RE: CCIE Security V3 LAB on GNS3 and dynamips ?

Prashant,

Unfortunately not everything can be completed in Dynamips. The IPS for
VMware is an emulation of the 4215. 4215 doesn't support IPS 6.1.X which is
what the test covers. Can you learn a lot doing 6.0? Of course you can and
it will help to prepare using it but you still will need to get your hands
on a real rack to use 6.1 because there are a significant amount of
differences between the two. I hope a Linux expert smarter than me is able
to figure out how to crack it eventually.

PEMU can be used to run ASA code but most people have found it to be
problematic. You probably won't be able to run a full lab at the same time
you are running ASA on it. But you would be able to run PIX on it with
version 8.0 which will cover 90% of the material.

If you use the 3725/3745 routers you will be able to do 99% of what can be
done on routers. The couple things that you will miss is Firewall stateful
failover and VPN stateful failover. But almost everything else will be
configurable.

Needless to say the biggest downfall is the IPS which really is the easiest
thing to learn though.

There may be some other minor things but I can't think of anything else that
you will not be able to do.

Regards,
 
Tyson Scott - CCIE #13513 R&S and Security
Technical Instructor - IPexpert, Inc.

Telephone: +1.810.326.1444
Cell: +1.248.504.7309
Fax: +1.810.454.0130
Mailto: tscott_at_ipexpert.com
 

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
jockey wearer
Sent: Thursday, April 30, 2009 3:27 AM
To: security; GS CCIE-Lab
Subject: CCIE Security V3 LAB on GNS3 and dynamips ?

Dear All,

Can I prepare my full LAB by using (GNS3,dynamips) as I know we can
emulate IPS ,ASA,PIX
ACS on system?
Can I use IExpert workbook Or IPexpert workbook for LAB as CCIE
Security V3 excluded VPN concentrator from blueprint ?
IExpert has special LABS for R/S dynamips but do they haven any labs
for security ?

any ideas, really helpfull

Thanks
Prashant

Blogs and organic groups at http://www.ccie.net
Received on Thu Apr 30 2009 - 12:47:15 ART