My 1st SP Lab Attempt

ccie-sp March 8th, 2010

I’m finally back from RTP and have a stable enough Internet connection to finally write a post.  After my SP lab last week, I decided to visit some relatives in Charleston, SC to relax over the weekend before coming home.  I tried to post something on Friday, but my hotel wireless connection was terrible.  Anyways, read on for a recap.

Since the Thanksgiving weekend, I’ve been scrambling to get enough practice time in for the configuration portion of the lab.  Shortly a few days after committing payment to Cisco for the lab, the announcement for the OEQ or Core Knowledge came out which changed my studying strategy quite a bit.  At the time, I had just begun going through INE VOL2 labs before the Christmas holidays and so now I needed to come up with another game plan.  I gave myself a deadline to finish up the VOL2 labs 1 through 5 by New Years.  For the remaining 5 VOL2 labs, I was just going to read the solutions.  Once the new year began, I only labbed up mini scenarios and didn’t bother doing any full scale labs.  All I ended up doing was reading anything I could get my hands on regarding the SP lab blueprint (i.e. books, FAQs, blogs, Cisco white papers, articles, etc.).

Did all the reading help?  Yes, it did.  The set of OEQs that I received were pretty straightforward.  If you have some clue as to what you are doing in general with topics covered in the blueprint, you should be prepared.  Now I know that statement is vague and probably doesn’t really help you much, but the OEQs are really nothing to be concerned with at all.  I can’t speak for individuals who took the lab in the first 2 months, but I think the Cisco folks have finally figured it out where the OEQs are really ‘Core Knowledge’ type questions.  If I could make one suggestion to the Cisco developers, you should have the OEQs at the end of the lab.  The biggest complaint for many individuals that get a set of off-the-wall questions is they feel gypped having just forked over $1400 for only 30 minutes of completing the test.  What’s the point in continuing onward if you already knew you blew your chance at the start of your day?  Nothing you do in the configuration portion matters if you can’t get by 3 out of 4 questions.  IMHO, I think if the questions were at the end of the lab then test takers couldn’t complain since they would actually have to work through the entire day.

Unfortunately, because I spent so much time on reading, my speed was off with the configurations.  There was a lot of typing involved with my version of the lab. On top of that, I wasn’t fully rested going into the test as I would’ve liked.  I was a bit foggy having been up all night due to nerves.  Believe me, I exhausted myself before my flight out to Raleigh so I could just sleep when I arrived, but I was pretty wired and couldn’t stop thinking about 4 questions.  In the end, I fell short on the configuration end of the spectrum.

Here’s an outline on what I did for this attempt:

1) Read: Just try to understand the material you are reading.  I don’t think you need to memorize every little detail, but know the important subject matter.  Here’s a list of everything I read:
MPLS Fundamentals
MPLS VPN Architectures
MPLS VPN Architectures Volume II
Routing TCP/IP Volume I
Routing TCP/IP Volume II
Cisco FAQs
Cisco White Papers
RFCs

2) Choose a vendor workbook:  For my attempt, I used INE’s VOL1 and VOL2.  Keep in mind the material is very outdated but still relevant for this lab.  Everything you need to know is in VOL2, you just need to reference the Cisco documentation yourself to get a thorough understanding of the technology.  If I could make a suggestion to the INE folks, I think the only updates you should make for your products are:

-VOL1: Create some IS-IS labs with explanations.  I ended having to use my R&S OSPF, EIGRP, and RIP VOL1 lab scenarios to test out IS-IS.  IS-IS is extensive enough on the exam that it should be covered in your product.

-VOL2: I really liked what INE has done with the R&S and Security workbooks; they give you a brief explanation alongside the expected output.  We could really use the additional information to help reference materials for the OEQ.

3) Core Knowledge Simulator:  I ended up purchasing this product 1.5 weeks before the lab and only looked at it 2-3 days beforehand.  IMHO, the product just destroys your confidence all together because you feel like you’ve forgotten your CCNP studies.  You also get a false sense that you are required to know the granular details of the technologies.  Based on the OEQs I received, your questions are really off the mark and probably need to be scaled down just a bit.

4) Practice: I didn’t utilize the rack rentals as I had anticipated.  I ended up just using dynamips when I was labbing, which should be enough.  If you have the money to spend, go ahead and rent or buy equipment.  If you are on a shoe string budget and have a powerful enough workstation, then invest some time in dynamips or GNS3; the IOS code you should be running is 12.2S.  There’s definitely a difference in the feature sets when you are running 12.3T and 12.2S so you should be familiar with both versions.

Am I going to take a 2nd attempt?  That depends, having just checked the availability the next possible opening at San Jose is in September.  I don’t think I’ll be flying out to other locations anymore to test.  In fact, most of the tests will be running of SJ anyways (similar to the R&S format) and conducted at nearby Pearson Vue locations in the future so it doesn’t make sense to fly out (unless of course work pays for it and everything isn’t out of my own pocket).  There are other rumors that this lab will be retired and replaced by SP Operations.  I was told that for the month of July all lab testing sites will be blocked off completely to allow major changes to the lab testing facilities as well as when the announcements will be revealed.  If I can get another test in before June, I think I’ll donate more money to Cisco.  Until I can get a close enough date, I’ll just be enjoying my time away from all the stress:

-Catching up on all my shows on the DVR

-Toying around with JNCIE-ER or JNCIE-M/T

-Creating some mini-scenarios to help cover the lacking areas of technologies

-Playing basketball on the weekends again

-Networking at Interop, CiscoLive, etc.

GeekOut: IOS 15.x on Dynamips

ccie-sp October 5th, 2009

By now, you’ve the heard the news that Cisco has released the latest version of IOS.  There are theories circling around as to why Cisco skipped versions 13.x and 14.x, which may or may not be attributed to superstition.  As time goes by I’m certain we’ll learn the real reason.

I’m not going to bother with all the new features and which hardware is and isn’t supported.  I’m sure Google can point you in the right direction if you really want more information.  If you are just wondering whether or not you can test, play, or study with Dynamips using IOS version 15.x, then the answer is ‘yes’.

Here’s a short video I created just to show you the version loads:

bbb-ios15-on-dynamips

Notes:

-The Advanced Enterprise image does load with a NPE model type of ‘npe-200′, but a warning will be displayed as follows:

————————————————————–
This Version of Cisco IOS Software is not supported on NPE200.
Please select a version of Cisco IOS software compatible with
this processor from http://www.cisco.com.
————————————————————–

Unfortunately I can’t tell you which features are rendered useless using a lower model type, you’ll just have to figure that out after a few hours/days of testing yourself.

GeekOut: Basic ASA - EIGRP

ccie-sec May 2nd, 2009

When configuring EIGRP on the firewall, keep in mind to omit the word ip from the commands.

Prerequisites:

-Refer to my Basic ASA - VLANs and IP Addresses posting

Mini-lab Requirement:

Your ASA needs to be aware of the DMZ network behind R2.  Make sure R2 is the only device that can securely send or receive routing updates with the firewall.

Here’s the video:

bbb-basic-asa-eigrp

Notes:

-EIGRP is not supported in multi-context mode.

-When configuring the network command on a PIX or ASA, you will need to define the subnet mask and not the wildcard.

-The passive-interface command for EIGRP is supported on the firewall unlike OSPF.

GeekOut: Basic ASA - OSPF

ccie-sec April 17th, 2009

This is very similar to the last lab that I posted.  When configuring OSPF on the firewall, keep in mind to omit the word ip from the commands.

Prerequisites:

-Refer to my Basic ASA - VLANs and IP Addresses posting

Mini-lab Requirement:

Your ASA needs to be aware of the DMZ network behind R2.  Make sure R2 is the only device that can securely send or receive routing updates with the firewall.

Here’s the video:

bbb-basic-asa-ospf

Notes:

-OSPF is not supported in multi-context mode.

-When configuring the network command on a PIX or ASA, you will need to define the subnet mask and not the wildcard.

-The passive-interface command is unsupported on the firewall.  You will need to depend on the neighboring router to control sending/receiving of updates.

-If you would like to verify that you didn’t fat finger the password on the ASA, you can use the more system:running-config | i md5 command to see what you typed.

blank