Well I sat and passed the IAUWS exam today, thats the security part. I am pushing hard to complete version 1 of the CCNP Wireless as I have some study materials available and I have been studying on and off for about a year. The only reason I haven't actually taken any of the exams is time.
This exam was a bit of a suprise. The exam blueprint is a great starting point which is available here but I was suprised how much focus there was on wireless NAC. Not an easy exam and you really need to read the documents. Some of the questions, as in any exam I guess were really straight forward but there were that were difficult to understand.
A great deal of material to cover and some tricky areas. A great test though.
Showing posts with label CCNP Wireless. Show all posts
Showing posts with label CCNP Wireless. Show all posts
Thursday, 9 February 2012
Friday, 3 February 2012
CCNP Wireless - CUWSS
Finally sat down and took the first of my CCNP Wireless exams, and passed.
OK its generally agreed that this probably is not the hardest of the CCNP exams but there are a few questions that could trip you up. Even if you do a lot of surveying there are areas that you will need to know with respect to the WCS planning tool and Cisco Spectrum Expert.
Now I admit that I do not use these tools every day so I spent a little time on WCS and read through the Spectrum Expert stuff.
The Quick learning guide from Cisco Press was great as any areas I was not 100% on I done a little studying.
It probably helped iron out any wrinkles I had as well in best practices etc.
Overall pretty straightforward if you know your stuff.
Already booked IAUWS for later this month and started reading the Quick Learning Guide, I must say there are a few more grey areas than there were for the CUWSS as there are a few things you dont work on often, and some not at all so onwards and hopefully upwards.
OK its generally agreed that this probably is not the hardest of the CCNP exams but there are a few questions that could trip you up. Even if you do a lot of surveying there are areas that you will need to know with respect to the WCS planning tool and Cisco Spectrum Expert.
Now I admit that I do not use these tools every day so I spent a little time on WCS and read through the Spectrum Expert stuff.
The Quick learning guide from Cisco Press was great as any areas I was not 100% on I done a little studying.
It probably helped iron out any wrinkles I had as well in best practices etc.
Overall pretty straightforward if you know your stuff.
Already booked IAUWS for later this month and started reading the Quick Learning Guide, I must say there are a few more grey areas than there were for the CUWSS as there are a few things you dont work on often, and some not at all so onwards and hopefully upwards.
Wednesday, 1 February 2012
CCNP Wireless v2 & CCNA Wireless v2
Well at first glance looking at the exam topics for each of the exams there does not seem to be a massive amount of change. Each of the exam numbers is incremented by a single digit however the core topics remain largely unchanged.
From converstaions with various people and reading the forums such as CLN the biggest changes are updates due to code. Also how Cisco are approaching the exams is alleged to have changed in some cases quite a lot which could add to the fun.
One of the difficulties I had sitting the CCNA Wireless was remembering how things used to be done and as an entry level exam many candidates will not have seen the older code versions. I think the refresh will make a much fairer environment for the candidates however there is one major issue, no study materials.
Its been a major gripe of most candidates taking the Cisco wireless exams that there is scarecly any training or self study material. Pretty much the same for any wireless vendor exams actually! Without simulators and the need for hands on you need to be working with the equipment or very wealthy to buy a lab and or take the official traing which will have course materials, or like me determined and prepared to make the sacrifices and buy a lab and spend hours looking through the design guides. OK for me its almost a hobby.
The few books that were about for the CCNA Wireless will now be well out of date for the new exam. The CCNP Wireless Quick Reference guides will be equally out of date, that said only three of the four promised were ever released, Cisco Press still says the forth, IUWVN,will be released soon and states January 2011, hmmmm OK.
Well I think the core technologies are still relevant OK we have to forget about LWAPP now, that seems so long ago and think CAPWAP. New features like CleanAir, MSE replacing the Location Appliance etc. Largely I think alot of great information is still contained in these publications and they will help analyse your weaknesses. Once you know your weaknesses its into the design and deployment guides.
Good luck anyone taking these I have my first CCNP Wireless booked for 3/2/2012 which is CUWSS, this I should pass! Then I will take my IAUWS before the end of the month, I really want to get this before I have to start thinking about v2. I migh even dabble in v2 to see how different they are.
From converstaions with various people and reading the forums such as CLN the biggest changes are updates due to code. Also how Cisco are approaching the exams is alleged to have changed in some cases quite a lot which could add to the fun.
One of the difficulties I had sitting the CCNA Wireless was remembering how things used to be done and as an entry level exam many candidates will not have seen the older code versions. I think the refresh will make a much fairer environment for the candidates however there is one major issue, no study materials.
Its been a major gripe of most candidates taking the Cisco wireless exams that there is scarecly any training or self study material. Pretty much the same for any wireless vendor exams actually! Without simulators and the need for hands on you need to be working with the equipment or very wealthy to buy a lab and or take the official traing which will have course materials, or like me determined and prepared to make the sacrifices and buy a lab and spend hours looking through the design guides. OK for me its almost a hobby.
The few books that were about for the CCNA Wireless will now be well out of date for the new exam. The CCNP Wireless Quick Reference guides will be equally out of date, that said only three of the four promised were ever released, Cisco Press still says the forth, IUWVN,will be released soon and states January 2011, hmmmm OK.
Well I think the core technologies are still relevant OK we have to forget about LWAPP now, that seems so long ago and think CAPWAP. New features like CleanAir, MSE replacing the Location Appliance etc. Largely I think alot of great information is still contained in these publications and they will help analyse your weaknesses. Once you know your weaknesses its into the design and deployment guides.
Good luck anyone taking these I have my first CCNP Wireless booked for 3/2/2012 which is CUWSS, this I should pass! Then I will take my IAUWS before the end of the month, I really want to get this before I have to start thinking about v2. I migh even dabble in v2 to see how different they are.
Wednesday, 25 January 2012
CCNP Wireless v2
Cisco announced the CCNP Wireless v2 earlier this week. Details can be seen here.
I have not had a detailed look at the changes yet but the exams will definitely be more relevant to todays implementations and include the newer feature sets and software versions.
I will look at the key differences over the next few days and post some details
I have not had a detailed look at the changes yet but the exams will definitely be more relevant to todays implementations and include the newer feature sets and software versions.
I will look at the key differences over the next few days and post some details
Tuesday, 13 July 2010
Lab update
I have taken delivery of an AIR-WLC4402-12-K9 from my great freind George Stafanck. This will allow me to get a lot more practice with senarios using the later code versions, my existing controller is an AIR-WLC2006-K9 which will not run later codes.
The main advantage of the 4402 is being able to setup guest access in a DMZ which I could never test with the 2006. Obviously there is additional functionality from the later codes.
I still want to add another controller but that will probably be a 2106 or a newer variant thereof if one is released soon, however the code would not be downgradeable to 4.2 which is the CCIE Wireless code.
Its very much a can of worms as there is a strong rumour that the CCIE Wireless will change next year which will mean a code change so its difficult to know what to add.
Anyway thats a brief update, however I am extremely busy at work at the present time so do not have a great deal of time to lab but will hope to get some time this weekend to test a few things out.
I need to start running scenrios more with Windows 2008 and take a serious look at ACS 5.1 as apparently its very different. Always a challenge I guess.
I will post a few lab pics later in the week.
The main advantage of the 4402 is being able to setup guest access in a DMZ which I could never test with the 2006. Obviously there is additional functionality from the later codes.
I still want to add another controller but that will probably be a 2106 or a newer variant thereof if one is released soon, however the code would not be downgradeable to 4.2 which is the CCIE Wireless code.
Its very much a can of worms as there is a strong rumour that the CCIE Wireless will change next year which will mean a code change so its difficult to know what to add.
Anyway thats a brief update, however I am extremely busy at work at the present time so do not have a great deal of time to lab but will hope to get some time this weekend to test a few things out.
I need to start running scenrios more with Windows 2008 and take a serious look at ACS 5.1 as apparently its very different. Always a challenge I guess.
I will post a few lab pics later in the week.
Friday, 11 June 2010
CCNP Wireless eBooks available
Great news Cisco Press has released the first two of a series of four CIINP Wireless Quick Reference Guides.
The 642-736 CCNP Wireless IAUWS Quick Reference eBook (Implementing Advanced Cisco Unified Wireless Security) written by William G. Daniel priced at $24.99.
http://www.ciscopress.com/bookstore/product.asp?isbn=158714218x
The 642-746 CCNP Wireless IUWMS Quick Reference eBook (Implementing Cisco Unified Wireless Mobility Services) written by Jerome Henry priced at $24.99.
http://www.ciscopress.com/bookstore/product.asp?isbn=1587141922
The other two publications in this series are scheduled for release on 20th August these are as follows
The 642-741 CCNP Wireless IUWVN Quick Reference eBook (Implementing Cisco Unified Wireless Voice Networks ) written by Jeffrey DiMaio.
http://www.ciscopress.com/bookstore/product.asp?isbn=1587141906
The 642-731 CCNP Wireless CUWSS Quick Reference eBook (Conducting Cisco Unified Wireless Site Survey ) written by Jerome Henry.
http://www.ciscopress.com/bookstore/product.asp?isbn=1587141914
The 642-736 CCNP Wireless IAUWS Quick Reference eBook (Implementing Advanced Cisco Unified Wireless Security) written by William G. Daniel priced at $24.99.
http://www.ciscopress.com/bookstore/product.asp?isbn=158714218x
The 642-746 CCNP Wireless IUWMS Quick Reference eBook (Implementing Cisco Unified Wireless Mobility Services) written by Jerome Henry priced at $24.99.
http://www.ciscopress.com/bookstore/product.asp?isbn=1587141922
The other two publications in this series are scheduled for release on 20th August these are as follows
The 642-741 CCNP Wireless IUWVN Quick Reference eBook (Implementing Cisco Unified Wireless Voice Networks ) written by Jeffrey DiMaio.
http://www.ciscopress.com/bookstore/product.asp?isbn=1587141906
The 642-731 CCNP Wireless CUWSS Quick Reference eBook (Conducting Cisco Unified Wireless Site Survey ) written by Jerome Henry.
http://www.ciscopress.com/bookstore/product.asp?isbn=1587141914
Tuesday, 11 May 2010
WLC Discovery Process
The LWAPP or from code version 5.2 CAPWAP discovery processes vary slightly
The general process is as follows
1 Layer 2 broadcast which isnt much use as it was only supported on the 1000 series access points.
2 Layer 3 broadcast
As this is blocked by the router and the IP helper-address only forwards directed broadcasts, unicasts and 8 UDP ports by default. These are TFTP port 69, DNS port 53, time protocol port 37, netbios name server port 137, netbios datagram server port 138, BOOTP client and server ports 67 and 68, TACACS service port 49.
Therefore you need to explicitly allow prt 12223 LWAPP data protocol and or port 5247 CAPWAP data protocol
Router(config)#interface fa y
Router(config-if)#ip helper-address x.x.x.x
Router(config-if)#exit
Router(config)ip forward-protocol udp 12223
3 OTAP which should only be used in commissioning as it is/was a security risk now deprecated it was part of the RRM. It is now deprecated since code 6.0 and RRM is encrypted.
4 Locally stored controller IP address
5 DHCP option 43 is used to return the WLC IP address and is vendor specific. This is the IOS command for option 43
ip dhcp pool
network
default-router
dns-server
Option 43 hex
DHCP can be set on the switch,router or via a DHCP server.
Along with option 43 you can have option 60 which is the vendor class identifier and says only return option 43 if you are sending an ip address to a client that needs it like an access point and loooks like this in IOS.
option 60 ascii "VCI string of the AP"
This shouldn't matter in an enterprise as your aps should be on their own subnet however its handy as thats not always the case and it prevents clients getting uneccessary information.
Options 241 and 120 are not exactly options but sub options and define how the IP address is sent. for everything but the Cisco 1000 series this is 241 which is hex. For the 1000 series its 120 which is ASCII.
6 DNS , configure DNS to returm the controller IP address to a query for CISCO-LWAPP-CONTROLLER@localdomain, also if you are running code 5.2 or above it helps to use CISC-CAPWAP-CONTROLLER@localdomain.
Generally after priming access points I always implement DHCP option 43 and DNS in enterprise deployments as you pretty much know that th access points will home to a controlller when and if they upscale add or replace access points.
The reason for priming is that you can asign ap names, ip addresses and WLC addresses and designate where the access point is to be deployed rather than ending up with hundreds of access points pulling down ip addresses and not knowing where they are.
The general process is as follows
1 Layer 2 broadcast which isnt much use as it was only supported on the 1000 series access points.
2 Layer 3 broadcast
As this is blocked by the router and the IP helper-address only forwards directed broadcasts, unicasts and 8 UDP ports by default. These are TFTP port 69, DNS port 53, time protocol port 37, netbios name server port 137, netbios datagram server port 138, BOOTP client and server ports 67 and 68, TACACS service port 49.
Therefore you need to explicitly allow prt 12223 LWAPP data protocol and or port 5247 CAPWAP data protocol
Router(config)#interface fa y
Router(config-if)#ip helper-address x.x.x.x
Router(config-if)#exit
Router(config)ip forward-protocol udp 12223
3 OTAP which should only be used in commissioning as it is/was a security risk now deprecated it was part of the RRM. It is now deprecated since code 6.0 and RRM is encrypted.
4 Locally stored controller IP address
5 DHCP option 43 is used to return the WLC IP address and is vendor specific. This is the IOS command for option 43
ip dhcp pool
network
default-router
dns-server
Option 43 hex
DHCP can be set on the switch,router or via a DHCP server.
Along with option 43 you can have option 60 which is the vendor class identifier and says only return option 43 if you are sending an ip address to a client that needs it like an access point and loooks like this in IOS.
option 60 ascii "VCI string of the AP"
This shouldn't matter in an enterprise as your aps should be on their own subnet however its handy as thats not always the case and it prevents clients getting uneccessary information.
Options 241 and 120 are not exactly options but sub options and define how the IP address is sent. for everything but the Cisco 1000 series this is 241 which is hex. For the 1000 series its 120 which is ASCII.
6 DNS , configure DNS to returm the controller IP address to a query for CISCO-LWAPP-CONTROLLER@localdomain, also if you are running code 5.2 or above it helps to use CISC-CAPWAP-CONTROLLER@localdomain.
Generally after priming access points I always implement DHCP option 43 and DNS in enterprise deployments as you pretty much know that th access points will home to a controlller when and if they upscale add or replace access points.
The reason for priming is that you can asign ap names, ip addresses and WLC addresses and designate where the access point is to be deployed rather than ending up with hundreds of access points pulling down ip addresses and not knowing where they are.
Subscribe to:
Posts (Atom)