February 9, 2012

IPexpert CCIE Security Section 19 Lab

Well I just wrapped up my section 19 lab.  Wow.  It was tough.   Even though it was tough I can’t help but feel satisfied.  You see I am taking a new approach to studying.  Here is what I do:

  1. Read the entire Mock lab
  2. Read the entire Mock lab and take notes for each task of either what I would type or what I would need to do to make this work.  This includes notes like “This should be done AFTER task XXX.”
  3. Work on the lab starting where it is logical to start.

I did that with this lab.  I have 3 1/2 pages front and back of notes.  When I am done I crack open the Solution in the Proctor Guide and start checking my work.  I’m doing pretty good, with the exception of some really dumb mistakes and a few “Thats New!” topics that I come across.

Here are some things I learned in this lab:

  • Sometimes an ACS Server just needs reimaged.  I will not spend too much time on it in the actual lab.
  • There is a really weird “established” command on that ASA that does what you would expect the MPF and FTP inspection to do, but for some reason they wanted this particular command in this particular lab.  I used it to allow IDENT in ftp to come back into through the firewall.
  • Another command that is interesting in its implimentation is “scheduler allocate.” This command allocates time in microseconds to spend on fast switching within any one network interrupt context and guarantees the minimum number of microseconds to spend at the process level when network interrupts are disabled.  The task I had required allocating 2.5% of CPU time for OSPF and other processes.  The solution shows scheduler allocate 39000 1000. The way you figure this is that 1000 is 2.5% of 40,000.  The number you use just has to keep the ratio.
    schedule_allocate_example
  • I forgot that config commands are not authorized unless you add the command aaa authorization config-commands
  • There is a VPN3k “on-a-stick” that doesn’t seem practical but is an intersting configuration.
  • Using the DocCD to find IDS/IPS log identification numbers are useful when the task just says to disable things like “Bomb” Attacks.

I’m sure there were a few more things but that is all I remember.  I didnt even try to do this in 8 hours.  Instead I booked rack time 24/7 and just worked on it when I was able to.  I found it easier to focus.  If I went away to watch TV for a bit I would feel guilty and head back to the labs.  If my wife needed help with the kids I didn’t feel guilty walking away for 2 or 3 hours.  I knew the configs would be just fine until I got back.

Now that I have finished that one I’m going to do the 1-Week Lab Experience -Exam One, which is part of the “Last Mile” deal right now.  Use the coupon code from my previous post on the program to get $50 bucks off.

Happy Labbing!

More Material Avaliable for CCIE Security

If you are like me, you could spend a lot of time taking classes.  I really enjoy them.  It’s not because I am an instructor but because the knowledge transfer in a training class is like no other.  The problem is, I have to work.  No doubt you have to work as well.  If that’s the case you have to find alternative methods of getting that knowledge transfer.

The good news is that I have found that solution.  If you imagine what you would get from a training class you would end up with the following:

  • An instructor to guide you through slide presentations
  • An opportunity to stop and ask questions as they pop into your head.
  • A manual with exercises to help practice what you have learned

As the new IPexpert offering was made available it made me think about how to get all of the above without leaving work.  Here is what I recommend.

For the first point you can grab the CCIE Security Lab Video-on-Demand

(This is now part of the Blended Learning Solution.)
This will provide the instructor that guides you through the technologies.  The real benefit here is that you can pause, rewind, and replay.

For the second point, being able to ask questions, there is the Online Study List.

There are also a few benefits here:

  1. It’s email based so all you have to do is shoot an email off to the list with your question
  2. Multiple Instructors, former Students  that have passed the exam, and many of your peers that are currently working on the exam have the opportunity to respond.
  3. You will usually get multiple replies within minutes.

Now for the third point, a manual of exercises…This is what my post is all about.  There are a ton of products out there that provide exercises you can go through.  Well IPexpert has just release another weeks worth of content that you have probably never seen before.  I’m talking about the CCIE Security 5-day Mock Lab Experience Class material.  This is for the version 2.0 blueprint so if you are like me, and trying to cram it in before a date that is sneaking up on you, this will help!

The new offering is called the CCIE Security CURRENT BLUEPRINT v2.0 “Last Mile” Prep Kit.

Take a minute to check it out.  It’s $450 bucks.  Now if that isn’t a sweet deal, let me sugar coat it: You also get 60 hours of rack time.

And don’t let me forget the sprinkles on top…..use this exclusive code when you checkout and get $50 bucks off!

coupon code: "GC_SEC"

Last but not least, I am not getting paid for this and I do not work for IPexpert.  I am posting this because $50 bucks off a product is a great deal, and I don’t mind throwing up a little word-of-mouth advertising for a company that I use and trust.  I am going through the first of the labs and will be blogging about the technologies, solutions, stumbling blocks and so on as I work on them.  My lab is March 16th.

Another special offer from Pearson/VUE and 500 dollars off at IPexpert.

If you haven’t seen it yet, check out http://www.pearsonvue.com/cisco/specialize/.

Also, you can get 500 bucks of an IPexpert Online vClass by using the coupon code “GLOBALCONFIG.”

Don’t miss out! Visit http://www.ipexpert.net for more information.