Proctor Labs Ebook #2

Well, I was hoping to redo IPexpert bootcamp lab 2, but I couldn't get a hold of the initial configs yet so I have to pass on it for now. Instead I'll go for Proctor Labs Ebook #2.

Start time: 8:24am
8:36 Diagram completed
8:56 1st Read through completed
9:38 Routers IP addresses, basic OSPF, and iBGP completed
10:52 Layer 2 complete. Took way too long configuring spanning-tree root. The question said "forward" and I assumed "root".
11:40 IGP completed. Took a little while to find "ip ospf flood-reduction" in the doccd
11:58 Internal ping test completed. Found a mistake in the lab that took some time to correct.
1:44 eBGP completed. Another mistake in the backbone configs.
1:51 External ping test completed
2:01 returned from break
2:50 multicast completed. First time I've messed with BSR so it took a little longer
3:13 QoS completed
3:45 Lab ended. two tasks not complete

Summary
Some tricky wording cost me some time when configuring spanning tree
Mistakes in the diagram and configs cost me some time as well. A proctor would have helped (I hope!)
Never touching BSR before wasted some time
Otherwise, I'd say the lab wasn't bad

SDM Templates

The SDM templates are, sdm prefer

• access: maximizeds for ACLs
• default: balance to all
• dual-ipv4-and-ipv6: supports ipv4 and ipv6 routing
• default: balance layer 2 and layer 3
• routing: maximize routing, including ipv4 pbr
• vlan: maximum usage for ipv4 and 6 vlans
• routing: maximize routing
• vlan maximize vlan configuration, no routing supported in hardware

3560 Unicast MAC address filtering

The 3560 will drop packets with specific source or destiantion MAC addresses
Only supports unicast
Usage: mac address-table static xxxx.yyyy.zzzz vlan v drop

Doc CD

Here begins a new installment of my review of the Doc CD. I'll begin with the 3560 Switch Software Configuration guide.

Cisco IOS CNS Agents
The Cisco Configuration Engine automates network device and service deployment
There are 3 components: Configuration service, Event Service, and Data service directory
Initial Configuration works as follows

• When the switch comes up, it attempts to get an IP address from DHCP
• If no DHCP server on the subnet, the switch acts as a relay agent
• The DHCP server assigns an IP address, TFTP server address, path to bootstrap, and gateway
• The switch configures the IP address to VLAN 1 and attempts to download the bootstrap config file
• The Cisco IOS agents talk to the configuration engine using the ConfigID and EventID.
• The Configuration engine maps the config id to a template and downloads the configuration file to the switch

The prerequisites are

• Access switch: must be factory default
• Distribution switch: IP helper address and ip routing if a gateway
• DHCP Server: scope configured with tftp and path to config
• TFTP server: bootstrap config with CNS configuration commands
• CNS configuration engine: templates mapped to configids

Since I'm assuming the lab won't have much of this available, my guess would be the only likely part would be to enable the CNS event agent and configuration agent on the switch. To do that:

• cns event
• cns config connect-intf
• config-cli
• cns id
• cns config initial

to initiate a partial config

• cns config partial

Catching Up

Ok, so I have some catching up to do. Here's what I've been up to:

End of November and early December: Focused on graduate school. Between parenting and finals and projects I had no time at all for studies.

Mid December: I managed to get back on the ball a little bit. I completed half of lab 24 but the baby decided not to cooperate and I needed to quit half way through. Besides, I was pretty worn out from the end of the semester and had the holidays coming up so my motivation was lacking.

Took a break for xmas.

Upon returning from xmas I got back on the ball. IEexpert had a nice mock lab sale so I took one on Sunday and another on New Years. I felt I understood the concepts pretty well and did alright with time management but dumb mistakes brought my score down to the 50s.

At this point I feel pretty close to being ready. Grad school starts up again the end of January, so I really wanted to take a shot before then so I could focus. Fortunately, a lab date opened up for 1/25/08 so I grabbed it. I have now paid and the date is set in stone.

I've drawn up my schedule over the next three weeks and I'm hopeful it will be enough:

1/5: repeat bootcamp lab 2
1/6: IE mock lab 3
1/8: IEcore 5 (speed drill)
1/10: IPexpert core 6 (speed drill)
1/12: repeat bootcamp lab 3
1/13: Proctor lab 2
1/15: IE core 7 (speed drill)
1/17: IE core 8 (speed drill)
1/19: repeat bootcamp lab 3
1/20: IE mock lab 4
1/21: IE core 9 (speed drill)
1/22: IE core 10 (speed drill)
1/23-24: reading and rest
1/25: give it my best shot

The plan here is to get a mix of new stuff, speed drills, and repeats. I still feel the bootcamp labs, especially 3, were tough and covered a very wide range of materials, which is why I'm repeating them twice. This gets me about 70 hours this month. It if doesn't go well on the 25th, I'll take a break during the Spring semseter and repeat the IPexpert bootcamp over the summer and set another course of action at that time.

IPExpert Lab 23 Complete

Ahhh, a much easier one for a change. There wasn't anything too complicated in here at all. I did make a couple of minor mistakes--completely skipped a small step and messed up a couple of access lists.

I spent a little more than than I would have liked on OSPF authentication and a poorly worded RIP section. Other than that, things went pretty well.

I took a different approach this time. First I setup the required parts of the Cats. Next, configured IGP, EGP, and anything else required on R1. I intentionally left off anything related to security, redistribution, or filtering at this point. Then I did the same with R2, ensuring all adjacencies, etc. formed with R1. I followed the same process until I got through all the routers. Then I went back through on the items I skipped--authentication, filtering, summaries, etc.

I felt pretty good about the way things went this way. By 2.5 hours, the entire core was up and connectivity was verified. At 4.5 hours, all advanced core features were completed. At this point I just picked off the advanced features one by one and had the whole lab finished in about 7 hours.

The nice part about this approach is that I get any design concerns out of the way early on because I'm getting end to end reachability up pretty fast and including BGP in that initial design. I'm also saving a lot of time because I'm not jumping back and forth between routers so much. The only real negative to this approach is I am jumping around in the workbook a lot so it makes it really easy to accidentally skip something.

IPExpert Lab 22 Complete (sort of)

For once the core portion of the lab was pretty easy. I still have to get faster, but everything through BGP took about 5 hours. There's definitely some room for improvement. Primarily, this involves setting up everything in OSPF and BGP the first time. I have the tendancy to get everything up on OSPF and then setting up the virtual links and then encrypting. It'd be nice to do it all the first time rather than having to visit each router 3 or 4 times. The same goes with BGP adjacencies and reflectors/confederations. I bet hitting all of these in one shot would take a hour off the time.

The rest of the lab got pretty tough. Some of this, such as the logging section, was due to poor explanations and not having a proctor around to ask clarification. The VPN section was a wash. Same with a VMPS question on the advanced switch part. As always, some annoying ports to try to figure out. And then just when it seems as if the lab should be ending, in comes two IPv6 sections. One was easy, the other was pretty complicated.

So, I ended up running out of time. I'm intending of repeating Lab 21 due to the complicated redistribution. Well, I need to repeat this one, primarily to improve time management. This lab was supposed to be diffiult, with a complexity of 6.5. The next three labs are easier, at 4.5, and then the rest of the workbook looks pretty rough. So, I think I'll knock out the next three easier ones, and then repeat 21 and 22. And then I'll be into the hard ones. That should put me right about to January to where I'll be beginning to panic with the lab date getting close.