Wednesday, December 24, 2008

Santa arrived earlier this year! Merry Christmas!

I just arrived from a long journey that took me almost 50 days away from everything (like home, you can see that by the few posts during the last 2, maybe 3 months), but, in the end, everything went well, I´ve implemented a new network for one of our customers, and all equipment (new and old) are up and running well, with no downtimes during the changes, and that´s what matters for me!

You can loose (in fact not loose, but, spend) countless hours working in an action plan, trying to figure out every situation that can arise, but in the end, the power of a plan careful created is priceless!

Anyway! Now I´m back, hungry and thirst for knowledge, specifically CCIE knowledge! lol! :)

Oh yeah! I was checking my emails, visiting my favorite websites, and found out that once again IPExpert and Internetwork Expert are playing Santa with HUGE discounts and End Year promotions under their websites! Go check it out! The AWESOME IPExpert CCIE Blended Learning Solutions for $999.00 (until Dec/31/2008) is a great deal, for sure!

I´ll spend some time with family, my wife (before she kills me), my cats during this christmas, and only after that (maybe next monday) get back to my studies, reading a book for hours, watch some Video on Demand Classes, do some labbing, all the fun stuff I need now!

So, I wish everybody a Merry Christmas and a Wonderful, Awesome, Incredible New Year, and I hope that all your dreams come true in 2009, were each of us will be able to make the difference in anything we choose to do!

Thank you all, and see you soon! Feel free to contact me any time!

Best Regards,

Caue Wailemann

Friday, December 5, 2008

OSPF: Peering Basics (IPExpert VoD) - Part I

Ok, it has been a while I don´t post anything, but believe me, it´s not because I don´t want too... I´m really away from everything due to a huge project to implement before christmas, hopefully!

That means... I do have "ocasional"  internet access (like, 1h every 5 days, can you believe that?! Me neither! It´s really difficult for a "Internet Addicted" guy like me)!!!

Anyway... That´s why I´m a bit away from all the news (I can see some exciting news regarding EverythingIE and Dynamips support from IPExpert), also a new online vClass from them, and a new introductory class from Internetwork Expert! Cool! As always, the most they try to be better than the other, we win! :) Wonderful man!

Also, Joe, I saw your email - sorry for taking so long to reply, but I´ll do it soon! Very NICE diagram and observations there! Sorry for taking too long to reply it to you, but I´ll do it soon! :S

So... let´s get a bit more technical, into OSPF, those are some notes, personal understandings and mostly the instructions, tips and advices from IPExpert VoD (awesome material). OSPF is splitted in several parts on those VoD starting with peering basics, which in my opinion, makes sense, why implement other features like security before having full reachability ?! Insane if you ask me! That means, when you get into the OSPF section, don´t worry about authentication, or area type, or things like that! Get the basics peering up and functional! Period!

That means, assign the correct router/interfaces in the correct areas, like area 0, area 1, and forget everything else, like stub, nssa, and others! Take one step at a time!

Look at your diagram and check the issues you could have to peer between the routers using OSPF... For sure the first thing that will cause us problems will be OSPF and Frame-Relay...

Oh yeah... just to remember, the Frame-Relay world has 3 different Frame-Relay interface types: Physical, Multipoint and point-to-point.

Now... as far as OSPF is concerned, we have 5 different network types. Out of that, either Multipoint and Physical Frame-Relay interfaces are both going to default to an OSPF Non-Broadcast Network Type.

On the other hand, the Point-to-Point Frame-Relay subinterface is going to default to a Point-to-Point Network Type in OSPF.

That can lead us to some mismatches, depending on the frame-relay network setup and topology. As Scott likes to say, little things to be looking at, but very important! :)

Match your network and interface types together! First of all, timers may not match if you try to mix different interface types!

There´s also the DR Router! We must take care to make our HUB router the DR! Also, if running over a Non-Broadcast link, don´t forget the broadcast parameter in the frame-relay maps, to have OSPF actually "working" on your network (even better, on your exam!). One piece of advice is, on a point-to-point subinterface this is enabled by default.

There are some tools (AKA debug) that we can use to check this "broadcast"  issue, like debug ip packet, if you get encapsulation failed, that pretty much tells you that there´s something missing (that could be the broadcast parameter in your maps, or some other kind of little thing we usually forget about).

Also, keep in mind the neighbor command! They may forbidden you from changing the network types, and things like that, we can always use the neighbor command to try to achieve neighbor relationship.

You MUST read your exam carefully and understand how it´s worded! It might tell you: don´t change the network type on the spokes, or on the HUB change to a network type other than broadcast! At the VoD Scott suggest us to start looking at the details, looking at the things that match, looking at the things that NEEDS to match in order to perform peer! Start thinking and choosing how you´re going to do stuff! A great advice!

Any interface that is Point-to-Something does NOT elect a DR, keep that in mind! But, Broadcast and Non-Broadcast will!

Broadcast - Elects a DR, and it has what we call fast timers,  10/40 sec (hello/dead) timers.

Non-Broadcast - Elects a DR, but has slow timers, 30/120 sec! It also works in the unicast fashion,  it "must" have the neighbor command! Very important! It MUST have it! In order to actually operate!

But the real question is: Can we mix and match those types?! If our spokes are Non-Broadcast, can we make the HUB Broadcast?! Sure! Absolutely! We´ll have to change timers, they need to match, either fast or slow, doesn´t matter, but they have to be the same at each end.

Also... the neighbor command... where to put it on this situation?! On this "scenario" the neighbor command goes into the spokes, even knowing that we may normally have to put them on the hub! If your HUB is in Broadcast type, the neighbor command is not accepted!

As long as the timers match, and your choices about the DR, we´re good to go!

Point-to-Point and Point-to-Multipoint, same thing, you can mix and match those if I want too, just adjusting timers!

Point-to-Multipoint Non-Broadcast (Cisco Proprietary) It assumes the same type of idea the point-to-multipoint does, uses the same slow timers and stuff, but, it must use unicast packets, that means, it uses the neighbor command ...

Now, in order to form a peering relationshipe, there are a number of things that needs to match!

Timers for example, it needs to match! We can change it! Like the OSPF Hello Timer, if we change the Hello Timer, the Dead Timer automatically changes (by the way, the Dead Timer can also be changed independently, to achieve any weird task if needed)!

Other things that must match:

MTU Size must match!

Area ID must match! That makes sense! We can´t peer an Area 0 guy with an Area 1 guy! :)

Stub Flag must match! Now, this highlights a very important rule in OSPF, one of the OSPF rules is that everybody in an Area must have the same database information! Well... what the Stub flag does?! It says a variaty of things, but it´ll tell your router it can´t have external routes as an example, what about the other router in the area, if it "wants" to have external routes!? Things are not going to work very well in this situation! Everybody MUST agree about the Stub Flag!

The same applies to Netmask! It´s important to know "we´re" all in the same network in there! There are some exceptions with Virtual-Links and Point-to-Point interfaces, don´t need to worry about that part, but, as we go through, all of these things have to match!

One very important thing is missing out of this list! That will be the DR!

Technically you can peer "something" that requires a DR with "something" that doesn´t requires a DR. However, things will be all messed up if we do that! In the DR world, somebody believes they´re in charge, and they´re the ones who can announce the routes officially!

On the non-DR network everybody has the right to announce routes, and that will mess up all of your database and reachability.

So, even knowing the DR is not a poart of the list here, you do have to match and agree to who is or is not the DR!

The neighbor command (we´re talking about it very much, don´t you think?!), is basically used when I can´t use multicast in order to get to the other side!

Technically it´s only necessary in one side of the connection, so, in a Hub and Spoke network I would probably use my Hub to put this. One place, put all the neighbors, keep life simple! But, this is not necessary! You can do it in the spokes if you want! You can do in both if you want! No big deal! But you have to have the neighbor command some place in order to initiate the conversation!

So, in our example, making the HUB Broadcast, and the Spokes Non-Broadcast, the neighbor command HAS to go on the spokes, the broadcast guy (the HUB in this situation) won´t even accept the neighbor command!

Your HUB will be sending out it´s multicast frames, no one will be talking back to it, and them, it gets an unicast from one of the spokes and says "Oh, ok! This is how you wanna talk?! Not a problem" and it´ll respond to that spoke.

Back in our example scenario... the neighbor command MUST be used in every spoke in order to trully operate! Once each of them initiates the unicast conversation the HUB will reply just fine, and everything will be working great! It takes a while, like a couple minutes, but it´ll happen just fine!

And that´s just the neighbor command!

Next post we´ll talk about the other features presented in the VoD, like loopbacks, DR, and MTU... I really gotta go now!

Nice weekend to everybody, and don´t ever give up! Keep going on your studies (check this wonderful post from Ethan Banks about this).

Cheers!

Friday, November 28, 2008

IPExpert R&S Dynamips Support + Everything IE!It seems Santa Claus is coming earlier this year! :)

IPExpert will be lauching Dynamips support to their R&S Track really soon! This is AWESOME news for anyone who doesn´t own a rack just like me! Follows the link for this post on their blog:

IPexpert to Announce Dynamips Support and  "Everything IE” Private Beta Launch

Also, EverythingIE will be launch in the following days! I´ve heard about it a few months back, and I´m really anxious  to check it out! An online community (like Facebook, Orkut and others) just for CCIEs! Really helpful! Check this comment from Wayne about this:

---

Wayne Lawson II says:

November 27th, 2008 at 1:41 pm

Caue - Thanks for the support - EIE will truly be an amazing resource and community for CCIE candidates. It’s essentially going to be Facebook, Linkedin, MySpace, Twitter, Meet up, Groupstudy, CCIEblog and Certification Talk / IEOC on steroids….Everything you need with a single login (and SPAM-free and heavily moderated so the community stays productive and valuable!) - many free resources, an “Ask the Expert” (online instructors), free labs, product giveaways, resume / job search (many recruiters assisting in placement), study groups (online) supported by the IPexpert team, etc - and we’re hoping that our competitors participate in this initiative so it’s truly a vendor-neutral meaningful community….more details to come soon!

---

Exciting, don´t you think?! I can´t wait to check it out!!!!!!!!!

Tuesday, November 25, 2008

Recomended CCIE Books from Jared Scrivener

I just saw this post from Jared Scrivener at IPExpert CCIE Blog, he makes a very good point! Most candidates (including myself) get so anxious to solve some labs that we forget to make a solid foundation with some quality reading!

Of course, we all have our strong and weak areas, but his point is, most of our weak areas correlates to the books we haven´t read!

This is a very nice statement! That´s why a CCIE preparation is a 18, 24 months adventure! We must feed our brain with enough information about technologies and them put the theory in pratice on our labs to check  HOW  everything works together!

Want to check his list?! Just follow the link to the post:

http://ipexpert.ccieblog.com/2008/11/21/so-much-information-part-one/

I would add some more books, but, probably he will have those included in the next post! Wonderful reading! Enjoy!

PS: I´m actually working on a OSPF post from IPExpert VoD. These OSPF videos are AWESOME! I´m just a bit delayed due to the HEAVY end-year workload I do have right now! :(

Friday, November 7, 2008

CCIE Command Memorizer low price for the first 500 canditates who signup!

I just received an email from ConfigureTerminal.com (Mr. David Bombal) with GREAT news! The CCIE Command Memorizer (and all other tools available at his website) will be available for USD 9.99/month for the first 500 people who signup (regular price after that will be USD 29.90/month)!

This is a GREAT opportunity for those who want to know the tool, and how it works! A very nice move! You can try it for a month, if you like, you renew your subscription, if you don´t just cancel it! :)

Let me say this... I loved! Very nice tool, and it´s helping me in my studies, in fact, the CCIE Command Memorizer is key in my strategy (specially on the road)!

Oh yeah... The signup will not only give you access to the CCIE Command Memorizer, but to many other tools also!

Wednesday, November 5, 2008

What a "nice" way to do business! Thank GOD I didn´t bought from NMC!

To my surprise, this week while checking Sadikhov Forums (CCIE Other section), I saw many NetMasterClass customers complaining about their "products" being removed from their accounts! EVERYTHING, DOiTv2 Workbook, Video on Demand, Tech Library, everything!

WTH! Does the Cisco 360 Program gives the right to NMC to do that?! I would ask for my products back or a refund! I would NOT accept nothing less than that!

Oh my! Thank God I didn´t bought their Study Package (remember the slogan: This awesome study package will keep you busy enough bla bla bla...)... yeah! Right! It would keep me busy enough to try to have them back to my account!

So, if a company (NMC) sell their products to other company (Cisco), what happen to their customers?! Yeah... good question...

I wish more companies have the same police IPExpert and Internetwork Expert does regarding Investment Protection! That´s the way it should be!

You can check the original Sadikhov Topic by clicking here.

IPExpert Year End Special

Yeah! Year End Special from IPExpert!

IPExpert Blended Learning Solutions is priced at USD 999.99 again! At least for a while! Wonderful study package!

Today IPExpert just released a new Newsletter with some promotions for this year!

image

I will hurry up to grabe some more Rack Rental hours! :)

Tuesday, November 4, 2008

How to check your Diagram for potential Routing Loops

One of the most challenging tasks in the CCIE Lab is how to deal with routing loops, specially when dealing with redistribution. I still working my way through it and I still missing alot (any comments, thoughts, suggestions will be welcome!).

Anyway... I will not deal here (in this specific post of course) with the details about redistribution, and anything else. I will just check the topology for potential routing loops, and redistribution points! (and please, correct me if I´m wrong, ok?!).

Let´s check this diagram from IPExpert Workbook Vol. 3 - Lab. 1 (this Lab 1 is available for download at IPExpert Website, go get yours).

image

To keep things simple, forget that R4 Serial connection is also connected to R5 through Frame-Relay network, just pretend it is connected direct through Serial Interfaces, ok?!

So we have EIGRP, OSPF and RIP all over our topology, and guess which protocol was choosen to be in the Frame-Relay network?! Yes, you´re right! OSPF!

Anyway, checking it a little deeper, we can see that routers BB2, R4, R5 and R2 have direct connections and those routers are using RIP. Also, R1 and SW1 are using RIP between them! That should not take too long to be configured (depending on what is being asked), but probably not very challenge.

In the EIGRP "world" we have BB1, R6, R7 and R9 routers. Note that there are two interfaces between R6 and R9. Again, that also should not take too long to be configured depending on what the task is asking and the restrictions applied!

Now... OSPF! It´s being used between R2, R5 and R6 in the OSPF Area 256, and between R1 and R2 in OSPF Area 12.

Now that we checked the IPv4 IGP Routing Protocols in this diagram, we also need to verify it for potential Routing Loops. Check the bellow drawing:

image

Starting from BB2, to the top of the topology, we can see two loops in our network. One represented by the "ORANGE" arrows and the other by the "RED" arrows.

First, let´s analyze the loop in "ORANGE" between R6 and R9. It´s inside EIGRP AS679. So, this loop is "contained" inside one routing protocol. The routing protocol will deal with it. No worries!

Now... the loop between R2 and R5 (represented by the "RED" arrows). This one involves two distinct routing protocols! So we must take care when doing redistribution between those routing domains, either by using different Administrative Distance (AD), route-maps, access-list or any tool that we´re allowed to use to avoid it!

Regarding the redistribution points... we´ll need to redistribute routes in R2, R6 and "maybe" in R1, it´ll all depend on the connections!

Just keep in mind that, when dealing with routing loops we can have situations like:

Routing Loop with a single IGP: That kind of situation will not create a routing loop when redistribution is performed, because, it´ll be filtered by the IGP in use.

Routing Loops  with two or more IGPs:  In  this situation we´ll need to take care off "manually", using filters, maps, access-lists, and other tools when dealing with redistribution, avoiding for example that RIP domain learn OSPF routes, and them send those routes back to the OSPF domain!

This analysis seens simple, but try to do it in some different diagrams on your own to get more practice, I´ll do the same!

Later we´ll discuss the details involving the redistribution and the IGPs!

Cheers!