To Tyson's point. If you think a configuration feature is missing from the ios version on the lab, my guess is that you are missing what the question is asking. If they ask you to do something it should work on the code. I think the process that you are struggling with will solidify your knowledge on the lab. There is no perfect version of code, but I doubt you'll be asked to do anything that can't work properly on the version of code supplied.
On Jan 23, 2010, at 10:34 AM, ccie_security- [email protected] wrote: > Send CCIE_Security mailing list submissions to > [email protected] > > To subscribe or unsubscribe via the World Wide Web, visit > http://onlinestudylist.com/mailman/listinfo/ccie_security > or, via email, send a message with subject or body 'help' to > [email protected] > > You can reach the person managing the list at > [email protected] > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of CCIE_Security digest..." > > > Today's Topics: > > 1. Re: What if? (Paul Alexander) > 2. Re: What if? (Tyson Scott) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 23 Jan 2010 15:08:05 +0000 > From: Paul Alexander <[email protected]> > Subject: Re: [OSL | CCIE_Security] What if? > To: Tyson Scott <[email protected]> > Cc: [email protected] > Message-ID: > <[email protected]> > Content-Type: text/plain; charset="utf-8" > > Managed to test this further. Yep, it deffinately works on 124-24.T > > Tested on two other routers with varied configurations (124-15) and > not a > single match. > > > > On Fri, Jan 22, 2010 at 9:48 PM, Tyson Scott <[email protected]> > wrote: > >> Paul, >> >> >> >> Did you check the IOS version running on the device. There should >> be two >> version of IOS in the flash of all the routers. 12.4(15)T9 and 12.4 >> (24)T2. I >> would suggest testing with both. I haven't had any problems with >> the later >> image. >> >> >> >> Most likely you would fail the script but it should be caught on >> the manual >> grading if you are close enough to passing. >> >> >> >> Regards, >> >> >> >> Tyson Scott - CCIE #13513 R&S, Security, and SP >> >> Technical Instructor - IPexpert, Inc. >> >> Mailto: [email protected] >> >> Telephone: +1.810.326.1444, ext. 208 >> >> Live Assistance, Please visit: www.ipexpert.com/chat >> >> eFax: +1.810.454.0130 >> >> >> >> IPexpert is a premier provider of Classroom and Self-Study Cisco >> CCNA (R&S, >> Voice & Security), CCNP, CCVP, CCSP and CCIE (R&S, Voice, Security >> & Service >> Provider) Certification Training with locations throughout the United >> States, Europe and Australia. Be sure to check out our online >> communities at >> www.ipexpert.com/communities and our public website at www.ipexpert.com >> >> >> >> *From:* [email protected] [mailto: >> [email protected]] *On Behalf Of *Paul >> Alexander >> *Sent:* Friday, January 22, 2010 4:26 PM >> *To:* [email protected] >> *Subject:* [OSL | CCIE_Security] What if? >> >> >> >> Evening all, >> >> >> I just did Yusufs LAB1 today and ran into an all too common >> problem. Right >> configs that don't work... >> >> I spent a good amount of time on the FPM task which I knew was >> right. It >> was a basic config, match specific destination IP of telnet traffic >> and drop >> it. Only difference was that it was on the control-plane rather >> than an >> interface. >> >> It just wouldn't match anything. I rebooted the device, re-added >> config, >> and even stripped it back to a simpler policy. >> >> When I reviewed the lab, my config was identical to the solution. >> >> Did anyone else have problems with this task? It's a long shot but >> do all >> racks run the same IOS versions? >> >> How would this be marked in the real lab if my config was right? >> The actual >> result would have been that telnet still gets through...Is this >> taken into >> consideration do you think when its a known fact that some of the >> security >> technologies are renowned for behaving strangely? >> >> If you're sure that you had something right that clearly wasn't >> working, >> what would you do? >> >> I'm wondering if its worth screwing around with it once my other >> tasks are >> completed, or just spend 20 minutes checking other tasks - hoping >> that they >> mark based on config rather than result? >> >> >> Look forward to any ones thoughts on the matter, >> >> >> Paul >> >> >> >> >> >> >> >> >> >> > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > http://onlinestudylist.com/pipermail/ccie_security/attachments/20100123/ff2971f6/attachment-0001.htm > > ------------------------------ > > Message: 2 > Date: Sat, 23 Jan 2010 10:34:36 -0500 > From: "Tyson Scott" <[email protected]> > Subject: Re: [OSL | CCIE_Security] What if? > To: "'Paul Alexander'" <[email protected]> > Cc: [email protected] > Message-ID: <002101ca9c41$92cbaf70$b8630e...@com> > Content-Type: text/plain; charset="utf-8" > > Paul, > > > > I have said this several times on this forum but this has been a > frustrating aspect of the new test. Getting things to always work. > I will see about getting the latest software for 12.4(15)T, I know > there is a T11 release, maybe even something newer that will solve > issues like this. > > > > As far as studying goes you kind of have to take the good with the > bad to make sure you are learning all the concepts but most likely > in the test there should not be questions in the test that do not > work on the revision of code they are running in the test. > > > > I know you said you are pretty close here so good luck on your up > and coming test. > > > > Regards, > > > > Tyson Scott - CCIE #13513 R&S, Security, and SP > > Technical Instructor - IPexpert, Inc. > > Mailto: <mailto:[email protected]> [email protected] > > Telephone: +1.810.326.1444, ext. 208 > > Live Assistance, Please visit: <http://www.ipexpert.com/chat> > www.ipexpert.com/chat > > eFax: +1.810.454.0130 > > > > IPexpert is a premier provider of Classroom and Self-Study Cisco > CCNA (R&S, Voice & Security), CCNP, CCVP, CCSP and CCIE (R&S, Voice, > Security & Service Provider) Certification Training with locations > throughout the United States, Europe and Australia. Be sure to check > out our online communities at <http://www.ipexpert.com/communities> > www.ipexpert.com/communities > and our public website at <http://www.ipexpert.com> www.ipexpert.com > > > > From: [email protected] [mailto:[email protected]] > On Behalf Of Paul Alexander > Sent: Saturday, January 23, 2010 10:08 AM > To: Tyson Scott > Cc: [email protected] > Subject: Re: [OSL | CCIE_Security] What if? > > > > Managed to test this further. Yep, it deffinately works on 124-24.T > > Tested on two other routers with varied configurations (124-15) and > not a single match. > > > > > On Fri, Jan 22, 2010 at 9:48 PM, Tyson Scott <[email protected]> > wrote: > > Paul, > > > > Did you check the IOS version running on the device. There should > be two version of IOS in the flash of all the routers. 12.4(15)T9 > and 12.4(24)T2. I would suggest testing with both. I haven't had > any problems with the later image. > > > > Most likely you would fail the script but it should be caught on the > manual grading if you are close enough to passing. > > > > Regards, > > > > Tyson Scott - CCIE #13513 R&S, Security, and SP > > Technical Instructor - IPexpert, Inc. > > Mailto: [email protected] > > Telephone: +1.810.326.1444, ext. 208 > > Live Assistance, Please visit: www.ipexpert.com/chat > > eFax: +1.810.454.0130 > > > > IPexpert is a premier provider of Classroom and Self-Study Cisco > CCNA (R&S, Voice & Security), CCNP, CCVP, CCSP and CCIE (R&S, Voice, > Security & Service Provider) Certification Training with locations > throughout the United States, Europe and Australia. Be sure to check > out our online communities at www.ipexpert.com/communities and our > public website at www.ipexpert.com > > > > From: [email protected] > [mailto:[email protected]] On Behalf Of Paul > Alexander > Sent: Friday, January 22, 2010 4:26 PM > To: [email protected] > Subject: [OSL | CCIE_Security] What if? > > > > Evening all, > > > > I just did Yusufs LAB1 today and ran into an all too common problem. > Right configs that don't work... > > I spent a good amount of time on the FPM task which I knew was > right. It was a basic config, match specific destination IP of > telnet traffic and drop it. Only difference was that it was on the > control-plane rather than an interface. > > It just wouldn't match anything. I rebooted the device, re-added > config, and even stripped it back to a simpler policy. > > When I reviewed the lab, my config was identical to the solution. > > Did anyone else have problems with this task? It's a long shot but > do all racks run the same IOS versions? > > How would this be marked in the real lab if my config was right? The > actual result would have been that telnet still gets through...Is > this taken into consideration do you think when its a known fact > that some of the security technologies are renowned for behaving > strangely? > > If you're sure that you had something right that clearly wasn't > working, what would you do? > > I'm wondering if its worth screwing around with it once my other > tasks are completed, or just spend 20 minutes checking other tasks - > hoping that they mark based on config rather than result? > > > Look forward to any ones thoughts on the matter, > > > Paul > > > > > > > > > > > > > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > http://onlinestudylist.com/pipermail/ccie_security/attachments/20100123/239fe43f/attachment.htm > > End of CCIE_Security Digest, Vol 43, Issue 78 > ********************************************* _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
