Q n Q Tunneling

Q n Q Tunneling  
December 16, 2009

By David Clark, CCIE# 14742 (Routing and Switching), CCSI# 31937

Service providers often have multiple customers with overlapping VLAN ranges. Q-in-Q tunneling or 802.1Q tunneling is the mechanism that allows service providers to preserve customer VLANS being transported through the service provider networks. Q-in-Q tunneling uses a two-level VLAN tag structure. Each customer is assigned a unique VLAN within the service providers network, this unique tag is added to all incoming frames from the customer network. The original frame from the customer remains untouched. The inner frame is often referred to as the customer VLAN tag because the customer originally assigns it.

Q-in-Q tunneling significantly reduces the number of VLAN required within a customer network as each customer is assigned a unique VLAN. To the customer the service provider network appears as a transparent bridge connecting their sites together.

When configuring Q-in-Q tunneling the ports connected directly to the customer switch are configured with the command “switchport trunk encapsulation dot1q”. The customer ports are configured as per normal and require no extra configuration.

 

interface FastEthernet0/20

 description customer

 switchport trunk encapsulation dot1q

 switchport mode trunk

 switchport nonegotiate

end

 

Interface FastEthernet0/21

 description service provider

 switchport access vlan 21

 switchport mode dot1q-tunnel

 l2protocol-tunnel cdp

 l2protocol-tunnel stp

 l2protocol-tunnel vtp

 no cdp enable

end

 

In the above example Fast 0/20 resides on the customer switch, while Fast 0/21 is on the service provider switch and configured as a tunnel port. VLAN 21 becomes the outer tag and is added to all frames from Fast 0/20 sent down to Fast 0/21. The service provider port is specifically configured also to carry CDP, STP and VTP frames. The configuration can be verified with the command “show l2protocol-tunnel interface fast 0/21”

 

If the customer is running a negotiated EtherChannel a slightly different configuration is required. On the customer side a normal EtherChannel is configured.

interface Fastethernet0/1

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 1 mode desirable

 

interface Fastethernet0/2

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 1 mode desirable

 

The service provider configuration is slightly different from the previous example.

interface Fastethernet0/1

switchport access vlan 17

switchport mode dot1q-tunnel

l2protocol-tunnel point-to-point pagp

end

 

interface fastethernet0/2

switchport access vlan 18

switchport mode dot1q-tunnel

l2protocol-tunnel point-to-point pagp

end

 

In this case we use the “l2protocol-tunnel point-to-point pagp” command to carry the PagP frames across the service provider network. Also one customer VLAN is assigned per incoming from port from the customer switch.  For LACP the ““l2protocol-tunnel point-to-point LACP” would be used.

 

Article Source: http://www.ccbootcamp.com/support-resources/resources/articles-by-ccbootcamp.html

Tags: ccie, cisco, computer training, VLAN

iCOD Arrival!! Watch the iCOD in action on YouTube.

iCOD Arrival!! Watch the iCOD in action on YouTube:

http://www.youtube.com/watch?v=2KYjpvP56sE

Tags: ccbootcamp, ccie, CCIE Training, cisco, computer training, IPOD

Configuring a Router to Support SDM

Configuring a Router to Support SDM  
November 10, 2008

By Luke Foster

Cisco SDM (Security Device Manager) is a web based management tool that works with the Cisco IOS to aid in the configuration and management of Cisco routers. The GUI (Graphical User Interface) allows engineers with little experience to configure Cisco routers, and stage large deployments. SDM is also powerful enough to help experienced engineers efficiently implement advanced security measures such as an IPS (intrusion Prevention System). 

There are two types of SDM, SDM and SDM Express.  The express version is just a limited form of SDM for routers that do not have enough flash memory to support the full SDM (SDM requires 6MB of flash, SDM Express requires only 2MB of flash). SDM is factory installed on the 1800 series, 2800 series, and 3800 series routers. SDM is also factory installed on router platforms with the (K9) security bundle.  If a router does not have SDM installed, the software can be downloaded for free from Cisco.  When downloading the SDM software from Cisco, make sure to verify the IOS version of the router can support SDM.

SDM provides several wizards to walk an engineer through configuring a router.  These wizards range from interface configurations, to VPN (Virtual Private Network), and even QoS (Quality of Service) configurations. The Security Device Manager also provides real time monitoring, logging, and security audit features. It will even notify an engineer if it notices conflicting configuration parameters and suggest resolutions.

Note - SDM can be enabled on deployed routers without affecting the network

To configure a router to support SDM:

First, enable the HTTP or HTTPS server on the router.

Router# configure terminal

Router(config)# ip http server

Router(config)# ip http secure-server

Router(config)# ip http authentication local

Router(config)# ip http timeout-policy idle 600 life 86400 requests 10000

 

Next, create a user who has enable privileges

Router(config)# username username privilege 15 secret 0 password

 

Finally, configure the vty lines to support telnet / ssh local login and privileged level 15 users

Router(config)# line vty 0 4

Router(config-line)# privilege level 15

Router(config-line)# login local

Router(config-line)# transport input telnet ssh

Router(config-line)# exit

 

Note – If your router supports 16 vty lines, enter the commands above for vty line 5-15 as well

 

Article Source: http://www.ccbootcamp.com/support-resources/resources/articles-by-ccbootcamp.html

Tags: ccbootcamp, ccie, cisco, computer training, Network Learning, Routers

CCNA - CLASS ON DEMAND LEADS THE WAY TO HIGHER CERTIFICATIONS

Contact:  Dawn Tesar                                                                                  

FOR IMMEDIATE RELEASE

Tel:  877-654-2243                                                                                      

October 31, 2008

Website: http://www.ccbootcamp.com

Email:  dawn@ccbootcamp.com

 

CCNA - CLASS ON DEMAND LEADS THE WAY TO HIGHER CERTIFICATIONS

Innovative product offers a more flexible and affordable starting point for IT professionals

 

Today’s information technology engineers are in greater demand than ever before. Like many professions, IT engineers must always learn, advance, and increase their knowledge. Companies depend on them to be on the cutting-edge of the industry. However, with the challenging economic climate, companies are eliminating training and travel budgets. Engineers are looking for innovative to get the training necessary that leads to higher certifications.

 

The newest and most ground-breaking training option has recently been released by CCBOOTCAMP.  Dawn Tesar, Director of Marketing for CCBOOTCAMP, says, “We talked to thousands of engineers world-wide when we were developing this new product. We believe that the iCOD® – Class on Demand addresses many of the concerns we heard.” The CCNA iCOD® – Class on Demand gives these engineers an affordable, flexible and portable option to traditional or even online courses.

 

IT engineers who plan to work toward the highest Cisco® Expert level certification, generally begin with a CCNA, Cisco® Certified Network Associate certification. This is the newest course now available on the iCOD®.  Engineers can now have all of the benefits of a traditional, week long; instructor led boot camp without sacrificing time away from work or family. Employers are excited too because engineers can now get the same high level of training at a reduced cost, no travel required.

 

The CCNA iCOD® comes on an 8GB iTouch® iPod®. The CCNA course includes over 40 hours of classroom instruction that uses lecture and labs.  Students get the same Cisco® CCNA course curriculum and lab guides as they would in a traditional training course. The material included is specifically designed to prepare the student for the CCNA 640-802 exam. Also included for the student’s success is 40 hours of virtual rack time. This allows the student to thoroughly and effectively practice what is being learned. Students can easily review trouble areas as many times as necessary. This, along with the dedicated instructor mentoring via www.routerie.com, ensures that all concepts are completely understood by the student.

 

CCBOOTCAMP expects to release additional Cisco® courses in the iCOD® format to cover all levels from CCENT through CCIE in the coming months.

 

###

 

If you would like more information about this topic, or to schedule an interview with Brad Ellis, please call Dawn Tesar at 877-654-2243 or email Dawn at dawn@ccbootcamp.com.

Tags: CCNA, CCNA Security, CCNA Voice, CCNA Wireless, certifications, cisco, Class on Demand, ICND1, ICND2, iCOD, networking, routing and switching, training, www.routerie.com

IT ENGINEERS FOCUS ON CISCO AUTHORIZED SELF-PACED LEARNING

Contact:  Dawn Tesar                                                

FOR IMMEDIATE RELEASE

October 1, 2008

Tel:  877.654.2243                                                                                    

Email:  dawn@ccbootcamp.com

 

IT ENGINEERS FOCUS ON CISCO AUTHORIZED SELF-PACED LEARNING

Companies cut training and travel budgets; Self-paced, Self-study closes the gap

 

Information technology engineers are continually expected by their employers to keep up on the ever changing and rapidly advancing technologies within their field of expertise.  At conventions across the country and around the world, more and more engineers are expressing their frustrations.  They need additional authorized training, but because of heavy work loads and shrinking budgets, they’re not able to take time away from work to attend training courses.  Traditional training courses or “boot camps” require engineers to be away from work for 5 to 17 days depending on the level of training they’re pursuing.  Companies today are cutting back on what they consider the luxury of training courses and the additional expenses of travel and per diem.  However, many companies are still willing to pay for other forms of authorized training where employees can self-study.

 

According to Brad Ellis, CEO of CCBOOTCAMP, these engineers are looking for ways to get their necessary training and advanced certifications and stay within their company restrictions.  “The changing economy is putting the squeeze on companies today, but the need for trained engineers is more necessary today than ever before in order for these companies to remain competitive,” Ellis said.

 

To close the gap between the need for training and the engineers’ heavy work load, lack of travel budget and increased pressure to self-study, CCBOOTCAMP’s Brad Ellis says engineers are excited about the release of the new Cisco Authorized iCOD – Classes on Demand.  This new form of training course available on the Apple iPOD Touch platform allows the engineers to self-study whenever and where ever is convenient.  Each Apple iPOD Touch is preloaded with a self-paced instructor led lecture featuring Official Cisco Curriculum and discussion pertaining to a specific training level and certification.

 

CCBOOTCAMP, a division of Network Learning, Inc. was founded in 1998 to provide authorized Cisco and Comptia training courses for IT engineers at every level of expertise. The company offers training solutions to individuals as well as companies who employ engineers to maintain their networks.

 

###

 

If you’d like more information about this topic, or to schedule an interview with Brad Ellis, please call Dawn Tesar at 877.654.2243 or email at dawn@ccbootcamp.com

Tags: CCNA Security, cisco, Class on Demand, CompTIA, iCOD, self-paced, self-study, training

Top Ten List, Why CCBOOTCAMP?

#1 Our Instructors
CCBOOTCAMP employs the largest number of CCIE Instructors and Engineers of any IT Training Company in the world. Our instructors are technical experts who care about your success and will work with you towards your specific training goals. Our instructors are dedicated to assisting you and are available on www.routerie.com, www.securtiyie.com, or www.voiceie.com. CCBOOTCAMP does not use contractors to instruct courses. We can tell you today, who your instructor will be tomorrow or a month from now.  

#2 Our Staff
Our staff is second to none boasting reliable, knowledgeable, and technical expertise. After registering for a course with an informed Education Consultant or Specialist our Student Coordination Department will guide you through to the end. Our IT Department is available to assist you prior to, during, and after class with any IT related inquiries. Our executive staff is on-site accessible to you as well.

#3 Our Experience Inside and Outside the Classroom
CCBOOTCAMP has been in the training and consulting business over ten years strong. The unique approach our instructors take with our students continues to evolve daily through our dynamic technical staff. We take the time to develop our personnel so that you are given the best instruction available on the market today. We have trained over 1000 CCIE’s to date.

#4 Our Philosophy
CCBOOTCAMP is dedicated to our business, you. We are customer-focused and quick to respond to change. We provide numerous, innovative ways to conduct business while ensuring our customers are a success. We persistently evaluate our business processes to support a user-friendly environment that advances customer and employee satisfaction. We support open communication at every level of our business processes and acknowledge that change drives our organization. Our responsibility is to deliver consistent, high quality, affordable IT training, products, and information to our customers.
Our future is directly coupled to the prosperity of our customers and employees.

#5 Our Class Size
CCBOOTCAMP is committed to small class sizes. We have lower student to teacher ratios than any other IT training company in the world. Although small class sizes cost more to implement, study after study divulges small classes are an integral component of achievement.

#6 Authorized Cisco and CompTIA Training
CCBOOTCAMP is a Sponsored Organization, through our Cisco Learning Solutions Partner and an authorized CompTIA partner. We are a leading training partner who gives our customers the knowledge and skills they need to succeed in today’s rapidly evolving networked business world. We are known for effectively raising the level of integrity, commitment, skill and knowledge with Cisco Certified and IT experts worldwide. We provide authorized Cisco and CompTIA training and conduct over 100 courses. 

#7 Our Equipment – No gear sharing!
CCBOOTCAMP has the largest training lab in the world. Our state of the art facility houses the finest and most up-to-date equipment in the Cisco training industry.  We have spent over $5.5M (Cisco list price) to date building the most advanced training racks for our students to utilize.  We have sixteen CCIE Voice racks.  Each rack is loaded with individual servers, VG248s, and complete Catalyst 6500 switches.  We have thirty-two CCIE Routing and Switching racks, sixteen CCIE Security racks, sixteen CCIE Service Provider racks, thirty-two CCNP racks, and thirty-two CCNA racks, with the latest hardware.  CCBOOTCAMP training racks are loaded with:  Cisco 2811 ISR routers (running the same code used in the Cisco CCIE lab); Catalyst 3560 switches; ASAs; PIX 515Es; IPS; VPN Concentrators; ACS servers; and Frame Relay Switches.  No other training company in the world offers this level of equipment to their customers.

#8 Our Dedication as a Cisco VAR
CCBOOTCAMP is a dedicated Cisco Certified Premier Partner with years of hands on consulting experience. We are known in the Las Vegas Market as the fastest growing Cisco Partner and employ the highest number of industry experts. Get trained by field experts.

#9 Our Locations
We provide training in over ten locations worldwide, however; our headquarters in Henderson, NV lends easy access to the Las Vegas McCarran International Airport and hotels. Our students can take advantage of less expensive flights and hotels due to the booming Henderson/Las Vegas economy. 

#10 Our Success Rate
Our CCIE Written, Associate and Professional level pass rates are over 95%. We have a results oriented philosophy and are committed to making each student a success - by enabling the student to fully learn and understand the technologies. If needed we offer the most comprehensive retake opportunity in the industry; simply come back to us for any CCIE Written, Associate or Professional level course for free.

What  else?

First in the Industry
CCBOOTCAMP is the leader in developing innovative and ground breaking training opportunities. Here are a few of our first endeavors:

First to develop CCIE training and have been successfully preparing students for their CCIE attempt since 1998

First to offer multiple courses to assist in attaining CCIE Certification

First to develop an all inclusive CCIE Preparatory Program

First to construct a proven CCIE Approach and Methodology

First to offer CCIE Voice Executive Online 12 week Program

First to offer CCIE Routing and Switching Executive Online 12 week Program

First to offer students their own pod of equipment for all training programs

First to develop a Cisco authorized iCOD for CCNA – Security

First to develop a Cisco authorized iCOD for CCSP – SNRS

First to offer CCDE training

Tags: Associate, CCDA, CCDP, CCENT, CCIE Approach and Methodology, CCIE Lab, CCIE Routing and Switching, CCIE Security, CCIE Service Provider, CCIE Voice, CCIE Written, CCIP, CCNA, CCNP, CCSP, CCVP, cisco, Cisco Learning Solutions Partner, class size, CompTIA, consulting, equipment, field experts, hardware, iCOD, instructors, IT Training, online, philosophy, Premier Partner, Professional, racks, SNRS, Sponsored, staff

CCIE: Is it really all about numbers???

One of our competitors likes to say:

“It’s simple. You are trying to obtain your CCIE number and xxx is all about CCIE numbers.”

I disagree completely. Becoming a CCIE is NOT all about CCIE numbers. It’s about learning. It’s about experiencing. It’s about YOU BECOMING an EXPERT! Too many training companies focus on quantity and NOT quality. Companies like to say, “We have the fastest growing list of CCIE’s.” That’s great. So to them, their customers are just numbers. I absolutely hate this type of thinking and approach. This is what separates CCBOOTCAMP from our CCIE competition. We focus on the student. We do NOT just like to shove workbooks down people’s throats and hoping that their “lab rat” experience works out well and it gets them through the CCIE lab exam.

I work closely with all of my sales staff, support staff, and instructors to make sure that we provide our students with the best experience possible. What does this mean you ask? This means that we make sure you get the right package from the start. We HATE just selling rack time and workbooks. Sure, it’s a quick and easy buck, but that’s NOT what CCBOOTCAMP is about. We want to make sure our instructors interact with you on a personal level and spend the time necessary to make sure you UNDERSTAND what you are doing and WHY you are doing it - when you do a lab. When I studied for my CCIE lab exam, all I had was a workbook and a rack. I didn’t have an instructor to guide me. What I found out, during my studying, was that I could type the commands that would delivery the proper and correct configuration, but I really, and truly did NOT understand what I was doing! Sure, I even passed my CCIE R&S lab exam. I never configured OSPF or BGP in a production environment prior to the lab exam. I read a few books, did a few labs, and knew enough to pass the lab. If I had to do anything related to OSPF or BGP in a production environment that varied from the CCIE lab, I was screwed! Fortunately, since then, I’ve gotten some production experience with OSPF and a little BGP.

I want our students to LEARN and UNDERSTAND what they are doing. I do not want them to become the same type of engineer I was when I passed my lab exam. I want our students to know what they are doing and why they are doing it. Sure, getting a CCIE # is great, but if you haven’t got the slightest clue of what you’re actually doing and why, are you really an expert? I don’t think so!

Sure, we have a large “hall of fame” that my sales staff posted. But I actually, personally, know quite a few of them! My staff has interacted with the majority of them. Our success stories aren’t just success stories that purchased a workbook off our website and studied. These are engineers we have worked with who have succeeded by learning.

Can a lot of people get a workbook, memorize some scenarios and pass the lab exam? Definitely. Does that make that person an expert? Probably not. I encourage our instructors to work closely with our students to make sure they understand the technologies they are configuring. We DO NOT teach to the test - we actually teach you the technologies and how they interact with each other. It’s quite a different approach than our competition, but I’m sure you’ll agree, it makes sense!

I take pride in the methodology that I personally put together. It is a very well thought out program that combines self paced learning with instructor led training. Feel free to check out one of my methodologies if you have time:
http://www.ccbootcamp.com/about-ccbootcamp/approach-and-methodology.html

The majority of my instructors are regularly working on live deployments and customer networks. It allows our instructors to bring a high level of customer understanding and experience into our CCIE classes. CCBOOTCAMP is not only an authorized Cisco training company, but we are also a Cisco Premier Partner with Advanced Unified Communications specialization. We actually PRACTICE in the channel what we PREACH. It’s something none of our competition does. I think it’s another huge benefit to attending one of our CCIE boot camps. When an instructor can bring a recent real-world situation into the classroom, it makes the student experience and understanding “hit home.”

Getting a CCIE is NOT all about just getting a number. It’s about YOU learning and understanding.

Don’t just get your CCIE #, LEARN IT and become a true expert!

Brad Ellis
CCIE#5796 (R&S / Security)
CCSI# 30482
CEO / President
CCBOOTCAMP - A Cisco Sponsored Organization (SO)
YES! We take Cisco Learning Credits!
Training And Remote Racks: http://www.ccbootcamp.com

Tags: Brad Ellis, ccbootcamp, ccie, cisco, training

Categories

Select Category ccbootcamp  (1) CCNA  (1) CEO CCIE  (1) iCOD  (2) Press Releases  (4) training  (6) Uncategorized  (6) Welcome  (5)