Re: EIGRP authentication using key chain with validity period

You're carbon-dating yourself there. :) And yes, back in the two-day
they did other nefarious things to us as well, but I still liked that
format better! Ahhhh well.

I still hate RIFs.

*Scott Morris*, CCIE/x4/ (R&S/ISP-Dial/Security/Service Provider) #4713,

JNCIE-M #153, JNCIS-ER, CISSP, et al.

JNCI-M, JNCI-ER

evil_at_ine.com

Internetwork Expert, Inc.

http://www.InternetworkExpert.com

Toll Free: 877-224-8987

Outside US: 775-826-4344

Knowledge is power.

Power corrupts.

Study hard and be Eeeeviiiil......

Hammer wrote:
> OK Everyone. Thanks for the feedback.
>
> Scott,
> Dare I admit that I took the 2-day lab back in 2000 and remember that
> they did in fact load the lab back then? :) And I also remember when little
> thinks like TR RIF decoding was an important part of the lab. Oh well.
>
> I know that there are enough commands out there to tell how things will work
> out after a reload occurs, I just didn't realize that (maybe) they had
> stopped bouncing the racks at the end of the day.
>
> Now where's that DLSW/(B)STUN config guide I was reading.....
>
> -Hammer
>
>
> On Sat, Jul 11, 2009 at 3:56 PM, Narbik Kocharians <narbikk_at_gmail.com>wrote:
>
>
>> Just a quick question, did any of the proctors say that they don't reload
>> the rack?
>>
>> On Sat, Jul 11, 2009 at 1:38 PM, Scott Morris <smorris_at_ine.com> wrote:
>>
>>
>>> While power outages aren't part of the plan, they're always possible.
>>> The impact has changed a bit now for two reasons that have been well
>>> pointed out by Cisco/proctors in Ask-the-expert...
>>>
>>> 1. the equipment is centrally located in SJC now as opposed to spread
>>> out globally. Centrally managed and such.
>>> 2. The equipment being used has a clock chip so even if you do reboot,
>>> THAT part isn't an issue.
>>>
>>> OSPF DR/BDR is another issue, but if a student has been paying attention
>>> in (hopefully) any bootcamp, they should be painfully aware of what to
>>> look for and what not to get caught by.
>>>
>>> If a candidate has a planned reload schedule to re-check their items
>>> (lunch and mid-afternoon in my recommendations) then they needn't have
>>> anything to worry about, or in case they forget the OSPF DR thing, they
>>> have plenty of time still to figure it out. No surprises.
>>>
>>>
>>>
>>>
>>>
>>>
>>> Darby Weaver wrote:
>>>
>>>> Agreed. However I've been to some classes where some might lead students
>>>>
>>> to
>>>
>>>> think otherwise. Proctors will warn of power fluctuations or small
>>>>
>>> outages
>>>
>>>> and one should always be prepared for this type of contingency.
>>>>
>>>> On Sat, Jul 11, 2009 at 2:05 PM, Scott Morris <smorris_at_ine.com> wrote:
>>>>
>>>>
>>>>
>>>>> Nope, they don't touch 'em. There's enough other show commands to know
>>>>> who will be DR after a reload! :) They only used to in the two-day
>>>>> format.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> *Scott Morris*, CCIE/x4/ (R&S/ISP-Dial/Security/Service Provider)
>>>>>
>>> #4713,
>>>
>>>>> JNCIE-M #153, JNCIS-ER, CISSP, et al.
>>>>>
>>>>> JNCI-M, JNCI-ER
>>>>>
>>>>> evil_at_ine.com
>>>>>
>>>>>
>>>>> Internetwork Expert, Inc.
>>>>>
>>>>> http://www.InternetworkExpert.com <http://www.internetworkexpert.com/><
>>>>>
>>> http://www.internetworkexpert.com/>
>>>
>>>>> Toll Free: 877-224-8987
>>>>>
>>>>> Outside US: 775-826-4344
>>>>>
>>>>>
>>>>> Knowledge is power.
>>>>>
>>>>> Power corrupts.
>>>>>
>>>>> Study hard and be Eeeeviiiil......
>>>>>
>>>>>
>>>>>
>>>>> Hammer wrote:
>>>>>
>>>>>
>>>>>> Scott,
>>>>>> I thought that the proctors usually reloaded the rack before
>>>>>> grading? To make sure OSPF DRs were set right and whatnot. I know it
>>>>>> can all be gleamed from configs "ip ospf priority blah" but I thought
>>>>>> that they mostly did show commands to grade you in the scripting. Is
>>>>>> bouncing the rack something they used to do but not anymore?
>>>>>>
>>>>>> -Hammer
>>>>>>
>>>>>>
>>>>>> On Sat, Jul 11, 2009 at 7:01 AM, Scott Morris <smorris_at_ine.com
>>>>>>
>>>>>>
>>>>> > <mailto:smorris_at_ine.com>> wrote:
>>>>>
>>>>>
>>>>>> The ISR routers used on the real lab have a CMOS clock, so they
>>>>>>
>>> will
>>>
>>>>>> retain their time on reload.
>>>>>>
>>>>>> Your lab will not be reloaded prior to grading.
>>>>>>
>>>>>>
>>>>>> Anh Khoa Le Viet wrote:
>>>>>> > Hi Group,
>>>>>> >
>>>>>> > I took a mock lab from a vendor today with task about the EIGRP
>>>>>> > authentication: An MD5 hash of the password CISCO1 should be
>>>>>> used from
>>>>>> > 12:00AM on
>>>>>> > 1/1/2006 to 11:59PM on 12/31/2006 and An MD5 hash of the
>>>>>> password CISCO2
>>>>>> > should be used after this. I think I come out with the right
>>>>>> solution:
>>>>>> >
>>>>>> > key chain EIGRP
>>>>>> > key 1
>>>>>> > key-string CISCO1
>>>>>> > accept-lifetime 00:00:00 Jan 1 2006 00:29:59 Jan 1 2007
>>>>>> > send-lifetime 00:00:00 Jan 1 2006 11:59:59 Dec 31 2006
>>>>>> > key 2
>>>>>> > key-string CISCO2
>>>>>> > accept-lifetime 00:00:00 Jan 1 2007 infinite
>>>>>> > send-lifetime 00:00:00 Jan 1 2007 infinite
>>>>>> >
>>>>>> > But the thing is: do we need to configure ntp server and client
>>>>>> for this
>>>>>> > kind of task? At the time I did the configuration, the clock
>>>>>> showed in
>>>>>> > Routers is 2009 year time. But at the end of the lab, I did
>>>>>> reboot all the
>>>>>> > routers and found out that EIGRP did come up, quickly found that
>>>>>> the clock
>>>>>> > was back to 2002 and no EIGRP neighbors came up :(. We can not
>>>>>> do set
>>>>>> > datetime manually on the routers as if we reboot, it will came
>>>>>> back to
>>>>>> > default datetime, so the only option is NTP.
>>>>>> >
>>>>>> > Could you pleas give some advise on this kind of task? Should we
>>>>>> add NTP in
>>>>>> > the real lab or no need to do that if in the IP Services
>>>>>> portion, no NTP
>>>>>> > task?
>>>>>> >
>>>>>> > Thanks and best Regards,
>>>>>> > Khoa
>>>>>> >
>>>>>> >
>>>>>> > Blogs and organic groups at http://www.ccie.net
>>>>>> >
>>>>>> >
>>>>>>
>>>>>>
>>>>>>
>>>>> _______________________________________________________________________
>>>>>
>>>>>
>>>>>> > Subscription information may be found at:
>>>>>> > http://www.groupstudy.com/list/CCIELab.html
>>>>>>
>>>>>>
>>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>> _______________________________________________________________________
>>>>>
>>>>>
>>>>>> Subscription information may be found at:
>>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>>
>>>>>>
>>>>> Blogs and organic groups at http://www.ccie.net
>>>>>
>>>>> _______________________________________________________________________
>>>>> Subscription information may be found at:
>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>
>>>>>
>>>> Blogs and organic groups at http://www.ccie.net
>>>>
>>>> _______________________________________________________________________
>>>> Subscription information may be found at:
>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>> --
>> Narbik Kocharians
>> CCSI#30832, CCIE# 12410 (R&S, SP, Security)
>> www.MicronicsTraining.com
>> Sr. Technical Instructor
>>
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sat Jul 11 2009 - 17:17:26 ART