MCSE World
Everything you need for your Microsoft certifications...MCITP, MCTS, MCSE, Architect, Master and more!
 

Welcome to the MCSE World forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

1. We will remove new users that have 0 posts after 1 Month - so make sure you post a RELEVANT TO THE FORUM POST as soon as possible. Additionally after 18 months users with less than 5 posts will be removed.

2. The private message system is only available to members that have placed more than 3 valid posts - this is to prevent PM spamming.

3. The "Infocenter " along the top menu includes Book Reviews etc and is located in a separate section to the "General Forums" area.

- Administrator

Go Back   MCSE World > Certification Discussion > Non-Microsoft Certification Discussion
Login Register Site Rules Home Today's Posts Forums:  Home | List Donate Arcade InfoCenter Search Mark Forums Read

Reply
 
Thread Tools Search this Thread Display Modes
Old 02-17-2007, 01:20 AM   #1
Comblues
Windows NT 4.0
 
Join Date: Jan 2007
Posts: 274
Thanks: 30
Thanked 31 Times in 19 Posts
How to become a CCIE by Darby Weaver

I'll assume you have passed the CCIE Written Exam, and
if so have a certain familiarity with most topics that
are on the lab.

1. Go to cisco.com/go/ccie and take a look around
there - you will find the CCIE Lab Outline among other
things.

2. If you decide to go with a vendor, there are
several and since you got this far, you probably are
quite proficient with using search tools - this forum
has answered this question at least hundred if not a
thousand times already and the answers have not really
changed that much over the years and no matter how
many times asked.

I will tell you that currently, I myself have had good
experience with all vendor workbooks (yep - I have
used them all if nothing else than for additional
reading material), and I am going to instead point you
to another direction - first.

Not that you cannot just totally blow me off and think
I am a bit insane for suggesting you actually read the
books, do some real exrecises, and gain additional
insight before asking the vendors to simply fill your
head with concepts, terms, tips, tricks and valuable
advice that you are probably not yet ready to
comprehend yet. And no offense is intended - none at
all.



Since you are new, go to lulu.com and search for CCIE,
you will find Tom Larus, he offers a free guide to the
CCIE Lab. It is dated and is not quite up to date,
but you owe it to yourself to have a look and it is
free so it won't hurt to look.

Here is the specific link:

http://www.lulu.com/browse/search.ph...archFamil y=0

Watch the wrap.

Not to insult but if you search lulu.com for CCNA, you
might also find CCNA - Learning by Doing.

http://www.lulu.com/browse/search.ph...archFamil y=0

So either way you can download free or purchase a
printed copy for easy reading.

I would advise starting here first. Get a feel for
things.

Now that you have read these and hopefully done these
exercises and got into the groove of expectations.

Go to ebay.

Perform a search on CCIE. Look for a guy named Matt
Weber.

He offers a quick CCIE RS lab Outline - perhaps
150-200 pages or so that he will send you a print copy
of.

Nice package with a lot of experience and practical
advice for a little pocket change.

Again, I'm going to hep you out:

http://cgi.ebay.com/CCIE-Lab-Study-G...QQcmdZViewItem

Now I have found the following items to be invaluable
and each of the vendors in question will reference you
to them as well - so I'll save you the trouble and
tell you now.

1. InternetworkExpert.com - Tons of good and free
links and tips on their site - NTP, FRTS, and Subnet
Mask Calculations come to my mind - but there is a lot
more there for free and available just for stopping
by. - By the way the three I just mentioned to you
are probably worth at least 8-9 points on your lab
whenever you go.

2. Netmasterclass.com - they have a wealth of papers
on their site and there are probably 20-30 pdfs freely
available for your usage and perusal - take a look and
enjoy the free scenery. - Things like Multicast,
Native VLAN, Redistribution, BGP topics, RIP, etc.
stand out like a sore thumb and will likely serve you
well in the lab - 10-12 points or so.

3. IPExpert.com - Join get an account - take
adavantage of the CCNP and CCIE eScnearios - here you
will find a wealth of knoweldge freely available. I'd
say you can round up at least another 10-12 points not
covered anywhere up above or below. So get them while
they last.

4. CCBootcamp.com - look around they might refer you
to their Public FTP Site and if you are keen enough to
find it, you will also have found a wealth of items
that you may want to peruse including some current and
relevant CCIE Advice and lots of other freebies as
well - Frame Relay Setup is there as I recall - just a
lot of good overall and general info. I'm sure a
careful eye can find some items that will save some
pitfalls later.

5. http://www.cisco.com/univercd/home/home.htm - Make
it your homepage. Bookmark it. Learn it, Live it, Eat
it, Sleep it, and I even want you to be like Alice in
Wonderland and dream it.

Every vendor will point you here - recall what I told
you about searching, I want you to use this every time
you have a problem, a doubt, a concern, etc. If you
see a table, find it in here. Regular Expressions -
they are here and I want you to tell me where.

Got it. No forgivemess if you pass this one up.

I'll be you at least 21 point in your lab are going to
be in here somewhere and you get this resource while
you are taking the lab.

It is your best friend - get the meet and greet over
with.



=======================

Now of you need gear or lab time - Ebay Rulez!

So take a moment and look before you "Buy-it-Now" and
you'll do quite well.

I do advise you consider rack rental vs. rack
ownership since if you do the math. Rack Rental may
be more affordable.

======================

Finally, about 3 months later...

You are now ready to but some books, allow me to help
you in your selection - recall you are not yet ready
for full-scale labs yet.

Cisco Press - TCP/IP Volume I - Doyle - Why not save
frustration and start right here. There are enough
labs and every vendor will refernce Doyle - but if you
are smart you have already been here and done that.

Cisco Press - Cisco Press - Frame Relay Switching -
Take a moment - buy the book do the practicals and now
you own a nice layer 2 topic and FRTS as well.

Cisco Press - LAN Switching - Kennedy Clark - Again,
every single vendor will point you here - save
yourself some time and read it till you know it - 1x,
2x, 3x etc.

At this point, you are a very well-armed consumer and
you are pretty savvy about IGP's, Frame Relay, and
Switching topics - even FRTS and some queueing
techniques.

Now, I ask you to think about where you are and what
you need next?

So why not consider Dr. Parkhurst, after all he is or
was a CCIE Lab Proctor and did add a couple of books
to the selection list.

Cisco Press - OSPF

Cisco Press - BGP

Cisco Press - Troubleshooting Routing Protocols comes
next. The guys at TAC did some nice work here and you
can benefit for your lab as well.

Cisco Press - TCP/IP Volume II - You loved Vol I (2nd
edition), and now you will love Volume II - maybe even
more. Again all your favorite vendors will suggest
this one as well.

So by now you have most of your topics well under
control - but wait there is more:

1. QoS - Cisco Press has a nice offering by Wendell
Odom. Take a look - lots of goodies.

2. IPv6 - Cisco Press has two offerings here that are
very worthwhile.

3. Multicast - Allow me to point you again to Dr.
Parkhurst - this time the book is out of print and the
publisher is McGrawhill - not the latest information
in some regards, but an excellent primer. May I
suggest half.com - might cost you $5.00-$10.00 with
shipping.

4. BGP - Cisco Press - Halabi and there is a BGP
Design offering as well. If you are going to buy one,
why not buy them both.

5. Cisco Press - Practical Studies v1/v2 by Karl Solie
- out of date but hey - it is Cisco Press and it is a
good structure to 90% of the topics and might be cheap
on half.com.

6. CCIE R&S Labs - Cisco Press - 6 more labs - out of
date... But who is counting. More insight and
"wording" from the people who love to torture you most
- you guessed it and Gorito is the author of this
offering.

====================================

Now my friend you are 6-12 months into your studies,
you have read a small library and you might be ready
to look at our favorite vendors.

You are going to read and practice the technologies at
least a little bit before you make a major investment
into bootcamps and lab workbooks, aren't you?

I think you will also have earned a certain respect
from the vendors when you either meet them in person
or confer with them through this list.


I've given a lot of advice for free - like
groupstudy.com and other such forums.

Take it for what it is worth. I don't think anyone is
going to bash me too badly for this one.

Others will have their preferences, but since my
preferences for vendors is getting to the point where
I know them all by name, CCIE number, and geographic
boundary - I might be biased. I also am a customer of
all of them.

But you asked not which vendor but how to startup.

I gave you an answer.

Others may differ, but I did give you a fair answer
that is probably worth something if used wisely.

And I know I left off a few things here and there in
terms of references.

But you are apparently starting fresh - explore
everyone before you commit your cash and loyalty to
one or another.

Also, use Google.com

Stick CCIE in their - you might be surprised at what
you might find.

So good luck and once you are a bit more primed,
educated and ready, you will be able to make an
informed decision - you will have visited each of the
four major vendors on this list and you will probably
be swayed one way or another based on their offerings
and what you have red on their respective sites.

If you are like me, you might buy them all and become
the UBER-CCIE-BUYER...

Or you may decide you to only pick one or two.

Enjoy the journey...
__________________
CCNP / CCDP / CCSP / CCVP
Sniffer Certified Master

MCSE/MCT with specializations

CCIE RS Candidate (Final lab attempt coming up...)
Sr. Network Engineer
  Reply With Quote
The Following 8 Users Say Thank You to Comblues For This Useful Post:
BrainBeacon Michael (02-17-2007), Headhunter (02-17-2007), kaylark (02-26-2009), snoopy51 (02-17-2007), supag33k (03-18-2007), Tinus1959 (02-20-2007), username (02-18-2007), vincci8 (03-10-2009)
Old 02-17-2007, 01:25 AM   #2
Comblues
Windows NT 4.0
 
Join Date: Jan 2007
Posts: 274
Thanks: 30
Thanked 31 Times in 19 Posts
Re: How to become a CCIE by Darby Weaver

And just to qualify my own trials and tribulations - here is my humble testing history and yes - I have failed more than one in my time and probably will fail a lot more before it is over.

I have also failed the CCIE RS Lab twice last year and hopefully will pass on third attempt this year.

In addition to this set of exams scores from my Cisco Certification Profile, I also have taken passed or failed an entire battery of exams designed for their Sustaining Engineer Program and their Cisco Global Product Specialist qualification exams.

In short, I've been through a lot with Cisco since about 1999 or so and look forward to going the rest of the way.

Here's a snapshot of my progress:
=========================

Cisco Professional and Cisco Specialist Exams

Exam Exam Name Date Taken Location Grade Related Certification
642-871 ARCH 12-Feb-2007 200049893 P CCDP
642-444 CIPT-4.x 07-Feb-2007 200049893 F CCVP, CS-CIPCSS
642-432 CVOICE 07-Feb-2007 200049893 P CCMES, CCVP, CIPTES, CS-CIPCSS, CS-CRMCS
642-532 Implementing Cisco Intrusion Prevention Systems - IPS 03-Jan-2007 200049893 P CCSP, CS-CIPSS, ISSP
640-861 DESGN 02-Jan-2007 200049893 P CCDA10
642-513 Securing Hosts Using Cisco Security Agents - HIPS 02-Jan-2007 200049893 P CCSP, ISSP
642-531 CSIDS 03-Jan-2006 200049893 F CCSP, CS-IDSS, ISSP
642-521 Cisco Secure PIX Firewall Advanced 27-Dec-2005 200049893 P CCSP, CS-CFWS, ISSP
642-871 ARCH 15-Nov-2005 200049546 F CCDP
642-541 CSI 15-Nov-2005 200049546 P CCSP
642-161 IP Contact Center Express Implementation 14-Nov-2005 200049546 P CS-CIPCCES
642-104 UCSE exam 09-Nov-2005 200049546 P CS-CUSS
642-052 Routing and Switching Specialization 29-Apr-2005 200049893 F CARLSS, CS-CARLSS
640-861 DESGN 29-Apr-2005 fl110 F CCDA10
642-891 COMPOSITE 21-Feb-2005 200049893 P CARLSS, CCDP, CCIP, CCNP, CS-CARLSS
642-831 CIT 14-Feb-2005 200049893 P CCNP
642-831 CIT 31-Jan-2005 fl110 F CCNP
642-891 COMPOSITE 26-Jan-2005 200049893 F CARLSS, CCDP, CCIP, CCNP, CS-CARLSS
642-821 BCRAN 26-Jan-2005 200049893 P CCNP
640-801 Cisco Certified Network Associate 17-Jan-2005 fl79 P CCNA
350-001 CCIE Routing and Switching 14-Dec-2004 fl110 P
9E0-441 CIPT 08-Oct-2003 fl138 F CCVP, CS-CIPCSS
9E0-402 CIPT Cisco IP Telephony 26-Nov-2001 fl100 F CCVP, CS-CIPCSS, KBCPSCIPT
640-905 Multicast and Quaility of Service 19-Nov-2001 fl100 F CCIPC, CCIPCN, CCIPDSLN, CCIPME, CCIPMP, CCIPPT, CCIPS
640-442 Managing Cisco Network Security 19-Nov-2001 fl100 P CCNP-S, CCSP, CSS1, ISSP
350-001 CCIE Routing and Switching 29-Sep-2001 fl10 P
640-025 Cisco Internetwork Design 08-Sep-2001 fl10 P CCDP
640-025 Cisco Internetwork Design 31-Aug-2001 fl10 F CCDP
350-022 CCIE DSL 31-Aug-2001 fl10 F
640-506 CCNP - Support 18-Aug-2001 fl10 P CCNP
640-505 CCNP - Remote Access 17-Aug-2001 fl10 P CCNP
640-504 Switching 16-Aug-2001 fl10 P CCDP, CCNP
640-503 Routing 15-Aug-2001 fl10 P CCDP, CCNP
640-900 Building Scalable Cisco Internetworks 04-Aug-2001 fl10 F CCDP, CCIP, CCIPC, CCIPCN, CCIPDSLN, CCIPME, CCIPMP, CCIPPT, CCIPS, CCNP
640-441 Designing Cisco Networks 30-Jun-2001 fl10 P CCDA10
640-507 Cisco Certified Network Associate 20-Dec-2000 2555 P CCNA
640-407 CCNA 21-Jul-2000 fl17 P CCNA



Cisco Sales Experts

Exam Exam Name Date Taken Location Grade Related Certification
646-521 Routing and Switching Specialization Exam for AMs 29-Apr-2005 fl110 P CARLSSS, CS-CARLSSS, RSSEA
SE0-260 Cisco Product Solutions Essentials IPT 09-May-2002 ? F CSE-CPSEIPT
SE0-260 Cisco Product Solutions Essentials IPT 02-May-2002 ? F CSE-CPSEIPT
SE0-259 Wireless LAN for SE's and FE's v2.0 29-Nov-2001 ? P CTE-WLSESFES
SE0-259 Wireless LAN for SE's and FE's v2.0 16-Nov-2001 ? F CTE-WLSESFES
SE0-225 Cisco Sales Essentials: Enterprise for Account Managers v3.0 30-Sep-2001 ? P CSE-EAM
SE0-223 Cisco Sales Essentials: Small-to-Medium Business v2.0 29-Aug-2001 ? P CSE-SMB
__________________
CCNP / CCDP / CCSP / CCVP
Sniffer Certified Master

MCSE/MCT with specializations

CCIE RS Candidate (Final lab attempt coming up...)
Sr. Network Engineer
  Reply With Quote
Old 02-17-2007, 01:34 AM   #3
Headhunter
Windows Server 2003
 
Headhunter's Avatar
 
Join Date: Feb 2005
Location: New Zealand
Posts: 869
Thanks: 3
Thanked 80 Times in 45 Posts
Re: How to become a CCIE by Darby Weaver

yup been there done that, my 2 failures were beta exams

Cisco Professional and Cisco Specialist Exams Exam Exam Name Date Taken Location Grade

Related Certification
642-414 IPTD 19-Dec-2006 bl3 P CS-CIPTDS
642-071 CUDN 15-Dec-2006 bl3 P CS-CUDS
350-001 CCIE Routing and Switching 12-Dec-2006 blh P
642-642 QOS 07-Nov-2005 47541 P CCIP, CCMES, CCVP, CIPTES, CS-CIPCSS, CS-CIPTDS, CS-CIPTOS
642-691 BGP + MPLS 31-Oct-2005 nzb P CCIP
642-541 CSI 23-Mar-2005 nzh P CCSP
642-531 CSIDS 21-Mar-2005 nzb P CCSP, CS-IDSS, ISSP
642-511 Cisco Secure Virtual Private Networks 01-Mar-2005 nzk P CCSP, CS-VPNS, ISSP
642-521 Cisco Secure PIX Firewall Advanced 18-Feb-2005 nzd P CCSP, CS-CFWS, ISSP
642-501 SECUR 10-Feb-2005 nzb P CCSP, CS-CFWS, CS-CIPSS, CS-IDSS, CS-VPNS, ISSP
642-801 BSCI 07-Feb-2005 nzb P CARLSS, CCDP, CCIP, CCNP, CS-CARLSS
642-811 BCMSN 21-Jan-2005 nza P CCDP, CCNP
642-577 Wireless LAN for System Engineer 17-Jan-2005 nza P CS-CWLDS
642-582 Wireless LAN for Field Engineers 14-Jan-2005 nza P CPASS, CS-CWLSS, CTE-WLFES
640-801 Cisco Certified Network Associate 18-Nov-2004 nza P CCNA
640-801 Cisco Certified Network Associate 05-Nov-2004 nzb P CCNA
642-891 COMPOSITE 07-Apr-2004 nzm P CARLSS, CCDP, CCIP, CCNP, CS-CARLSS
350-001 CCIE Routing and Switching 22-Mar-2004 nzm P
642-642 QOS 23-Feb-2004 nzg F CCIP, CCMES, CCVP, CIPTES, CS-CIPCSS, CS-CIPTDS, CS-CIPTOS
350-001 CCIE Routing and Switching 19-Apr-2002 nz20 F
640-025 Cisco Internetwork Design 19-Jun-2001 nz20 P CCDP
640-441 Designing Cisco Networks 18-Apr-2001 nz20 P CCDA10
640-506 CCNP - Support 12-Apr-2001 nz20 P CCNP
640-505 CCNP - Remote Access 09-Apr-2001 nz20 P CCNP
640-504 Switching 16-Mar-2001 nz20 P CCDP, CCNP
640-503 Routing 02-Mar-2001 nz20 P CCDP, CCNP
640-407 CCNA 14-Jul-2000 nz20 P CCNA

Cisco Sales Experts
Exam Exam Name Date Taken Location Grade Related Certification
646-227 Lifecycle Services Advanced IP Communications 26-Dec-2006 bl3 P
__________________
Koen
CCSI #30501 CCNP CCIP CCVP CCSP CCDP Cisco Advanced Wireless LAN Field Specialist Cisco Unity Design Specialist Cisco IP Telephony Design Specialist JNCIS-ES JNCIA-ER JNCIA-EX MCSE MCSA:Messaging

Hello, mother. I come bearing a gift. I'll give you a hint. It's in my diaper and it's not a toaster - Stewie Griffin

Last edited by Headhunter : 02-17-2007 at 01:35 AM.
  Reply With Quote
Headhunter was thanked for this great post by:
DarbyWeaver (06-02-2007)
Old 02-17-2007, 01:42 AM   #4
Comblues
Windows NT 4.0
 
Join Date: Jan 2007
Posts: 274
Thanks: 30
Thanked 31 Times in 19 Posts
Re: How to become a CCIE by Darby Weaver

So I guess what I'll try to do here is share with you some tips, some tricks, some techniques, that I have learned over the years and am still learning to become a CCIE and possibly to function as a more effective Network Engineer, Administrator, Analyst, Specialist, Contractor, or Manager as well.

If you think anything is helpful or wish to comment - please chime in, I would be delighted to know that someone is gaining from these blogs. I post in a few places and I'll have to play catch up here.

However, I am currently reviewing all of my strategies, tactics, and approaches to taking the lab and I do need to organize them and find them in one place.

I will tell you last year my graded score for the CCIE Lab Averages were running 54, 57, or 61 or so overall - I took the lab twice and failed.

No surprise when you remember that I only took one graded lab that surpassed 80 at the time and only 2 scores in the 70's or so.

Walk with me, if you will, and let's see where I am, what I do, and how I fare or progress/digress, as I am nearing the end of this journey.

For all we know, it may take me more than this year to finish this walk. However, I will get no closer if I do not proceed down that path however difficult it may appear.

So have I got your attention yet?

More to come, but it is 3:41am in my world and I've been busy all night.

Got three CCIE Practice Labs as a personal goal this very weekend.

Let's see if I make it - these are ungraded.
__________________
CCNP / CCDP / CCSP / CCVP
Sniffer Certified Master

MCSE/MCT with specializations

CCIE RS Candidate (Final lab attempt coming up...)
Sr. Network Engineer
  Reply With Quote
Old 02-17-2007, 01:51 AM   #5
Comblues
Windows NT 4.0
 
Join Date: Jan 2007
Posts: 274
Thanks: 30
Thanked 31 Times in 19 Posts
Re: How to become a CCIE by Darby Weaver

Yes, I have mostly everything for each CCIE Track - Audio / Video / Labs / Books etc.

I have a full lab for 4 tracks - RS / SP / SEC / Voice

I have a running subscription with each provider - they got my financials.

I've been to NMC-1 once and NMC-2 twice.

Took the CCIE Accessor last year too.

Did the IE COD on my own - took like 4 weeks or so.

Took the Remote CCIE RS Mock Labs with the Brians at InternetworkExpert.

I'm in the game.

I'm going to the Heinz Ulm CCIE RS Mock Lab Workshop in Denver on March 16-25.

I didn't pack light.

And if you have had a chance to read my "Intro" you may have noticed that I am not exactly a light reader.

Even when I travel to go to a CCIE Bootcamp, I bring about 30-40 pounds of notes and books, and yep - I love pencils, pens, and paper for my exhaustive note taking.

I'm the Sudent from Hell, but then I was once accepted as to be a part of the Navy Nuclear Science Program - and to think I dropped out back then cause I thought I actually wanted a life...

If the me then, could see the me now...

Nuke school was nothing like this...

__________________
CCNP / CCDP / CCSP / CCVP
Sniffer Certified Master

MCSE/MCT with specializations

CCIE RS Candidate (Final lab attempt coming up...)
Sr. Network Engineer
  Reply With Quote
Old 02-17-2007, 01:55 AM   #6
Comblues
Windows NT 4.0
 
Join Date: Jan 2007
Posts: 274
Thanks: 30
Thanked 31 Times in 19 Posts
Re: How to become a CCIE by Darby Weaver

I'm debating where to spend my next two weeks of vacation - China or perhaps Denver or Chicago? Or just stay home and study.

There is a CCIE Voice 2 week program in Las Vegas I am interested in.

And I guess we are scheduled for 2 weeks or so of training at work - probably visit InternetworkExpert in person or combine it with a week of vacation and try to visit Heinz for the "Three-Weeks from Hell" experience of a lifetime...

CCIE by infusion - since your brain might just die after 3 weeks of no sleep in his legendary classes.

But then I sleep only 3-4 hours a night anyway...

Maybe I was born for his bootcamp...
__________________
CCNP / CCDP / CCSP / CCVP
Sniffer Certified Master

MCSE/MCT with specializations

CCIE RS Candidate (Final lab attempt coming up...)
Sr. Network Engineer
  Reply With Quote
Old 02-17-2007, 03:00 AM   #7
Comblues
Windows NT 4.0
 
Join Date: Jan 2007
Posts: 274
Thanks: 30
Thanked 31 Times in 19 Posts
Re: How to become a CCIE by Darby Weaver

Tonight, I had the personal goals of putting to bed just two issues that have been thorns in my side and that I have consistently lost points for on my practice labs.

1. Computing Access-Lists and Wildcard Pairs (http://www.internetworkexpert.com/re...s/01700370.htm)

2. Frame Relay Traffic Shaping (http://www.internetworkexpert.com/re...s/01700368.htm)

Both of these items, though I can do them on the job daily without much problem today, have caused me severe issues in the past.

Although, I cannot say what appears on the real labs, by virtue of the NDA, I will tell you that every vendor out there will advise you to master these two topics right away.

Better yet, create a few exercises and do them every day.

You should be able to perform these simple metrics on the fly, in the shower, or between ordering drinks at the restauraunt and the appetizer.

I mean you need to get this worked out.

I think I can do it on the fly these days, but since last October and last June, last May, last April, last March, and even last January, I was suffering severe stagefright or something, I have promised myself, not this March...
or hereafter.

So, if I'm not being clear enough - you have to know it. If you really want to be CCIE, these formulas have to be stuck in your mind, if you have to have them laser embedded on your eyelids...

Now let's move on and get this over with.

I'm going to borrow some verbage from the author above (Brian Dennis or Brain McGahan).

Introduction:

Access-list address and wildcard pair calculations are based on the AND and XOR logic gates.

1. AND: The output is true only when both inputs A and B are true.

0 0 1 1 = A
0 1 0 1 = B
========
0 0 0 1 = Output

2. XOR: The output is true when either inputs A or B are true, but not if both A and B are true.

0 0 1 1 = A
0 1 0 1 = B
========
0 1 1 0 = Output

To find the most specific address and wildcard pair that will match two addresses, A and B, we use the gates AND and XOR. The address we will check in the access-list is A AND B. The wildcard used to check in this list will be A XOR B. Syntax is as follows:

access-list [num] [p|d] [address] [wildcard]

Example 1:

Create an access-list in one line that matches the two IP addresses 10.20.30.40 and 40.30.20.10. This access-list should be as efficient as possible. Do not worry about overlapping address space.

How do we create an access-list that is the most specific match for these two addresses? First, write both addresses out in binary:

Step 1.

10.20.30.40 = 00001010 00010100 00011110 00101000
40.30.20.10 = 00101000 00011110 00010100 00001010
-----------------------------------------------------

Step 2.

Next, to find the address, take the logical AND of these addresses.

Recall, we are looking for like numbers here...

00001010 00010100 00011110 00101000
00101000 00011110 00010100 00001010
==============================
00001000 00010100 00010100 00001000

So we now have: 8.20.20.8

Let me check my math on their page and it looks like I'm getting it. Are you?

Step 3.

Next, to find the matching wildcard, take the logical XOR of these addresses.

00001010 00010100 00011110 00101000
00101000 00011110 00010100 00001010
==============================
00100010 00001010 00001010 00100010

So now we have: 34.10.10.34

Recall I am simply adding the bits that did not match or XOR, here.

Again let me check my digits... good.

================================================== ===
Per the author:

The result is our wildcard: 34.10.10.34

Therefore, the most specific match for both 10.20.30.40 and 40.30.20.10 is:

access-list 1 permit 8.20.20.8 34.10.10.34

How cool is that.

Now suppose we wanted to go a step further and block telnet from those addresses:

access-list 101 permit 8.20.20.8 34.10.10.34 eq telnet

or perhaps you have an extended access-list on your mind or better yet in your requirement. And now you want to block telnet but permit SSH, all to the same IP Address range specified above.

access-list extended darby deny 8.20.20.8 34.10.10.34 any eq telnet
access-list extended darby permit 8.20.20.8 34.10.10.34 any eq ssh
access-list extended darby permit any any

line vty 0 4
access-classs darby in

We just permitted "Darby" to access our device via SSH. How kewl is that? Now send me some credentials so I check out your configs over a secure shell.

So are you seeing some practical uses for this yet?

Let's move on to the second example discussed by the authors:

Example 2:

The following networks are being learned through a dynamic routing protocol:

10.0.0.0/16
10.4.0.0/16
10.32.0.0/16
10.36.0.0/16


Create an access-list to apply as a distribute-list. In one line, this access-list should permit these four prefixes, and deny everything else. Do not permit any other networks.

Step 1. Write all addresses out in binary:

10.0.0.0 = 000010010 00000000 00000000 00000000
10.4.0.0 = 000010010 00000100 00000000 00000000
10.32.0.0 = 000010010 00100000 00000000 00000000
10.36.0.0 = 000010010 00100100 00000000 00000000
=========================================

Let's drop the non-interesting bytes and get to just heat the meat.

Step 2. To find the address, take the logical AND of these addresses.

10.0.0.0 = 000010010 00000000 00000000 00000000
10.4.0.0 = 000010010 00000100 00000000 00000000
10.32.0.0 = 000010010 00100000 00000000 00000000
10.36.0.0 = 000010010 00100100 00000000 00000000
========================================
000010010 00000000 00000000 00000000

The result is our address: 10.0.0.0

Step 3. To find the matching wildcard, take the logical XOR of these addresses.

10.0.0.0 = 000010010 00000000 00000000 00000000
10.4.0.0 = 000010010 00000100 00000000 00000000
10.32.0.0 = 000010010 00100000 00000000 00000000
10.36.0.0 = 000010010 00100100 00000000 00000000
========================================
000010010 00100100 00000000 00000000

The result is our wildcard: 0.36.0.0

Therefore, in order to match the above networks in a single line, the access-list would read:

access-list 1 permit 10.0.0.0 0.36.0.0


How do we know if we are overlapping address space?

The amount of bits set in the wildcard mask directly corresponds to the number of addresses the access-list will match.

In the first case, the amount of bits set in the wildcard mask is 8. 8 bits set result in 256 combinations (28 = 256). It is evident that there is much overlap in this address space. However, the resulting access-list is the most specific match possible in one line.

In the second case, 2 bits are set in the wildcard mask, the 32 bit and the 4 bit. 2 bits set result in 4 combinations (22 = 4). In this case, it is evident that these four combinations are the said networks in question.

OK - I'll have to get to FRTS tomorrow and get it over with.

Tonight has been fun and I know I owe a practical example and it is 4:52 am in my world and despite rumours of my being a machine I do have to sleep too...

Or at least re-charge.

Later

I got this and I'm not letting it go this time and I will have a printout before I take on Heinz.

This is a keeper for me and should be for you too.

You see in my experience, I wrote this off as being trivial and in my own lab experiences (whatever format or location), I blew this stuff off, and then when the pressure was I actually froze on the stuff, I simply did not ******* on.

If you follow my advice and use this information and keep it fresh it might be worth a few points as in the case of an acl or distribute-list or whatever, or even better may not cost you points.

Remember I gave you my average scores above - add almost 5 points overall for this one. Nearly every lab I've taken has had some form of this equation, simple Anding or Xoring and here you have it - With some 15 labs graded in one way or another under my belt, you might think this to be good advice.

I'd say on average.

Still don't wanna practice this one? Send me the $1250.00 and I'll buy a 3550 or 2811 in your honor...
__________________
CCNP / CCDP / CCSP / CCVP
Sniffer Certified Master

MCSE/MCT with specializations

CCIE RS Candidate (Final lab attempt coming up...)
Sr. Network Engineer
  Reply With Quote
Comblues was thanked for this great post by:
supag33k (03-18-2007)
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Intro - Darby Weaver Comblues Welcome to MCSE World!!! 87 02-26-2009 07:54 PM
CCIE Employment Opportunities Rasheenj Employment Discussion 0 06-28-2006 08:10 AM
Cisco Launches Practice Lab for CCIE jcb Front Page News 1 01-06-2006 09:09 PM
Cisco Launches Practice Lab for CCIE ashwin Front Page News 0 12-16-2005 01:36 AM
CCIE Written BETA moiro Non-Microsoft Certification Discussion 0 09-22-2004 03:46 PM



Powered by vBulletin Version 3.6.0
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Copyright © 2003-2009, MCSE World.