AutoQoS

February 10th,2012    by Nicholas

AutoQoS is an extremely useful feature that can take a lot of the mystery out of building a QoS policy. Unfortunately, there are several restrictions on this feature that you need to be aware of.

First, it is only available on point-to-point links between routers. This includes point-to-point subinterfaces on ATM and Frame Relay PVCs, as shown in the example. The feature is also available on PPP and HDLC Serial connections. It cannot be used on any multiple access media, including Ethernets, or multipoint subinterfaces.

Second, it can't be used with any virtual templates or frame map statements. It cannot be used with either Frame Relay or ATM SVCs.

Third, it must be enabled on both ends of each link or PVC. This doesn't necessarily mean that both routers must run the same IOS version, however, as long as the AutoQoS feature is available on both routers.

Fourth, you should disable any other service policies or access-groups on the router, even if they are associated with different interfaces.

And finally, you must ensure that CEF is enabled for this feature to work.

AutoQoS for VoIP was introduced in IOS Version 12.2(15)T. This command is actually a macro that adds a series of commands to your router's configuration. You can use the show auto qos command to see exactly what it has added:

Router1#show auto qos
 !
 policy-map AutoQoS-Policy-UnTrust
  class AutoQoS-VoIP-RTP-UnTrust
   priority percent 70
   set dscp ef
  class AutoQoS-VoIP-Control-UnTrust
   bandwidth percent 5
   set dscp af31
  class AutoQoS-VoIP-Remark
   set dscp default
  class class-default
   fair-queue
 !
 ip access-list extended AutoQoS-VoIP-RTCP
  permit udp any any range 16384 32767
 !
 ip access-list extended AutoQoS-VoIP-Control
  permit tcp any any eq 1720
  permit tcp any any range 11000 11999
  permit udp any any eq 2427
  permit tcp any any eq 2428
  permit tcp any any range 2000 2002
  permit udp any any eq 1719
  permit udp any any eq 5060
 !
 rmon event 33333 log trap AutoQoS description "AutoQoS SNMP traps for Voice Drops" owner AutoQoS
 rmon alarm 33333 cbQosCMDropBitRate.1169.1171 30 absolute rising-threshold 1 33333 falling-threshold 0 owner AutoQoS

Serial0/0.1: DLCI 904 -
 !
 interface Serial0/0
  frame-relay traffic-shaping
 !
 interface Serial0/0.1 point-to-point
  frame-relay interface-dlci 904
   class AutoQoS-FR-Se0/0-904
 !
 map-class frame-relay AutoQoS-FR-Se0/0-904
  frame-relay cir 1544000
  frame-relay bc 15440
  frame-relay be 0
  frame-relay mincir 1544000
  service-policy output AutoQoS-Policy-UnTrust
Router1#

Clearly, this little macro has done a lot of work, and in fact this command output doesn't show the class-maps that were created at the same time! Let's examine what it did. First, it created a policy-map called AutoQoS-Policy-UnTrust, which allocates up to 70% of the bandwidth on this link to voice traffic and another 5% to VoIP control packets. It also sets the DSCP values for these traffic streams, overriding whatever values were previously in the packets. All other traffic is configured to use weighted fair-queuing (WFQ).

Then, skipping over the access-lists, whose purpose is fairly clear, the macro has created an RMON rule that will automatically send an SNMP trap every time the router is forced to drop a voice packet. You can then use these trap logs to determine if the queuing parameters are appropriate. If you find that you are dropping a lot of packets, then you may need to increase your bandwidth to reduce congestion.

And finally, it has implemented Frame Relay Traffic Shaping to ensure that the router doesn't attempt to overrun the CIR for the PVC. This is a critical consideration because, by default, the router will assume that it can transmit at wire speed on each PVC individually. So if you have several PVCs on a single physical circuit, it will allow any of them to burst to the full bandwidth capacity of the interface, possibly over-running the CIR of the PVC. As a result, even with the best queuing strategy on the router, you could find yourself dropping packets in the frame cloud.

The AutoQoS for the Enterprise feature was introduced in IOS Version 12.3(7)T. It classifies traffic into 10 categories, which are listed in Table 11-2. Note that if the discovery feature doesn't see any traffic of a particular type, then AutoQoS will not create a corresponding class on the router.

Table 11-2. AutoQos traffic classes

Class Name

DSCP

Description

IP Routing CS6 Routing protocol and ICMP traffic
Interactive Voice EF RTP Voice traffic
Interactive Video AF41 RTP Video traffic
Streaming Video CS4 Various streaming audio and video protocols, such as CU-SeeMe, RealAudio, and Netshow
Telephony Signaling CS3 RTP and H.323
Transactional/Interactive AF21 Database protocols, such as SAP, SQLNet, and SQLServer, as well as interactive protocols, including Citrix, Telnet, Notes, SSH, and X11
Network Management CS2 Primarily SNMP
Bulk Data AF11 Batch file transfer protocols such as FTP, Exchange, POP3, SMTP, NNTP, and network printing
Scavenger CS1 Various peer-to-peer and entertainment protocols, including Napster, Fasttrack, and Gnutella; this group is given a worse than best-efforts priority
Best Effort 0 Various miscellaneous protocols, including HTTP, NFS, SunRPC, NTP, and gopher, as well as any unidentified traffic

We enabled auto discovery QoS on both ends of a Frame-Relay PVC, ran some traffic through the link and then looked at the output of the show auto discovery qos command to see what the router suggested for a QoS policy:

Router1#show auto discovery qos
Serial0/0.1
 AutoQoS Discovery enabled for applications
 Discovery up time: 3 minutes, 41 seconds
 AutoQoS Class information:
 Class Voice:
  No data found.
 Class Interactive Video:
  No data found.
 Class Signaling:
  No data found.
 Class Streaming Video:
  No data found.
 Class Transactional:
  Recommended Minimum Bandwidth: 1 Kbps/<1% (AverageRate)
  Detected applications and data:
  Application/       AverageRate        PeakRate           Total
  Protocol           (kbps/%)           (kbps/%)           (bytes)
  -----------        -----------        --------           ------------
  telnet             1/<1               32/2               53404
 Class Bulk:
  No data found.
 Class Scavenger:
  No data found.
 Class Management:
  Recommended Minimum Bandwidth: 1 Kbps/<1% (AverageRate)
  Detected applications and data:
  Application/       AverageRate        PeakRate           Total
  Protocol           (kbps/%)           (kbps/%)           (bytes)
  -----------        -----------        --------           ------------
  snmp               1/<1               11/<1              50245
 Class Routing:
  Recommended Minimum Bandwidth: 0 Kbps/0% (AverageRate)
  Detected applications and data:
  Application/       AverageRate        PeakRate           Total
  Protocol           (kbps/%)           (kbps/%)           (bytes)
  -----------        -----------        --------           ------------
  icmp               0/0                8/<1               11432
  eigrp              0/0                0/0                6016
 Class Best Effort:
  Current Bandwidth Estimation: 3 Kbps/<1% (AverageRate)
  Detected applications and data:
  Application/       AverageRate        PeakRate           Total
  Protocol           (kbps/%)           (kbps/%)           (bytes)
  -----------        -----------        --------           ------------
  http               3/<1               33/2               84777
  unknowns           0/0                0/0                184

Suggested AutoQoS Policy for the current uptime:
 !
 class-map match-any AutoQoS-Transactional-Se0/0.1
  match protocol telnet
 !
 class-map match-any AutoQoS-Management-Se0/0.1
  match protocol snmp
 !
 policy-map AutoQoS-Policy-Se0/0.1
  class AutoQoS-Transactional-Se0/0.1
   bandwidth remaining percent 1
   random-detect dscp-based
   set dscp af21
  class AutoQoS-Management-Se0/0.1
   bandwidth remaining percent 1
   set dscp cs2
  class class-default
   fair-queue
Router1#

As you can see, we didn't let the discovery phase run for very long, and consequently did not discovery very many types of traffic. The router saw no traffic in the Voice, Interactive Video, Telephony Signaling, Streaming Video, Bulk, or Scavenger classes. But it did see some TELNET traffic in the Transactional class, some SNMP traffic in the Network Management class, as well as some Routing Protocol and Best Efforts traffic. Note that the command output includes average and peak rate traffic statistics, which the router will use to help determine queuing parameters:

Class Best Effort:
  Current Bandwidth Estimation: 3 Kbps/<1% (AverageRate)
  Detected applications and data:
  Application/       AverageRate        PeakRate           Total
  Protocol           (kbps/%)           (kbps/%)           (bytes)
  -----------        -----------        --------           ------------
  http               3/<1               33/2               84777
  unknowns           0/0                0/0                184

The output then ends with a suggestion for a QoS policy-map to be applied to this interface. This output shows that the AutoQoS feature uses the NBAR match command to identify protocols. NBAR is the basis of AutoQoS.

Once we are satisfied that this is a good QoS policy, we enable it by using the auto qos command:

Router1(config)#interface Serial0/0.1 point-to-point
Router1(config-subif)#frame-relay interface-dlci 904
Router1(config-fr-dlci)#auto qos
%Creating new map-class.
Router1(config-fr-dlci)#no auto discovery qos
Router1(config-fr-dlci)#exit
Router1(config-subif)#exit
It is critical to enable AutoQoS before disabling the discovery feature. Otherwise, the router will lose all of the traffic information that it has learned.

If you want to see the new configuration commands that AutoQoS has added to your router, use the show auto qos command:

Router1#show auto qos
 !
 policy-map AutoQoS-Policy-Se0/0.1
  class AutoQoS-Transactional-Se0/0.1
   bandwidth remaining percent 1
   random-detect dscp-based
   set dscp af21
  class AutoQoS-Routing-Se0/0.1
   bandwidth remaining percent 1
   set dscp cs6
  class class-default
   fair-queue
 !
 policy-map AutoQoS-Policy-Se0/0.1-Parent
  class class-default
   shape average 1544000
   service-policy AutoQoS-Policy-Se0/0.1
 !
 class-map match-any AutoQoS-Transactional-Se0/0.1
  match protocol telnet
 !
 class-map match-any AutoQoS-Routing-Se0/0.1
  match protocol icmp
  match protocol eigrp
  match protocol rip

Serial0/0.1: DLCI 904 -
 !
 interface Serial0/0.1 point-to-point
  frame-relay interface-dlci 904
   class AutoQoS-FR-Se0/0-904
 !
 map-class frame-relay AutoQoS-FR-Se0/0-904
  frame-relay cir 1544000
  frame-relay bc 15440
  frame-relay be 0
  frame-relay mincir 1544000
  service-policy output AutoQoS-Policy-Se0/0.1-Parent
Router1#

Note that the actual policy map does not exactly match the version that we saw earlier during the data collection phase. The biggest difference is that the router saw some additional RIP traffic in the meantime and added this protocol to the class called AutoQoS-Routing-Se0/0.1. It has also created a Frame Relay map class that includes traffic shaping parameters for the PVC.

Because AutoQoS adds so many different commands to the router configuration, if you want to disable AutoQoS, it is not sufficient to just remove the auto qos command. You will need to remove all of the other commands separately. In fact, you should be careful about removing this command because if you do so, the show auto qos command will no longer function, making it much more difficult to figure out what commands are actually related to this feature. To make matters worse, once you have removed the auto qos command, you can't even put it back because the router needs to repeat the discovery phase first!

If you want to remove this feature after you have enabled it, we recommend capturing the output of the show auto qos command and using a text editor to create a configuration script that selectively eliminates all of the associated commands.

AutoQoS for the Enterprise can be a useful way of generating a detailed queuing strategy for your network. We do urge some caution in using this feature, however. In our experience, the discovery option can be unreliable. In particular, if you are using NBAR or have access-groups enabled on the router, this can interfere with the data collection. Furthermore, we have seen questionable results in the output that went away after disabling and re-enabling the discovery option.

We strongly recommend looking very closely at the recommendations made by this command before implementing them.

about CCIE Bootcamp.

February 7th,2012    by Nicholas

It truly is aimed to pick the professionals within the networking small business for the famend agency supplying methods into the technical departments. By using a goal to acquire CCIE certification the candidates must transfer by two necessary preference tests. To start with, the written check is usually to be handed when which the candidates can sit for the Lab examination. The brief-listed candidates can solely have CCIE certification. In an effort to prepare for your CCIE exams, CCIE Bootcamp is built.

CCIE Bootcamps offer you effectively essentially the most effortless method of passing out the checks of CCIE. You will discover plenty of firms reasonably institutes which provide CCIE Bootcamp education comparable to Cathay College. Which has a look at to mature to be qualified for your bootcamps the institutes in many cases existing a prerequisite. It can help to spice up the prospect of your applicants to maneuver the CCIE exams in a very larger way than people. This prerequisite is known as CCNP status.

The involved price for taking the CCIE Security exam is substantial, so most candidates go for a preparing study course to cross it in one sitting. Some impartial companies and institutions offer programs and workshop to all those selecting CCIE Stability workout. Nevertheless, most candidates prefer to utilize the instructor-led and on-line workshops, which Cisco offer, like a portion of Licensed Researching Companions system. The exercise choices are offered along with the educators are acknowledged by Cisco.

For that CCIE Safety certification, you ought to register for the penned examination as part of your area of specialization. Many of the exams are done on the Cisco licensed facility, which also accepts expenditure for that test. The cost of taking a CCIE prepared examination is from $80 to $325. The developed exam is supervised and executed on a laptop computer. It's of one or two hrs paper that contains a number of picks, drag and drop doubts and fill within the blanks. Aside from white boards and markers for calculations, as being a candidate for CCIE Stability coaching examination, you aren't allowed to hold almost every other item for the test hall.

CCIE Bootcamp is accompanied using a amount of practices to provide the simplest preparation materials to your students. They primarily provide you with some must-have publications to organize them for your penned CCIE take a look at collectively with some world-wide-web entry for the Lab exam. Relying on these two categories the CCIE Bootcamps is divided into two sections. The divisions are class building and also Lab simulation. The category construction consists of two phases and they are fingers-on coaching and lectured-based mostly classes. Inside the category framework the pupils are presented while using data of Little bit splitting, VLSM and many others. However the lab simulation is necessary component of CCIE Bootcamp. Right here the students are subjected to cope with a variety of real-life issues along with the troubleshooting abilities are checked the right way. That is definitely the greatest stage of CCIE Bootcamps the location the scholars are nicely-prepared for your Blueprintv4, MPLS and so on. These methodologies allow pupils to troubleshoot any real-life concerns and increase the facility to find out the proper alternatives.

But you will discover handful of dependable institutes obtainable on the market around the promote which offers entire CCIE Bootcamps. One in every of a great deal of properly-renowned institutes is Cathay Faculty which renders especially beneficial services in case of bootcamps for CCIE. They provide bootcamp facilities to relatively sizable variety of university pupils from plenty of corners on the planet like Australia, Norway, Uk, Sweden, USA and countless extra. In accordance using the data of this institute from 2005, they're sustaining doc variety of proportion of passing price in CCIE examination. This file is itself a kind of guarantee for them. There are various leads to to pick out Cathay College for CCIE Bootcamps. The report quantity of passing pace of almost 90% is the most captivating purpose of it. Aside from it, 1 other fantastic attribute may be the one-to-one lab coaching which support the college students to filter out all the doubts relating to any downside from your instructors.

The necessary facts associated with the bootcamp is available into the trustworthy enterprise page and that is cathayschool.com. It is a extremely easy site which supplies many placing facilities like on-line Self-Study CCIE Lab Workbooks, one-on-one on the net coaching, Teacher Led exercise etc. All the facilities as well as the class durations jointly when using the money are effectively-described here like that the potential consumers really should not ought to confront any form of trouble regarding CCIE Bootcamps.

Using NBAR Classification

February 6th,2012    by Nicholas

The NBAR feature is used to identify traffic within a class-map. You can then use the class-map in a policy-map to define how the router should handle each application data stream:

Router1#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router1(config)#ip cef
Router1(config)#class-map INTERACTIVE
Router1(config-cmap)#match protocol citrix
Router1(config-cmap)#match protocol telnet
Router1(config-cmap)#exit
Router1(config)#policy-map QoSPolicy
Router1(config-pmap)#class INTERACTIVE
Router1(config-pmap-c)#bandwidth percent 50
Router1(config-pmap-c)#set dscp ef
Router1(config-pmap-c)#exit
Router1(config-pmap)#class class-default
Router1(config-pmap-c)#bandwidth percent 20
Router1(config-pmap-c)#random-detect dscp-based
Router1(config-pmap-c)#exit
Router1(config-pmap)#exit
Router1(config)#interface FastEthernet0/0
Router1(config-fi)#service-policy inbound QoSPolicy
Router1(config-if)#exit
Router1(config)#end
Router1#

Cisco also offers the ability to download specialized Packet Description Language Module (PDLM) files onto the router's flash device, and then activate them for use with NBAR classification:

Router1#show flash
System flash directory:
File  Length   Name/status
  1   23169076  c2600-ipvoice-mz.124-10.bin
  2   3100     bittorrent.pdlm
[23172304 bytes used, 9857836 available, 33030140 total]
32768K bytes of processor board System flash (Read/Write)

Router1#Router1#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router1(config)#ip nbar pdlm flash://bittorrent.pdlm
Router1(config)#class-map BITTORRENT
Router1(config-cmap)#match protocol bittorrent
Router1(config-cmap)#exit
Router1(config)#end
Router1#

And you can also use NBAR to automatically profile the protocols on a particular interface:

Router1#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router1(config)#interface FastEthernet0/0
Router1(config-if)#ip nbar protocol-discovery
Router1(config-if)#exit
Router1(config)#end
Router1#

Network Based Application Recognition (NBAR) is an extremely useful feature that first became available in IOS Version 12.0(5)XE2, and more generally in 12.1(5)T. Cisco continues to add new protocols to NBAR, allowing you to categorize more and more different traffic streams on your network. The one caveat to using NBAR is that it can introduce a heavy additional load on your router's CPU. We recommend monitoring the CPU utilization after implementing any NBAR-based filtering, at least until you are confident that the router is not straining under the additional load.

The basic syntax is to set up a class-map, and then use the match protocol command with the appropriate keyword:

Router1(config)#class-map INTERACTIVE
Router1(config-cmap)#match protocol citrix
Router1(config-cmap)#match protocol telnet

We used Citrix as an example protocol in this recipe because it is a classic example of the need for the NBAR feature. This is a proprietary protocol that is used in thin-client architectures. The end user's workstation is just a terminal that displays graphical information from the screen of a centrally located computer running a virtual desktop for the user. The protocol transmits graphical information and keystrokes. Because it is an interactive application, it needs to be given high priority through the network. However, it is notoriously difficult to reliably identify from Layer 3 and 4 information:

As the example shows, you can then use this class in a policy-map:

Router1(config)#policy-map QoSPolicy
Router1(config-pmap)#class INTERACTIVE
Router1(config-pmap-c)#bandwidth percent 50
Router1(config-pmap-c)#set dscp ef
Router1(config-pmap-c)#exit

NBAR classifies applications at the application layer, allowing you to differentiate between different streams of traffic that may actually use the same UDP or TCP port numbers, as well as streams of traffic that may use a variety of ports or even arbitrary port numbers.

Here is a list of supported protocols as of IOS Version 12.4(10):

Router1(config-cmap)#match protocol ?
  arp            IP ARP
  bgp            Border Gateway Protocol
  bridge         Bridging
  cdp            Cisco Discovery Protocol
  citrix         Citrix Systems ICA protocol
  clns           ISO CLNS
  clns_es        ISO CLNS End System
  clns_is        ISO CLNS Intermediate System
  cmns           ISO CMNS
  compressedtcp  Compressed TCP (VJ)
  cuseeme        CU-SeeMe desktop video conference
  dhcp           Dynamic Host Configuration
  dns            Domain Name Server lookup
  edonkey        eDonkey
  egp            Exterior Gateway Protocol
  eigrp          Enhanced Interior Gateway Routing Protocol
  exchange       MS-RPC for Exchange
  fasttrack      FastTrack Traffic - KaZaA, Morpheus, Grokster...
  finger         Finger
  ftp            File Transfer Protocol
  gnutella       Gnutella Version2 Traffic - BearShare, Shareeza, Morpheus ...
  gopher         Gopher
  gre            Generic Routing Encapsulation
  h323           H323 Protocol
  http           World Wide Web traffic
  icmp           Internet Control Message
  imap           Internet Message Access Protocol
  ip             IP
  ipinip         IP in IP (encapsulation)
  ipsec          IP Security Protocol (ESP/AH)
  irc            Internet Relay Chat
  kazaa2         Kazaa Version 2
  kerberos       Kerberos
  l2tp           L2F/L2TP tunnel
  ldap           Lightweight Directory Access Protocol
  llc2           llc2
  mgcp           Media Gateway Control Protocol
  napster        Napster Traffic
  netbios        NetBIOS
  netshow        Microsoft Netshow
  nfs            Network File System
  nntp           Network News Transfer Protocol
  notes          Lotus Notes(R)
  novadigm       Novadigm EDM
  ntp            Network Time Protocol
  ospf           Open Shortest Path First
  pad            PAD links
  pcanywhere     Symantec pcANYWHERE
  pop3           Post Office Protocol
  pppoe          PPP over Ethernet
  pptp           Point-to-Point Tunneling Protocol
  printer        print spooler/lpd
  rcmd           BSD r-commands (rsh, rlogin, rexec)
  rip            Routing Information Protocol
  rsrb           Remote Source-Route Bridging
  rsvp           Resource Reservation Protocol
  rtcp           Real Time Control Protocol
  rtp            Real Time Protocol
  rtsp           Real Time Streaming Protocol
  secure-ftp     FTP over TLS/SSL
  secure-http    Secured HTTP
  secure-imap    Internet Message Access Protocol over TLS/SSL
  secure-irc     Internet Relay Chat over TLS/SSL
  secure-ldap    Lightweight Directory Access Protocol over TLS/SSL
  secure-nntp    Network News Transfer Protocol over TLS/SSL
  secure-pop3    Post Office Protocol over TLS/SSL
  secure-telnet  Telnet over TLS/SSL
  sip            Session Initiation Protocol
  skinny         Skinny Protocol
  smtp           Simple Mail Transfer Protocol
  snapshot       Snapshot routing support
  snmp           Simple Network Management Protocol
  socks          SOCKS
  sqlnet         SQL*NET for Oracle
  sqlserver      MS SQL Server
  ssh            Secured Shell
  streamwork     Xing Technology StreamWorks player
  sunrpc         Sun RPC
  syslog         System Logging Utility
  telnet         Telnet
  tftp           Trivial File Transfer Protocol
  vdolive        VDOLive streaming video
  vofr           voice over Frame Relay packets
  winmx          WinMx file-sharing application
  xwindows       X-Windows remote access
Router1(config-cmap)#

You can obtain and install new PDLM files from Cisco. In the example, we have downloaded a new PDLM file that can identify the BitTorrent protocol. Once we put this file on the router's Flash device, we need to tell NBAR to load the file to make it available:

Router1(config)#ip nbar pdlm flash://bittorrent.pdlm

In the past, Cisco has also made PDLM files available to help network administrators to use NBAR to help to identify hostile applications such as viruses and worms.

We are not aware of PDLM files originating from sources other than Cisco, but we strongly recommend that you use only files that you obtain directly from Cisco. Otherwise, you could potentially open your network to serious security vulnerabilities.

We note in passing that Cisco has also added the option to manually create your own NBAR rules using the ip nbar custom command. This feature should allow you to, for example, define a new protocol by specifying TCP or UDP port numbers, as well as any special rules that look for identifiable content at a particular bit offset in the packet payload. However, the syntax for this feature is confusing, and the parser is apparently unstable in some IOS versions, so we don't currently recommend using it.

The last feature discussed in the Solution section of this recipe is the NBAR Protocol-Discovery feature. This is a useful tool for figuring out what is going through your network, particularly if you are trying to define a QoS strategy. You can use the show ip nbar protocol-discovery command to get detailed statistics on the utilization for every type of protocol that NBAR understands. However, NBAR now supports so many protocols that this complete list is often not very useful for spotting trends. Instead, we suggest using the top-n keyword with a relatively small argument number, such as 5, or at most 10. This will allow you to immediately see statistics for the top protocols for each interface on which you enabled the feature:

Router1#show ip nbar protocol-discovery top-n 5

 FastEthernet0/0
                            Input                    Output
                            -----                    ------
   Protocol                 Packet Count             Packet Count
                            Byte Count               Byte Count
                            5min Bit Rate (bps)      5min Bit Rate (bps)
                            5min Max Bit Rate (bps)  5min Max Bit Rate (bps)
   ------------------------ ------------------------ ------------------------
   icmp                     220                      110
                            25080                    12540
                            0                        0
                            4000                     3000
   http                     55                       104
                            3763                     60019
                            0                        0
                            1000                     4000
   telnet                   130                      71
                            19212                    4269
                            0                        0
                            3000                     1000
   eigrp                    90                       45
                            6660                     3330
                            0                        0
                            0                        0
   secure-http              4                        4
                            248                      216
                            0                        0
                            0                        0
   unknown                  2                        2
                            122                      112
                            0                        0
                            0                        0
   Total                    501                      336
                            55085                    80486
                            0                        0
                            8000                     8000
Router1#

jogging as part of your routers

January 16th,2012    by Nicholas

MCSE certification can pave the way in which for IT professionals to get high paying IT positions in main software companies. One can take an MCSE course after fulfilling the other requirements in an effort to evaluation and go the MCSE 2003 test.

The MCSE certification or Microsoft Licensed Systems Engineer is likely one of the most popular tech certifications obtainable for data technology professionals. An MCSE certificates is useful with a purpose to get good jobs as a systems engineer skilled as well as for comparable IT positions in major IT companies. The MCSE certificates is tailor made for IT professionals that dissect enterprise needs in an effort to create viable solutions founded on software developed?by Microsoft corporation which incorporates its Home windows working system.?Among different jobs out there for holders of this certificate embrace positions as a tech support engineer, programs analyst, community analyst and as a technical consultant.

As an IT professional, I found out that with a view to get MCSE certification I wanted to not less than?have a few years of experience within the field. The level of publicity I wanted to get was knowledge in set up, configuration and familiarity with troubleshooting community systems.

Once I had the time wanted for expertise below my belt, I now proceeded with the following step so as to achieve my purpose of getting an MCSE certificate. The very first thing I needed to do is to get the proper knowledge on becoming an MCSE professional. I took up an MCSE course in order to get what I wanted to know. An MCSE course lets you prepare for the precise exam with the intention to be able to go it in your first attempt. One of the methods you may get an MCSE course is to attend an MCSE boot camp.?This is a comprehensive study program that is designed to provide you with the essential data and sensible know-how you want so as to move the MCSE exam.?The problem with that is it may be a tad expensive ?What I ended up doing with a view to put together for my MCSE certification was to take some online classes instead.?This allowed me to overview in the comfort of my own residence at my very own tempo so to speak.

If you wish to get your MCSE certificates as rapidly as doable, hone your expertise for the exam by testing your self repeatedly?Reap the benefits of the benefits supplied by apply assessments available. An MCSE course can provide you with the information however your efficiency in the examination will in the end determine your fate. Taking practice checks is a great way to overview for MCSE certification because it provides you with precise efficiency data on what areas you're good at and what matters you must put more consideration to.I discovered that as I carried out higher on the practice checks,?it helped increase my overall confidence come the day of my MCSE certification. I was in a position to familiarize in detail how the actual exam is taken and the way much time I had to finish it. This allowed me to employ methods to use the examination time judiciously when I came across robust questions that wanted extra attention. I made sure that I used to be capable of simulate the exact testing environment of the MCSE certification exam as shut as attainable with the intention to have a greater deal with on how to take it efficiently.

What is crucial to learn about MCSE certification is that there are seven exams to cross all in all.?I have to get a passing score of seven hundred factors in the entire checks so as to receive my MCSE certificate.?It's not simple, however with plenty of exhausting work and practice I was capable of move it.

CCIE Bootcamp and so are the Bootcamp Coaching affords provided by CathaySchool?

January 12th,2012    by Nicholas

It truly is aimed to pick the professionals within the networking small business for the famend agency supplying methods into the technical departments. By using a goal to acquire CCIE certification the candidates must transfer by two necessary preference tests. To start with, the written check is usually to be handed when which the candidates can sit for the Lab examination. The brief-listed candidates can solely have CCIE certification. In an effort to prepare for your CCIE exams, CCIE CCIE Bootcamp is built.

CCIE Bootcamps offer you effectively essentially the most effortless method of passing out the checks of CCIE. You will discover plenty of firms reasonably institutes which provide CCIE Bootcamp education comparable to Cathay College. Which has a look at to mature to be qualified for your bootcamps the institutes in many cases existing a prerequisite. It can help to spice up the prospect of your applicants to maneuver the CCIE exams in a very larger way than people. This prerequisite is known as CCNP status.

The involved price for taking the CCIE Security exam is substantial, so most candidates go for a preparing study course to cross it in one sitting. Some impartial companies and institutions offer programs and workshop to all those selecting CCIE Stability workout. Nevertheless, most candidates prefer to utilize the instructor-led and on-line workshops, which Cisco offer, like a portion of Licensed Researching Companions system. The exercise choices are offered along with the educators are acknowledged by Cisco.

For that CCIE Safety certification, you ought to register for the penned examination as part of your area of specialization. Many of the exams are done on the Cisco licensed facility, which also accepts expenditure for that test. The cost of taking a CCIE prepared examination is from $80 to $325. The developed exam is supervised and executed on a laptop computer. It's of one or two hrs paper that contains a number of picks, drag and drop doubts and fill within the blanks. Aside from white boards and markers for calculations, as being a candidate for CCIE Stability coaching examination, you aren't allowed to hold almost every other item for the test hall.

CCIE Bootcamp is accompanied using a amount of practices to provide the simplest preparation materials to your students. They primarily provide you with some must-have publications to organize them for your penned CCIE take a look at collectively with some world-wide-web entry for the Lab exam. Relying on these two categories the CCIE Bootcamps is divided into two sections. The divisions are class building and also Lab simulation. The category construction consists of two phases and they are fingers-on coaching and lectured-based mostly classes. Inside the category framework the pupils are presented while using data of Little bit splitting, VLSM and many others. However the lab simulation is necessary component of CCIE Bootcamp. Right here the students are subjected to cope with a variety of real-life issues along with the troubleshooting abilities are checked the right way. That is definitely the greatest stage of CCIE Bootcamps the location the scholars are nicely-prepared for your Blueprintv4, MPLS and so on. These methodologies allow pupils to troubleshoot any real-life concerns and increase the facility to find out the proper alternatives.

But you will discover handful of dependable institutes obtainable on the market around the promote which offers entire CCIE Bootcamps. One in every of a great deal of properly-renowned institutes is Cathay Faculty which renders especially beneficial services in case of bootcamps for CCIE. They provide bootcamp facilities to relatively sizable variety of university pupils from plenty of corners on the planet like Australia, Norway, Uk, Sweden, USA and countless extra. In accordance using the data of this institute from 2005, they're sustaining doc variety of proportion of passing price in CCIE examination. This file is itself a kind of guarantee for them. There are various leads to to pick out Cathay College for CCIE Bootcamps. The report quantity of passing pace of almost 90% is the most captivating purpose of it. Aside from it, 1 other fantastic attribute may be the one-to-one lab coaching which support the college students to filter out all the doubts relating to any downside from your instructors.

The necessary facts associated with the bootcamp is available into the trustworthy enterprise page and that is cathayschool.com. It is a extremely easy site which supplies many placing facilities like on-line Self-Study CCIE Lab Workbooks, one-on-one on the net coaching, Teacher Led exercise etc. All the facilities as well as the class durations jointly when using the money are effectively-described here like that the potential consumers really should not ought to confront any form of trouble regarding CCIE Bootcamps.

CCIE Bootcamp and so are the Bootcamp Coaching affords provided by CathaySchool?

January 9th,2012    by Nicholas

It truly is aimed to pick the professionals within the networking small business for the famend agency supplying methods into the technical departments. By using a goal to acquire CCIE certification the candidates must transfer by two necessary preference tests. To start with, the written check is usually to be handed when which the candidates can sit for the Lab examination. The brief-listed candidates can solely have CCIE certification. In an effort to prepare for your CCIE exams, CCIE Bootcamp is built.

CCIE Bootcamps offer you effectively essentially the most effortless method of passing out the checks of CCIE. You will discover plenty of firms reasonably institutes which provide CCIE Bootcamp education comparable to Cathay College. Which has a look at to mature to be qualified for your bootcamps the institutes in many cases existing a prerequisite. It can help to spice up the prospect of your applicants to maneuver the CCIE exams in a very larger way than people. This prerequisite is known as CCNP status.

The involved price for taking the CCIE Security exam is substantial, so most candidates go for a preparing study course to cross it in one sitting. Some impartial companies and institutions offer programs and workshop to all those selecting CCIE Stability workout. Nevertheless, most candidates prefer to utilize the instructor-led and on-line workshops, which Cisco offer, like a portion of Licensed Researching Companions system. The exercise choices are offered along with the educators are acknowledged by Cisco.

For that CCIE Safety certification, you ought to register for the penned examination as part of your area of specialization. Many of the exams are done on the Cisco licensed facility, which also accepts expenditure for that test. The cost of taking a CCIE prepared examination is from $80 to $325. The developed exam is supervised and executed on a laptop computer. It's of one or two hrs paper that contains a number of picks, drag and drop doubts and fill within the blanks. Aside from white boards and markers for calculations, as being a candidate for CCIE Stability coaching examination, you aren't allowed to hold almost every other item for the test hall.

CCIE Bootcamp is accompanied using a amount of practices to provide the simplest preparation materials to your students. They primarily provide you with some must-have publications to organize them for your penned CCIE take a look at collectively with some world-wide-web entry for the Lab exam. Relying on these two categories the CCIE Bootcamps is divided into two sections. The divisions are class building and also Lab simulation. The category construction consists of two phases and they are fingers-on coaching and lectured-based mostly classes. Inside the category framework the pupils are presented while using data of Little bit splitting, VLSM and many others. However the lab simulation is necessary component of CCIE Bootcamp. Right here the students are subjected to cope with a variety of real-life issues along with the troubleshooting abilities are checked the right way. That is definitely the greatest stage of CCIE Bootcamps the location the scholars are nicely-prepared for your Blueprintv4, MPLS and so on. These methodologies allow pupils to troubleshoot any real-life concerns and increase the facility to find out the proper alternatives.

But you will discover handful of dependable institutes obtainable on the market around the promote which offers entire CCIE Bootcamps. One in every of a great deal of properly-renowned institutes is Cathay Faculty which renders especially beneficial services in case of bootcamps for CCIE. They provide bootcamp facilities to relatively sizable variety of university pupils from plenty of corners on the planet like Australia, Norway, Uk, Sweden, USA and countless extra. In accordance using the data of this institute from 2005, they're sustaining doc variety of proportion of passing price in CCIE examination. This file is itself a kind of guarantee for them. There are various leads to to pick out Cathay College for CCIE Bootcamps. The report quantity of passing pace of almost 90% is the most captivating purpose of it. Aside from it, 1 other fantastic attribute may be the one-to-one lab coaching which support the college students to filter out all the doubts relating to any downside from your instructors.

The necessary facts associated with the bootcamp is available into the trustworthy enterprise page and that is cathayschool.com. It is a extremely easy site which supplies many placing facilities like on-line Self-Study CCIE Lab Workbooks, one-on-one on the net coaching, Teacher Led exercise etc. All the facilities as well as the class durations jointly when using the money are effectively-described here like that the potential consumers really should not ought to confront any form of trouble regarding CCIE Bootcamps.

CCIE Certification, Redistributing Static Routes into OSPF

December 30th,2011    by Nicholas

To redistribute static routes into an OSPF process, use the redistribute static configuration command:
Router1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router1(config)#ip route 192.168.10.0 255.255.255.0 172.22.1.4
Router1(config)#ip route 172.24.1.0 255.255.255.0 172.22.1.4
Router1(config)#ip route 10.100.1.0 255.255.255.0 172.22.1.4
Router1(config)#router ospf 55
Router1(config-router)#redistribute static
% Only classful networks will be redistributed
Router1(config-router)#exit
Router1(config)#end
Router1#
As the warning message indicates, OSPF will only redistribute classful network routes by default. In the example, we included three static routes. Of these routes, only 192.168.10.0/24 is classful. If we then look at the routing table on a different router, we can see that the other two routes are not present:
Router5#show ip route ospf
O E2 192.168.10.0/24 [110/20] via 172.25.1.5, 00:02:49, Ethernet0
172.16.0.0/24 is subnetted, 1 subnets
O 172.16.2.0 [110/20] via 172.25.1.5, 00:02:49, Ethernet0
172.20.0.0/16 is variably subnetted, 3 subnets, 3 masks
O IA 172.20.10.0/24 [110/1582] via 172.25.1.5, 00:02:49, Ethernet0
O IA 172.20.1.0/30 [110/1572] via 172.25.1.5, 00:02:49, Ethernet0
O IA 172.20.100.1/32 [110/1573] via 172.25.1.5, 00:02:49, Ethernet0
172.22.0.0/24 is subnetted, 1 subnets
O 172.22.1.0 [110/20] via 172.25.1.5, 00:02:49, Ethernet0
172.25.0.0/16 is variably subnetted, 3 subnets, 2 masks
O 172.25.25.1/32 [110/11] via 172.25.1.5, 00:02:49, Ethernet0
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
O IA 10.2.2.2/32 [110/1573] via 172.25.1.5, 00:02:49, Ethernet0
O IA 10.1.1.0/30 [110/1572] via 172.25.1.5, 00:02:49, Ethernet0
Router5#
You can ensure that all routes are redistributed, regardless of whether they are classful or not, by including the subnets keyword:
Router1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router1(config)#router ospf 55
Router1(config-router)#redistribute static subnets
Router1(config-router)#exit
Router1(config)#end
Router1#
As you can see, all three static routes are advertised now:
Router5#show ip route ospf
O E2 192.168.10.0/24 [110/20] via 172.25.1.5, 00:04:23, Ethernet0
172.16.0.0/24 is subnetted, 1 subnets
O 172.16.2.0 [110/20] via 172.25.1.5, 00:04:23, Ethernet0
172.20.0.0/16 is variably subnetted, 3 subnets, 3 masks
O IA 172.20.10.0/24 [110/1582] via 172.25.1.5, 00:04:23, Ethernet0
O IA 172.20.1.0/30 [110/1572] via 172.25.1.5, 00:04:23, Ethernet0
O IA 172.20.100.1/32 [110/1573] via 172.25.1.5, 00:04:23, Ethernet0
172.22.0.0/24 is subnetted, 1 subnets
O 172.22.1.0 [110/20] via 172.25.1.5, 00:04:23, Ethernet0
172.25.0.0/16 is variably subnetted, 3 subnets, 2 masks
O 172.25.25.1/32 [110/11] via 172.25.1.5, 00:04:23, Ethernet0
172.24.0.0/24 is subnetted, 1 subnets
O E2 172.24.1.0 [110/20] via 172.25.1.5, 00:00:24, Ethernet0
10.0.0.0/8 is variably subnetted, 3 subnets, 3 masks
O IA 10.2.2.2/32 [110/1573] via 172.25.1.5, 00:04:23, Ethernet0
O IA 10.1.1.0/30 [110/1572] via 172.25.1.5, 00:04:23, Ethernet0
O E2 10.100.1.0/24 [110/20] via 172.25.1.5, 00:00:24, Ethernet0
Router5#
Another useful thing to notice about this output is the fact that all of these external static routes are marked as type E2, meaning that they are external routes of Type 2. As we discussed in the Introduction to this chapter, any time you distribute a foreign route into OSPF, it is always considered external. This helps OSPF to ensure that it doesn't create any loops through an external network when there are multiple connection points.
When OSPF distributes Type 2 External routes, it doesn't add the internal link cost to the net route cost. OSPF always prefers Type 1 to Type 2 External routes because Type 1 routes do include the internal path cost in the metric. If you want to distribute static routes as Type 1 instead of the default type 2, you need to include the metric-type keyword in the redistribute static command:
Router1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router1(config)#router ospf 55
Router1(config-router)#redistribute static subnets metric 40 metric-type 1
Router1(config-router)#exit
Router1(config)#end
Router1#
In this example, we have also set the default metric for these static routes to a value of 40. Notice that the next hop router now shows the total cost of the path as 60 because it now includes the internal link cost of 20:
Router5#show ip route 192.168.10.0
Routing entry for 192.168.10.0/24
Known via "ospf 87", distance 110, metric 60, type extern 1
Redistributing via ospf 87
Last update from 172.25.1.5 on Ethernet0, 00:01:20 ago
Routing Descriptor Blocks:
* 172.25.1.5, from 172.25.25.1, 00:01:20 ago, via Ethernet0
Route metric is 60, traffic share count is 1
Router5#

CCIE boot camp to organize for this CCIE Exam

December 28th,2011    by Nicholas

Obtaining CCIE certification is essential to stand forward among the many crowd and to get paid high salaries. You need to put in lot of efforts with instructor led coaching to go the examination and get the CISCO credentials. You can use Google to locate online courses to organize for the written exam and without spending a dime books.

CCIE certification is most respected one throughout the world. It's good to prepare properly to be able to clear this exam. It is also costly examination. Only less than ten p.c of professionals, who appeared for CCIE examination, will pass the examination. Subsequently, people, who wish to get acknowledged with this prestigious examination among the many crowd and to get a extremely paid job, have to put in efforts to learn vigorously for this exam. You possibly can search for the help of CCIE boot camp to organize for this exam.

CCIE examination requires you to clear two parts namely the written examination and the lab examination. The written examination is of two hours duration. You need to pay US$250 per every attempt. You can either attend instructor led coaching courses or select online courses to prepare for the written examination. You may go this examination with ease. You'll want to acquire at least 300 out of one thousand to clear this examination. CISCO also presents many text books and online material that can assist you to organize for the written examination. Professionals, who are already working in the networking area, can simply perceive the theoretical and sensible networking concepts to simply cross the examination.

IT professionals, who have handed the written examination, need to register for the CCIE lab inside three years to get the coveted certification from the Internetworking leader - CISCO. It is advisable to pay US$1400 for the lab examination. It is the hardest part of the certification. You need to put in at the very least 9 months to prepare for the lab examination, which is of eight hours duration. You have to clear the lab examination in the first try to get CCIE certification. Otherwise, you have to pay US$1400 for the examination again.

I recommend you to decide on teacher led coaching for the lab examination. The lab is especially geared toward imparting sensible training in all points of the CCIE networking security. It's essential to pay large sums for the training. Subsequently, it is best to put together to pay for the training as well as the examination fees.

With teacher led training, you possibly can easily understand numerous features of the sensible networking concepts. You should choose a center that provides training by experienced instructors. You must read the CCIE workbook and observe the labs repeatedly until you're aware of each networking concept. CCIE boot camp will have necessary amenities to help you perceive the ideas by way of essential lab lessons utilizing CCIE workbook. People, who've thorough data in CCIE networking, can skip this step. I like to recommend you to endure teacher led coaching to grasp all of the concepts.

Professionals, who are unable to pay for the teacher led training, might simulate the lab at their residence by buying essential components and practising it with the assistance of CCIE Voice Workbook. The basic thing to apply the lab is doing the workout routines repeatedly till you master the course and its concepts using CCIE workbook. You might want to spend lengthy days and nights before one month of showing for the lab exam.

That you must examine with CISCO to about the latest modifications within the syllabus and the examination sample to get CCIE certification. The 4 open ended core data questions can be faraway from the CCIE safety lab examination with efficient from 15 August 2011. The professionals can make the most of this time to give attention to the troubleshooting and configuration aspects.

Ready for CCIE Exam in CCIE Bootcamp

December 27th,2011    by Nicholas

CCIE Bootcamp is required to coach the applicants for the CCIE exams properly. All the necessary info and coaching are offered in bootcamp. Cathay Faculty is without doubt one of the famous institutes offering good high quality training. The passing price is above ninety%.

CCIE is considered because the world's most prestigious and nicely-renowned certification in the networking industry. It is aimed to pick the experts within the networking business for the renowned company providing solutions to the technical departments. With a view to get CCIE certification the applicants have to move via two necessary choice tests. Firstly, the written test is to be passed and then the candidates can sit for the Lab test. The short-listed candidates can only have CCIE certification. In order to prepare for the CCIE exams, CCIE Bootcamp is designed.

CCIE Bootcamps present essentially the most handy manner of passing out the exams of CCIE. There are a number of firms reasonably institutes which provide CCIE Bootcamp coaching corresponding to Cathay School. With a view to turn into eligible for the bootcamps the institutes usually present a prerequisite. It helps to boost the chance of the applicants to pass the CCIE exams in a better manner than others. This prerequisite is named CCNP status.

CCIE Bootcamp is accompanied with several techniques to deliver one of the best preparation materials to the students. They mainly provide some should-have books to prepare them for the written CCIE take a look at along with some web access for the Lab test. Relying on these two categories the CCIE Bootcamps is split into two sections. The divisions are class structure and the Lab simulation. The class structure includes two phases and they're hands-on coaching and lectured-primarily based classes. In the class construction the scholars are provided with the data of Bit splitting, VLSM etc. But the lab simulation is a very powerful a part of CCIE Bootcamp. Right here the scholars are subjected to handle a number of actual-life problems and the troubleshooting abilities are checked properly. That is the ultimate stage of CCIE Bootcamp the place the scholars are properly-ready for the Blueprintv4, MPLS etc. These methodologies assist college students to troubleshoot any actual-life issues and improve the flexibility to seek out out the right solutions.

With a view to turn out to be a CCIE expert the scholars usually take the help of the bootcamps. However there are few dependable institutes obtainable out there which delivers comprehensive CCIE Bootcamps. One of many well-famend institutes is Cathay College which renders excellent companies in case of bootcamps for CCIE. They supply bootcamp amenities to huge variety of students from a number of corners of the world like Australia, Norway, UK, Sweden, USA and so many more. In line with the statistics of this institute from 2005, they're sustaining report number of share of passing fee in CCIE exam. This document is itself a sort of guarantee for them. There are several reasons to pick Cathay College for CCIE Bootcamps. The document number of passing rate of almost 90% is essentially the most engaging feature of it. Other than it, one other excellent feature is the one-to-one lab training which assist the scholars to clear out all the doubts concerning any problem from the instructors.

The required data concerning the bootcamp is obtainable to the dependable firm web site which is cathayschool.com. It is a very convenient web site which offers a number of hanging amenities like online Self-Study CCIE Lab Workbooks, one-on-one online training, Teacher Led coaching etc. All of the amenities and the course durations along with the funds are properly-described right here such that the customers wouldn't have to face any form of hassle relating to CCIE Bootcamps.