Hardware Spec.


  • Candidates who want to prepare using hardware based labs can use the following equipment and cisco IOS Software releases:
  • Cisco ISR 2900 Series routers running IOS version 15.3 T universal software release.
  • Catalyst 3560 x Series Switches running IOS version 15.0 SE universal(IP Services) Software release.
  • Any other hardware platform that can run equivalent cisco IOS Software version 15 may be used as well.
Note that older equipment platform and cisco IOS Software Releases may be used to learn and practice a significant portion of the exam curriculum. Refer to the cisco feature navigator (www.cisco.com/go/fn) to compare Cisco IOS Software Releases.  

CCIE RSv4 Topology

  • 6 IOS Routers with 12.4 T
  • 4 Catalyst IOS Switches with 12.2 SE
  • 3 Backbone Routers
  • 1 Frame Relay Switch
 

CCIE RSv5 Topology

  • 20 IOS Routers with 15.4 S or 15.3 T (Virtual or Physical)
  • 4 Catalyst IOS Switches with 15.0 SE

CCIE RSv5 Topology with Hypervisor

Hypervisor Router Platforms

> CSR 1000v 
  • Runs IOS XE 3.11 S (15.4 S)
  • Only lacking feature is serial links
  • Ideally on bare metal Hypervisor (Example: not CSR on Virtual box on Windows) 
>GNS3 
  • 7200s with 15.2 S
  • IOU or IOL
  • CSR 1000v inside GNS3 probably bad
  • Not all features are stable and not all are supported 

CCIE RSv5 Topology with Physical

Physical Router Platform

> ISR G2 or higer
  • 1900 / 2900 / 3900
  • Runs IOS 15.3 T universal
  • IP Base Data & security feature sets needed
> ISR G1 still viable
  • 1800 / 2800 / 3800
  • Runs IOS 15.1 T Advanced Enterprise Services
  • Not all features supported, but it's a good start

Physical Switch Platform

> Catalyst Switch 3560 / 3750 E or X
  • Runs Catalyst IOS 15.0 SE
  • IP Services feature set needed
> Catalyst Non E or X still viable
  • 3560, 3560G, 3750, 3750G, etc.
  • Boxes with 32 MB Flash can run 15.0 SE
  • Not all features supported, but it is good start to learn.

CCIE Routing & Switching v5 Written (Introduction)

Image result for ccie r&s v5 written

Introduction                               

Cisco Certified Inter-network Expert Routing and Switching (CCIE Routing and Switching) certifies the skills required of expert-level network engineers to plan, operate and troubleshoot complex, converged network infrastructure.






What is the Advanced Technologies Class ?
Ans: It's objective is to learn a structured approach for these are:
  • Configuration
  • Verification
  • Troubleshooting
Class is a mixture of these things given below:
  1. Technology explanations
  2. Hands on five examples 
  • Not pre-scripted  
  • Troubleshooting is half the fun part in this
Class Perquisites
  1. Basic working knowledge is of three types they are:
  • Layer 2 Ethernet, HDLC, PPP, Bridging
  • Layer 3 are IPv4, IPv6, Routing, logic, RIP, EIGRP, OSPF, IS-IS, BGP, Multicast, MPLS, IPsec.   
  • Miscellaneous are QoS, IOS features and management.
Therefore, we have learned the basic introduction about CCIE R&S v5 through these explanation.       

Saturday, 7 October 2017

TSHOOT 300-135 Ticket #15

TSHOOT on IPv6 GRE Tunnel

Hi ! everyone on today we are going to learn about ipv6 GRE tunnel with explanation shown in topology with the given below screenshot.



Problem: Loopback address on R1 (2026::111:1) is not able to ping the loopback address on DSW2 (2026::102:1).
Configuration of R3:
!
interface Tunnel34
 no ip address
 ipv6 address 2026::34:1/122
 ipv6 enable
 ipv6 ospf 6 area 34
 tunnel source Serial0/0/0.34
 tunnel destination 10.1.1.10
 tunnel mode ipv6
!
Configuration of R4:
interface Tunnel34
 no ip address
 ipv6 address 2026::34:2/122
 ipv6 enable
 ipv6 ospf 6 area 34
 tunnel source Serial0/0/0
 tunnel destination 10.1.1.9
!
Answers:
1: R3
2: Ipv4 and Ipv6 Interoperability
3: Under the interface Tunnel34, remove ‘tunnel mode ipv6’ command
Therefore, we have studied in this lab session about ipv6 GRE tunnel configuration with the help of packet tracer version 7.1

TSHOOT 300-135 Ticket #13

TSHOOT on DHCP Helper-address

Hi ! everyone on today we are going study about DHCP helper- address through simple way by this given topology shown below.

Topology.jpg

What is meant by DHCP Helper-address ?
DHCP IP Helper addresses are IP addresses configured on a routed interface such as a VLAN Interface or a routers Ethernet interface that allows that specific device to act as a “middle man” which forwards BOOTP (Broadcast) DHCP request it receives on an interface to the DHCP server specified by the IP Helper address. Now we will see the DHCP Helper-address in this topology using packet tracer version 7.1.

Configuration on DSW1:
!
interface Vlan 10
 ip address 10.2.1.1 255.255.255.0
 ip helper-address 10.2.21.129
!
Note: In this ticket you will find port-security configured on ASW1 but it is not the problem as the port-security is good (check with the “show interface fa1/0/1” command on ASW1.
Ans 1: DSW1
Ans 2: IP DHCP Server (or DHCP)
Ans 3: on DSW1 delete “ip helper-address 10.2.21.129” and apply “ip helper-address 10.1.21.129” command.
Therefore, we have understood this troubleshooting with the help of given topology as we seen already and on our next lab session we will look over on ipv6 GRE tunnel.   

TSHOOT 300-135 Ticket #11

TSHOOT 300-135 Ticket 11 on OSPF to EIGRP

Hi ! everyone on today we are going to learn about troubleshooting on OSPF to EIGRP as explained in screenshot by given below topology.



On R4:
router eigrp 10
  redistribute ospf 1 route-map OSPF->EIGRP
  network 10.1.4.0 0.0.0.255
  network 10.1.10.0 0.0.0.255
  network 10.1.21.128 0.0.0.3
 default-metric 100000 100 100 1 1500
  no auto-summary
!
router ospf 1
  network 10.1.1.8 0.0.0.0 area 34
  redistribute eigrp 10 subnets
!
route-map OSPF_to_EIGRP
  match ip address 1
Ans 1: R4
Ans 2: IPv4 Route Redistribution
Ans 3: Under the EIGRP process, delete the redistribute ospf 1 route-map OSPF->EIGRP command and enter the redistribute ospf 1 route-map OSPF_to_EIGRP command.
Explanation for this ticket:
In this topology, we are doing mutual redistribution at multiple points (between OSPF and EIGRP on R4, DSW1 & DSW2), which is a very common cause of network problems, especially routing loops so you should use route-map to prevent redistributed routes from redistributing again into the original domain.
In this ticket, route-map is also used for this purpose. For example, the route-map “EIGRP_to_OSPF” is used to prevent any routes that have been redistributed into OSPF from redistributed again into EIGRP domain by tagging these routes with tag 90. These routes are prevented from redistributed again by route-map OSPF_to_EIGRP by denying any routes with tag 90 set.
Therefore in this ticket, typing a wrong route-map (which does not exist) may cause problem in this given configuration for troubleshooting and on our next session we will learn on dhcp helper address.

TSHOOT 300-135 Ticket #9

TSHOOT 300-135 Ticket 9 on Switchport trunk

Hi ! everyone on today we are going to see in this lab session about switchport trunk in this given below topology.
Layer2_3_Topology_small.jpg
Q. Client 1 & 2 can ping each other but they are unable to ping DSW1 or FTP Server  (Use L2/3 Diagram)



Configuration of ASW1
interface PortChannel13
switchport mode trunk
switchport trunk allowed vlan 1-9 //Note: In fact you will see vlan 20,200 here but the concept is still the same
!
interface PortChannel23
switchport mode trunk
switchport trunk allowed vlan 1-9 //Note: In fact you will see vlan 20,200 here but the concept is still the same
!
interface FastEthernet1/0/1
switchport mode access
switchport access vlan 10
!
interface FastEthernet1/0/2
switchport mode access
switchport access vlan 10
Answer: on port channel 13, 23 disables all vlans and give switchport trunk allowed vlan 10,200
Ans 1: ASW1
Ans 2: Switch to switch connectivity
Ans 3: int range portchannel13,portchannel23
switchport trunk allowed vlan none 
switchport trunk allowed vlan 10,200 
Therefore, we have studied the switchport trunk configuration in this troubleshooting on ticket 9 and on our next lab session we will see OSPF to EIGRP. 

TSHOOT 300-135 Ticket #7

TSHOOT 300-135 Ticket 7 on Port security

Hi ! everyone on today we are going to learn about Port security in this lab session which is given below in this topology.

Client 1 is unable to ping Client 2 as well as DSW1. The command ‘sh interfaces fa1/0/1′ will show following message in the first line
‘FastEthernet1/0/1 is down, line protocol is down (err-disabled)’
On ASW1 port-security mac 0000.0000.0001, interface in err-disable state
Configuration of ASW1
interface fa1/0/1
 switchport access vlan 10
 switchport mode access
 switchport port-security
 switchport port-security mac-address 0000.0000.0001

Answer: on ASW1 delete port-security & do on interfaces shutdown, no shutdown
Ans 1: ASW1
Ans 2: Port security
Ans 3: In Configuration mode, using the interface range Fa1/0/1 – 2, then no switchport port-security, followed by shutdown, no shutdown interface configuration commands.
Through this lab session we have learned about the port security as we explained above in simple term and on our next session we will see on topic switchport trunk.

Popular Posts