Re: EIGRP authentication using key chain with validity period

From: Scott Morris <smorris_at_ine.com>
Date: Sat, 11 Jul 2009 19:17:30 -0400

HA! Very much. but yes, I agree. That, however, was not a scalable
format for the exam without having a lot more proctors. And I do
understand that doing it this way is MUCH less stressful for the
proctors. While we may have been good sports about not passing, not
everyone was. And that would indeed make life difficult for whoever was
proctoring!

And besides, this way we can sit back and reminisce about the old days! ;)

 

*Scott Morris*, CCIE/x4/ (R&S/ISP-Dial/Security/Service Provider) #4713,

JNCIE-M #153, JNCIS-ER, CISSP, et al.

JNCI-M, JNCI-ER

evil_at_ine.com

Internetwork Expert, Inc.

http://www.InternetworkExpert.com

Toll Free: 877-224-8987

Outside US: 775-826-4344

Knowledge is power.

Power corrupts.

Study hard and be Eeeeviiiil......

 

Hammer wrote:
> Ha. I still hate anything to do with RIFs as well. But I did like the old
> format better.
>
> The number 1 thing I miss more than anything was finding out right then and
> there that you passed or failed and the proctor sitting down with you and
> telling you why. Even if it meant waiting for an hour on day 2 for them to
> take care of other folks. For $1000 (Oops $1400) you should at least be able
> to face your accuser. Back then, sometimes you could qualify something and
> win points. No, you could not justify your way into 30 additional points but
> sometimes the deal breaker was just your viewpoint verse theirs and it was
> just a matter of perspective. I miss those days. Things had more clarity.
> Wow. I sound like Max Von Sydow in Three days of the Condor. There's some
> carbon dating for you.
>
> -Hammer
>
>
> On Sat, Jul 11, 2009 at 4:17 PM, Scott Morris <smorris_at_ine.com> wrote:
>
>
>> You're carbon-dating yourself there. :) And yes, back in the two-day
>> they did other nefarious things to us as well, but I still liked that format
>> better! Ahhhh well.
>>
>> I still hate RIFs.
>>
>>
>>
>>
>> *Scott Morris*, CCIE*x4* (R&S/ISP-Dial/Security/Service Provider) #4713,
>>
>> JNCIE-M #153, JNCIS-ER, CISSP, et al.
>>
>> JNCI-M, JNCI-ER
>>
>> evil_at_ine.com
>>
>>
>> Internetwork Expert, Inc.
>>
>> http://www.InternetworkExpert.com
>>
>> Toll Free: 877-224-8987
>>
>> Outside US: 775-826-4344
>>
>>
>> Knowledge is power.
>>
>> Power corrupts.
>>
>> Study hard and be Eeeeviiiil......
>>
>>
>>
>>
>> Hammer wrote:
>>
>> OK Everyone. Thanks for the feedback.
>>
>> Scott,
>> Dare I admit that I took the 2-day lab back in 2000 and remember that
>> they did in fact load the lab back then? :) And I also remember when little
>> thinks like TR RIF decoding was an important part of the lab. Oh well.
>>
>> I know that there are enough commands out there to tell how things will work
>> out after a reload occurs, I just didn't realize that (maybe) they had
>> stopped bouncing the racks at the end of the day.
>>
>> Now where's that DLSW/(B)STUN config guide I was reading.....
>>
>> -Hammer
>>
>>
>> On Sat, Jul 11, 2009 at 3:56 PM, Narbik Kocharians <narbikk_at_gmail.com> <narbikk_at_gmail.com>wrote:
>>
>>
>>
>> Just a quick question, did any of the proctors say that they don't reload
>> the rack?
>>
>> On Sat, Jul 11, 2009 at 1:38 PM, Scott Morris <smorris_at_ine.com> <smorris_at_ine.com> wrote:
>>
>>
>>
>> While power outages aren't part of the plan, they're always possible.
>> The impact has changed a bit now for two reasons that have been well
>> pointed out by Cisco/proctors in Ask-the-expert...
>>
>> 1. the equipment is centrally located in SJC now as opposed to spread
>> out globally. Centrally managed and such.
>> 2. The equipment being used has a clock chip so even if you do reboot,
>> THAT part isn't an issue.
>>
>> OSPF DR/BDR is another issue, but if a student has been paying attention
>> in (hopefully) any bootcamp, they should be painfully aware of what to
>> look for and what not to get caught by.
>>
>> If a candidate has a planned reload schedule to re-check their items
>> (lunch and mid-afternoon in my recommendations) then they needn't have
>> anything to worry about, or in case they forget the OSPF DR thing, they
>> have plenty of time still to figure it out. No surprises.
>>
>>
>>
>>
>>
>>
>> Darby Weaver wrote:
>>
>>
>> Agreed. However I've been to some classes where some might lead students
>>
>>
>> to
>>
>>
>> think otherwise. Proctors will warn of power fluctuations or small
>>
>>
>> outages
>>
>>
>> and one should always be prepared for this type of contingency.
>>
>> On Sat, Jul 11, 2009 at 2:05 PM, Scott Morris <smorris_at_ine.com> <smorris_at_ine.com> wrote:
>>
>>
>>
>>
>> Nope, they don't touch 'em. There's enough other show commands to know
>> who will be DR after a reload! :) They only used to in the two-day
>> format.
>>
>>
>>
>>
>> *Scott Morris*, CCIE/x4/ (R&S/ISP-Dial/Security/Service Provider)
>>
>>
>> #4713,
>>
>>
>> JNCIE-M #153, JNCIS-ER, CISSP, et al.
>>
>> JNCI-M, JNCI-ER
>> evil_at_ine.com
>>
>>
>> Internetwork Expert, Inc.
>> http://www.InternetworkExpert.com <http://www.internetworkexpert.com/> <http://www.internetworkexpert.com/><
>>
>>
>> http://www.internetworkexpert.com/>
>>
>>
>> Toll Free: 877-224-8987
>>
>> Outside US: 775-826-4344
>>
>>
>> Knowledge is power.
>>
>> Power corrupts.
>>
>> Study hard and be Eeeeviiiil......
>>
>>
>>
>> Hammer wrote:
>>
>>
>>
>> Scott,
>> I thought that the proctors usually reloaded the rack before
>> grading? To make sure OSPF DRs were set right and whatnot. I know it
>> can all be gleamed from configs "ip ospf priority blah" but I thought
>> that they mostly did show commands to grade you in the scripting. Is
>> bouncing the rack something they used to do but not anymore?
>>
>> -Hammer
>>
>>
>> On Sat, Jul 11, 2009 at 7:01 AM, Scott Morris <smorris_at_ine.com
>>
>> > <mailto:smorris_at_ine.com> <smorris_at_ine.com>> wrote:
>>
>>
>>
>> The ISR routers used on the real lab have a CMOS clock, so they
>>
>>
>> will
>>
>>
>> retain their time on reload.
>>
>> Your lab will not be reloaded prior to grading.
>>
>>
>> Anh Khoa Le Viet wrote:
>> > Hi Group,
>> >
>> > I took a mock lab from a vendor today with task about the EIGRP
>> > authentication: An MD5 hash of the password CISCO1 should be
>> used from
>> > 12:00AM on
>> > 1/1/2006 to 11:59PM on 12/31/2006 and An MD5 hash of the
>> password CISCO2
>> > should be used after this. I think I come out with the right
>> solution:
>> >
>> > key chain EIGRP
>> > key 1
>> > key-string CISCO1
>> > accept-lifetime 00:00:00 Jan 1 2006 00:29:59 Jan 1 2007
>> > send-lifetime 00:00:00 Jan 1 2006 11:59:59 Dec 31 2006
>> > key 2
>> > key-string CISCO2
>> > accept-lifetime 00:00:00 Jan 1 2007 infinite
>> > send-lifetime 00:00:00 Jan 1 2007 infinite
>> >
>> > But the thing is: do we need to configure ntp server and client
>> for this
>> > kind of task? At the time I did the configuration, the clock
>> showed in
>> > Routers is 2009 year time. But at the end of the lab, I did
>> reboot all the
>> > routers and found out that EIGRP did come up, quickly found that
>> the clock
>> > was back to 2002 and no EIGRP neighbors came up :(. We can not
>> do set
>> > datetime manually on the routers as if we reboot, it will came
>> back to
>> > default datetime, so the only option is NTP.
>> >
>> > Could you pleas give some advise on this kind of task? Should we
>> add NTP in
>> > the real lab or no need to do that if in the IP Services
>> portion, no NTP
>> > task?
>> >
>> > Thanks and best Regards,
>> > Khoa
>> >
>> >
>> > Blogs and organic groups at http://www.ccie.net
>> >
>> >
>>
>>
>>
>>
>> _______________________________________________________________________
>>
>>
>>
>> > Subscription information may be found at:
>> > http://www.groupstudy.com/list/CCIELab.html
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>>
>>
>> _______________________________________________________________________
>>
>>
>>
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:http://www.groupstudy.com/list/CCIELab.html
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:http://www.groupstudy.com/list/CCIELab.html
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
>> --
>> Narbik Kocharians
>> CCSI#30832, CCIE# 12410 (R&S, SP, Security)www.MicronicsTraining.com
>> Sr. Technical Instructor
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at: http://www.groupstudy.com/list/CCIELab.html
>>
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sat Jul 11 2009 - 19:17:30 ART

This archive was generated by hypermail 2.2.0 : Sat Aug 01 2009 - 13:10:22 ART