Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
BaseballPCHiker
Jan 16, 2006

MrBigglesworth posted:

What is the exact logic of locking out some functionality that every router/switch on the test, that in the real would would have available to you?

I have my 100-101 ICND1 scheduled tomorrow.

I think part of it is that it's probably easier for them to create the sim questions by limiting the command list. If you're taking the ICND1 really just have a good knowledge of the show commands for the most part to get the info that the test is asking for.

Adbot
ADBOT LOVES YOU

Feels Villeneuve
Oct 7, 2007

Setter is Better.
When I was taking ICND1/2 this year, the only thing that I remember being locked out was pipe (which would have made some long show commands easier to use). ? worked.

MrBigglesworth
Mar 26, 2005

Lover of Fuzzy Meatloaf
So off the top of my head

show ip interface brief
show vlan brief
show interface faXX switchport
show port-security
show ip route
show ip ospf neighbor
show ip ospf database
show ip ospf interface
show history
show version
show ip access-lists
show cdp
show cdp neighbors
show cdp neighbors detail
show running-configuration
show startup-configuration
show ip nat statistics
show ip nat translations

This is just what I was able to poo poo out in a few seconds....enough or do I need more than that?

MrBigglesworth fucked around with this message at 19:56 on Jul 10, 2014

BaseballPCHiker
Jan 16, 2006

MrBigglesworth posted:

So off the top of my head

show ip interface brief
show vlan brief
show interface faXX switchport
show port-security
show ip route
show ip ospf neighbor
show ip ospf database
show ip ospf interface
show history
show version
show ip access-lists
show cdp
show cdp neighbors
show cdp neighbors detail
show running-configuration
show startup-configuration
show ip nat statistics
show ip nat translations

This is just what I was able to poo poo out in a few seconds....enough or do I need more than that?

Haha you are in full test mode! Good for you, I think you'll do fine. Knowing all of those are great, I can't think of any that you dont listed that would be on the test.

MrBigglesworth
Mar 26, 2005

Lover of Fuzzy Meatloaf
Im just getting really nervous as I have been on an off of studies for CCNA for 13 years, with only REALLY getting into it since last November and finally getting a job in networking. I did hell desk for 11 of those years, with only looking at Cisco stuff from a distance and never really taking that first step since exposure to it in 2001ish.

I got my Security+ in April, failed of the MCSA 2008 tests because MSFT tests can suck a bag of rancid dicks.

OhDearGodNo
Jan 3, 2014

The ICND 1 test consists of subnetting, subnetting, remote access, subnetting, protocols, MAC address tables, switch port security, subnetting, ospf, and subnetting.


e: also subnetting.

MrBigglesworth
Mar 26, 2005

Lover of Fuzzy Meatloaf
I have subnetting down hard. What aspects of remote access are you referring to? Configuration of VTY lines?

Thirteenth Step
Mar 3, 2004

MrBigglesworth posted:

I have subnetting down hard. What aspects of remote access are you referring to? Configuration of VTY lines?

Its been a while since I did ICND1 (so long that it's expired) but I think there's some browser access in there too so have knowledge of how to enable http access and know your way around the SDM (i think that's what it's called)

OhDearGodNo
Jan 3, 2014

MrBigglesworth posted:

I have subnetting down hard. What aspects of remote access are you referring to? Configuration of VTY lines?

I took it Tuesday

ssh, vty/con, service. local, input protocols.

MrBigglesworth
Mar 26, 2005

Lover of Fuzzy Meatloaf
I have that down cold too. The Netacad packet tracers drilled that hard early on.

psydude
Apr 1, 2008

Heartache is powerful, but democracy is *subtle*.
Completed the last CEUs on Skillsoft to renew my Security+ CE today. Pain in the rear end, but cheaper than retaking the exam all together. I was able to test out of like 80% of them, which certainly helped.

eonwe
Aug 11, 2008



Lipstick Apathy
Well I got a 933/1000 on ICND1. It really wasn't so bad. There were multiple questions about what a switch would do when it received a frame with a MAC address it didn't know. :wtc:

Also their simulator is complete dogshit compared to the sims that the Pearson Network Simulator study materials had.

MrBigglesworth
Mar 26, 2005

Lover of Fuzzy Meatloaf
If a switch gets a frame with a mac it doesn't know it floods all ports (except the one it came in on) with a broadcast to FF FF FF FF FF FF to ARP the MAC.

Congrats, I take mine in 40 minutes.

MrBigglesworth fucked around with this message at 20:30 on Jul 11, 2014

Feels Villeneuve
Oct 7, 2007

Setter is Better.
890/1000 on CCNA Security, unfortunately, the pass mark is 900 :saddowns:

Mostly the "boring" policy-based questions that got me, so time to read the really dry parts of the book again.

wargames
Mar 16, 2008

official yospos cat censor
Is there any Hippa certs out there or the CHP there just for your money?

incoherent
Apr 24, 2004

01010100011010000111001
00110100101101100011011
000110010101110010
HIPPA certs are a con on stupid management. I'm getting one, but the government does not recognise any of them.

MrBigglesworth
Mar 26, 2005

Lover of Fuzzy Meatloaf
I just 960'd this motherfucker!!!!

Docjowles
Apr 9, 2009

Grats nerds

Dilbert As FUCK
Sep 8, 2007

by Cowcaster
Pillbug
CCNA/CCNP Datacenter certs own.

It's like the perfect cert for people who do systems work while also tackling networking and stuff.

the real blah
Oct 31, 2010

MrBigglesworth posted:

If a switch gets a frame with a mac it doesn't know it floods all ports (except the one it came in on) with a broadcast to FF FF FF FF FF FF to ARP the MAC.

Congrats, I take mine in 40 minutes.

Well, you passed, but this is incorrect.

I have my 100-101 scheduled for the 16th, but I may push it a week because of procrastination/crappy work schedule this week.

For some reason I've been avoiding certs even though I've been working with this stuff for a while and know a lot of it. It's not even it being a test that bothers me, I never had test anxiety in school. I wanted to just take it because I feel once I take one test, I'll be over the initial hurdle and will be OK taking more.

1000101
May 14, 2003

BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY FRUITCAKE!

incoherent posted:

HIPPA certs are a con on stupid management. I'm getting one, but the government does not recognise any of them.

As a first step: HIPAA not HIPPA

http://www.hhs.gov/ocr/privacy/

Dilbert As FUCK
Sep 8, 2007

by Cowcaster
Pillbug

1000101 posted:

As a first step: HIPAA not HIPPA

http://www.hhs.gov/ocr/privacy/

Question:

CCNP-DC(DCUCI) were you that challenged my the questions or was it more of a "really they are asking me this?" on the exam.


I think they are great to new comers but wow do they fall short in some advanced things.

MrBigglesworth
Mar 26, 2005

Lover of Fuzzy Meatloaf

the real blah posted:

Well, you passed, but this is incorrect.

I have my 100-101 scheduled for the 16th, but I may push it a week because of procrastination/crappy work schedule this week.

For some reason I've been avoiding certs even though I've been working with this stuff for a while and know a lot of it. It's not even it being a test that bothers me, I never had test anxiety in school. I wanted to just take it because I feel once I take one test, I'll be over the initial hurdle and will be OK taking more.

How is that incorrect? If a frame comes in, the switch will record the mac of whatever sent the frame, if it isnt already in the mac table. (If the MAC was already there, it just then forwards to that MAC) It then looks at the rest of the table and does a lookup to see if it already knows about the destination MAC if it isn't there, then it sends a flood broadcast to all other active switch ports to see who responds to the ARP request and the MAC will be recorded in the table for quicker lookup before it clears out after a set time. A resource on the network that says, hey I have this IP, it then responds to the request, the switch records who responded, all other devices discard the frame because the request wasn't for them.

MrBigglesworth fucked around with this message at 05:07 on Jul 13, 2014

OhDearGodNo
Jan 3, 2014

the real blah posted:

Well, you passed, but this is incorrect.


what? :psyduck:

That's exactly what a switch does with an unknown destination MAC.

1000101
May 14, 2003

BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY FRUITCAKE!

Dilbert As gently caress posted:

Question:

CCNP-DC(DCUCI) were you that challenged my the questions or was it more of a "really they are asking me this?" on the exam.


I think they are great to new comers but wow do they fall short in some advanced things.

Mostly pedantic memorization of various details around unified compute. Should know how to do an integration of UCS within a 100% cisco environment, policies, templates, etc.

Also here's a CBT nuggets video on installing the platform emulator to get accustomed to the UI/UCS manager:

https://www.youtube.com/watch?v=HP9M3ArwDkQ

the real blah
Oct 31, 2010

MrBigglesworth posted:

How is that incorrect? If a frame comes in, the switch will record the mac of whatever sent the frame, if it isnt already in the mac table. (If the MAC was already there, it just then forwards to that MAC) It then looks at the rest of the table and does a lookup to see if it already knows about the destination MAC if it isn't there, then it sends a flood broadcast to all other active switch ports to see who responds to the ARP request and the MAC will be recorded in the table for quicker lookup before it clears out after a set time. A resource on the network that says, hey I have this IP, it then responds to the request, the switch records who responded, all other devices discard the frame because the request wasn't for them.

A switch will never send out an ARP. Switches are layer 2 and don't look at IP addresses. For a source MAC it doesn't know, it'll record it in its table. for a destination MAC it doesn't know, it will forward it as is (it won't change to the broadcast ff-ff-ff-ff-ff-ff) out all ports except the one it received it on. It's the Layer 3 device's (router, client, etc.) responsibility to perform an ARP when it doesn't know what MAC address it should associate with a given IP. Someone please, please correct me if I am wrong.

Edit: To clarify, a pure L2 switch. It'll arp from a vlan interface when communicating from that interface(which has an ip and is layer 3,) but not when it's just receiving and passing frames as a switch.

the real blah fucked around with this message at 06:51 on Jul 13, 2014

YOLOsubmarine
Oct 19, 2004

When asked which Pokemon he evolved into, Kamara pauses.

"Motherfucking, what's that big dragon shit? That orange motherfucker. Charizard."

If the switch changed the destination MAC to broadcast then all recipient ports would accept the frame, which is the opposite of what you want to happen.

1000101
May 14, 2003

BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY FRUITCAKE!

MrBigglesworth posted:

If a switch gets a frame with a mac it doesn't know it floods all ports (except the one it came in on) with a broadcast to FF FF FF FF FF FF to ARP the MAC.

Congrats, I take mine in 40 minutes.

Probably beating a dead horse at this point but don't confuse the ARP table with the ethernet forwarding table/CAM table/MAC table. While a switch can learn about where things are based on things like ARP requests it won't necessarily add these ARP entries itself.

Here's an example of an ARP table off one of my lab switches:
code:
hq-l-nx-csw1# show ip arp

Flags: * - Adjacencies learnt on non-active FHRP router
       + - Adjacencies synced via CFSoE
       # - Adjacencies Throttled for Glean
       D - Static Adjacencies attached to down interface

IP ARP Table for context default
Total number of entries: 251
Address         Age       MAC Address     Interface
10.13.0.3       00:14:08  547f.eec2.823c  Vlan401
10.14.1.3       00:13:55  547f.eec2.823c  Vlan301
10.14.0.3       00:14:13  547f.eec2.823c  Vlan300
10.14.0.5       00:00:05  0050.56b7.3fa9  Vlan300
10.14.0.71      00:00:08  0050.56b7.09b4  Vlan300
10.14.0.75      00:00:20  0050.56b7.54dc  Vlan300
10.14.0.91      00:00:14  0050.56b7.28ea  Vlan300
10.14.0.92      00:00:20  0050.56b7.391e  Vlan300
10.14.0.94      00:00:08  0050.56b7.696d  Vlan300
...
10.1.17.1          -      0000.0c9f.f01b  Vlan27
10.1.16.1          -      0000.0c9f.f01a  Vlan26
10.1.12.1          -      0000.0c9f.f015  Vlan22
10.1.9.1           -      0000.0c9f.f013  Vlan19
10.1.6.1           -      0000.0c9f.f010  Vlan16
10.1.4.1           -      0000.0c9f.f00e  Vlan14
10.1.2.1           -      0000.0c9f.f00c  Vlan12
10.1.0.1           -      0000.0c9f.f00a  Vlan10
This is a table of layer 3 addresses to layer 2 addresses and doesn't specifically point to any physical switchport. All of the VLAN interfaces are of course SVIs and the only reason this switch has so many ARP entries is because it's the default gateway for a bunch of my VLANs.

Here's the MAC table:

code:
hq-l-nx-csw1# show mac address-table
Legend:
        * - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC
        age - seconds since last seen,+ - primary entry using vPC Peer-Link
   VLAN     MAC Address      Type      age     Secure NTFY   Ports/SWID.SSID.LID
---------+-----------------+--------+---------+------+----+------------------
+ 500      0007.430a.bc33    dynamic   0          F    F  Po1
* 401      0000.0c9f.f191    static    0          F    F  Router
* 401      002a.6aab.8a3c    static    0          F    F  Router
* 401      547f.eec2.823c    static    10         F    F  Po1
* 301      0000.0c9f.f12d    static    0          F    F  Router
* 301      002a.6aab.8a3c    static    0          F    F  Router
* 301      547f.eec2.823c    static    10         F    F  Po1
* 300      0000.0c9f.f12c    static    0          F    F  Router
* 300      002a.6aab.8a3c    static    0          F    F  Router
* 300      0050.56b7.0087    dynamic   0          F    F  Po12
* 300      0050.56b7.00c3    dynamic   0          F    F  Po11
* 300      0050.56b7.025e    dynamic   0          F    F  Po11
* 300      0050.56b7.0358    dynamic   0          F    F  Po11
* 300      0050.56b7.08c9    dynamic   0          F    F  Po11
* 300      0050.56b7.09b4    dynamic   0          F    F  Po12
* 300      0050.56b7.09ee    dynamic   10         F    F  Po11
* 300      0050.56b7.0c5d    dynamic   10         F    F  Po11
* 300      0050.56b7.10d8    dynamic   0          F    F  Po11
...
* 75       b0fa.ebab.f51d    dynamic   60         F    F  Po50
* 74       0000.0c9f.f04a    static    0          F    F  Router
* 74       0006.f612.46b1    dynamic   0          F    F  Eth1/5
* 74       0006.f612.46c2    dynamic   10         F    F  Eth1/5
* 74       002a.6aab.8a3c    static    0          F    F  Router
* 74       0050.568a.41ff    dynamic   40         F    F  Eth1/5
* 74       0050.568a.4257    dynamic   50         F    F  Eth1/5
* 74       547f.eec2.823c    static    0          F    F  Po1
...
This table only tracks MACs to switchports (most of my uplinks are port-channels out to either other switches or UCS fabric interconnects.) A switch can learn a MAC by just seeing the source MAC of an incoming frame without ARP necessarily needing to get involved.

As pointed out, unknown unicast will get flooded to all ports except the source port but it won't change the destination address to ffff.ffff.ffff.

Cyks
Mar 17, 2008

The trenches of IT can scar a muppet for life
A more casual way to put it is that it would be silly for a switch to go all "hey whose Mac is this" to everybody only to wait for a response then say "oh OK well I have this for you* when it can just say " hey if this is you I have this for you" to everybody. You cut out two unneeded packets this way.

Does anybody have any ICND1 refresher recommendations? I've taken quite a few classes in the last two years that I feel like getting the books in the OP would be overkill but I don't feel confident enough to just blindly take the test without reviewing.

some kinda jackal
Feb 25, 2003

 
 

Thirteenth Step posted:

Whats everyone's strategy for exam revision? I just looked at a video course provided by my employer and it was garbage. I took a practice exam and almost every question was something that wasn't covered (completely) in the video series. The videos were from PlauralSight which I think used to be TrainSignal but i'm not sure.

Should I try and get hold or access to CBT Nuggets? When I used to do Cisco exams there was a press eBook which everyone used to read? Is that just a Cisco thing or do MS do it too?

Don't bother too much with videos if you already know the material to a degree. Videos are great for a high-level overview for people who are just getting familiar with the material, and they do contain some good info, but I found that most video series are just there so people won't be all "what the gently caress is this??" when they pick up an actual Cisco Press or Lammle book.

They're great for a 10,000ft overview, but for specifics and scenarios you're not going to beat printed material and lab exercises.

So IMHO the best exam revision strategy is sim sim sim. Find a well recommended lab book for your subject of choice and glue yourself to the appropriate simulator/emulator/platform.

MrBigglesworth
Mar 26, 2005

Lover of Fuzzy Meatloaf
So a question on Cisco career specialization paths....

I now have my INCD1, getting ready to start studying for INCD2

I have always wanted to get my CCNA and them move into CCNP R&S.

Looking at the certs there are specialist side tracks in Voice, Security, Data Center and a few others.

Things we do where I work strongly lie along the path of Data Center.

I am wondering, the best path to take the Data Center track, it appears CCNP Data Center requires CCNA Data Center as a prereq.

Should it be

CCNA R&S>CCNA Data Center>CCNP R&S>CCNP Data Center

or

CCNA R&S>CCNP R&S>CCNA Data Center>CCNP Data Center

Wondering what would be the more beneficial/natural path for building one on top of the other.

1000101
May 14, 2003

BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY FRUITCAKE!
CCNA Datacenter covers a lot of similar basic networking that the R+S does but doesn't deal as much with things like WAN connectivity. The Datacenter track also covers a little bit of storage networking and UCS as well.


Also I did a thing Friday:



So pretty jazzed about that.

OhDearGodNo
Jan 3, 2014

Data Center doesn't use ICND1 as a prerequisite. Since you already took it, might as well finish and get a CCNA cert like R&S since it's only one exam.

I'm along the same path as you, and after thinking it over I'm going R&S to VCP to CCNADC.

Docjowles
Apr 9, 2009

1000101 posted:

Also I did a thing Friday:

:drat: Congrats, that is drat impressive. Enjoy the CCIE gravy train!

YOLOsubmarine
Oct 19, 2004

When asked which Pokemon he evolved into, Kamara pauses.

"Motherfucking, what's that big dragon shit? That orange motherfucker. Charizard."

The first CCNA DC test is basically a one test version of the CCNA R&S with the focus on NX-OS instead of IOS. The material is very similar but covered at slightly less depth. The second CCNA DC will all be distinct from the CCNA R&S. It focuses on Cisco's DC hardware portfolio and basic verification of configuration on things like UCS, FEX, 1KV, etc....it's harder to study for since there isn't much in the way of lab equipment to simulate that stuff, but the test also doesn't have too many sim questions. It does have a fair number of product specific questions such as "how many 1GbE ports are on X model switch" or "which FEX models support Y feature."

Since you're already doing the R&S path you might as well finish that, and then do CCNA DC and CCNP DC, if that's where you ultimately want to end up. However if you aren't working in a very Cisco heavy datacenter and spending a lot of time with UCS, Nexus, and 1KV then you're going to have a really hard time passing the CCNP DC.

psydude
Apr 1, 2008

Heartache is powerful, but democracy is *subtle*.

1000101 posted:

CCNA Datacenter covers a lot of similar basic networking that the R+S does but doesn't deal as much with things like WAN connectivity. The Datacenter track also covers a little bit of storage networking and UCS as well.


Also I did a thing Friday:



So pretty jazzed about that.

Congrats, dude! 12-16 weeks for your goddamned certificate? Can you at least download it from the CiscoLearning portal before then, or is that just how long it takes for them to verify the results?

1000101
May 14, 2003

BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY BIRTHDAY FRUITCAKE!

psydude posted:

Congrats, dude! 12-16 weeks for your goddamned certificate? Can you at least download it from the CiscoLearning portal before then, or is that just how long it takes for them to verify the results?

It's apparently a plaque, a paper cert, and a couple gifts. They've already assigned my number and if you go to the verification tool and punch in my information it shows me as certified.

Thing I'm looking forward to most is automatic escalation of support cases!

Yeast Confection
Oct 7, 2005

1000101 posted:

Also I did a thing Friday:



So pretty jazzed about that.

I wanna get that when I grow up. Congrats!

MrBigglesworth
Mar 26, 2005

Lover of Fuzzy Meatloaf
Very nice indeed! Id like to get CCIE some decade!

Adbot
ADBOT LOVES YOU

MrBigglesworth
Mar 26, 2005

Lover of Fuzzy Meatloaf
Any IPv6 on ICND2? Bout to crack open Odom's second book, wondering if I should bother with the 3 chapters of IPv6 in book 1 for CCENT.

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply