Study Material For Cisco Students

Study Material For Cisco Ccna Ccnp And Ccie Students

More Information

My Study Material For Cisco Ccna Ccnp And Ccie Students Review

I've really worked on the chapters in this ebook and can only say that if you put in the time you will never revert back to your old methods.

I personally recommend to buy this ebook. The quality is excellent and for this low price and 100% Money back guarantee, you have nothing to lose.

Ccie Cs Written Exam General Knowledge Blueprint

Half of each C&S written test contains questions from the general knowledge blueprint. The general knowledge blueprint is a subset of the CCIE R&S blueprint. The CCIE C&S general knowledge blueprint includes the following Cisco device operation, general networking theory, bridging and LAN switching, WAN media, IP theory, IP routing protocols, and performance management. This book helps prepare you for the general knowledge portion of the CCIE C&S exam. The CCIE C&S general knowledge blueprint is described in the next section.

Sample CCIE Routing and Switching Lab I

NOTE Although the aim of this book is to help prepare you for the CCIE Security written exam, I include this appendix as bonus material for a few reasons. First, even though this is a sample lab for the CCIE Routing and Switching lab exam, it gives you an idea of the level of tasks involved in a CCIE lab examination. Second, being a triple CCIE myself, I recognize that if you are interested in attaining CCIE Security certification, you might be curious about the other CCIE options, as well. This appendix is designed to assist you in your final preparation for the lab portion of the most popular CCIE certification to date, CCIE Routing and Switching (CCIE R&S). There are two versions of the R&S lab in this guide. This appendix includes a complex routing lab designed for readers who have access to a generous amount of equipment. Appendix D, Sample CCIE Routing and Switching Lab II, is a sample lab with the same level of difficulty but with only four routers.

CCIE Lab Exam Frequently Asked Questions

The following are some frequently asked questions regarding the difficult one-day CCIE Lab Examination A October 2001. All CCIE certification labs around the world are testing candidates in the new one-day format. Research Triangle Park, North Carolina Halifax, Nova Scotia, Canada Sao Paulo, Brazil Brussels, Belgium Johannesburg, South Africa E-mail ccie ucsa cisco.com Tel +86 10 6526 7777 Ext. 5710 Fax +86 10 8518 2096 E-mail ccie apt cisco.com Tel +61 2 8446 6135 Fax +61 2 8448 7980 E-mail ccie apt cisco.com E-mail ccie cisco.co.jp A E-mail your question to ccie cisco.com . The CCIE team responds to all questions. A You will be escorted outside the lab. You will receive an e-mail notification within 24 hours. The e-mail notification will notify you that the result of your lab attempt is available online at A In addition to becoming a CCIE, you also gain access to an exclusive CCIE chat forum and CCIE merchandise, and you get a CCIE medallion and certificate.

CCIE Security Lab Exam FAQs

The following are some frequently asked questions about the difficult 1-day CCIE Security lab exam. October 2001. All CCIE certification labs worldwide now test candidates in the 1-day format. 2. Where can I take the CCIE Security lab exam Locations where you can take the CCIE Security lab exam follow You can find more information at scheduling_lab_exam.html. E-mail your question to ccie cisco.com . All questions receive a response from the CCIE team within 72 hours. In addition to becoming a CCIE, you also gain access to exclusive CCIE chat forums and merchandise, and you receive a CCIE plaque and certificate. Expect these to be mailed to you between 3 and 6 months after your test date, depending in what part of the world you reside. You are permitted to bring only necessary medication and a dictionary. No other materials are permitted. Cisco provides refreshments at all CCIE lab sites. Lunch is also provided during a lunch break (30 minutes).

Ccie Cs Written Exam General Knowledge Objectives

Table 1-2 lists the CCIE C&S general knowledge objectives from the published blueprint and the corresponding chapters in this book that cover those objectives. Table 1-2 CCIE C&S Written Exam General Knowledge Objectives Table 1-2 CCIE C&S Written Exam General Knowledge Objectives Table 1-2 CCIE C&S Written Exam General Knowledge Objectives (Continued) Table 1-2 CCIE C&S Written Exam General Knowledge Objectives (Continued) Table 1-2 CCIE C&S Written Exam General Knowledge Objectives (Continued)

The CCIE Practical Exam Preparation and CCIE Practice Labs

These words come from one of my personal heroes, retired General Colin Powell. His words of advice ring true for soldiers as well as anyone striving to become a CCIE. There exists no single source of CCIE knowledge, no all-in-one book, including this text, that will get you into the ranks of the CCIEs. And as Powell's words echo, don't waste time looking for them. At the time of this writing, September 2001, Cisco states that there are 6678 active CCIEs in the world. When you compare this number to how Cisco predominates the market, the ranks of the CCIEs still remain very slim. The CCIE program is constantly changing to reflect current market trends. In 1997, all the tests were made standard. In 1999, Cisco offered more then the core routing and switching exam. You could specialize in WAN switching, or SNA and others. These specialization certifications also have changed in recent years.

Format of the CCNA Exams

The INTRO, ICND, and CCNA exams all follow the same general format. When you get to the testing center and check in, the proctor will give you some general instructions and then take you into a quiet room with a PC. When you're at the PC, you have a few things to do before the timer starts on your exam for instance, you can take a sample quiz, just to get accustomed to the PC and to the testing engine. Anyone who has user-level skills in getting around a PC will have no problems with the testing envinronment. The best way to prepare for simulated lab questions is to practice with real gear. You can actually find sites where CCNA lab access is free over the Internet I did a search from www.google.com tonight, searching for free CCNA labs, and the first three hits were (seemingly) legitimate offers for free lab access for CCNA study. You can also use a simulator product, such as Cisco Press's CCNA Router and Switch eSIM.

FAQs About the CCIE Security Written Exam

This section answers some common questions about the written CCIE Security exam. These frequently asked questions should help dispel any confusion surrounding this exam. 1. How many questions are on the CCIE Security written exam You do not need to fax your test results to your nearest CCIE lab administrator. Visit the following URL to set a lab exam 9. Where can I find further information about the CCIE Security exam Cisco provides additional information online

Using This Book to Prepare for the CCIE Security Written Exam

Cisco Systems offers many different varieties and levels of career certifications, including the three current CCIE certification tracks. This book helps prepare you for the written exam ( 350-018) for the CCIE Security certification. The CCIE program has existed for almost 10 years. The relative complexity of the CCIE examinations prompted Cisco to introduce associate and professional levels of certification to provide candidates a way to progress through the various levels of certification. Though many of these lower levels of certification have prerequisites to go along with the written exams, CCIE certification does not have any prerequisites. To become a CCIE, you need to pass two exams a written exam and a one-day lab exam. By introducing these lower-level certifications, Cisco has maintained the complexity of the CCIE examinations. Passing any CCIE examination by reading only one book is still difficult.

CCIE Recommended Study Resources and Topics Outline

This book serves as only one of many that you will have to read during your studies. The following books are a brief list of the ones that will be of great value during your studies another list is provided on the CCIE page, mentioned previously Cisco Press CCIE Network Design and Case Studies Table 18-1 provides a rough outline (but by no means a complete list) of CCIE study topics. It offers a solid starting point for a list of topics that the CCIE candidate should become very familiar with. Table 18-1. CCIE Study Topic Outline Table 18-1. CCIE Study Topic Outline The practice labs are designed to give you an accurate representation of what a CCIE Lab Exam actually looks like. Many topics on the practice labs are not covered in this volume. As mentioned previously, one book not even one this size can possibly cover all the topics on the CCIE exam, at least in any depth. Topics such as BGP, IPX, multicast, and IPSec will be covered in CCIE Practical Studies, Volume II.

CCIE Lab Exam Test Format

Passing the qualification examination is the easier part of the CCIE exam journey. To pass the lab exam, your life needs to change dramatically, and you need to study on routers full time for at least three to six months. The good news is that the format of the lab examination has changed from two full days to one day only. You are no longer required to troubleshoot a network (regarded as the true method to test a CCIE's ability to restore a network back to full IP connectivity) you are now required to configure only a set number of features. http tools.cisco.com CCIE Schedule Lab jsp login.jsp Ensure that you practice with and understand these devices. Practice configuring almost every IOS feature, and fully understand what each IOS command actually enables, instead of relying on limited experience with certain commands. Anyone can configure a Cisco router, but the ability to understand the full consequence of a command is crucial to passing the CCIE Lab Examination.

Best Books for CCNA Certification

When preparing for the Cisco Certified Network Associate (CCNA) certification, choosing the right resources is crucial for success. A variety of books are available that can help you master the essential concepts and topics covered in the CCNA exam. In this paragraph, we'll provide an overview of the types of books that will benefit aspiring CCNA candidates. Introduction to Networking Start with books that provide a comprehensive introduction to the world of networking. These resources should cover topics such as network protocols, IP addressing, subnetting, and routing, all in an easy-to-understand manner. This foundational knowledge is vital for anyone pursuing a CCNA certification. Official CCNA Certification Guides Official guides released by Cisco or endorsed by them are a must-have, as they strictly follow the CCNA exam objectives. These books typically offer in-depth coverage of the exam topics, practice questions, and review exercises.

CCIE Security Self Study Lab

This chapter is designed to assist you in your final preparation for the CCIE Security exam by providing you with an extensive lab that incorporates many of the technologies and concepts covered throughout this book. This lab requires a broad perspective and knowledge base. Any knowledge you have acquired through the practical examples presented in this guide and reallife network implementations will help you achieve the end goal a routable network according to the security design criteria. The CCIE lab exam was traditionally a 2-day lab held in various world-wide locations such as Sydney and Brussels along with the traditional sites based in San Jose and Raleigh. However, when the CCIE Security lab exam was introduced, it contained only a 1-day lab portion. In the 1-day CCIE Security lab practical exam, the candidate is presented with a number of simple and complex tasks, starting from the physical layer of the OSI model and continuing up to the application layer.

CCIE Security Examinations

This appendix describes some study tips and options for you to consider while preparing for the CCIE Security written and lab examinations. CCIE is regarded as the most sought-after certification in the industry today more and more vendors are devising their own certification programs and trying to catch up to the industry-leading Cisco Systems. Working in the CCIE program for the past two years, I have seen many changes and challenges facing potential CCIEs every day. At the end of 2004, there were over 11,000 CCIEs, and the number is growing rapidly. Of all the CCIEs, over 500 hold more than one CCIE certification. The majority of CCIEs are located in Europe and North America. The number of Security CCIEs is over 400. To view the latest CCIE security numbers, visit http . Before you decide to take this step, you need to be aware of the challenges in front of you. You cannot hope to become a CCIE by simply buying a book or a series of books.

CCNP Practical Studies Routing

Henry Benjamin, CCIE 4695 1-58720-054-6 Available Now CCNP Practical Studies Routing provides hands-on preparation for the CCNP Routing exam. This book includes lab exercises and helps CCNP candidates and newly minted CCNPs apply their newly gained theoretical knowledge into working experience. Use this book within a live network or home lab, remote access labs, and some software simulated network environments.

Recommended Training Path for CCNA

Cisco recommends that you take two courses before you take the CCNA exam. The first, Internetworking Technology Multimedia (ITM), is a CD-based course that you can order directly from Cisco ) currently for 50. This course covers many of the protocol basics needed for CCNA. So, if you have taken or will take ICND, that's the best way to prepare for the CCNA exam. Reading the ITM CD will be helpful as well. But what if you took one of the older courses Or, what if you took the Cisco Networking Academy curriculum Or, what if you simply choose not to spend the money on an introductory course The final section of this chapter suggests a strategy for people from each background. First, an outline of the ICND course, shown in Table 1-3, should be helpful. Remember, although the CCNA exam is not a test on the ICND course, ICND is the course that most closely matches the CCNA topics.

CCIE Security Lab Exam

NOTE Although the focus of this book is to prepare you for the CCIE Security written exam only, you can find bonus material, such as this section, that helps start your preparation for the lab exam. Passing the written exam is the easier part of the CCIE Security certification journey. For the lab exam, your life needs to change dramatically, and you need to study on routers full time for at least 3 to 6 months. The good news is that the format of the lab exam has changed from 2 full days to 1 day. You are no longer required to troubleshoot a network (regarded as the true method to test a CCIE's ability to restore a network back to full IP connectivity) you are now required to configure more advanced features in a set number of Cisco IOS, PIX, and Catalyst devices. For example, basic Frame Relay, VLAN, VTP, and ATM configurations are now preconfigured for the candidate.

CCNA Voice Official Exam Certification Guide

Jeremy Cioara, CCIE No. 11727 Michael J. Cavanaugh, CCIE No. 4516 Kris A. Krake, CCIE No. 10229 CCNA Voice official exam certification guide Jeremy Cioara, Michael J. Cavanaugh, Kris A. Krake. 2007 Cisco Systems. Inc. All rights reserved, CCVR the Cisco logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems, Inc. Changing the Way We Work. Live. Play, and Learn is a service mark of Cisco Systems, Inc. and Access Registrar Aironet, BPX, Catalyst CCDA, CCDR CCIE. CCIP, CCNA, CCNP, CCSR Cisca the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press. Cisco Systems. Cisco Systems Capital, the Cisco Systems logo, Cisco Unity. Enterprise Solver, EtherChannel, EtherFast EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, ICS, IP TV Q Expertise, the iQ logoi iQ Net Readiness Scorecard, Quick Study, LightStream, Linksys, MeetingPlace, MGX, Networking Academy, Network Registrar Packet.

Sample CCIE Routing and Switching Lab II

This appendix is designed to assist you in your final preparation for the lab portion of the most popular CCIE certification to date, CCIE Routing and Switching (CCIE R&S). The following are some general guidelines typical of any CCIE lab examination Figure D-1 displays the sample four-router CCIE lab topology with Routers R1 through R4. The core of the network is connected to Frame Relay, with ISDN providing a backup mechanism between R2 and R3. You are required to configure the routers in Figure D-1 along with a Catalyst 3550 switch (not shown). Figure D-1 CCIE Lab Topology Figure D-1 CCIE Lab Topology A major difference between this lab and the one in Appendix C is that a point-scoring system is in place rather than time allocation. There are 100 points available for these exercises. For questions with a 0 point value, the feature is assumed knowledge and is typically preconfigured and not required in the real exam.

Why Should I Take the CCIE Routing and Switching Written Exam

The first and most obvious reason to take the CCIE Routing and Switching written exam is that it is the first step toward obtaining the CCIE Routing and Switching certification. Also, you cannot schedule a CCIE lab exam until you pass the appropriate written exam. In short, if you want all the professional benefits of a CCIE Routing and Switching certification, you start by passing the written exam. The benefits of getting a CCIE certification are varied, but here are just a few of the reasons Credibility for consultants and customer engineers, including the use of the Cisco CCIE logo The other big reason to take the CCIE Routing and Switching written exam is that it recertifies an individual's associate-, professional-, and expert-level Cisco certifications. In other words, passing any CCIE written exam recertifies that person's CCNA, CCNP, CCIP, CCSP, CCDP, and so on. (Recertification requirements do change, so please verify the requirements at Cisco.com.)

The Cisco Learning Network

Cisco provides a wide variety of CCNA Voice preparation tools at a Cisco Systems website called the Cisco Learning Network. The Cisco Learning Network includes Quick Learning Modules, interviews with Cisco's Portfolio Manager for Voice Certifications, documents that give you a sneak peek at what's included in the Instructor Lead Training Course, and blogs and discussion forums to help you on your way. To use the Cisco Learning Network, you do not need to have a registered login at Cisco.com but you can register as a member of the Learning Network. This will give you access to additional content. To register, simply go to http tinyurl.com 66l8qv and supply the required information. (You do not need to work for Cisco or a Cisco partner to get a login.) After you have registered, proceed to the Certifications area and look for the link to the CCNA Voice pages. Practice Configurations You must master configurations on various devices to pass the CCNA Voice exam.

Steps Required to Achieve CCIE Security Certification

The CCIE Security certification requires a candidate to pass two exams An 8-hour lab exam. The passing score is set at 80 percent. Historically, the lab exam was a full 2-day lab that changed October 1, 2001. All CCIE lab exam versions are monitored closely and adapted where necessary to conform to the CCIE program standards, which are not publicly available. This book contains supplemental material intended to help you prepare for the lab exam, but does not focus on it.

CCIE Routing and Switching Written Exam 350001

The CCIE Routing and Switching written exam, as of the time of publication, consists of a two-hour exam administered at a proctored exam facility affiliated with Pearson VUE (http www.vue.com cisco). The exam typically includes approximately 100 multiple-choice questions. No simulation questions are currently part of the written exam. As with most exams, everyone wants to know what is on the exam. Cisco provides general guidance as to topics on the exam in the CCIE Routing and Switching written exam blueprint, the most recent copy of which can be accessed from http www.cisco.com go ccie . Cisco changes both the CCIE written and lab blueprints over time, but Cisco seldom, if ever, changes the exam numbers. (Cisco changes the exam numbers of the associate- and professionallevel certifications when it makes major changes to what is covered on those exams.) Knowing that the content will change over time, this book includes Appendix C, CCIE Routing and Switching Exam Updates Version 1.0.

Cisco CCNP Routing Exam Certification Guide

Cisco CCNP Routing Exam Certification Guide Copyright 2000, Cisco Systems, Inc. All rights reserved. Access Registrar, AccessPath, Are You Ready, ATM Director, Browse with Me, CCDA, CCDE, CCDP, CCIE, CCNA, CCNP, CCSI, CD-PAC, CiscoLink, the Cisco Networks logo, the Cisco Powered Network logo, Cisco Systems Networking Academy, Fast Step, FireRunner, Follow Me Browsing, FormShare, GigaStack, IGX, Intelligence in the Optical Core, Internet Quotient, IP VC, iQ Breakthrough, iQ Expertise, iQ FastTrack, iQuick Study, iQ Readiness Scorecard, The iQ Logo, Kernel Proxy, MGX, Natural Network Viewer, Network Registrar, the Networkers logo, Packet, PIX, Point and Click Internetworking, Policy Builder, RateMUX, ReyMaster, ReyView, ScriptShare, Secure Script, Shop with Me, SlideCast, SMARTnet, SVX, TrafficDirector, TransPath, VlanDirector, Voice LAN, Wavelength Router, Workgroup Director, and Workgroup Stack are trademarks of Cisco Systems, Inc.

About the Ccna Intro Exam Certification Guide and Ccna Icnd Exam Certification Guide

As mentioned earlier in this introduction, you can take both the INTRO and ICND exams to acquire CCNA certification, or you can take a single CCNA exam. Because of the significantly expanded topics as compared with the previous CCNA exam, there was simply too much material for a single book. So, we simply created two books one for the INTRO exam and one for the ICND exam. The contents of the two books, however, were actually designed for both the single-exam and dual-exam audience. For those of you preparing just for the INTRO exam, you can read just this book. Similarly, if you have passed the INTRO exam and you want to study for the ICND exam, you can use just the other book. However, if you are studying for the CCNA exam, you can use both books, and alternate between reading different parts of each book to optomize your effort in preparing for the exam.

Cisco CCNA Exam 640507 Certification Guide

Wendell Odom, CCIE 1624 Cisco CCNA Exam 640-507 Certification Guide This book is designed to provide information about the Cisco CCNA 640-507 exam. Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. Copyright 2000 Cisco Systems, Inc. All rights reserved. Printed in the USA.

CCIE Professional Development Large Scale IP Network Solutions

CCIE Professional Development Large-Scale IP Network Solutions is a core preparation textbook for the CCIE Routing and Switching exam track. In addition to CCIE preparation, this book provides solutions for network engineers as IP networks grow and become more complex. The book discusses all major IP protocols in depth, including RIP, IGRP, EIGRP, OSPF, IS-IS, and BGP. It evaluates the strengths and weaknesses of each protocol, helping you to choose the right ones for your environments. Special sections address scalability, migration planning, network management, and security for large-scale networks. Router configuration examples, network case studies, and sample scenarios all help you put the information presented in the book to use.

Whats on the CCNA Exam

Every test taker would like to know exactly what is on the CCNA exam as well as the other Cisco certification exams. Well, to be honest, exactly what is on the exam is a very closely guarded secret. Only those who write the questions for Cisco and who have access to the entire question database truly know what is really on the exam. Cisco makes fairly general CCNA exam content available to the public at the Web site . CCNA certified professionals can install, configure, and operate LAN, WAN, and dial access services for small networks (100 nodes or fewer), including but not limited to use of these protocols IP, IGRP, IPX, Serial, AppleTalk, Frame Relay, IP RIP, VLANs, RIP, Ethernet, Access Lists. Well, a lawyer might have been involved in crafting that message. Including but not limited to is a telling phrase technically, anything is fair game. All of us would like to study and understand exactly the topics that are on the test.

The CCNA Certification Exams What Theres More than One Exam

For the first time since Cisco announced CCNA in 1998, the CCNA certification has an option for multiple exams. Before Cisco announced these latest changes around summer of 2003, to get your CCNA certification, you just passed a single CCNA exam. With this latest generation of the CCNA, you can either take a single exam to get your CCNA, or you can take two exams, with each of these exams covering a subset of the CCNA exam topics. Table I-1 lists the exams. Table I-1 CCNA Exam Names and Numbers A subset of the CCNA topics should be taken before the ICND exam A subset of the CCNA topics should be taken after the INTRO exam CCNA Exam So, you either take the CCNA exam or you take both the INTRO and the ICND exam to pass CCNA. The CCNA exam simply covers everything on both the INTRO and ICND exams. So, if you want to save some cash and you are confident that you are ready to answer questions across the whole range of topics for CCNA, you can take just the CCNA exam itself.

Recommended Training Path for CCNP and CCDP

The recommended training path for the Cisco CCNP 2.0 and CCDP 2.0 professional level certifications is as follows The CCNP then requires Cisco Internetworking Troubleshooting (CIT) as the final course. The CCDP requires Cisco Internetwork Design (CID) as the final course. The recommended training courses will give you the basics to pass the exams for the CCNP or CCDP track. Cisco's exams, however, will not necessarily correspond one-to-one with the curriculum of a given class. In essence, Cisco is not looking at the exams as a fact-stuffing event but rather as a gauge of how well you know and can use the technology. Figure 1-1 illustrates the training track for CCNP and CCDP as of September 2000. Figure 1-1 CCNP CCDP 2.0 Training Exam Track CCNP Prerequisites CCNA Certification CCNA Certification

CCIE Security Written Exam

The CCIE Security written exam uses the typical certification test format of asking multiple-choice questions with one or more correct answers per question. What makes some of the questions more difficult is that more than five answer choices are listed on some questions. This reduces the power of eliminating answers and choosing from those remaining. However, the number of required answers is given for each question. You might be required to give only one answer or select a couple of correct answers. Attempt to answer every question to give you the best chance of passing, even if you have to guess. The examination is similar to other Cisco certifications, albeit it is a little more difficult with many more in-depth questions.

Cisco Learning Network

Cisco provides a wide variety of CCNA wireless preparation tools at a Cisco Systems website called the Cisco Learning Network. The Cisco Learning Network includes Quick Learning Modules, interviews with Cisco's Portfolio Manager for Wireless Certifications, documents that give you a sneak peek of what's included in the Instructor-Led Training Course, and blogs and discussion forums to help you on your way. To use the Cisco Learning Network, you do not need a registered login at http www . cisco.com, but you can register as a member of the learning network. This gives you access to additional content. To register, simply go to https cisco.hosted.jivesoftware.com create-account.jspa and supply some information. (You do not need to work for Cisco or one of its Partners to get a login.) After you have registered, proceed to the Certifications area, and look for the link to the CCNA Wireless pages.

The New One Day CCIE Lab Exam

I was fortunate enough to talk to Lorne Braddock Sr., the manager of the CCIE program, about the move from a two-day test to a one-day test. Like many CCIEs, I had a knee-jerk reaction to the move. I was aware of the huge backload that Cisco was experiencing with people waiting to get into the lab in some cases, the waiting list was approaching a year long. Many Cisco partners required people to get certified to retain or gain a preferred partner status. For many Cisco partners, the revenue difference between a gold and silver partnership is in the millions. Another problem for Cisco and its customers was the difficulty in scheduling a two-day exam that you can get sent home early on. This not only costs time and money to Cisco's customers, but it also leaves many open lab slots. Moving to a one-day, 8 1 2-hour test resolved many of these problems, but the question remained what do you cut The program decided to enhance the Layer 1 or physical aspect of the written test.

Cisco Certified Security Professional

Professional level recognition in Cisco Certified Security Professional Cisco Certified Security Professional Cisco Certified Security Professional Recommended Training Through Cisco Learning Partners The figure above represents the Cisco Certified Security Professional (CCSP) certification path.

The Remote Access Exam and the CCNP and CCDP Certifications

The Remote Access exam proves mastery of the features used in larger corporate dial-in facilities and Internet service provider (ISP) operations. Skills required for CCNP and CCDP certifications include the ability to install, configure, operate, and troubleshoot remote access devices in a complex WAN environment. Specifically, the remote access skills required ensure that the CCNP or CCDP candidate can ensure minimal WAN costs to the customer or client using the Cisco IOS features. The target audience for CCNP and CCDP certification includes the following CCNAs who want increased earning power, professional recognition, job promotions, and so on A CCNP's training and experience enables him or her to accomplish the following

All About the Cisco Certified Network Professional and Design Professional Certification

The Cisco Certified Network Professional (CCNP) and Cisco Certified Design Professional (CCDP) certifications are the second level of Cisco certifications and are becoming popular as more incentives become available to both certification holders and their employers. Cisco has designed both the CCNP and CCDP certifications as evidence that an individual has completed a rigorous path of testing in the network arena. The CCNP and CCDP tracks require the candidate to be comfortable in advanced routing techniques, switching techniques, and dialup or RAS technology. In addition to those subjects, the CCNP must be able to, without a book, configure and troubleshoot a routed and switched network. The CCDP must demonstrate the skill to digest a vast quantity of user requirements and prepare a scalable design that fits the customer needs and requirements. The CCNP is a more hands on certification that involves testing for a variety of routing and switching skills.

Cisco Career Certifications Cisco Certified Security Professional

CCIE - Security I A CCIE - Security I A Recommended Training Through Cisco Learning Partners You are encouraged to join the Cisco Certification Community, a discussion forum open to anyone holding a valid Cisco Career Certification (such as Cisco CCIE , CCNA , CCDA , CCNP , CCDP , CCIP , CCVP , or CCSP ). It provides a gathering place for Cisco certified professionals to share questions, suggestions, and information about Cisco Career Certification programs and other certification-related topics. For more information, visit www.cisco.com go certifications .

Ccie Rs Written Exam Objectives

Table 1-1 lists the CCIE R&S exam objectives and the corresponding chapters in this book that cover those objectives. Table 1-1 CCIE R&S Written Exam Objectives Table 1-1 CCIE R&S Written Exam Objectives Table 1-1 CCIE R&S Written Exam Objectives (Continued) Table 1-1 CCIE R&S Written Exam Objectives (Continued) Table 1-1 CCIE R&S Written Exam Objectives (Continued) Table 1-1 CCIE R&S Written Exam Objectives (Continued) Table 1-1 CCIE R&S Written Exam Objectives (Continued) Table 1-1 CCIE R&S Written Exam Objectives (Continued)

And Advance Your Career Cisco Certified Network Professional CCNP

CCIE CCIE Recommended Training Through Cisco Learning Partners You are encouraged to join the Cisco Certification Community, a discussion forum open to anyone holding a valid Cisco Career Certification (such as Cisco CCIE , CCNA , CCDA , CCNP , CCDP , CCIP , CCSP , or CCVP ). It provides a gathering place for Cisco-certified professionals to share questions, suggestions, and information about Cisco Career Certification programs and other certification-related topics. For more information, visit

CCIE Security Written Exam Blueprint

Table I-1 lists the CCIE Security written exam blueprint topics and the corresponding chapters where you can find the material covered in this book. As you can see, the blueprint places the objectives into eight categories. The book covers all of these topics. This blueprint is a guideline for the type of content that is likely to appear on the exam. You can also find it at rity wr_exam_blueprint.html.

Overview of the CCIE Certification

CCIE is widely considered the industry's highest-level IT certification program, commonly referred to as the doctorate of networking. It equips candidates with excellent internetworking skills that are simply the best in the industry. CCIE certification was recently voted 1 by IT professionals in the CertCities.com annual survey, The Hottest Certifications for 2003a ranking attributed to the growing importance of certifications in a tight job market. The CCIE program is designed to help individuals, companies, industries, and countries succeed in the networked world by distinguishing the top echelon of internetworking experts. The program identifies leaders with a proven commitment to their career, the industry, and the process of ongoing learning. While individuals inevitably gain extensive product knowledge on their way to certification, product training is not the CCIE program objective.

Appendix C Ccie Preparation Tips

Becoming a Cisco Certified Internetworking Expert (CCIE) is a far cry from the read a book, take an exam process of some other industry certifications. You will be required to prove your expertise in a hands-on, notoriously difficult lab exam. While you must be intimately familiar with the Cisco configuration commands, the most difficult challenges of the lab are not Cisco specific instead, they test the depths of your understanding of switches, routers, and routing protocols. It is for this knowledge that CCIEs are recognized and sought out as proven internetworking experts. The structured creation of an internetwork involves four phases, and those same four phases are also useful for creating a structured preparation program for the CCIE lab. Design a personalized preparation program that meets your needs while fitting your schedule and resources. Talk to as many CCIEs as possible ask them about their own preparation programs. Find out what worked and what didn't work for them.

Appendix D Ccie Preparation Sample Multiprotocol Lab

This appendix is designed to assist you in your final preparation for the most widely sought after certification in the world today, CCIE (Routing and Switching). Today, many published books describe how to achieve CCIE, but in reality, no matter how many books you purchase, it all comes down to your level of hands-on experience. The strict nondisclosure agreement policed by Cisco ensures that candidates do not share any information about the lab content. Therefore, you'll know little about the lab content before your first attempt. In fact, the FBI has been involved in recent cases in which individuals have been jailed for selling information directly related to CCIE lab examinations. The CCIE team has approved a sample CCIE multiprotocol lab for inclusion in this book so that you can be aware of the level of difficulty you must prepare to encounter when attempting the CCIE lab.

CCIE Routing and Switching Exam Updates Version

Over time, reader feedback allows Cisco Press to gauge which topics give our readers the most problems when taking the exams. Additionally, Cisco may make small changes to the CCIE Routing and Switching exam blueprint. To assist readers with those topics, the authors create new materials clarifying and expanding upon those troublesome exam topics. As mentioned in the introduction to the CCIE Routing and Switching Exam Certification Guide, Second Edition, the additional content about the exam is contained in a PDF document on this book's companion website, at . Covers new topics when Cisco adds topics to the CCIE Routing and Switching written exam blueprint

Cisco Ccnp Tshoot exam topology

Philip Vancil, part of the exam development team , posted the TSHOOT Exam Topology on The Cisco Learning Network website last Tuesday. He notes that what am sic about to reveal is not part of some secret NDA , so it seems safe to assume it can be freely shared. From looking at the topology, however, I can say that I'm quite impressed. I did not expect the topology to be as extensive as it is. If you're reading this, you likely already know that there are some issues with cheating on the Cisco exams and a hands on troubleshooting exam is, in my opinion, a great way to help combat that. I welcome the troubleshooting exam though I'm not sure I quite agree with the removal of security and QoS topics from the CCNP curriculum as I am much better with hands on implementation than I am with simply learning theory. When I was teaching, there was, of course, lots of theory, but I always tried to supplement that as much as possible with hands on work.

The long road to the CCNP

A couple years ago, I decided to make an attempt at earning the Cisco CCNA certification. On March 11th, 2008, I went and took the ICND1 exam and passed with flying colors. Inspired by my achievement, I went back on March 19th and took the ICND2, thus earning the CCNA certification (my complete Cisco exam history is below, for the interested). Afterwards, still inspired, I decided I would work towards the CCNP certification. I amassed a rack full of networking gear in my home and began on the path towards the CCNP. After earning the CCNA, it took 10 months before I passed the first CCNP exam, the ISCW, on January 16th, 2009. Nine months later, on October 15th, 2009, I passed the switching exam, BCMSN. Six months or so ago, Cisco announced changes to the CCNP curriculum and declared that July 31st (a mere three days from now) would be the last day that the BSCI, BCMSN, ISCW, and ONT exams would be available. No big deal, I thought. I've got six months to finish.

How Language Study Enhances CCNA Exam Preparation

CCNA (Cisco Certified Network Associate) exam is an assessment administered by Cisco. Passing this test gives an individual an associate-level certification that lasts for a few years. However, taking this exam requires preparation, which involves endless hours of reading and practice. Besides this, many people have found a surprisingly effective method of preparation that involves learning a new language. Although this method feels unorthodox, it can have a huge impact on understanding IT and network-related issues. Furthermore, it can help you pass your CCNA exams while enhancing your communication skills. Keep reading this article if you are interested in how language study enhances CCNA exam preparations. In general, learning another dialect involves studying words and their meanings. Therefore, undergoing this process can enhance your vocabulary . On the other hand, many technical terms in IT and networking tend to have origins in various languages, including Greek and Latin.

CCNP Exam Topics

Carefully consider the exam topics Cisco has posted on its website as you study, particularly for clues to how deeply you should know each topic. Beyond that, you cannot go wrong by developing a broader knowledge of the subject matter. You can do that by reading and studying the topics presented in this book. Remember that it is in your best interest to become proficient in each of the CCNP subjects. When it is time to use what you have learned, being well rounded counts more than being well tested.

CCIE Practice Labs

The CCIE practice labs are designed to give you an accurate representation of what a CCIE lab exam actually looks like. Some labs are complete CCIE labs, which require hardware to support voice, ATM, and two Cisco 3550s others have less stringent hardware requirements. The labs are also designed to be easily modifiable to your own hardware requirements. We realize that everyone does not have access to ATM, voice, and 3550s therefore, every lab has different hardware requirements. Before each lab, a complete equipment list is provided and prestaging information is included such as the Frame Relay switch configuration, backbone router configuration, and so on. Use this information to model your own CCIE lab. There was some de bate during the creation of CCIE PSV1 as to whether to include the answers for the practice labs. Many people, myself included, thought that by providing the answers, people would focus more on matching the answers themselves than on practicing the lab.

CCNA Exam Topics

Interestingly, the CCNA (640-801) exam topics posted by Cisco are not simply the combination of the INTRO exam topics and the ICND exam topics. If you look closely, the CCNA exam topics match more closely to the ICND exam topics than they do to the INTRO exam topics. So, for those of you planning to take the single CCNA exam, what does that mean Well, for practical purposes, the CCNA exam covers all the topics covered on both the INTRO and ICND exams. However, the length of the CCNA exam does not allow Cisco to ask you about every possible fact. So, you should expect the CCNA exam to include questions that cover more advanced topics, many of which require that you know the more basic facts. For instance, rather than ask a question about how to do binary math, which is specifically mentioned for the INTRO exam topics, you might have to derive subnet numbers - which requires you to use binary math.

CCNA Got Me a Bonus

A couple of months ago, I decided to break down and take the Cisco CCNA certification exams which I had no problems with. I passed the 640-822 exam and then passed the 640-816 exam a week later. Just prior to the end of our fiscal year (June 30th), we have our annual performance evaluations which precede any raises we might receive on July 1st. A few days ago, I got my letter letting me know what my raise would be (we generally get 3 ) and I was happy to see a nice bonus for completing the CCNA. If I had known that I would be getting that I would have taken the tests a long time ago I have to say that the CCNA was well worth the time investment I put into it. It didn't cost me anything financially as work reimburses me for the certification exams. If you're interested in pursuing the CCNA certification, be sure to check out my new website, Free CCNA Labs.

Ethernet Switching Review

Before discussing the detailed configuration of the Cisco 3550, it's necessary to review some important technologies. The following sections briefly review VLANs, VTP, VLAN trunking, spanning-tree 802.1d, and port autonegotiation. If you have previously read CCIE Practical Studies,Volume I (CCIE PSV1), you might want to glance only at this section, because it is intended as a review. For a more comprehensive explanation of these and other Ethernet switching principals, refer to CCIE PSV1.

Switch Virtual Interface SVI

Aswitch virtual interface (SVI) is a logical interface that ties Layer 3 functionality, such as IP inform VLAN. The SVI, in turn, can be used for inter-VLAN routing, to fallback-bridge nonroutable protoco VLANs, and to represent the VLAN to a routing domain. By default, an SVI is created for VLAN 1 foi management. If you are familiar with the Cisco 2900XL 3500XL series switches from CCIE PSV1, a much like the interface VLAN 1 used for management. Unlike the previous switches, you can conf SVIs and a routing protocol to provide connectivity between the VLANs. To configure an SVI, aside single default, you must have the EMI software image installed on the switch.

Example 13 Configuring Default Routing on Catalyst 3550

CCIE PSV1 stressed avoiding use of VLAN 1 for user traffic. A personal design rule I use in the avoid VLAN 1 if at all possible. There are numerous reasons for this. VLAN 1 is the default VLA Catalyst switches and the native VLAN. Any switch added to the network will, by default, be in This le aves the network vulnerable to potential VTP, VLAN, and data corruption. Mono Spannir on 802.1Q uses VLAN 1 for its entire spanning-tree domain. The switch will also tag frames di on VLAN 1 depending on the encapsulation used. Some Catalyst switches enable you to clear ' from a trunk, whereas some will not this could force VLAN 1 to span the entire switched netw these reasons and more that aren't listed, I personally don't run production traffic or manager traffic on VLAN 1.

Network Based Intrusion Detection Systems

You will be forgiven for looking at this new blueprint objective and wondering what exactly is to be expected of a candidate taking the new CCIE Security written exam. This section unravels this objective and provides you with the best preparation possible to ensure that you pass this portion of the exam on your first attempt. Network-based intrusion detection has been defined by many security vendors, such as Cisco, which has defined IDS as a method of detecting an illegal packet within your network. Ensuring that IP packets and TCP segments are valid can be an enormous task in today's ever-evolving networks because all organizations need to be connected to the public domain, the World Wide Web. To effectively run e-commerce within an organization, the basic aim of the Cisco network-based IDS (NIDS) solution is to proactively detect network packets and segment what may be illegal and to alert the security team within the organization.

Do I Know This Already Quiz Rhl

An administrator notices a router's CPU utilization has jumped from 2 percent to 100 percent, and that a CCIE engineer was debugging. What IOS command can the network administrator enter to stop all debugging output to the console and vty lines without affecting users on the connected router

Organization of this Book

Each chapter then contains a Foundation Topics section with extensive coverage of the CCIE Security exam topics covered in that chapter. This is followed by a Foundation Summary section that provides more-condensed coverage of the topics and is ideal for review and study later. Each chapter ends with Q & A and Scenarios sections to help you assess how well you mastered the topics covered in the chapter. Finally, the book includes a CD-ROM with sample exam questions and other preparation resources. All of these tools are designed to help you assess your preparedness level and then teach you. Once you identify deficiencies, you should concentrate your studies on those areas until you feel comfortable with them. Chapter 1, General Networking Topics This chapter covers general networking technologies, including an overview of the OSI model, switching concepts, and routing protocols. The TCP IP model is presented and explained with common applications used in today's IP networks.

Scenario Configuring Dns Tftp Ntp and SNMP

No ip domain-lookup ip domain-name cisco.com ip host CCIE 131.108.1.1 ip host Router3 131.108.1.3 ip host Router2 131.108.1.2 ip host Router1 131.108.1.1 ip name-server 131.108.255.1 ip name-server 131.108.255.2 interface Ethernet0 0 ip address 131.108.1.1 255.255.255.0 c. The administrator could also type CCIE to reach the same IP address (131.108.1.1).

Additional Advanced Lab Topics No Solutions Provided

Presented here are some advanced CCIE Security questions with no lab solutions so that you may investigate and try to solve them on your own, just as you would have to do in the lab exam. These bonus CCIE Security lab topics are added because they are not covered in the main section of this chapter. Hopefully they will provide you with some example questions and help you discover your own exam techniques to help you achieve maximum success in the CCIE Security lab. In every CCIE lab exam that I have attempted, and I have been through many of them, I have found that a candidate must be capable of addressing topics they have not configured or studied prior to the lab in essence, you must be prepared to use the Documentation CD-ROM to help you past the topics you are not comfortable with. So in keeping with the high level of difficulty of any CCIE exam, here are some bonus advanced questions with an indicative point score you could expect in any CCIE lab exam.

About the Technical Reviewers

Jennifer DeHaven Carroll, CCIE No. 1402, is a principal consultant with Lucent Technologies. She has planned, designed, and implemented many large networks over the past 15 years. She has also developed and taught theory and Cisco implementation classes on all IP routing protocols. Jenny i s the coauthor of Routing TCP IP, Volume II, (Cisco Press, 2001) with Jeff Doyle and can be reached at jennifer.carroll ieee.org . Greg TiMett, CCIE No. 5231, is currently working toward his second CCIE in the Security track. He has recertified twice since achieving his first CCIE. Greg is a consulting systems engineer with Cisco Systems focusing on security, virtual private networks, and campus technologies. In his current role, he supports Cisco Systems engineers and account managers with their customer base and p resents these technologies to various audiences at Cisco seminars.

Example 32 Configuration of MSDP on Anycast RP Routers

MTDP peers with a TCP session and exchanges any new source active (TA) messages with all other peers. The commands listed are the minimum necessary to make MTDP operational. This minimum is listed here not to belittle the technology but because this theory is commonly oriented toward service providers ano not toward iypical enterosi ses. This topic, ho wever, has come under iucreasing scrutiny to those preparing for the CCIE Routing and Twitching lab.

Telephony Best Practices

This section covers some of the core recommendations made by the SAFE IP Telephony Security in Depth white paper, which can be viewed at http www.cisco.com en US netsol The CCIE Security written exam covers this subject only very lightly in fact, the lab portion of the exam does not even test VoIP best practices as of this writing. This section ensures that you

Example 867 Latte BGP Table Before nexthopself

Test the configuration using an appl i cation. To do this, make voice calls between the Chocolate and Latte routers. To configure VoIP on the Chocolate and Latte routers, create dial peers, add destination patterns and an IP address or physical port, and then dial from the phones. (For more information on VoIP configuration, refer to CCIE Practical Studies,Volume I.)Example 8-69 shows the voice configuration for the Chocolate router, andExample 8-70 shows the voice configuration for the Latte router.

About the Contributing Author

Scott Morris, CCIE No. 47b3, certified Cisco Systems instructor. Among several other certifications, Scott currently has four separate CCIE certifications (Routing and Switching, ISP Dial, Security, and Service Provider) and is working on his fifth (Voice). He travels the world teaching and consulting on various projects. To not become bored or stagnant, he has also started branching out into the Juniper Networks world (JNCIS currently and growing) for added consulting and training interests. His primary areas of interest and expertise are in security, IP telephony, cable modem networks, and advanced routing. When not traveling, he resides in Lexington, Kentuc key. At times, he has taug2t CCIE (Routing and Switching) boot camps for various companies, currently at IPExpert. He has contributed material to a few different books and has served as a technical editor on many others. He currently runs his own company Emanon.co it and markets as Ubnr-Gnnk.Nnt, too (http smorris.ubnr-qnnk.

Ciscos Certification Track

CCIE (Cisco Certified Internetwork Expert) CCIE (Cisco Certified Internetwork Expert) CCDP (Cisco Certified Design Professional) CCNP (Cisco Certified Network Professional) CCIP (Cisco Certified Internetwork Professional) CCNA (Cisco Certified Network Associate) CCDA (Cisco Certified Design Associate) Cisco CCIE Prepv1.0-Module1-5 The CCIE program helps individuals, companies, industries, and countries succeed in the networked world by distinguishing the top echelon of internetworking experts. The program identifies leaders with a proven commitment to their career, the industry, and the process of ongoing learning. While individuals inevitably gain extensive product knowledge on their way to certification, product training is not the CCIE program objective. Rather, the focus is on identifying those experts capable of understanding and navigating the subtleties, intricacies and potential pitfalls inherent to end-to-end networking regardless of technology or product brand.

Practice Lab

One of the key elements for success in passing the CCIE exam is time management. A well-planned approach will go a long way in assisting you to achieve this. The elements of perfection and accuracy will come with much practice. Do not be discouraged if you have found the previous labs difficult. Your aim should be to move on through these exercises, making improvements in your approach and identifying areas of development. The real CCIE Lab does not require you to do any cabling or IP addressing. LiB

You Failed

If you fail the CCIE Security written exam, don't worry about the result. You can still take advantage of the situation. While the test is fresh in your mind, jot down problem areas on a notepad (the sooner you make notes for yourself the better). Try to remember questions you felt less comfortable with and study those areas before taking the exam again. The CCIE Security written exam is not an easy exam to pass. In fact, this exam ranks among the toughest networking exams in today's certification market. If you really want to be a CCIE, a first-attempt failure should not discourage you. A failed attempt should encourage you to invest in some serious study time so that you can pass on your next attempt. A number of candidates have noted that the second attempt is much easier than the first. Remember that the reason Cisco Systems makes the written exam hard is to ensure that you are fully prepared for the challenging lab exam.

Scenario Solutions

The host name Routerl (not case sensitive) is mapped to 131.108.1.1 with the command ip host Router1 131.108.1.1. Also, the Cisco IOS command CCIE is mapped to the same name with the Cisco IOS command ip host CCIE 131.108.1.1. If you look at the IP address assigned to Ethernet 0 0, it is the local IP address. Therefore, if a user types Router1 or CCIE, they will be returned to the same router. The following sample display demonstrates this fact quit commands exit Telnet session and you return to the first Telnet connection on R1 Connection to router1 closed by foreign host R1 ccie Translating ccie Trying CCIE (131.108.1.1) Open Both DNS names, CCIE and Router1, are translated to the same IP address, 131.108.1.1.

Cisco Secure ACS

Although the CCIE Security written exam does not heavily test this application, it is tested in the lab portion, so you are highly encouraged to study Chapter 8, which has a detailed Cisco Secure ACS example and discusses how features such as user-based access are enabled.

Figure 12 End System Data Flow

Understanding a layered approach and packet flows is critical to being a good troubleshooter. That put all that theory stuff in toeir course s. If you don't know how things work correctly, how in the w know what is wrong En d system-to-end syste m Exchange and GroupWise messaging is the main share wrth stgdents in many of my classes. Take a look again at Figure 1-2 and then at Figure 1-3 encapsulation) to review the packet flow and layer operations. For more detail, refer to materials o CCNP from C i sco Peess and otheo pub liseers. o part i cu larly like Jeff Doyln's Flouting TCP IP, Volume think they belong on everyone's shelf.

Expand Your Professional Options and Advance Your Career

CCIE CCIE Recommended Training Through Cisco Learning Partners You are encouraged to join the Cisco Certification Community, a discussion forum open to anyone holding a valid Cisco Career Certification (such as Cisco CCIE , CCNA , CCDA , CCNP , CCDP , CCIP , CCVP , or CCSP ). It provides a gathering place for Cisco certified professionals to share questions, suggestions, and information about Cisco Career Certification programs and other certification-related topics. For more information, visit www.cisco.com go certifications .

User Datagram Protocol

The CCNA exam requires that you be able to compare and contrast the User Datagram Protocol (UDP) with TCP. UDP provides a service for applications to exchange messages. Unlike TCP, UDP is connectionless and provides no reliability, no windowing, and no function to ensure that the data is received in the order in which it was sent. However, UDP provides some functions of TCP, such as data transfer and multiplexing, and it does so with fewer bytes of overhead in the UDP header.

Using Linux to Connect to a Wireless LAN

If you or a user within the network that you are involved in is using the Linux operating system, you can certainly use it with a wireless network. Linux has both command-line and GUI interface-type tools for working with WLANs. The command-line tool is called iwconfig. It is similar to the ifconfig that you would use to work with Ethernet interfaces. Although this tool offers many capabilities, Cisco has decided that it is outside the scope of the CCNA Wireless certification. Still, you need to be able to enable a Linux-based device for WLAN access. To do this, you can use NetworkManager.

Four Steps to Answering IP Addressing Questions

You must master IP addressing and subnetting to succeed as a network engineer. To pass the CCNA exam, you must at least be able to answer a few questions about subnetting. For most networking jobs, the ability to think about IP addresses and quickly decipher the structure and meaning of the address is a prerequisite for the job. In this section, you will see two different examples worked out in great detail and three examples worked out with less detail. With these five examples, plus the extra practice in Appendix C, you will be able to master the process of answering the previous questions about any IP address. If you already can answer those questions about the five examples, you know plenty about IP subnetting for passing the CCNA exam Here are the examples

Modified Deficit Round Robin

MDRR is a queuing feature implemented only in the Cisco 12000 series router family. Because the 12000 series does not support CBWFQ and LLQ, MDRR serves in place of these features. Its main claims to fame are better fairness than legacy queuing methods such as priority queuing and custom queuing, and that it supports a priority queue (like LLQ). For the CCIE Routing and Switching qualifying exam, you need to understand how MDRR works at the conceptual level, but you don't need to know how to configure it.

IP Access Control List Review

A relatively deep knowledge of IP ACL configuration and use is assumed to be pre-requisite knowledge for readers of this book. In fact, many of the examples in the earlier sections of the book did not take the space required to explain the detailed logic of ACLs used in the examples. However, some reference information, as well as statements regarding some of the rules and practices regarding IP ACLs, is useful for general CCIE Routing and Switching exam study. Those details are presented in this section.

Math Operations Used to Answer Subnetting Questions

In this section, you will read about two key math operations that will be used throughout the discussion of answering CCNA addressing and subnetting questions. One operation converts IP addresses from decimal to binary and then back to decimal. The other operation performs a binary math operation called a Boolean AND.

Connection Oriented Versus Connectionless Protocols

Cisco expects CCNAs to be able to distinguish between error detection and error recovery. Any header or trailer with a frame check sequence (FCS) or similar field can be used to detect bit errors in the PDU. Error detection uses the FCS to detect the error, which results in discarding the PDU. However, error recovery implies that the protocol reacts to the lost data and somehow causes the data to be retransmitted. An example of error recovery is shown later in this section. In the context of previous Cisco official courses, reliable, error-recovering protocols were always defined as also being connection-oriented. In the current ICND course, part of the official Cisco CCNA training path, those references have been removed. If you are studying using an older ICRC or CRLS course book, pay particular attention to the comparisons made about connection orientation and error recovery in this book.

Network Address Translation

NAT translates, or changes, one or both IP addresses inside a packet as it passes through a router. (Many firewalls also perform NAT for the CCIE Routing and Switching exam, you do not need to know NAT implementation details on firewalls.) In most cases, NAT changes the (typically private range) addresses used inside an enterprise network into address from the public IP address space. For instance, Figure 4-6 shows static NAT in operation the enterprise has registered class C network 200.1.1.0 24, and uses private class A network 10.0.0.0 8 for the hosts inside its network.

Cisco Security Career Certifications

Recommended Training through Cisco Learning Partners Pre-requisite Valid CCNA certification Recommended Training through Cisco Learning Partners Pre-requisite Valid CCNA certification Recommended Training through Cisco Learning Partners Pre-requisite Valid CCNA certification

Global Knowledge Acquires Geotrain

Ranjbar (CCNP) is an instructor and senior network architect for Global Knowledge, Cisco's largest training partner. He is a Certified Cisco Systems Instructor (CCSI) who teaches the Cisco Internetwork Troubleshooting course on a regular basis. Born in Tehran, Iran, Amir moved to Canada in 1983 and obtained his Bachelors degree in Computing and Information Science (1988) and Master of Science degree in Knowledge Based Systems (1991) from the University of Guelph (Guelph, Ontario). After graduation, Amir developed software applications in the areas of statistical analysis and systems simulation for a number of institutes such as Statistics Canada, University of Waterloo, and University of Ottawa. Amir started his training career by joining Digital Equipment Corporation's Learning Services in 1995, and after a few years of working exclusively as a Microsoft Certified Trainer (MCSE, MCT), he decided to shift his focus to Cisco Systems' internetworking products.

Comparison of LAN Segmentation Using Bridges Switches and Routers

The CCNA exam tests your ability to compare networks that use bridges, switches, and routers to separate LAN segments. The basic workings of a bridge and a switch have already been covered in this chapter. To compare these three options, first routing logic is covered. Afterward, comparisons will be made among the three options.

Foundation Topics Novell IPX Concepts

Cisco requires a thorough knowledge of two protocol stacks for the CCNA exam TCP IP and Novell NetWare. Novell's NetWare protocol stack defines Internetwork Packet Exchange (IPX) as a network layer-equivalent protocol. Novell also specifies several routing protocols, with Novell RIP being the one covered on the CCNA exam. NetWare also defines the Service Advertisement Protocol (SAP), which is used by servers and routers to exchange information about servers, their locations, and the services they offer. R3 learned the routes to Network 3 and Network 4 because they are directly attached. The other four routes were learned through a routing protocol, which can be RIP, EIGRP, or NLSP. (NLSP is not covered on the CCNA exam.) Server 1 and Server 2 send RIP updates advertising networks 1000 and 1001, respectively. That is one reason why NetWare servers send RIP updates even if they have only one interface, as is the case with Server 1.

How Many Hosts and How Many Subnets

One reserved subnet, the subnet that has all binary 0s in the subnet field, is called the zero subnet. The subnet with all binary 1s in the subnet field is called the broadcast subnet and it also is reserved. (Well, in fact, you can use both these subnets on a Cisco router, but it is recommended that you avoid using them. On the exam, the right answer is that you do not use them hence the minus 2 part of the 2number-of-subnet-bits - 2 formula.) In fact, the courses upon which CCNA is based now use the term discouraged instead of reserved, meaning that although those two subnets can be used, you should avoid it.

Command Line Interface

Cisco uses the acronym CLI to refer to the terminal user command-line interface to the IOS. The term CLI implies that the user is typing commands at a terminal, terminal emulator, or Telnet connection. Although you can pass the CCNA exam without ever having used the CLI, actually using the CLI will greatly enhance your chances.

Extended IP Access Lists

Extended IP access lists are almost identical to standard IP access lists in their use. The key difference between the two types is the variety of fields in the packet that can be compared for matching by extended access lists. To pass the CCNA exam, you must remember all the items that an extended IP access list can check to make a match. As with standard lists, extended access lists are enabled for packets entering or exiting an interface. The list is searched sequentially the first statement matched stops the search through the list and defines the action to be taken. All these features are true of standard access lists as well. The matching logic, however, is different than that used with standard access lists and makes extended access lists much more complex. The second access list statement in each list 110 and 111 on Seville and Yosemite is trickier than you will see on the CCNA exam.

Exams Required for Certification

To certify for CCNA, a single exam is required Sylvan Prometric exam number 640-507. For CCDA, a single exam is required as well, but multiple exams are required for CCNP and CCDP. The exams generally match the same topics that are covered in one of the official Cisco courses, but in most cases and certainly on the CCNA exam more topics are covered on the exam than are in the course. Table 1-1 outlines the exams and the courses with which they are most closely matched. CCNA CCNA Exam CCNP Be cautioned that, while the exam coverage and course coverage are similar, there are no guarantees that you will pass the test if you know absolutely everything in the course. Cisco is moving more toward tying the certifications to technology, not to specific courses note that the exam names do not match the course names, as they previously did.

NAT Operation on Cisco Routers

InterNIC has assigned you the address 192.108.1.0 to 192.108.1-254 24 (This pool of NAT addresses is CCIE.) Now, for a more specific illustration, let's configure NAT on Router R1 in Figure 5.5, the NAT pool name is going to be CCIE (you can use any name). Let's assume that InterNIC has assigned you the Class C address of 192.108.1.0 24. Your service provider has also supplied you the unique address 131.108.1.1 24 to use on your serial connection. Listing 5.2 provides a sample NAT configuration for this setup. The listing assumes that your setup has an IP routing protocol that advertises the 131.108.1.0 24 and 192.108.1.0 24 IP networks. ip nat pool CCIE 192.108.1.1 192.108.1.254 netmask 255.255.255.0 ip nat inside source 1 pool CCIE interface e0

ISDN Encapsulation Options

Unfortunately, there is currently no method of configuring ISDN in a lab environment without the use of actual ISDN circuits or a costly ISDN simulator. Nonetheless, ISDN is a core topic in the CCIE routing and switching lab exam, and the only way to learn the topic is through a great deal of hands-on practice.

Network Layer Concerns with Frame Relay

Frame Relay is both similar to and a little different from LAN and point-to-point WAN links. These differences introduce some additional considerations for passing Layer 3 packets across a Frame Relay network. As a CCNA, you need to concern yourself with three key issues relating to Layer 3 flows over Frame Relay NOTE Although the CCNP exam, not the CCNA exam, covers such issues as dealing with overhead, a short example shows the significance of this overhead. If a router knows 1000 routes, uses RIP, and has 50 VCs, 1.072 MB of RIP updates are sent every 30 seconds. That averages out to 285 Kbps. (The math is as follows 536-byte RIP packets, with 25 routes in each packet, for 40 packets per update, with copies sent over 50 VCs. 536 * 40 * 50 1.072 MB per update interval. 1.072 * 8 30 seconds 285 Kbps.) Knowing how to tell the router to forward these broadcasts to each VC is important on the CCNA exam and, therefore, is covered later in the section Frame Relay Configuration.

Standard IP Access Lists

A wildcard mask defines the subset of the 32 bits in the IP address that must be matched. As a CCNA, you will be required to fully understand the use of the wildcard mask to match a subset of an IP address. Matching is performed by comparing an access-list command address parameter and the packet's source IP address. Mask bits of value binary 0 imply that the same bit positions must be compared in the two IP addresses. Mask bits of value binary 1 are wildcards the corresponding bit positions in the addresses are considered to match, regardless of values. In other words, binary 1s mean that these bit positions already match hence the name wildcard.

Using Secondary Addresses

As a CCNA, Cisco expects you to be comfortable and familiar with IP address planning issues. One such issue involves what to do when there are no more unassigned IP addresses in a subnet. One alternative solution is to change the mask used on that subnet, making the existing subnet larger. However, changing the mask could cause an overlap. For example, if 10.1.4.0 24 is running out of addresses and you make a change to mask 255.255.254.0 (9 host bits, 23 network subnet bits), an overlap can occur. 10.1.4.0 23 includes addresses 10.1.4.0 to 10.1.5.255 this is indeed an overlap with subnet 10.1.5.0 24. If subnet 10.1.5.0 24 already exists, using 10.1.4.0 23 would not work. Another alternative for continued growth is to place all the existing addresses in the mostly full subnet in another larger subnet. There must be a valid subnet number that is unassigned, that does not create an overlap, and that is larger than the old subnet.

Basic Switch Port Configuration

Example 1-1 shows the manual configuration of the speed and duplex on the link between Switch1 and Switch4 from Figure 1-3, and the results of having mismatched duplex settings. (The book refers to specific switch commands used on IOS-based switches, referred to as Catalyst IOS by the Cisco CCIE blueprint.)

VLSM Subnet Allocation

In some cases, VLSM is required or preferred when allocating addresses. VLSM is typically chosen when the address space is constrained to some degree. The VLSM subnet assignment strategy covered here complies with the strategy you may remember from the Cisco BSCI course or from reading the Cisco Press CCNP Routing certification books.

Pv6 Unicast Routing Protocols

The next two major sections of this chapter explore the details of the two IPv6 unicast routing protocols covered in the CCIE Routing and Switching qualification exam blueprint OSPFv3 and EIGRP for IPv6. These routing protocols have a lot in common in terms of their Cisco IOS configuration. It is worth mention here that RIPng, which was removed from the CCIE Routing and Switching qualification exam blueprint at version 3, also shares many of these common configuration concepts.

Cisco Icons and Symbols

You are encouraged to join the Cisco Certification Community, a discussion forum open to anyone holding a valid Cisco Career Certification (such as Cisco CCIE , CCNA , CCD A , CCNP , CCDP , CCIP , or CCSPTM ). It provides a gathering place for Cisco certified professionals to share questions, suggestions, and information about Cisco Career Certification programs and other certification-related topics. For more information, visit e.html.

Comparisons Between Cisco 3550 and 2950 Switches

Cisco includes the 2950 series switches in most examples used for the CCIP QoS exam, but the CCIE Routing and Switching lab includes the 3550 switch. Cisco is not specific about any particular switch models to expect on the CCIE Routing and Switching written exam. As a result, it is useful to compare the QoS features of the two switches. Table 15-11 summarizes the key differences, with some additional explanations following the table. (The comparisons listed here assume the Enhanced software image is used on both models of switches.)

The TCPIP and Net Ware Protocols

Two of the most pervasively deployed protocols are TCP IP and Novell NetWare these also are the two key protocol architectures covered on the CCNA exam. TCP IP and NetWare are covered in much more detail in the upcoming chapters. As Figure 3-6 illustrates, the IP and IPX protocols most closely match the OSI network layer Layer 3. Many times, even on the CCNA exam, IP and IPX will be called Layer 3 protocols. Clearly, IP is in TCP IP's Layer 2, but for consistent use of terminology, it is commonly called a Layer 3 protocol because its functions most closely match OSI's Layer 3. Both IP and IPX define logical addressing, routing, the learning of routing information, and end-to-end delivery rules.

Lab 14 Configuring Frame Relay Networks Traffic Shaping Ospf DlswLLC2Part II

It's possible that the CCIE practical lab might include tasks involving the configuration of Cisco voice-capable routers for voice-over solutions (that is, voice over Frame Relay, Voice over IP and Voice over ATM). The purpose of this chapter is to give you enough information to successfully complete these configuration tasks. This chapter is not intended to be the be all, end all for information regarding telephony and voice-over solutions. Many good publications and Cisco classes are available to the general public that can fill that information void. I highly recommend Cisco Voice over Frame Relay, ATM, and IP and Voice over IP Fundamentals from Cisco Press, and any telephony or voice-related classes from a Cisco certified training partner.

Standards Bodies and Incident Response Teams

Examples of intruders actually overcoming network security include the famous Barclay Bank attack in July 2001, where the company's home page was defaced. The New York Times website was altered in September 1998. In February 2000, Yahoo also came under attack. In response to attacks like these and the increased concern brought about by them, Cisco Systems decided to release a new CCIE Security certification.

More Products