Re: EIGRP authentication using key chain with validity period

OK Everyone. Thanks for the feedback.

Scott,
      Dare I admit that I took the 2-day lab back in 2000 and remember that
they did in fact load the lab back then? :) And I also remember when little
thinks like TR RIF decoding was an important part of the lab. Oh well.

I know that there are enough commands out there to tell how things will work
out after a reload occurs, I just didn't realize that (maybe) they had
stopped bouncing the racks at the end of the day.

Now where's that DLSW/(B)STUN config guide I was reading.....

-Hammer

On Sat, Jul 11, 2009 at 3:56 PM, Narbik Kocharians <narbikk_at_gmail.com>wrote:

> Just a quick question, did any of the proctors say that they don't reload
> the rack?
>
> On Sat, Jul 11, 2009 at 1:38 PM, Scott Morris <smorris_at_ine.com> wrote:
>
>> While power outages aren't part of the plan, they're always possible.
>> The impact has changed a bit now for two reasons that have been well
>> pointed out by Cisco/proctors in Ask-the-expert...
>>
>> 1. the equipment is centrally located in SJC now as opposed to spread
>> out globally. Centrally managed and such.
>> 2. The equipment being used has a clock chip so even if you do reboot,
>> THAT part isn't an issue.
>>
>> OSPF DR/BDR is another issue, but if a student has been paying attention
>> in (hopefully) any bootcamp, they should be painfully aware of what to
>> look for and what not to get caught by.
>>
>> If a candidate has a planned reload schedule to re-check their items
>> (lunch and mid-afternoon in my recommendations) then they needn't have
>> anything to worry about, or in case they forget the OSPF DR thing, they
>> have plenty of time still to figure it out. No surprises.
>>
>>
>>
>>
>>
>>
>> Darby Weaver wrote:
>> > Agreed. However I've been to some classes where some might lead students
>> to
>> > think otherwise. Proctors will warn of power fluctuations or small
>> outages
>> > and one should always be prepared for this type of contingency.
>> >
>> > On Sat, Jul 11, 2009 at 2:05 PM, Scott Morris <smorris_at_ine.com> wrote:
>> >
>> >
>> >> Nope, they don't touch 'em. There's enough other show commands to know
>> >> who will be DR after a reload! :) They only used to in the two-day
>> >> format.
>> >>
>> >>
>> >>
>> >>
>> >> *Scott Morris*, CCIE/x4/ (R&S/ISP-Dial/Security/Service Provider)
>> #4713,
>> >>
>> >> JNCIE-M #153, JNCIS-ER, CISSP, et al.
>> >>
>> >> JNCI-M, JNCI-ER
>> >>
>> >> evil_at_ine.com
>> >>
>> >>
>> >> Internetwork Expert, Inc.
>> >>
>> >> http://www.InternetworkExpert.com <http://www.internetworkexpert.com/><
>> http://www.internetworkexpert.com/>
>> >>
>> >> Toll Free: 877-224-8987
>> >>
>> >> Outside US: 775-826-4344
>> >>
>> >>
>> >> Knowledge is power.
>> >>
>> >> Power corrupts.
>> >>
>> >> Study hard and be Eeeeviiiil......
>> >>
>> >>
>> >>
>> >> Hammer wrote:
>> >>
>> >>> Scott,
>> >>> I thought that the proctors usually reloaded the rack before
>> >>> grading? To make sure OSPF DRs were set right and whatnot. I know it
>> >>> can all be gleamed from configs "ip ospf priority blah" but I thought
>> >>> that they mostly did show commands to grade you in the scripting. Is
>> >>> bouncing the rack something they used to do but not anymore?
>> >>>
>> >>> -Hammer
>> >>>
>> >>>
>> >>> On Sat, Jul 11, 2009 at 7:01 AM, Scott Morris <smorris_at_ine.com
>> >>>
>> >> > <mailto:smorris_at_ine.com>> wrote:
>> >>
>> >>> The ISR routers used on the real lab have a CMOS clock, so they
>> will
>> >>> retain their time on reload.
>> >>>
>> >>> Your lab will not be reloaded prior to grading.
>> >>>
>> >>>
>> >>> Anh Khoa Le Viet wrote:
>> >>> > Hi Group,
>> >>> >
>> >>> > I took a mock lab from a vendor today with task about the EIGRP
>> >>> > authentication: An MD5 hash of the password CISCO1 should be
>> >>> used from
>> >>> > 12:00AM on
>> >>> > 1/1/2006 to 11:59PM on 12/31/2006 and An MD5 hash of the
>> >>> password CISCO2
>> >>> > should be used after this. I think I come out with the right
>> >>> solution:
>> >>> >
>> >>> > key chain EIGRP
>> >>> > key 1
>> >>> > key-string CISCO1
>> >>> > accept-lifetime 00:00:00 Jan 1 2006 00:29:59 Jan 1 2007
>> >>> > send-lifetime 00:00:00 Jan 1 2006 11:59:59 Dec 31 2006
>> >>> > key 2
>> >>> > key-string CISCO2
>> >>> > accept-lifetime 00:00:00 Jan 1 2007 infinite
>> >>> > send-lifetime 00:00:00 Jan 1 2007 infinite
>> >>> >
>> >>> > But the thing is: do we need to configure ntp server and client
>> >>> for this
>> >>> > kind of task? At the time I did the configuration, the clock
>> >>> showed in
>> >>> > Routers is 2009 year time. But at the end of the lab, I did
>> >>> reboot all the
>> >>> > routers and found out that EIGRP did come up, quickly found that
>> >>> the clock
>> >>> > was back to 2002 and no EIGRP neighbors came up :(. We can not
>> >>> do set
>> >>> > datetime manually on the routers as if we reboot, it will came
>> >>> back to
>> >>> > default datetime, so the only option is NTP.
>> >>> >
>> >>> > Could you pleas give some advise on this kind of task? Should we
>> >>> add NTP in
>> >>> > the real lab or no need to do that if in the IP Services
>> >>> portion, no NTP
>> >>> > task?
>> >>> >
>> >>> > Thanks and best Regards,
>> >>> > Khoa
>> >>> >
>> >>> >
>> >>> > Blogs and organic groups at http://www.ccie.net
>> >>> >
>> >>> >
>> >>>
>> >>>
>> >> _______________________________________________________________________
>> >>
>> >>> > Subscription information may be found at:
>> >>> > http://www.groupstudy.com/list/CCIELab.html
>> >>>
>> >>>
>> >>> Blogs and organic groups at http://www.ccie.net
>> >>>
>> >>>
>> >>>
>> >> _______________________________________________________________________
>> >>
>> >>> Subscription information may be found at:
>> >>> http://www.groupstudy.com/list/CCIELab.html
>> >>>
>> >> Blogs and organic groups at http://www.ccie.net
>> >>
>> >> _______________________________________________________________________
>> >> Subscription information may be found at:
>> >> http://www.groupstudy.com/list/CCIELab.html
>> >>
>> >
>> >
>> > Blogs and organic groups at http://www.ccie.net
>> >
>> > _______________________________________________________________________
>> > Subscription information may be found at:
>> > http://www.groupstudy.com/list/CCIELab.html
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
>>
>>
>>
>>
>>
>>
>>
>>
>
>
> --
> Narbik Kocharians
> CCSI#30832, CCIE# 12410 (R&S, SP, Security)
> www.MicronicsTraining.com
> Sr. Technical Instructor

Blogs and organic groups at http://www.ccie.net
Received on Sat Jul 11 2009 - 16:11:42 ART