Re: EIGRP authentication using key chain with validity period

I would agree with Narbik and Anthony. I know as well s anyone else that the
lab is not a test of best practices, BUT I would never build a network ( and
I've designed and implemented many ) without the idea that my configuration
would survive a reload.

Thanks
Larry Hadrava
CCIE #12203 CCNP
Sr. Support Engineer  IPexpert, Inc.
URL: http://www.IPexpert.com

On Sat, Jul 11, 2009 at 4:21 PM, Anthony Sequeira <asequeira_at_ine.com> wrote:

> Yeah - I certainly agree.
>
> From a strategy perspective, I like to have my students save and reload,
> then test reachability again as part of their final lab wrap-up. And the
> idea is to have plenty of time to note and fix any issues following the
> reload.
>
> Warmest Regards,
>
> Anthony J. Sequeira, CCIE #15626
> http://www.INE.com <http://www.ine.com/>
>
>
> On Jul 11, 2009, at 4:02 PM, Narbik Kocharians wrote:
>
> I think the best thing to do is configure your routers and switches such
>> that it would survive a reload.
>>
>> On Sat, Jul 11, 2009 at 11:10 AM, Darby Weaver <ccie.weaver_at_gmail.com
>> >wrote:
>>
>> Agreed. However I've been to some classes where some might lead students
>>> to
>>> think otherwise. Proctors will warn of power fluctuations or small
>>> outages
>>> and one should always be prepared for this type of contingency.
>>>
>>> On Sat, Jul 11, 2009 at 2:05 PM, Scott Morris <smorris_at_ine.com> wrote:
>>>
>>> Nope, they don't touch 'em. There's enough other show commands to know
>>>> who will be DR after a reload! :) They only used to in the two-day
>>>> format.
>>>>
>>>>
>>>>
>>>>
>>>> *Scott Morris*, CCIE/x4/ (R&S/ISP-Dial/Security/Service Provider) #4713,
>>>>
>>>> JNCIE-M #153, JNCIS-ER, CISSP, et al.
>>>>
>>>> JNCI-M, JNCI-ER
>>>>
>>>> evil_at_ine.com
>>>>
>>>>
>>>> Internetwork Expert, Inc.
>>>>
>>>> http://www.InternetworkExpert.com <http://www.internetworkexpert.com/><
>>>> http://www.internetworkexpert.com/> <
>>>>
>>> http://www.internetworkexpert.com/>
>>>
>>>>
>>>> Toll Free: 877-224-8987
>>>>
>>>> Outside US: 775-826-4344
>>>>
>>>>
>>>> Knowledge is power.
>>>>
>>>> Power corrupts.
>>>>
>>>> Study hard and be Eeeeviiiil......
>>>>
>>>>
>>>>
>>>> Hammer wrote:
>>>>
>>>>> Scott,
>>>>> I thought that the proctors usually reloaded the rack before
>>>>> grading? To make sure OSPF DRs were set right and whatnot. I know it
>>>>> can all be gleamed from configs "ip ospf priority blah" but I thought
>>>>> that they mostly did show commands to grade you in the scripting. Is
>>>>> bouncing the rack something they used to do but not anymore?
>>>>>
>>>>> -Hammer
>>>>>
>>>>>
>>>>> On Sat, Jul 11, 2009 at 7:01 AM, Scott Morris <smorris_at_ine.com
>>>>> <mailto:smorris_at_ine.com>> wrote:
>>>>>
>>>>> The ISR routers used on the real lab have a CMOS clock, so they
>>>>>
>>>> will
>>>
>>>> retain their time on reload.
>>>>>
>>>>> Your lab will not be reloaded prior to grading.
>>>>>
>>>>>
>>>>> Anh Khoa Le Viet wrote:
>>>>>
>>>>>> Hi Group,
>>>>>>
>>>>>> I took a mock lab from a vendor today with task about the EIGRP
>>>>>> authentication: An MD5 hash of the password CISCO1 should be
>>>>>>
>>>>> used from
>>>>>
>>>>>> 12:00AM on
>>>>>> 1/1/2006 to 11:59PM on 12/31/2006 and An MD5 hash of the
>>>>>>
>>>>> password CISCO2
>>>>>
>>>>>> should be used after this. I think I come out with the right
>>>>>>
>>>>> solution:
>>>>>
>>>>>>
>>>>>> key chain EIGRP
>>>>>> key 1
>>>>>> key-string CISCO1
>>>>>> accept-lifetime 00:00:00 Jan 1 2006 00:29:59 Jan 1 2007
>>>>>> send-lifetime 00:00:00 Jan 1 2006 11:59:59 Dec 31 2006
>>>>>> key 2
>>>>>> key-string CISCO2
>>>>>> accept-lifetime 00:00:00 Jan 1 2007 infinite
>>>>>> send-lifetime 00:00:00 Jan 1 2007 infinite
>>>>>>
>>>>>> But the thing is: do we need to configure ntp server and client
>>>>>>
>>>>> for this
>>>>>
>>>>>> kind of task? At the time I did the configuration, the clock
>>>>>>
>>>>> showed in
>>>>>
>>>>>> Routers is 2009 year time. But at the end of the lab, I did
>>>>>>
>>>>> reboot all the
>>>>>
>>>>>> routers and found out that EIGRP did come up, quickly found that
>>>>>>
>>>>> the clock
>>>>>
>>>>>> was back to 2002 and no EIGRP neighbors came up :(. We can not
>>>>>>
>>>>> do set
>>>>>
>>>>>> datetime manually on the routers as if we reboot, it will came
>>>>>>
>>>>> back to
>>>>>
>>>>>> default datetime, so the only option is NTP.
>>>>>>
>>>>>> Could you pleas give some advise on this kind of task? Should we
>>>>>>
>>>>> add NTP in
>>>>>
>>>>>> the real lab or no need to do that if in the IP Services
>>>>>>
>>>>> portion, no NTP
>>>>>
>>>>>> task?
>>>>>>
>>>>>> Thanks and best Regards,
>>>>>> Khoa
>>>>>>
>>>>>>
>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>
>>>>>>
>>>>>>
>>>>> _______________________________________________________________________
>>>>
>>>>> Subscription information may be found at:
>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>
>>>>>
>>>>>
>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>
>>>>>
>>>>> _______________________________________________________________________
>>>>
>>>>> Subscription information may be found at:
>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>
>>>>
>>>>
>>>> Blogs and organic groups at http://www.ccie.net
>>>>
>>>> _______________________________________________________________________
>>>> Subscription information may be found at:
>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>> --
>> Narbik Kocharians
>> CCSI#30832, CCIE# 12410 (R&S, SP, Security)
>> www.MicronicsTraining.com <http://www.micronicstraining.com/>
>> Sr. Technical Instructor
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sat Jul 11 2009 - 16:29:33 ART