Journey

Journey

Translate

Thursday, July 28, 2016

5508 with LAG setup and 5508 without LAG that connects to 2 switches configuration

5508

method 1:
You can setup a 5508 using ALL of its ports or 2 of its ports using only 1 LAG group to 1 PHYSICAL switch.

Method 2:
You can also setup a 5508 using 2 of its ports (primary and backup going to SWITCH A ) and using the other 2 of the ports (primary and backup going to SWITCH B). In this scenario, you do NOT want to use LAG and it should be disabled. According to Cisco, 5508 does not support STP and also you cannot use more then 1 LAG group and connect to to 2 physical switches unless they are connected without LAG . Here is a good reference:

If someone wants to chime in and provide a screenshot of what the management interface on the 5508 WLC will look like in the GUI for the 2nd scenario, its more then welcome! The CLI configuration on the switch side would look like this for method 1:


If you are setting up using method 1 with LAG, the switch configuration is as follows:
  • Each neighbor port to which the controller is connected should be configured as follows:
    interface GigabitEthernet <interface id> switchport channel-group <id> mode on no shutdown
  • The port channel on the neighbor switch should be configured as follows:
     interface port-channel <id> 
    switchport 
    switchport trunk encapsulation dot1q 
    switchport trunk native vlan <native vlan id> 
    switchport trunk allowed vlan <allowed vlans> 
    switchport mode trunk 
    no shutdown
On the controller for the 5508, you would enable LAG under the 'Controller' page, "LAG Mode on next reboot" set to "Enabled"

I will include screenshots at a later time.
=================================

NTP setup on a 3650/3850 switch

NTP:
This is fairly easy.
Conf t
Ntp server 10.1.1.1
End

Use the command ' show ntp associations' to check.

=================================

Monday, June 27, 2016

Cisco Spark Bot Integration

Creating a Cisco Spark integration can be interesting. Here is the sample code and i've added a few things to it. With this code you can add a person to the Cisco Spark room by email, remove a person by email and anytime someone says hello, the bot will say hello back by name.


Code as follows:

var Flint = require('node-flint');

// define flint setup
var config = {
  // url to access this app's webservice
  baseUrl: 'http://sparkbot-lperera3.c9users.io',
  // port that local server listens on
  localPort: process.env.PORT,
  // spark account email
  sparkEmail: 'lperera@la-networks.com',
  // spark api token
  sparkToken: 'MDA2ZDk1YTQtOWUzNy00ODA3LTk3MDYtMWE2MjJhZDg5ZjQ3NDRlN2RhNzAtNmVh'
};

// init flint framework
var flint = new Flint(config);


// echo test
flint.hears('/echo', function(bot, trigger) {
  bot.say(trigger.args.join(' '));
});

// add a person or people to room by email
flint.hears('/add', function(bot, trigger) {
  var email = trigger.args;
  if(email) bot.add(email);
});

// remove a person or people from room by email
flint.hears('/remove', function(bot, trigger) {
  var email = trigger.args;
  if(email) bot.remove(email);
});

// anytime someone says hello
flint.hears(/(^| )hello( |.|$)/i, function(bot, trigger) {
  bot.say('Hello, %s!', trigger.person.displayName);
});

Thursday, June 9, 2016

Adding a SNMP configured device into ISE

After you have configured SNMP on the WLC or SWITCH, do the following:

Login to ISE






Click on Administration --> Network Devices --> +Add



 Check off "SNMP Settings" and fill in the SNMP info.






Now go back into the WLC that you just added and be sure to add the different interface IPs that go with each WLAN so that ISE knows about them.

You are done!

Adding a SNMP configured device into Cisco Prime

Adding an SNMP configured device into Cisco Prime

After you have configured SNMPv2 or SNMPv3 on the WLC or Switch, login to Cisco Prime:




Click on Configuration --> Network --> Network Devices --> Add Device

Choose SNMP and then choose SNMPv2 or SNMPv3


Do the same for SSH and you can choose Verify Credentials or Click Add and you're done!


Configuring a device for SNMP

This will cover setting up SNMPv2 and SNMPv3 and adding these devices into Cisco Prime 2.2


What is SNMP? According to Cisco documentation, SNMP is "an application layer protocol, facilitates the exchange of management information among network devices, such as nodes and routers. It comprises part of the TCP/IP suite. System administrators can remotely manage network performance, find and solve network problems, and plan for network growth by using SNMP."

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/managed_services/8_6_1/cucm/managed_services/snmp.html

What are trap logs? Traps are messages that are recorded and then they get reported in real time as the events occur. These traps are ususally sent via SNMP to a network monitoring server like Cisco WCS or Cisco Prime.

Few common traps:
* reports of rogue APs
*Aps with excessive client loads
*interference or noise
*coverage holes detected
CleanAir events

Trap types can be configured in the WLC under Management --> SNMP --> Trap Controsl page.

Syslog and SNMP? What is the difference?
You dont have to use both. Syslog is on port 514 UDP while SNMP traps are on port 162 UDP

SNMP traps can relate to the events you want to see that is being triggered on the device without having to turn on debug for everything.

SYSLOG will send anything that you can see on the CLI of the device at whatever the level you have set for logging.

Simply put, syslog sends system messages to a logging server. It will send messages from time to time while SNMP will send a message if you have a trap setup specifically.  SNMP is more secure. SNMP can be used to pull statistics and network utilization from interfaces.

http://www.cisco.com/en/US/technologies/collateral/tk869/tk769/white_paper_c11-557812.html#wp9000392
===================================================================
Setting up SNMPv2 on the WLC (read-only):
snmp community create mysnmpv2ro
snmp community ipaddr 192.168.1.1 255.255.255.0 mysnmpv2ro
snmp community accessmode ro mysnmpv2ro
snmp community mode enable mysnmpv2ro

*note: The IP address is the IP of the prime server

Setting up SNMPv2 on the WLC (read-write):
snmp community create mysnmpv2rw
snmp community ipaddr 192.168.1.1 255.255.255.0 mysnmpv2rw
snmp community accessmode rw mysnmpv2rw
snmp community mode enable mysnmpv2rw

Setting up SNMPv2 on a Switch:
snmp-server community mysnmpv2rw rw
snmp-server location los angeles
snmp-server contact info@lperera3.blogspot.com
snmp-server chassis-id cisco4500-switch

configuring to send alerts:
snmp-server host 192.168.1.1 version 2c mysnmpv2rw
snmp-server enable traps snmp linkdown linkup coldstart warmstart
====================================================================

Setting up SNMPv3 on a Switch:
snmp-server user snmpv3username snmpv3groupname v3 auth authpwd123 priv aes 256 privpwd123

snmp-server user snmpv3username snmpv3groupname v3 auth md5 authpwd123 priv des privpwd123

Tie it to an ACL:
snmp-server user snmpv3username snmpv3groupname v3 auth md5 authpwd123 priv des privpwd123 acc 10

ip access-list standard 10
permit 192.168.1.1

show commands:
show snmp user
show access-list 10


====================================================================

Setting up SNMPv3 on the WLC:

config snmp v3user create mysnmpv3 rw hmacsha aescfb128 authkey123 encryptkey123
config snmp version v3 enable
config snmp v3user delete default




Tuesday, March 17, 2015

New CCIE Wireless Version 3

Folks,

Looks like Cisco has finally updated CCIE Wireless to Version 3.

You will definitely need to know ISE (1.3), Prime (2.2) and MSE. They also have added a "DIAG" module that is 1hour with no devices and 7hours dedicated with devices for the CCIE Wireless Lab.

If anyone find out where we can get sample lab prep guides, please feel free to post in my comment section.

Go to Cisco website for more info:

https://learningnetwork.cisco.com/community/certifications/ccie_wireless/written_exam

**NOTE** The following info (below) was taken from Cisco.com. All Official documentation is on Ciscos website listed (link above.)

CCIE Wireless

Written and Lab Exam Content Updates

 Cisco and Cisco logo are trademarks or registered of Cisco and/or its affiliates in the U.S. and other countries. To view a l ist of Cisco trademarks, go to this URL:
http://www.cisco.com/go/trademarks.    March 2015
Cisco © and/or its affiliates. All rights reserved.    1
  
Introduction
The CCIE Wireless exam topics have been refreshed from version 2.0 to version 3.0. The new exam curriculum
comprises eight domains. The new segmentation into these eight domains was done to improve the logical
structure of the overall topics, as well as to align to our wireless portfolio.

Each domain lists specific tasks that we expect a minimally qualified candidate to perform. Note the exam topics
serve as a general guideline for the content likely to be included in your exam. However, other - related topics -
may also appear on any delivery of the exam. Some of the domains or tasks listed appear on both the Written and
the Lab exam, other domains or tasks appear only in the Written exam, like Planning & Designing WLAN
Technologies.
Domain comparison between CCIE Wireless v2.0 and CCIE Wireless v3.0
Below you can find a domain level comparison between the CCIE Wireless v2.0 and CCIE Wireless v3.0, based upon
domains.

    CCIE Wireless v2.0              


1.  Planning & Designing WLAN Technologies    
2.  Configure and Troubleshoot L2/L 3 Network Infrastructure to Support WLANs    
3.  Configure and Troubleshoot Infrastructure Application Services    
4.  Configure and Troubleshoot an Autonomous Deployment Model     
5.  Configure and Troubleshoot a Unified Deployment Model     
6.  Configure and Troubleshoot WCS    
7.  Configure and Troubleshoot WLAN Services    

    CCIE Wireless v3.0


1.  Planning & Designing WLAN Technologies    
2.  Configure and Troubleshoot the  network Infrastructure    
3.  Configure and Troubleshoot an Autonomous Deployment Model     
4.  Configure and Troubleshoot a Unified Deployment Model (Centralized)    
5.  Configure and Troubleshoot a Unified Deployment Model (Converged)    
6.  Configure and Troubleshoot Security & Identity Management    
7.  Configure and Troubleshoot Prime Infrastructure and MSE.       
8.  Configure and Troubleshoot WLAN media and application services

Compared to v2.0, no domains have been removed from the CCIE curriculum in v3.0. New domains were added,
re-named or re-shuffled slightly to include current technologies.  In v3.0, the Unified Deployment Model is split up
in Configure and Troubleshoot a Unified Deployment Model (Centralized) and Configure and Troubleshoot a
Unified Deployment Model (Converged), reflecting our current Wireless product portfolio.

A new module Configure and Troubleshoot Security & Identity Management was added, as policy management is
becoming more important. The Configure and Troubleshoot WCS module was replaced with Configure and
Troubleshoot Prime Infrastructure and MSE, adding our Prime Infrastructure solution.

 CCIE Wireless

Written and Lab Exam Content Updates




Cisco and Cisco logo are trademarks or registered of Cisco and/or its affiliates in the U.S. and other countries. To view a l ist of Cisco trademarks, go to this URL:
http://www.cisco.com/go/trademarks.    March 2015
Cisco © and/or its affiliates. All rights reserved.    2
  
CCIE Wireless v3.0 Changes
The decision to add, move or retire domains or tasks was based on the feedback received from Wireless Subject
Matter Experts during the Job Role Analysis and Job Task Analysis. The Exam Topics changes reflect both the
evolving Wireless enterprise environment as the evolving CCIE Wireless job role. Please refer to the actual Exam
Topics on for all topics covered in the updated CCIE Wireless Written and Lab exams v3.0.

Topics added to the CCIE Wireless Exam v3.0:

  Configure and troubleshoot stacking
  Configure and troubleshoot basic OSPFv3
  Configure and troubleshoot basic IPv6 EIGRP address families
  Configure and troubleshoot SXP/SGT
  Configure  and troubleshoot PSPF
  Configure and troubleshoot Flexconnect
  Configure and troubleshoot new mobility 
  ENTIRE DOMAIN: Configure and troubleshoot a Unified Deployment Model (Converged)
  Configure and troubleshoot client profiling and provisioning
  Configure and troubleshoot CoA
  Configure and troubleshoot basic sponsor policy (Guest)
  Implement and troubleshoot CMX
  Integrate ISE
  Integrate NetFlow
  Configure andf troubleshoot BDRL
  Configure and troubleshoot mDNS
  Configure and troubleshoot AVC and NetFlow

Topics removed from the CCIE Wireless Lab Exam v2.0:

  Configure and troubleshoot MFP
  Configure and troubleshoot peer-to-peer blocking
  Configure and troubleshoot IGMP snooping
  Configure and troubleshoot WDS (L2)
  Upgrade Autonomous to Unified
  Configure and troubleshoot H-REAP
  Implement local DHCP services for clients

As not only the Exam Topics were updated, but the hardware and software list was updated as well in v3.0, the
required implementation and troubleshooting skills changed significantly for some of the tasks, although the task
itself is identical compared to v2.0. Below a high level overview of what changed from a hardware and software
perspective, please refer to the Lab Equipment and Software List for more detailed information.


   CCIE Wireless

Written and Lab Exam Content Updates




Cisco and Cisco logo are trademarks or registered of Cisco and/or its affiliates in the U.S. and other countries. To view a l ist of Cisco trademarks, go to this URL:
http://www.cisco.com/go/trademarks.    March 2015
Cisco © and/or its affiliates. All rights reserved.    3
  
        CCIE Wireless v2.0  CCIE Wireless v3.0












CCIE Wireless Exam v3.0 Format
The exam number changed from 350-001 to 400-351. However the Written exam format essentially remains
identical.  The web-based delivery infrastructure supporting the new Lab exam is very similar to v2.0. The format of
the Lab exam itself however has changed significantly compared to v2.0. The Lab exam format has been updated in
analogy to other CCIE tracks to include a Diagnostic module. 

As a result, the CCIE Wireless Lab v3.0 format today looks as follows:

  Part 1: Diagnostic module
  Part 2: Configuration & Troubleshooting module.



The new Diagnostic module, which has a length of 60 min, focuses on the skills required to properly diagnose
network issues, without having device access. The main objective of the Diagnostic module is to assess the skills
required to properly diagnose network issues. These skills include:

  Analyze
  Correlate 
  Discerning multiple sources of documentation (in example e-mail threads, network topology
diagrams, console outputs, logs, and even traffic captures.)

These activities are naturally part of the overall troubleshooting skills. They are designed as a separated Lab
module because the format of the items is significantly different. In the Troubleshooting component of the
Cisco 5500 WLC, CUWN software 8.0
Cisco 5700 WLC, IOS XE 3.6
Cisco Aironet 1600/3700 Series AP
Cisco Catalyst 4500-E Series Switches (Sup 8-E)
Cisco Catalyst 3650 Series Switches 
Cisco PI 2.2
Cisco ISE 1.3
Cisco 3300 Series MSE


Cisco 5500 WLC, CUWN software 7.0

Cisco Aironet 1040/1260/3500 Series AP
Cisco Catalyst 6500-E Series Switches (Sup 8-E)
Cisco Catalyst 2960/3560 Series Switches 
Cisco WCS
Cisco ACS
Cisco 3300 Series MSE

 CCIE Wireless

Written and Lab Exam Content Updates




Cisco and Cisco logo are trademarks or registered of Cisco and/or its affiliates in the U.S. and other countries. To view a l ist of Cisco trademarks, go to this URL:
http://www.cisco.com/go/trademarks.    March 2015
Cisco © and/or its affiliates. All rights reserved.    4
  
Configuration and Troubleshooting candidates need to be able troubleshoot and resolve networking issues on
actual devices. 

In the Diagnostic module candidates need to make choices between pre-defined options to either indicate:

  What the root cause of the issue is
  Where the issue is located in the diagram
  What critical piece of information allows us the identify what the root cause is
  What piece of information is missing to be able to identify the root cause

The Configuration and Troubleshooting module consists of one topology, similar as in CCIE Wireless v2.0. The
length of the Configuration and Troubleshooting module is seven hours. This module provides a real life enterprise
wireless scenario, including wireless client access. At the beginning of the module, the candidate has a full
overview of the entire module; and can make a choice of working on items in sequence or not, depending on
his/her comfort level, the overall scenario and question interdependencies.

The Diagnostic and Configuration and Troubleshooting modules in the Lab exam are delivered in a fixed sequence:
you start the day with the 1 hour Diagnostic module, which is followed by the 7 hours Configuration and
Troubleshooting module. The entire Lab exam lasts up to eight hours. Note that you are not allowed to go back
and forth between modules. 
Diagnostic Module

For the Diagnostic module, no device access is provided. Candidates are provided various pieces of information (in
example emails, show and/or debug outputs, network diagrams etc. in analogy to in example information that is
provided to a wireless support engineer that is assisting a customer finding the root cause of a network issue, or in
analogy to information that is provided by a colleague who is stuck in a troubleshooting a network issue. 

Within the Diagnostic module, the items are presented in a similar format as within the written exam. The module
includes multiple-choice (single answer or multiple answers), drag-and-drop style items, or even point-and-click
style items. The major difference between the written exam and the Diagnostic module is that the items in the
Diagnostic module (called troubleshoot tickets) contain a set of documents that the candidate must consult in
order to be able to understand and identify the root cause of the issue presented. Candidates need to analyze and
correlate information (after discerning between valuable and worthless pieces of information) in order to make a
right choice among the pre-defined options provided.

The troubleshoot tickets will not require candidates to type in order to provide the answer. All tickets will be close-
ended (as opposed to open-ended) so grading will be deterministic, ensuring a fair and consistent scoring process. 
The new module allows us to grant credit to candidates who are able to accurately identify the root cause of a
networking issue, but fail to resolve it within specific constraints (as in the Configuration and Troubleshooting
module).
 CCIE Wireless

Written and Lab Exam Content Updates
 



Cisco and Cisco logo are trademarks or registered of Cisco and/or its affiliates in the U.S. and other countries. To view a l ist of Cisco trademarks, go to this URL:
http://www.cisco.com/go/trademarks.    March 2015
Cisco © and/or its affiliates. All rights reserved.    5
  
Real-life experience is certainly the best training to prepare for this module. Candidates with limited experience
should focus on discovering, practicing and applying efficient and effective troubleshooting methodologies that are
used for any realistic networking challenge.

Passing Criteria
In order to pass the Lab exam, the candidate must meet both the following conditions:
  The minimum cut-score of the each individual module must be achieved.
  The total score of both modules together must be higher as the minimum value of the combined cut-score.





The reason of these criteria is to prevent a candidate from passing the Lab exam while failing or even bypassing
one of the two modules. 

The point value(s) of each item in both modules is known to the candidate. Note points are only granted when all
requirements and sometimes restrictions of the item are met. There is no partial scoring for any items.



The Cisco Learning Network is a social learning network designed for networking professionals across the globe. It
hosts all official information regarding to Cisco Certifications, including the exam topics.

Please visit learningnetwork.cisco.com for more information regards to CCIE Wireless certification program.

1.0 Plan and Design 802.11 Wireless Technologies

25%

Show Details

2.0 Configure and Troubleshoot L2/L 3 Network Infrastructure to Support WLANs

7%

Show Details

3.0 Configure and Troubleshoot Infrastructure Application Services

14%

Show Details

4.0 Configure and Troubleshoot an Autonomous Deployment Model

7%

Show Details

5.0 Configure and Troubleshoot a Unified Deployment Model

21%

Show Details

6.0 Configure and Troubleshoot WCS

12%

Show Details

7.0 Configure and Troubleshoot WLAN Services

14%

Show Details