CCIE in the making

Had to do it

2011-12-29T18:25:00.002-06:00

Ordered a pair of riverbed soho units. I wasn't looking at adding new hardware of any sort to the rack but it was cheap on this occasion. I'm already certified on riverbed at the associate level and wanted to do the professional level in the next year. I will need to pick up 2 more to complete the setup as this will make it almost anything they can throw at you.

I'm not rushing to purchase anything additional at this point unless its real cheap like these were.

Rereading switching

2011-12-28T10:39:00.002-06:00

This is still a core book when it comes to switching. Some chapters/sections can be skipped as they are irrelevant but the others are worth reading. I would recommend this would be a must have for any network engineer at any level. Working on finishing this book up in the next few days while I have the down time.

wrapping up a few more things

2011-12-15T19:31:00.002-06:00

wrapping up oer which shouldn't have taken so long as its a small topic but you know how that goes. Keeping juiced up on energy shots to keep the study pace. Going back to review all layer 2 technologies.

Huge suggestion to all those studying for any level exam. Eat right ( cut the sweets and fatty foods), exercise regularly ( not once a week, I mean at least 3 to 4 days a week for at least an hour) and push yourself a little more each day. This will keep your mind sharp, clear and focused.

another one down

2011-12-04T09:08:00.002-06:00

cat qos is very cool, done with that section learned alot. I actually went back into ipv6 transitioning techniques. Just seemed like a topic I wanted to review again. Once this section is completed going to hit the vrf-lite lab(s) mainly review and to see if remember it well. OER and security are next up for this week.

Got to get my head back in the test game. I have learned recently that my test taking skills are a bit dated and so I will be hitting the books additionally before taking the written.

I have offered the test TS lab to some friends but I haven't gotten any replies on it. :-|

Power thru

2011-11-28T21:42:00.003-06:00

So I have finished a couple of sections in the newer workbook I'm using for lab prep. Then I hit a snag usb nic failure good thing I had spares. Swapped it out updated files and kept it moving. Looked like another hardware failure on the rise which made me rethink buying more parts. Not even an option at this point just revised the config a bit kept it moving. Barely have time to post this trying to finish off another subsection of another topic Cat QoS.

I did have time today to build my own set of trouble tickets for the unlucky engineer that seeks to join our team. Not really a bad set of problems mainly NA/NP level questions Layer 2 stuff, Layer 3 stuff and minor security issues. Nothing someone with 3 or more years experience couldn't handle.

Double Up

2011-11-20T20:49:00.002-06:00

I have just returned back from a week of CCIE bootcamp (free retakes). I previously have taken this same class before but with time and experience the information makes more sense.

My overall plan has been adjusted to fit more of what I need to focus and prepare for the lab. I have a count down with certain milestones that are mandatory for the best chances for success.

Retaking the written within the next 30 days.
Scheduling the lab (this would be in 3-4 months) most likely RTP is my choice based location.
Lab, Lab, Lab
Retake bootcamp a 3rd time(why not? I paid for it).
Take lab

Multicast part deux 2..lol

2011-11-11T16:26:00.002-06:00

Done with multicast. On to the next topic for review cat qos.

I think I will start by reading up on ssr which has been a topic I know that has had me stumped. Time to troll Cisco's site for the many explanations of how it works and how to configure it.

Multicast part deux

2011-11-07T21:49:00.003-06:00

So, I have worked through most of the multicast topics fairly quickly. I guess I remembered more than I thought. Even learned during this process of how to troubleshoot it as well( had a few issues in the labs).

Here are the best docs so far.

Quicky guide
RP Configuration
Troubleshooting
Troubleshooting RPF

All of these are helpful in making sure you understand how it works and fixing the issues along the way. As always lab it up with each of the versions to see how they work. I have 2 or 3 more topics left to complete in this area then on to .... OER and/or Catalyst QoS.

Multicast

2011-11-04T20:44:00.002-05:00

This was a topic that I needed to relearn. I'm actually amazed by at what I did remember. A few videos, cisco's multicast documents and a lab or 2( well I have finished 2 and working on the third). I want to have this topic wrapped up before my lab bootcamp retake.

Finished OSPF

2011-11-01T05:11:00.003-05:00

I've finished the ospf second of the technology labs. Moving on to multicast which is a topic I have continued to struggle with. It is also the big chunk of the self eval items I needed to "relearn".

Labbing and eval

2011-10-27T19:31:00.003-05:00

Still working through the OSPF labs. I should be completing them tomorrow.

Eval = Evaluation

I downloaded the sheet to check off which skills/technologies I know 7 pages of technologies. So, I proceeded to check them off about 5 -10 minutes later. I have some to revisit and some I need to learn out right, I also colored them accordingly.

Here is the break down of the ones I needed to revisit (50) I highlighted in yellow. 50 sounds high but you count the sheet that's merely about page. Not bad. This is something that could be done in a couple of weeks as its only a refresher. A video, quick read up and/or labbing.

Of the ones I needed to learn (23) I highlighted in pink( there was no red available). Not too bad either. These I could see it taking a 3- 4 weeks as there would be videos, reading and labbing them again.

Stressing myself out of I need to know this and that this and that........ repeating constantly....

When overall I'm not as bad as I perceived. That only covers the concepts w/technologies but not the interpretation of the tricky questions ahead.

Redistribution and ipv6

2011-10-26T17:48:00.002-05:00

I also forgot to mention I completed a lab on redistribution. This was something I kinda put together to see the filtering/path control methods.

Also completed IPV6 lab as well.

Game time

2011-10-25T19:58:00.002-05:00

The past year I have been working on technology labs here and there. Earned a new certification RCSA-W and planning on doing the RSCP-W sometime next year.

Reason I call this game time is that I have set a goal in 6 months to take the R/S exam. Which in itself is stressful as I occasionally struggle with the question wording in the mock full lab scenarios.

So, here is the plan:

Do a tech lab section over a topic(s) every week until finished. By my calculation that would put me in mid November.
Retaking one of my lab prep bootcamps in November.
Retake written in late November. ( schedule lab for Late March or early April)
CCIE videos and audio bootcamp when I can't touch a router( This will be constant until the lab)

Next Steps:
Pick a total of 10 labs 5 from 2 different vendors. I will work these for the next 2 months.
Full lab scenarios weekly minimum 1 but I want to average 2.
Any weak points redo tech labs.
1 - 3 Mock labs. I'm thinking I would start these in February.

Thoughts... I sure would like to get a mentor. Well this ain't no time to be dreaming!

So here is the current start. I have completed advanced tech lab on EIGRP and currently working on OSPF.

Rack online

2010-10-20T08:52:00.002-05:00

My rack is online and been running like a champ taking it down was actually a great thing. It showed me how I could pack it and transport it with me no remoting into it. Labbing skills are getting better along with the knowledge needed to complete the tasks. I think I will be ready for the first try at the beginning of next year.

Years in minutes

2010-09-13T08:39:00.003-05:00

As most may know I have been working with Cisco for years and working on building the best prep lab for the real lab. On the way of cutting spending to save for purchases, horse trading and sure chance I was build a decent lab.

On yesterday that came to a head. I'm not sure what it was (various issues) but the practice lab that it has taken me nearly 5 yrs to build came down in less than 15 minutes. Completely dismantled, boxed and sat in a corner. Much of life is instant and not just long term blah, blah, blah.

Love big, play hard and help as many as we can on the way to eternity.

In somewhat of irony I think I will back it back up.

Getting back in the game

2010-07-07T08:14:00.002-05:00

I have set out of CCIE studies and Cisco altogether for the past few months mainly due to burn out. Recently I just started getting the feeling back to hit the books and keyboard. At this point I'm taking my time not in any rush or sweating it for any completion date.

Shit or get off the pot!

2010-03-16T15:14:00.002-05:00

Hate to start it off like that but the truth stinks!

With the recent and seeming ever so quick Cisco has been making to the CCIE lab. It has become a very self-evident thought that its now or never to taking the lab. As more changes are coming down the pipe from Cisco studying a few hours a week is not going to cut it anymore.

So needless to say I will have to make it like a second job working 20-40 additional hours out of the week!

I guess Cisco's overall goal of killing any non 360 vendor is coming into being. Sad really as they all offer something Cisco can't truely offer dedicated people that are not boxed in by bureaucrats and bean counters. Having worked in government I know it all too, too well.

Someone suggests a program not really exploring the true ins and outs just about the $$$. No real feasibility testing, scrubbed/limited data, bad/piss poor design even with experts speaking against it and the reuse of someone else's materials as a structure(Theres nothing wrong with using the wheel and not building one from scratch. However if the wheel is already pretty bad -You get the idea). Now $$$ is invested, it's sold as GOLD(remember scrubbed data and bad design), everyone is forced to take it and silencing the people that are against it. Even when its proven to be a failure its kept due to the $$$ invested and to save face.

Damn now thats how government works!

Either way, I need a new roll of toilet paper and a fresh bowl.

Labs and Labs

2010-03-12T16:32:00.002-06:00

I have started down the full lab track to test what all I have learned. Which I think is a good thing being that I get to figure out the wording and what areas I need to fine tune.

Thus far the main thing has been multicast. I've known this anyway so it give me a reason to do more 2.0 mcast labs.

I also have been working alot with IP SLA and EEM. Which can be trying at times but very cool once you get them the way you want.

How many nics?

2010-02-12T08:14:00.005-06:00

I have been on the mission to consolidate the PC that ran the backbone routers into the main PC. This led me to looking at usb nics as I still have 6 open usb ports and with a hub many, many more.

I had been going back and forth as I wanted to keep this as cheap as possible under (50us) to bring in the 3 BB routers. The first option was some cheap usb nics I had been eying some on the web.

I was able to get these very cheap (Which should have been the first warning) but hey we all try a deal right?

Short result is DON'T! I wasted a couple of hours of troubleshooting good to get the rust off the PC troubleshooting skills..lol

Needless to say I had been also been looking at some locally before the ones I first purchased( aaah, aaah, aahh bullshit! excuse me). I decided to go slower on this approach so I did a little more ground work on the devices. After, all these were not branded for normally pc use by the box but it is a usb to ethernet.

Some may see this as basic usb to ethernet however this is an aftermarket product for the Wii! I purchased one of the devices connected to the pc and looked up the model number in the device manager on the Information Emperor ( Google). This took me to the manufacturer's website for the drivers which included Windows and Linux. Once the drivers where loaded it worked like a charm.

Sharing terminal server

2010-02-07T20:59:00.004-06:00

Ok, Heres the short. I have been thinking on sharing out my rack to a few friends that have been studying for CCNA. I wanted to do this without having them step on each others toes so to speak.

With a normal terminal server you can either do it plain jane or dress it up. Well I preferred the dressed up version. So all things from this point will be on the dressed up version.

I'm using a 2511 and only the first few console ports. So it starts off very basic creating a loopback0 interface not in the network. 10.0.0.1/24 ( this is not in my network). Mapping ip hosts and configuring the line interface. All of this info can be found here . Now comes the dressing it up.

You can create multiple logins each with its own terminal prompt.

So lets say that you want to allow 2 users to both have access to 2 switches and 2 routers. Now lets get down to it.

User 1 is going to use profile1. Which has R1, R2, Sw1 and SW2.
Create user1 a local login account-
username user1 password user1( just for the example)
username user autocommand menu profile1 ( this will trigger the profile1 menu automatically when user1 completes the login)
Create the menu with all the config options-
menu profile1 title ^ Access Server
#######################################################
If you have problems connecting to your device
clear the connection via cl+# (ie:cl1) and try again.

To exit back out to the menu press "CTRL+SHIFT+6"
then "X". You must then clear the connection and
begin a new console session to re-connect to
that device.
--------------------------------------------------------
1 - Connect to SW1-3550-24
2 - Connect to Sw2-3550-24
6 - Connect to R1
7 - Conenct to R2

-------------------------------------------------------
Exit - logout | show1 routers - show lines in use
| show2 switches - show lines in use
menu profile1 prompt ^
menu profile1 command 1 tn SW1
menu profile1 command 2 tn SW2
menu profile1 command 6 tn R1
menu profile1 command 7 tn R2
menu profile1 command cl1 cl1
menu profile1 command cl2 cl2
menu profile1 command cl6 cl6
menu profile1 command cl7 cl7
menu profile1 command menuexit menu-exit
menu profile1 command exit exit
menu profile1 command show1 show line tty 1 2 | include \*
menu profile1 command show2 show line tty 6 8 | include \*
menu profile1 options show1 pause
menu profile1 options show2 pause
menu profile1 clear-screen
menu profile1 single-space

Remember the numbers listed are based on the ip host mappings from the intial config. Yours will be different than mine. Now all thats left is to do is repeat the same thing just change profile1 to profile2 for user2 specifying the routers 3,4, SW3 and SW4.

Telnet x.x.x.x

###########################################################
Your now being connected to Lab Network. If your unable to
connect to a device it may be offline or console is busy.
*******Remember not to reload Routers this will cause them
crash****** Please contact me if your needing them reloaded
###########################################################

User Access Verification

Username: user1
Password:

Access Server
#######################################################
If you have problems connecting to your device
clear the connection via cl+# (ie:cl1) and try again.

To exit back out to the menu press "CTRL+SHIFT+6"
then "X". You must then clear the connection and
begin a new console session to re-connect to
that device.
--------------------------------------------------------
1 - Connect to SW1-3550-24
2 - Connect to Sw2-3550-24
6 - Connect to R1
7 - Conenct to R2
-------------------------------------------------------
Exit - logout | show1 routers - show lines in use
| show2 switches - show lines in use
menu profile1 prompt

Selection:

Current MPLS lab

2010-01-16T08:00:00.003-06:00

This is the latest ( maybe the last) mpls lab revision I'm planning. Its fairly huge but works great on a quad core with 4gb ram( less than 3% with all the current stuff I have running and adding). I haven't turned on the vm pcs as of yet. Anyone interested in using let me know I will post the .net file or just send it to you.

Wow

2010-01-08T16:11:00.002-06:00

Well today I did pass the combo with MPLS+BGP. It seems kinda as bitter sweet as this means I will have to refocus on the R/S but wait they have an IE for SP :-) .

After 2 years

2009-12-30T12:27:00.002-06:00

It has been nearly 2 years since I have taken a Cisco exam. I have scheduled an exam for next week for BGP+MPLS which will complete the CCIP. I started down this track as part of the written exam for the CCIE and just became addicited to the technology. I have studied both on and off the entire time watching videos, reading books and from the many posts regarding it, labbing it.

So, D-day so to speak is fast approaching which will have me doing complete reviews of technologies. BGP start to finish for 3 days and MPLS for the last 3 days before exam.

Narbik 2.0 bootcamp

2009-11-14T10:46:00.001-06:00

I just got back from probably the most intensive and informative boot camp I have ever taken.

Before going to class you will receive a prep workbook to work through. I however didn't have time to do half if any of the labs but did manage to read a few of them.

On the first day started with a joke and an introductions. Once all the introductions are out of the way down to business. I have heard he has IOS on the brain.. I can say it 100% and some!!! He starts teaching not with a dim light slide show but writing the commands on the board from memory, writing the sub-options from memory, explaining what all of them do and all the possibilities depending on scenarios! This is with drawing the topology, device outputs and not missing a single thing. I can say if you were proud of whatever certification you have got seeing this will make you question yourself :oops: yet he is so humble about the whole thing.

I will warn you if you were expecting a 8/9am to 5pm class this ain't it! Class is a solid 10-12 hours with the necessary labs and breaks. I found myself going to bed at 12-1am every morning. I'm lucky I had a game plan that worked for me of waking up at 6am! working out, getting cleaned up and then going to class. Narbik had breakfast, lunch and dinner with the students everyday. Completely unheard of! from any of my experiences of attending any Cisco classes.

During our class we had a few students that were retakes (On a couple from the US and 1 that came over from the UK!), mind you he doesn't charge for retakes for any of his students( he recommends that you take it again before taking the lab) if you have paid for the class even if you have passed the lab. He has a genuine interests in each student not just for making sure you pass the exam but as a real relationship ( that's something you can't buy or fake).

He keeps the learning environment fun and awesome learning experience. With funny stories, simple explanations for what seems complex and no one ever falling asleep because of the constant engagement he has with the students.I have taught IT related classes (for 2 years) but I'm not even on the same planet when it comes to the style, presentation, information and everything else I can think of.

He wants honest feed back from the students (which we all felt like a team) gives honest feedback and recommendations on how to approach the IE without loosing your life and family in the process.

In my opinion there's not another training provider I would use or recommend for the CCIE than Narbik. Also his grandmother has 2 CCIE's. :-)

Accessing Dynamips Running on Another PC

2009-11-06T08:52:00.005-06:00

I've been experimenting more since before adding the SSL VPN so I thought I would mention this info for those addressing similar setups.

Dynamips runs great on Windows 2003 server ( My setup), decent on XP ( Previous setups) and probably best on Linux from all reviews I have read( although a learning curve setting it up from experiences). On windows based systems running dynamips under XP you will have to disable the built in firewall.

Start the dynamips process and launch topology as normal.

Notice the console ports??

These can be specified in the Net file adding the key word "console = 2001" or any other ports you wish to use under each router. Remember once you start adding them all the routers must have a unique port number.

Now from your PC telnet remote pc running dynamips and include the port number.

Now it will connect if the firewall is off. However this presents another problem. Once you make the connection the you will be on that router's console port and drop/close you will not be able to reopen a session again. As the console port has no timeout value. Thus one must be added and preferably without having to telnet to all the routers and doing it.

Solution: Add it in the Net file. This is done by adding the option "cnfg = " under ever router this points to a text file that adds predetermined configurations to each of the routers by pointing it at a text file.

The entire line for each router would be:
"cnfg = C:\Program Files\Dynamips\sample_labs\ospf\xxx.txt"

In the file to address the console issue include the text:
!
line con 0
exec-timeout [in minutes] [in seconds] ( 1) and/or (60)
!

Once done you can telnet to each router and the session will close after 1 minute or whatever time you specify. You will be able to reconnect to the router after the timeout.

Now you can add a real terminal server!? Yes, its possible remember instead of pointing to the loopback which has a console port, which points to a physical line that connects to a real device console. You now do the same as telnetting from your pc to the remote dynamips server.

ip host c1 2001 192.168.1.2 <<<Virtual Router running on PC
ip host c2 2002 192.168.1.2 <<<Virtual Router running on PC
ip host c3 2003 10.0.0.1 <<<Real device
ip host c4 2004 10.0.0.1 <<<Real device

You still configure your real terminal server as normal only difference is that you point to a real pc and ports instead of just only the loopback of the terminal server.

SSL VPN

2009-10-30T07:39:00.002-05:00

I have been looking at different options for connecting to home lab without buying more gear and software. In searching I have found a great open source product that seems to fit the bill Aditio. I installed the application on a spare laptop with an existing OS and in about 15 minutes its ready to go.

You can find a quick walk through here all I did past that was to install the putty add-on and then add the terminal server as a shared resource. Setup home router for port forwarding and created dynamic ip account.

Cisco lab revisions

2009-09-12T17:15:00.003-05:00

Its been a while since I have posted as life has been keeping me busy. I recently finished rebuilding my lab after nearly a year. Combining virtual and real gear. Currently I have net files that are built for CCIE R/S, CCIP and looking to add voice lab with vmware.

Lab pics 1

Lab pics 2

Lab pics3

Lab pics4

Lab pics5

Policy routing

2009-04-03T10:57:00.002-05:00

Policy routing is a very simple topic. Force certain traffic to a destination of your choice. I have done policy routing a few times in the past once for a customer that had 20+ locations that was looking to keep private, less restricted and purely public networks from intermingling. So this is a quicky for those that may have added a new internet connection in a different data center with non clustered firewalls that want to test it out.

route-map TEST-Inet permit 10
C1(config-route-map)#match ?
as-path Match BGP AS path list
clns CLNS information
community Match BGP community list
extcommunity Match BGP/VPN extended community list
interface Match first hop interface of route
ip IP specific information
length Packet length
metric Match metric of route
mpls-label Match routes which have MPLS labels
nlri BGP NLRI type
policy-list Match IP policy list
route-type Match route-type of route
tag Match tag of route
!
C1(config-route-map)#match ip ?
address Match address of route or match packet
next-hop Match next-hop address of route
route-source Match advertising source address of route

for this example I will use ip address

C1(config-route-map)#match ip address ?
<1-199> IP access-list number
<1300-2699> IP access-list number (expanded range)
WORD IP access-list name
prefix-list Match entries of prefix-lists

I will use an extended access-list 100 for this example. Next comes the set feature which shows as: set Set values in destination routing protocol
I'm going to omit some of the choices as some of these don't apply
C1(config-route-map)#set ?
interface Output interface
ip IP specific information

we can use either an ip destination or interface. the choice is yours to decided i normally choose ip
C1(config-route-map)#set ip ?
address Specify IP address
next-hop Next hop address

so here we go with the complete policy to route only internet traffic to the other internet connection.

route-map TEST-Inet permit 10
match ip address 100
set ip address 10.0.0.1
!
route-map TEST-Inet permit 20 <>

access-list 100 deny tcp host 10.2.1.3 10.0.0.0 0.255.255.255
access-list 100 deny tcp host 10.2.1.3 172.16.0.0 0.15.255.255
access-list 100 deny tcp host 10.2.1.3 192.168.0.0 0.0.255.255
access-list 100 permit tcp host 10.2.1.3 any www
access-list 100 permit tcp host 10.2.1.3 any 443

Another great learning experience

2009-03-07T08:21:00.003-06:00

I had to say that I had another great learning experience. When working with bgp to prevent your AS from being a transit from your multi-homed router. Protect it coming in and going out!

outbound protection includes using a AS-path filter to the neighbor statement

ip as-path filter 1 permit ^$

neighbor 10.1.1.1 filter 1 out

in bound protection includes a route-map with an catch any access-list with a community on no-export

route-map IN permit 10
match address 99
set community no-export

neighbor 10.1.1.1 route-map IN in

as the old saying goes hindsight is 20/20

So so busy

2009-03-01T14:59:00.003-06:00

This is the first time in a while I have had time to blog about anything.

My most recent projects included splitting wan traffic at remote sites between the 2 T1s and redesigning a customer network.

The wan split was very interesting and definitely stepped my bgp game to the next level. Not to mention studying for the bgp test as well. With all that I have decided to go for the combo test of bgp+mpls here very soon. I have studied alot of bgp from the cbts, IE written guide,routing TCP/IP book and labs alot of labs. Mpls study materials include mpls fundamentals guide (which I will say isn't fundamentals but a guide from basic to advanced), cbts and labs alot of labs.

Redesigning the customer network. Ah what can I say. The design was very simple to do however getting the gear to do it was something else. They used a non-cisco brand that is VXworks based thats all I will say about it. The complete configuration went without a hitch as I was very, very prepared. The test verification went as planned all was working and the next day testing was the same. Later that evening one of the switches in the stacks rebooted and basically corrupted the configuration of the whole stack. The next day one of the closet was not working, the trunk was up, the management vlan on the switch was pingagble but not user vlan traffic.

We switched the users over to another vlan that was working and came back that evening to further troubleshooting. Looking at the config the ip address of the effected closet user vlan interface was on another non used interfaces. Correcting it on basically moved issue to another interface and so on. Leaning toward clearning the config completely, I went for the last move option before the worst case move. Rebooting the entire core switch stack. Correcting ip interfaces settings now works. I have never seen this issue on any other vendors gear but it was my professional recommendation that they keep these switches as edge switches and go with something more solid.

Quick and dirty mpls network

2008-11-27T11:22:00.003-06:00

I refer to this as the quick and dirty mpls network. In actuality its using a single router to act as a PE and P using vrf lite with BGP or any other IGP.

on the router in this example using bgp as the edge protocol

create the vrf interfaces for your CE routers

ip vrf C1. be aware that they are case sensitive

rd .. this differentiates from others on the router for C1 we will use rd 1:1

route-target this is the controls the route imported and exported ( exported routes are what the other vrfs imports and vise-versa) since we are doing a 1 to 1 we will use route-target both 100:1 for both vrfs..remember to create another C2 with a rd 1:2

you don't have to do this but i like to which is to add an IGP even though the router will not have a neighbor

router ospf 1
network 1.1.1.1 0.0.0.0 area 0 -- this is the loopback

enable bgp
add the loopback as the router-id

being that you have no neighbors per say disable synchronization and auto summary

enable mp-bgp - address-family vpnv4

add your vrfs into bgp.. address-family ipv4 C1 -- you will need to create another for C2
add your normal bgp config for that neighbor
be sure to include a neighbor statement with send-community both or extended

add your customer vrfs to the interfaces followed by the ip address afterwards

do your normal bgp configuration on your edge routers

any questions?

Dual carriers, Dual connections and Dual routers

2008-11-17T16:55:00.004-06:00

I have been tasked with a wan conversion project that I have been working on for months. This was the major task of this entire project 2 carriers providing 2 circuits and with 2 routers.

Scope provide "complete redundancy" with each of the carrier's circuits.

Carrier A would be the primary with circuits in 2 locations. Carrier A would come into data center 1 and the other circuit would come into data center 2. Carrier B would follow the same setup with data center 2 being the "backup" for both.

Router-1:
router ospf 2
log-adjacency-changes
redistribute bgp 64600 metric-type 1 subnets route-map WAN-IN <This route-map will be processed when adding the routes to the ospf routing table.
network 10.101.2.2 0.0.0.0 area 0
!
router bgp 64600
no synchronization
bgp log-neighbor-changes
network 0.0.0.0 mask 255.255.255.255 <I only advertised a default route into the mpls cloud. As anything not in the cloud has to come back to the data center anyway. NOTE: Some routers/IOS require that the default-information orginate command inorder to advertise the default route.
neighbor 12.1.1.1 remote-as 65200
neighbor 12.1.1.1 route-map Filter2 in
neighbor 100.1.1.1 remote-as 65100
neighbor 100.1.1.1 route-map Filter in
no auto-summary
!
!
access-list 99 permit any < This is my favorite catch all access-list
!
route-map Filter2 permit 10
match ip address 99
set tag 65200 <When this is applied to the route-map in it will complain about it not being supported but it does work
set local-preference 500 < This sets the bgp preference of what the route choice will be by the router.
set community no-export <This community value being applied to the inbound routes prevents bgp from sharing it to any other neighbors.
!
route-map Filter permit 10
match ip address 99
set tag 65100
set community no-export
!
route-map WAN-IN permit 10 <This route-map is processed in ospf to manipulate the routes being brought in from the redistribution of bgp.
match tag 65200 < This catches the tag inserted by the inbound route-map applied to the bgp neighbor
set metric 300 < This sets the metric value ospf will associate with the tagged route. The lower the metric the better but in this case this is what I used in order to easily recognize it.
!
route-map WAN-IN permit 20
match tag 65100
set metric 500
!

Router2:
router ospf 1
log-adjacency-changes
redistribute bgp 64512 metric-type 1 subnets route-map WAN-IN
network 10.101.1.0 0.0.0.255 area 0
!
router bgp 64600
no synchronization
bgp log-neighbor-changes
network 0.0.0.0 mask 255.255.255.255
neighbor 12.1.2.1 remote-as 65200
neighbor 12.1.2.1 route-map Filter in
neighbor 12.1.2.1 route-map MED-OUT out
neighbor 100.1.1.5 remote-as 65100
neighbor 100.1.1.5 route-map Filter2 in
neighbor 100.1.1.5 route-map MED-OUT out
no auto-summary
!
!
access-list 99 permit any
!
route-map localout permit 20
set metric 500
!
route-map Filter2 permit 10
match ip address 99
set tag 65200
set local-preference 500
set community no-export
!
route-map Filter permit 10
match ip address 99
set tag 65100
set community no-export
!
route-map MED-OUT permit 10
match ip address 99
set metric 3000 < This is being sent to the provider PE router to let it know that this is a backup route and only use it if the primary link that has no out going MED is lost.
!
route-map WAN-IN permit 10
match tag 65200
set metric 700 < This sets the metric value ospf will associate with the tagged route. The lower the metric the better but in this case this is what I used in order to easily recognize it. These routes will be filtered by ospf for the lower metric coming from Router1.
!
route-map WAN-IN permit 20
match tag 65100
set metric 900

CSC lab

2008-11-14T08:42:00.004-06:00

Going into the new area of CSC for me and with configuration change the existing lab easily converts to CSC without a hitch.

Provided is the net file, you will need to get your own ios, and figure out what your idlepc values are but I hope this helps.

##################################################
#
# Define global router parameters for instance 1
#
##################################################

autostart = False
[localhost:7200]

workingdir = C:\???
[[2691]]
#
# Specify 3640 IOS image on Windows here:
image = C:\Program Files\Dynamips\images\C2691-AD.bin
#
ram = 96
#disk0 = 0
#disk1 = 0
# Choose an idlepc value from the below
# idlepc = 0x6062e728 -possible good
mmap = True
ghostios = True
sparsemen = True

[[3640]]
# Specify 3640 IOS image on Windows here:
image = C:\Program Files\Dynamips\images\C3640-TE.bin
#
ram = 64
#disk0 = 0
#disk1 = 0
mmap = True
ghostios = True
sparsemen = True

###########################
#
# Define router instances
#
###########################

[[Router P1]]
model = 3640
autostart = False
slot0 = NM-16ESW
F0/1 = P2 F0/1

[[Router R1]]
model = 2691
autostart = False
slot1 = NM-4T
S1/0 = PE1 S2/0
F0/0 = P1 F0/4

[[Router R2]]
model = 2691
autostart = False
slot1 = NM-4T
S1/0 = PE1 S2/1
F0/0 = P1 F0/5

[[Router R3]]
model = 2691
autostart = False
slot1 = NM-4T
S1/0 = PE2 S2/0
F0/0 = P2 F0/4

[[Router R4]]
model = 2691
autostart = False
slot1 = NM-4T
S1/0 = PE2 S2/1
F0/0 = P2 F0/5

##################################################
#
# Define global router parameters for instance 2
#
##################################################

[localhost:7201] # Talk to the 2nd dynamips process on port 7201
udp = 11000 # Change the base udp port to 11000 (the default is 10000)

workingdir = C:???

[[3640]]
# Specify 3640 IOS image on Windows here:
image = C:\Program Files\Dynamips\images\C3640-TE.bin
#
#
ram = 64
#disk0 = 0
#disk1 = 0
# Choose an idlepc value from the below
#idlepc = 0x6062e728 ?
mmap = True
ghostios = True
sparsemen = True
#idlepc = 0x606e70ec
idlepc = 0x610095ec

[[7200]]
image = C:\Program Files\Dynamips\images\c7200-p-mz.120-31.S6.BIN
npe = npe-400
ram = 64
mmap = True
ghostios = True
sparsemem = True

###########################
#
# Define router instances
#
###########################

[[Router PE1]]
model = 7200
autostart = False
slot0 = PA-C7200-IO-FE
slot1 = PA-2FE-TX
slot2 = PA-4T
F0/0 = P1 F0/0
F1/0 = P1 F0/15

[[Router PE2]]
model = 7200
autostart = False
slot0 = PA-C7200-IO-FE
slot1 = PA-2FE-TX
slot2 = PA-4T
F0/0 = P2 F0/0
F1/0 = P2 F0/15

[[Router P2]]
model = 3640
autostart = False
slot0 = NM-16ESW

[[Router P6]]
model = 7200
autostart = False
slot1 = PA-4E
E1/0 = PE1 F1/1
F0/0 = P7 F0/0
E1/1 = P7 E1/1
E1/2 = P1 F0/6
E1/3 = P2 F0/6

[[Router P7]]
model = 7200
autostart = False
slot1 = PA-4E
E1/0 = PE2 F1/1
E1/2 = P1 F0/7
E1/3 = P2 F0/7

Slow motion

2008-10-12T22:14:00.003-05:00

I have been in slow motion. Still working my way slowly at this point through the workbook I've been using and studying other technologies. As most may know that MPLS is a huge focus that I have among many. I posted the last lab revisions which includes alot of stuff that I have became more knowledgeable about.

I have developed a training routine if I can call it that..lol 2 hours a day 1 hour on R/S lab and the other hour on the other technologies I have a desire to learn. I think the next big thing for me will be to add voice, as I have been gathering materials to aid in this learning area. I think the goal is to know alot about a few different thing but at least master R/S first before tackling any other major cert goals.

Study partner

2008-09-04T06:03:00.002-05:00

It's been a while but I'm currently in the market for a study partner. Anyone studying for the IE lab or the written for R/S. Also including the IP or SP lab. Ping me offline

New section

2008-08-25T18:07:00.003-05:00

I recently completed the bgp section of soup to nuts and now in the qos section. I've seen myself as pretty strong on qos being that I have read the book, took the class and passed the 642-642 toward the CCIP. I have implemented qos at my past job and current job but not in these lab scenarios but then again it's practice, learning and understanding concepts.

I have met some interesting tasks in the qos section that are somewhat new or I have forgotten due to non use. I think I could complete this section in about 2 weeks depending on the current work load.

lab update

2008-08-14T08:23:00.002-05:00

Here is the lab pic I have been running for the past couple of months.. this includes almost everything and easily can have pieces added on the fly. I've considered having the P routers do triple duty.. they currently operate as P routers and L2 switches for the fa0/0 interfaces of the CE routers and trunk link for the PE routers for ethernet ATOM .. but I'm in the thought process of making them additional CE routers as well.. but that will have to wait.

Working on completing the bgp section from Soup to Nuts..

The return

2008-08-10T13:08:00.002-05:00

It's been a few months since my last post been very busy with work. Still on a study routine for the most part not really R/S but still hitting the mpls . I have created a new more complete topology which includes 4 P routers, 2 PE router but easily converted into 3 by having 1 of the P routers do double duty and still 4 CE routers. It includes TE, ATOM, backdoor links and room for atm inclusion.

I will post the new top pic in a few more days once reformated.

What I have been doing lately is alot of bgp and bgp and bgp.. I didn't realize it was a weak area but I realize that I need to hit the workbook more.. Which workbook Narbik's of course he has the best and most complete of all the technologies. More so he is a very cool guy who's class I hope to take in the near future before the specials run out.

Still haven't had a chance to purchase any 3550s or 3560s for labbing as renting rack time is very hard task to commit. I perfer and it works better with my schedule to have gear on hand for a quick 10 to 50 minutes to cover something..

Off the grid

2008-05-01T19:43:00.005-05:00

Its been a while since my last post. I've been working alot on projects one I will admit I got a bit burned on. So, the other I've making sure to cover every bit leaving nothing to chance. I'm walking this "six ways til sunday".

I had a bit of a break during this to go to training which also slowed my study and workout routine to a crawl.

I'm going to hopefully make the revision to the mpls lab for 3 P routers and merge ATM in as well

The additions

2008-03-28T11:33:00.005-05:00

Well here are the complete for the most part additions to the lab that i mentioned in the last post.

Still no atm added I wanted to master a bunch of the topics before messing with that. I will construct a new smaller lab to get the handle on it. Still having some tweaking issues with the call manager vm but i should have it worked out over the weekend. Once thats ironed out i will load the softphones on the vm host pcs as well as mine but i think that will be during the lan emulation part of the lab.

Mpls lab additions

2008-03-24T08:07:00.003-05:00

Recently, I've been spending some time with vmware and decided to add the to the mpls lab. 2 site pcs , 1 web/authentication server/dhcp and my own pc as the internet gateway. The experimentation has been going well as a whole. I still haven't been able to rightfully complete the internet portion as I've spend alot of time doing workbook tasks.

Also I have added the last dynamips update that allows the use of 2600/1700 with actual wic modules. Very good but just took a bit of getting used to the bugs with this addition. There are also some bugs that I hope will be fixed in the latest version, ex the random crashes with RIP.

I'll post the next drawing once I have time to integrate the changes in a working order.

Lab and learn

2008-03-16T11:33:00.003-05:00

Since my last post I have been working my way through a vendor's workbook whom will remain unnamed. I really like the workbook very straight forward simple labs but very advanced with odd tidbits. I like the fact that I'm able to run a huge majority of the labs in dynamips without the need to invest in rack time. There are a few switching labs that require real switches for some of the topics that can't be done with the virtual switch modules.

The labs are pretty short to me, no more than 2 to 3 pages but with the size of the print it could be scaled down to 1 page including the diagram. If anyone is interested give me a shout for more info.

I also hope to take a IE lab course and if I can't the choice is a Mpls/Bgp course to finish the CCIP.

Great news

2008-03-09T20:50:00.004-05:00

Today the other engineer that I used to study together passed his lab on the first try. So this post isn't about me but a good friend and his accomplishment. Well it looks as if its time to get my game up.

congrats bud :-)

Alot of R&R

2008-03-05T15:06:00.002-06:00

It seems that Reading and Routing have become my new past time. My current read is anything on Cisco's site related to mpls and this book which is thus far is very solid. The current lab is still current and still may get the 7200's as PE as there are features that the 3640 don't support related to service provider services.

Been watching the IE SP CoD vids ... well I should spend more time doing R/S stuff but this is so interesting :-)

I must be crazy

2008-02-26T20:25:00.003-06:00

I've started this title as I must be crazy because ever since just doing the mpls cbt for prep for the IE r/s written. I haven't been able to stop reading more and more about it. I'm pretty much labbing it up almost every day. I mentioned in the last mpls post about the topology changes I was looking at but I have opted not to use the 7200 as of yet.

So I have added more to the existing which includes: Internet access into the customer vpn, service provider services (dhcp, ex.) and the dreaded TE ( traffic engineering). Still lacking the atm as I will create another lab all together to learn the configuration of ATM ( Yes, I have never worked with it directly)

I think the last revision would be to add more CE routers maybe no more than 2 as that would be 15 routers this includes the frame-relay switch as well. I think the only plus is that all the CE routers are 2691s, well I will investigate cutting those down to 2620s at a later date.

Full speed

2008-02-22T14:01:00.002-06:00

After having to battle it out with the lab a bit here and there some with frame and the rest with the mpls vpn. dynamips is kinda odd with frame easy to setup but it acts a bit odd or it was just the image I was using. Since that got resolved I went on to configuring the provider network. This is a basic mpls network core no TE or any of the extra SP services as of yet just need to get it running to test and learn.

I've been using the knowledgenet cbt which is great it takes you from basic to advanced. However depending on what your using in your lab ( routers and ios) the configuration may be slightly different for aspects related to the MP-BGP exchange between the PE routers.

For those that have already achieved this IE I have a great respect for as in the process of building this network on a small scale I have loads of trouble shooting.

Here are a few outputs from my provider and customer routers. On the edge routers I've got them running eigrp to this particular customer. The igp in the provider core is ospf.

Customer-A - notice no provider networks in the customer network
CE-1#sh ip route
Gateway of last resort is 150.3.2.1 to network 0.0.0.0
172.16.0.0/24 is subnetted, 5 subnets
C 172.16.4.0 is directly connected, Loopback3
C 172.16.5.0 is directly connected, Loopback4
C 172.16.1.0 is directly connected, Loopback0
C 172.16.2.0 is directly connected, Loopback1
C 172.16.3.0 is directly connected, Loopback2
D 192.168.0.0/24 [90/2809856] via 150.3.2.1, 00:35:07, Serial1/0
D 192.168.1.0/24 [90/2809856] via 150.3.2.1, 00:35:07, Serial1/0
D 192.168.2.0/24 [90/2809856] via 150.3.2.1, 00:35:07, Serial1/0
150.3.0.0/30 is subnetted, 1 subnets
C 150.3.2.0 is directly connected, Serial1/0
150.4.0.0/30 is subnetted, 1 subnets
D 150.4.3.0 [90/2681856] via 150.3.2.1, 00:36:07, Serial1/0
CE-1#

Provider Edge router - Notice no customer routes in the provider network
PE1#sh ip route
192.168.1.0/24 is variably subnetted, 7 subnets, 3 masks
C 192.168.1.11/32 is directly connected, Loopback0
C 192.168.1.14/31 is directly connected, FastEthernet1/14
O 192.168.1.1/32 [110/2] via 192.168.1.14, 00:44:19, FastEthernet1/14
O 192.168.1.2/32 [110/3] via 192.168.1.14, 00:44:19, FastEthernet1/14
O 192.168.1.4/30 [110/2] via 192.168.1.14, 00:44:19, FastEthernet1/14
O 192.168.1.24/31 [110/3] via 192.168.1.14, 00:44:19, FastEthernet1/14
O 192.168.1.22/32 [110/4] via 192.168.1.14, 00:44:19, FastEthernet1/14
PE1#

This is the output from the vrf that the provider is using to communicate routing info
PE1#sh ip route vrf Customer-A
Routing Table: Customer-A
Gateway of last resort is not set
172.16.0.0/24 is subnetted, 5 subnets
D 172.16.4.0 [90/2297856] via 150.3.2.2, 00:47:42, Serial0/0
D 172.16.5.0 [90/2297856] via 150.3.2.2, 00:47:42, Serial0/0
D 172.16.1.0 [90/2297856] via 150.3.2.2, 00:47:42, Serial0/0
D 172.16.2.0 [90/2297856] via 150.3.2.2, 00:47:42, Serial0/0
D 172.16.3.0 [90/2297856] via 150.3.2.2, 00:47:42, Serial0/0
B 192.168.0.0/24 [200/2297856] via 192.168.1.22, 00:46:06 notice the bgp routes learned
B 192.168.1.0/24 [200/2297856] via 192.168.1.22, 00:46:06 from the other vrf on PE2
B 192.168.2.0/24 [200/2297856] via 192.168.1.22, 00:46:06
150.3.0.0/30 is subnetted, 1 subnets
C 150.3.2.0 is directly connected, Serial0/0
150.4.0.0/30 is subnetted, 1 subnets
B 150.4.3.0 [200/0] via 192.168.1.22, 00:47:09
B 192.168.3.0/24 [200/2297856] via 192.168.1.22, 00:46:10
PE1#

All this fun I'm going to take a break and start working on Customer-B then start with the advanced stuff .. then again I probably should start reading the book on mpls.

O last thing this is very good and I may purchase it as well MPLS troubleshooting

Dynamips mpls lab revisement

2008-02-17T21:53:00.005-06:00

I recently revised my the dynamips mpls lab to include frame relay. In the next coming revisions I'll include another router maybe a 7200 with ATM. Otherwise frame is fairly easy to add almost no different than creating in on a router with several serial interfaces. Besides I needed to brush up frame not so widely used options. I'm not doing any multipoint interfaces at this point but its coming. I'll post any additions to the on going process.

Getting the game up

2008-02-12T18:23:00.000-06:00

I have been working at my current gig a few months and starting to get hit with alot of new challenges which I do like. I'm experiencing a bit of a slow to speed being that my last gig I spent a year ( yes a year I was trying to escape the whole 12 months) doing nothing of any real challenge as it was being handed out to vendor despite a team of engineers on payroll being more than capable of performing the work :-(

As, you can image now the skill is jumping up leaps and bounds with every new challenge. I do feel a bit bad as I think my skill level was higher before joining the prior employer. Well at any case I'm just venting as I'm feeling a bit under the curve but at least I'm a quick study :-) and thus far I've made anything we have been trying to do happen.

BGP and the firewall

2008-02-11T19:21:00.000-06:00

A while back I had to come up with a design for 2 external bgp sessions and advertise 2 different class C addresses each as back up for the other passing through firewalls. I originally built this in dynamips which worked perfect. When applied to real hardware you can already guess what happened it didn't work.

So the troubleshooting began. Here are some very good commands when trying to work with bgp:

ping- always a good basic connectivity checker
debug ip tcp transaction
debug ip bgp ( just do the whole thing its very helpful there are other options like events and updates that are good as well)

Needless to say although bgp was permitted the session was being taken down by the process. After reading up on the errors messages the unicast connection was being broken because of how a firewall translates/NATs being that both ibgp peers where external permitting an exposed ip to an ip that doesn't locally resides or locally accessible ( meaning like an internal host like a server) within the "internal" network made for additional issue to boot.

Resolution. I had to create static routes within the firewalls directing them for forward packets to the other firewall that held the other ip subnet. Then also peer with the exposed ip on the firewall being in the original setup i was able to peer with the ibgp neighbor using the real ip, with a host route in only pointing to the exposed ip.

Now begins the route filtering. Remember access-lists and route-maps

The study routine

2008-02-10T19:42:00.000-06:00

Someone would ask what or how do you manage to study for these certs?
I however don't look at as learning merely for the cert I have a genuine want to learn and use these technologies. So, gaining a cert in the process is only a further show of proof or ability.

Back to the question at hand. I'm very much a family guy so spending time with the loved ones is important. What I did not to take time away from them was to start my day early, REAL EARLY. I started forcing myself to get up at 5am to study for an hour as everyone else needed to be up at 6am.

Was it hard to get up that early? Hell yeah! On average I get about 6-7 hours of sleep a day even on weekends.

What do I do as far as studying? What ever technology/topic I'm learning at the time I create a simple outline based on what Cisco might say and I add my on flavor to it. With that I find any resources for learning that topic CBTS, Books, Videos, web docs and power points on it. Then start at chapter one .

Which do you prefer to study with books, cbts or vids? I like all of them but I do like the videos to start with. These provide a quick and dirty on the subject/topic to get the info in your mind processing until you can sit down and follow up with the cbt and book combo.

Anything else you can add? Labs, Labs and Labs. Labs are a must with any technology that you want to learn and with the creation of dynamips it can be done at a cheap cost. Now somethings you can't virtualize so rack time in some fashion is required. As I tell people either you pay for it or you pay for it. Being shopping ebay or using rack rental companies.

Any last comments? With all the free info that is flowing on the web do your best to study, practice and do more of the same. As doing it the hard way pays better than doing it the quick.

Dynamips MPLS lab

2008-02-10T18:26:00.000-06:00

###########################
#
# Define router instances
#
###########################

[[Router R1]]
model = 2691
autostart = False
#slot0 = NM-1FE-TX
F0/0 = PE1 F1/1

[[Router R2]]
model = 2691
autostart = False
#slot0 = NM-1FE-TX
F0/0 = PE1 F1/2

[[Router R3]]
model = 2691
autostart = False
#slot0 = NM-4E
F0/0 = PE2 F1/3

[[Router R4]]
model = 2691
autostart = False
#slot0 = NM-4E
F0/0 = PE2 F1/4

###########################
#
# Define router instances
#
###########################

[[Router PE1]]
model = 3640
autostart = False
slot1 = NM-16ESW
F1/14 = P1 F1/0
F1/15 = P1 F1/1

[[Router PE2]]
model = 3640
autostart = False
slot1 = NM-16ESW
F1/14 = P2 F1/0
F1/15 = P2 F1/1

[[Router P1]]
model = 3640
autostart = False
slot1 = NM-16ESW

[[Router P2]]
model = 3640
autostart = False
slot1 = NM-16ESW
F1/14 = P1 F1/14
F1/15 = P1 F1/15

Dynamips DMVPN topology

2008-02-10T16:22:00.000-06:00

This is a DMVPN topology
**********************************
[[Router R1]]
model = 3640
autostart = False
slot0 = NM-1FE-TX
slot1 = NM-16ESW
F0/0 = SW1 F1/1

[[Router R2]]
model = 3640
autostart = False
slot0 = NM-1FE-TX
slot1 = NM-16ESW
F0/0 = SW1 F1/2

[[Router R3]]
model = 3640
autostart = False
slot0 = NM-4E
slot1 = NM-16ESW
E0/0 = SW1 F1/3

##################################################
#
# Define global router parameters for instance 2
#
##################################################

[[Router R4]]
model = 3640
autostart = False
slot0 = NM-4E
slot1 = NM-16ESW
E0/0 = SW1 F1/4

[[Router R5]]
model = 3640
autostart = False
slot0 = NM-4E
slot1 = NM-16ESW
E0/0 = SW1 F1/5

[[Router SW1]]
model = 3640
autostart = False
slot1 = NM-16ESW

Cisco Certification and Dynamips

2008-02-10T13:19:00.000-06:00

Just as it says. I used to run a full rack with 12 router, 5 switches and 5 servers. Once I heard and saw dynamips I was interested in using this product. After a bit of trial and error on my work laptop (which was far better than my home one) and getting it working I decided to go completely virtual for the CCIE. This ment that I would have to shed off some the rack which was getting dusty since my completion of the CCNP. I looked for a while for a solid laptop at a decent $. I sold off 8 routers and 3 switches ( I had to keep some for the live stuff) and purchased a HPdv6000 with Duo core 1.6ghz, 2gb ram and 120 gb HDD for under $450.

For those who wish to learn how to get dynamips running if having issues this is the best vid on the web for it running on windows 2000/XP.

I've heard it runs on ubuntu like a champ but I haven't had time to experiment with it.

I have not heard any good results from trying to run it on vista so don't waste the time fighting with it.

Start of Cisco

2008-02-10T12:54:00.000-06:00

I was told about Cisco by a friend that I hadn't seen in years but ran into starting my first "formal" IT gig back in 2000. My friend was kind enough to tell me about all the things that these routers could do and what she used to do at her past gig before it bottomed out.

While working at the gig one of my team mates was the first Cisco certified individuals I had ever met. He was a very sharp dude to say the least. Back then I was on the whole MCSE thing that was when NT4.0 was big. After a while at the gig I was lucky enough to get hired by a company to be the Jr. Admin which was a big jump in pay as well as career. As, all I had been doing was answering the phone which I could do in my sleep and was very unchallenged.

After months at the Jr. Admin, we had some contractors coming in to do some work. They were there to setup a DSL router a Cisco 827. I was so wowed by the event and being that I was the Admin (there were no other admins as it was) I "supervised" the vendor's work.

They were there for 2 days looking at the cli it looked all like DOS with alot of extra features, better features. After they left I started searching the web about Cisco and started reading up as much free info on the web I could get my hands on. I had found a training vendor that offered a cbt for CCNA. I signed up for the class only to drop it after realizing that it didn't fit my training needs nor the monthly cost of it $250 a month.

After a few months my time had come we were about to add a new T1 circuit. I told my boss that I could do it and save us some cash, he agreed. My first T1 took me about 2 days to get it completely configured (alot of trial and error on the config back then the IOS was just moving to 12.0) . After completing it I was hooked and that was my new IT career goal to become Cisco certified.