From: Scott Morris (swm@emanon.com)
Date: Sun Feb 25 2007 - 20:46:20 ART
If you do detailed checks as you do, you should be able to develop a
checklist (I tell students to jot down the point section titles with # of
points) to fully check off when you have completed and verified all tasks in
the section.
When you get to the end of the day, if you still have lots of time left
(often doing detailed checks as you go both eat up and obviate the recheck
of everything), you can cruise through the important ones.
As you go through the stuff later in the lab, you should be aware of what
tasks may affect earlier ones, so this again can assist in your detailed
"as-you-go" checking.
In the end, both methods check through everything which is absolutely the
best way to do things. The difference though (IMHO) is that as-you-go makes
it simpler to troubleshoot exactly what went wrong since the last things you
had working, and also avoids the paranoia/fear-change at the end of the day
that causes you to doubt what you were thinking earlier since your brain is
simply reviewing rather than being "in the zone" and thinking like the
router is along the way.
But any time you go through and plan the work and have the opportunity to
work your plan, that is the level of organization that you need to tackle
the lab.
Remember that any complicated task is simply a collection of simple
tasks....
Scott Morris, CCIE4 (R&S/ISP-Dial/Security/Service Provider) #4713, JNCIE
#153, CISSP, et al.
CCSI/JNCI-M/JNCI-J
IPexpert VP - Curriculum Development
IPexpert Sr. Technical Instructor
smorris@ipexpert.com
http://www.ipexpert.com
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
dagbo
Sent: Sunday, February 25, 2007 1:50 PM
To: Darby Weaver; Elias Chari; Daniel_Steyn@dell.com
Cc: ccielab@groupstudy.com
Subject: Re: Final checks
Thanks all, and Darby - I agree. It doesn't matter what you call it - we all
do it. You just got done configuring frame-relay - what do you do? Show
frame-r map of course. Why? To make sure you did what you think you did. I'm
not saying to not check as you go. Heck, those are checklists too, and very
crucial.
So the question is - you have time left (because you've worked hard and were
prepared). Now what? Call me crazy, but I am not walking out two hours
before my time is up. I've got 8 hours, and I personally plan on using every
minute. So here is what I will try to do before I leave the building:
Final Checks
=======================================
1) I will reload all devices if time permits before doing these tests (and
right before lunch)
2) I will use ping scripts and macros
a) IGP
b) EGP/BB routes
c) IPv6
3) I will 'debug ip routing' on all devices (and turn off)
4) I will verify all access-lists
a) deny any any or permit any any at end if needed
b) same thing with route maps
c) log an access-list only if needed
d) insure source port, source IP, dest port, dest IP are correct of
access-lists are correct
5) I will re-read the entire lab and check for inaccuracies and missed
steps, verifying my configs as I go
6) I will use a tcl script to measure success on earlier requirements (I
build this as I go).
For example:
I was required to make the route to 10.0.0.0/24 comes from R3 I was required
to not have any dynamic frame-r mappings NTP server is 192.10.1.254 Block
pings coming back from 204.12.1.254 Be able to ping 224.24.24.24 from R5
So as I hit these, I will build a notepad file that does this:
tclsh
sho ip route 10.0.0.0 255.255.255.0 ! SHOULD COME FROM R3 sho frame-r map |
in ST sho frame-r map | in dlci sho ntp stat | in sync sho ntp assoc | be
add ping 204.12.1.254 ! THIS SHOULD FAIL - STEP 8.3 ping 224.24.24.24 ! THIS
MUST WORK FROM R5 F0/0
Anyways, you get the point I'm sure. For those who don't subscribe to this
madness, click delete and move on. For those who do - what am I missing?
thanks,
Dave
This archive was generated by hypermail 2.1.4 : Thu Mar 01 2007 - 07:38:48 ART