Colin McNamara - CCIE 18233 , VCP, EMCIE, NCDA, GEEK » Learning

Protecting the integrity of the CCIE lab – Verbal Interviews being tested

colinmcnamara — Fri, 29 Aug 2008 23:22:36 +0000

Brian Dennis over at Internetwork Experts blog caught wind of an interesting email from Cisco -

Dear Candidate:

On August 27, Cisco will introduce a pilot for the CCIE Routing and
Switching lab exam in Beijing, China. The pilot will add a 10-minute
interview that will assess the candidate's ability to apply expert-level
networking skills and knowledge to networking problems that are encountered
on the job. After the lab orientation, a panel of three experts will conduct
a verbal interview with each candidate, asking a series of expert-level
networking questions (questions and answers will be in English). The ability
to correctly answer these questions will affect the exam score. After
completing the interview, the candidate will have the entire 8 hours to
complete the lab portion of the exam.  These scores will then be
calculated and then combined for a total score which will decide a pass
or a fail.

Our goal with this email is to let you know that your day will extend beyond
the normal testing day by approximately one hour.  The additional hour will
be at the end of the day. We hope you find this interview process
enlightening and helpful as we continue to strive for the standard the world
has come to expect from CCIE.

In my opinion this change is both needed and appropriate. In the past couple years, the two main barriers to entry with the CCIE (access to gear, and knowledge) have been lowered with the abundance of training programs as well as dynamips and it’s derivatives for gear emulation. Where in the past you were looking at a minimum of $8,000 dollars for a full lab, now you can run it on your PC at home.

From what I see, this is encouraging engineers to get their CCIE’s earlier in their career. This in itself is not a bad thing. If an engineer has dedicated themselfs to learning all the in’s and out’s of networking technology, then they really have earned the title. The problem comes when people want to take short cuts. They buy a lab of someone in China, or use other methods to get copies of the lab. To them, passing the lab and getting their number is all that is important, not truly becoming an expert in the technology.

While in the short term this may seem like the quick path to a good salary, in the long term everybody loses. Those who have cheated their way to their CCIE (while few and far between) end up devaluing the cert for the rest of us. And at the end of the day, they are just cheating themselves, and will lose their jobs when their true skills are tested.

It looks like Cisco is seeing the same thing that I have just talked about. This pilot program should go a long way into protecting the integrity of the CCIE for years to come.Similar Posts:

--Colin McNamara

Protecting the integrity of the CCIE lab – Verbal Interviews being tested

Tags: blog, C, CCIE, ccie lab, CISCO, fraud, integrity, interview, Learning, NDA, Network, switch, Technology

It’s on like Donkey Kong – CCDE practical registration is open

colinmcnamara — Thu, 10 Jul 2008 17:12:10 +0000

The CCDE just got VERY real in a big way.The following announcement was posted in the CCDE zone at the Cisco Learning Network. (If you haven’t checked the Cisco Learning Network out yet, I recommend it. Its like NetPro on steriods, but focused around certifications.)

REGISTER NOW for the BETA Practical Exam
Cisco is now registering beta candidates for the CCDE Practical Exam. Cisco has finished development of the second exam needed to attain the CCDE certification, the practical exam, and is now soliciting candidates for the beta delivery.

Cisco will be offering this beta delivery of the exam on October, 1 in Chicago, Illinois at a VUE professional testing center. Only candidates that have a passing score on the CCDE qualification exam may register and participate in this exam. Exam beta pricing is $980US. Register Now by email at:ccdebeta@cisco.com

For my CCIE, it always seemed like a switched turned the moment I put my credit card information in and secured a seat. Before that button was pushed, it was a “future” item to deal with. Once that button was pushed it was a “now” item. Things like going out, having a beer with the guys, video games, etc all got shut down so my focus could burn a hole in the subject matter.

I just sent in my registration email for the CCDE practical. I’ll be in Chicago Oct 1, ready to give it my all. But, the more important lesson I learned from my CCIE was that if you focus your efforts on your lab day, you will fail. However if you focus your efforts consistently over the months before, you have a chance of passing. Now that my registration email has been sent, it is time to turn that focus dial up, lock to the door to my office and earn the CCDE through months of hard work.

See you in Chicago

–Colin

Tags: C, CCDE, CCIE, certification, CISCO, Colin, DESIGN, Learning, Network, Pic, Practical, switch, Technology, video games

Heading home – Cisco Live 2008

colinmcnamara — Fri, 27 Jun 2008 04:18:15 +0000

Sunday morning twenty two coworkers and I got off various planes bright eyed and bushy tailed ready to attack a week of learning, networking and having a great time. After a week of classes, and entertaining till 2:00 am each night, we look more like the walking dead.

Of course, it was all worth it. Some people see networkers as primarily an opportunity to prepare for a certification. Others got to learn something completely new. Some even go just for the world of solutions and the various booth babes. What I value the most is the opportunity to see old friends, and make new ones, to sit down with someone you have just met and have a half hour conversation on distribution / access layer technologies, or just throw some darts. No matter what, the goal is to connect, learn and collaborate with my peers. This year, I can say that these goals have been achieved. See you next year at the Moscone Center in San Francisco at Cisco Live Networkers 2008.Similar Posts:

--Colin McNamara

Heading home – Cisco Live 2008

Tags: C, certification, CISCO, cisco live, Learning, NDA, Network, Networkers, san

Cisco is using Linux virtualization and 40 core CPU’s for its next generation routers

colinmcnamara — Mon, 10 Mar 2008 19:20:52 +0000

Cisco recently released a new series of router called the Aggregation Services Router, or ASR for short. This series of routers is mainly targeted at the service provider market, where it is targeted as a single chassis solution for what is called the “triple play” – Voice, Video, and Data. More accurately it can be targeted to the new “quadruple play” of Voice, Video, Data and Security. The ASR1000 accomplishes this by leveraging two key technologies. These are a new operating system, IOS-XE which is uses the Linux kernel as its foundation, and Cisco’s new QuantumFlow 40 core processor.

IOS-XE is takes the best elements out of Internet Operating System (IOS) which has its roots in a closet at Stanford, and combines them with the most successful open source technology ever – Linux. Cisco is leveraging Linux virtualization technologies such as Kernel Based Virtual Machines to protect against operating system failures as well as to allow for In Service Software Upgrades (ISSU).

To really appreciate this, we first have to dive down into the overall architectural changes of the ASR1000. The largest change that Cisco has made was to implement separate forwarding and control planes. In the past, Cisco routers would have the processes responsible for forwarding traffic, and the processes responsible for configuring the router running on the same root operating system. The side effect of this is that if you want to upgrade the root operating system of your router, you are going to have interrupt the traffic flowing through it to do so, or have a physically separate route processor to take over while you rebooted. This is a big headache operationally, and effectively forced engineers to design in separate physical chassis to meet high uptime requirements.

What Cisco has done to address this, was to mirror changes made in their storage and carrier routing portfolios. Both of those product lines utilize the operating system to push commands into advanced processors that exist on the line cards themselves. The ASICS on the line cards are designed to work in a distributed fashion, so that production traffic never goes into up into the router processor (or sup engine). This in effect ensures that the control and forwarding planes can exist as independent elements.

If you look at the graphic above, you will notice 3 main zones. The upper zone is what we would normally describe as the control plane. This is where the higher level functions such as your routing processes, ssh daemons, snmp daemons, and shells live. In short, if you you configure or read something, you are going to do it here. The only time traffic flows through this plane is when you are doing a thing called process switching. keep in mind this is a rare occurrence and usually occurs because of an oversight in your network designs.

By separating the control and forwarding planes, this allows Cisco to basically run a management station on the router, that programs chip sets in the line cards on the fly. This in my opinion is where the true power of this architecture comes through. By separating the two functions the software engineers are free to utilize powerful open source technologies such as Kernel-based Virtual Machines, and the Linux kernel, while letting the integrated circuit engineers design blazing fast chips which allow full functionality at line rate.

What benefits should we receive from a virtualized control plane? First, in larger routing and switching chassis (including the top end of the ASR1000 line) you normally have physically redundant route processors (RP)/ supervisory engines(SUP). The operating systems on these RP’s synchronize many things, including configuration, process state, routing tables, security associations and much more. The primary reason for this, is if you have a failure in the active RP, you can failover to the standby RP without interrupting traffic flows.They also can be used to streamline the software upgrade process by only upgrading one RP at a time, and then gracefully transferring traffic to it. Once proper operation is verified, the backup RP can be brought up to the same code revision.In any production environment this is highly desirable, and helps immensely in the battle for five nines.

The ASR1000 takes the redundant RP concept seen in high end chassis, and allows you to implement redundant upgrades, as well as protection against software failure, with only one physical route processor. This is done by utilizing Linux kernel virtualization. Instead of running the control plane directly on the production hardware, a small kernel is inserted. Booting from that are two copies of IOS-XE. These run independently, and synchronize state and configurations just as if you had two physically separate route processors. What this means in operational English, is that where in the past, you would have to either have two devices, or a larger device with redundant RP’s to upgrade without disruption, you can now have that same ease of maintenance, in a much smaller (and at the end of the day, less total cost) package.

Below this is the forwarding plane.It plugs into to a high speed interconnected fabric which all line cards and RP’s are redundantly connected to. In the diagram above, this is the bottom level. Items in this plane include buffer memory, Cisco Express Forwarding (CEF) ASICS, and now the new QuantumFlow processor. This is normally where you would find your DCEF enabled line cards, fibre channel and Nexus7000 line cards, as well as the modules for the ASR1000 routers. When properly utilized, traffic should be relatively isolated to this tier, and function independently from the control plane.

The shining star of the ASR1000′s forwarding plane is a group of chips that is referred to as QuantumFlow. The QuantumFlow architecture itself merges Cisco’s strength in integrated circuit design, with its strengths in IOS software design. In the past, Cisco would design ASICS’s for specific functions, and then write commands down into them. This has worked very well, until they point that a new feature came out that couldn’t leverage the fixed configuration of an older ASIC. Your choice at that point was generally to process switch for that feature (which is slower, and honestly bad form), or upgrade your cards to the newer ASIC design. The QuantumFlow chipset approaches this problem from a new angle. The first chip in the set (Popeye) is designed to be field programmable in C, as well as no fixed internal pipelines. This combined with utilizing 40 cores running between 900 and 1200 megahertz allows the programmers to utilize parallel processing techniques to utilize an immense amount of processing power in real time.

To put things into perspective, remember when you got your first multi core laptop or desktop. You were able to say watch a DVD, as well as compile code at this same time, while continuing to have a responsive workstation. Now imagine what you could do with a 40 core processor. This is the kind of power that we are talking about. Now imagine, that not only is your workstation immensely powerful, but you could also offload common jobs such as running daily builds, or encoding videos to another machine (or in this case processor.

In the ASR1000 this processor is called Spinach (yellow are in the graphic above). And of course just like the cartoon, Popeye’s potential really comes to light when combined with Spinach. Spinach is a separate chip, that is used a a traffic manager. This chip handles queueing and quality of service, ensuring that the proper packets arrive at the proper time, as well as interconnecting with cryptographic offload engines so it can equally apply services to encrypted flows.

At the end of the day, the most important question is not how fast something is, or how cool it is. The question is what can it do for me? By leveraging this new architecture the ASR1000 is now able to do line rate inspection of traffic using Network Based Application Recognition (NBAR), Support 128,000 queues for deep quality of service, secure and encrypt data using zone based firewalls and embedded crypto engines, segregate traffic using MPLS, integrate advanced voice and video functionality, as well as providing fulling Netflow v9 support for all of the above. It provides all of these services in an always on solution utilizing Linux virtualization, as well as leveraging an flexible chip set architecture that allows for field programmable improvements in the future.

My hope is that after reading this article that you are in a better to understand how Cisco is leveraging open source technology and integrated circuit designs to improve the foundation of the internet. In upcoming articles I will be discussing design scenarios utilizing this features in this product, as well as highlighting other areas where Cisco is embracing both open source technology, as well as open architectures that can properly leverage projects such as Linux, Ntop, Wireshark and more. If this article has you interested in learning more about some of the technologies mentioned today, then I encourage you to check out some of the links below, or shoot me and email to be highlighted in a future readers questions article.

Learn more about Linux Kernel-based Virtual Machines

Learn more about Cisco’s ASR1000

Learn more about Cisco QuantumFlowSimilar Posts:

--Colin McNamara

Cisco is using Linux virtualization and 40 core CPU’s for its next generation routers

Tags: ASR1000, C, CCIE, CISCO, connecting, DESIGN, Fibre Channel, IOS-XE, isr, kvm, Learning, linux, MPLS, NDA, Network, Nexus, packet, Pic, Power, Provider, quantumflow, Router, security, service provider, storage, switch, Technology, virtualization

Reader question – Why are corporations looking for BGP experience?

colinmcnamara — Mon, 03 Mar 2008 05:40:19 +0000

Mike, a reader of my blog, sent me an email last week with decent question for someone early in their career. Mike is currently looking for a new job. He was curious why so many corporate IT jobs were requiring BGP knowledge and experience.

Mike Writes -

“Hi Colin,
I’m an avid reader of your blog and had a question that I figured you could answer. I don’t have CCIE knowledge like I’m sure a lot of your readers do. I have worked for the same company for 6 years and during that time had been promoted into the Network Group where I was sent through class and earned my CCNA. The company I worked for decided to relocate across the country and so I have been looking for a new job. Finding a new job doesn’t seem to be that big of a deal but I noticed a lot of job descriptions are asking for BGP experience. We didn’t use BGP at my last job and I thought BGP is used primarily by ISPs for routing between Autonomous systems? If that is the case why do so many non-ISP companys list BGP experience in Networking job descriptions? What are they doing with it? Shouldn’t the ISP be doing the BGP routing for them?
Thanks!
-Mike”

Well Mike there are 3 primary reasons why a company would require (or want) BGP knowledge from its candidates.

Scenario 1. The company has an redundant Internet edge.

In this case lets call our company sample_company. Sample_company has its website hosted in a publicly facing DMZ and wants to make sure that its web servers are available in the case of an ISP failure. Normally in this case the company would request and Autonomous Systems Number (ASN) from ARIN and would get assigned a block of publicly routeable IP address’s (normally /24) that they can advertise. Sample_company would then peer with multiple ISP’s for example one connection to AT&T and the other to Sprint. Sample_company would advertise their ASN through both these ISP’s, and in the case of a failure of one of their ISP’s, the rest of the Internet would be able to calculate a path to sample_company’s web servers via the backup ISP.

Scenario 2. The company is utilizing MPLS for its WAN connectivity.

From a customer perspective MPLS is a private BGP based WAN where all edge devices connected to the MPLS provider utilize BGP to inject and learn routes. One note, some providers do support advertisement of routes via OSPF and even EIGRP now, but the most common scenario is to use BGP as your internal WAN protocol while running MPLS. One trend I am starting to notice, is that since companies are already using BGP on the MPLS WAN, they have started utilizing BGP as their primary routing protocol for their sites to avoid running multiple routing protocols and having to redistribute into BGP to cross the WAN.

Scenario 3. The company is using MPLS inside their data centers for segregation of business units.

In essence they are using the same tools and technologies that MPLS service providers are, however applying it inside of their data center and campus networks. In this case, BGP is the routing protocol necessary to carry the routes between the seperate MPLS VPN’s that are running inside the corporate data center. While this sounds pretty complicated, it actually simplifies many of the designs that you would normally implement to attain the same goals.

Learn more about BGP - Of course, there are many other reasons why you may see BGP on a job listing, but I think the previous covers the most common. If you are curious, and want to learn more about BGP I recommend buying Routing TCP/IP volume 2 by Jeff Doyle. This covers many great scenarios and configuration examples in EGP protocols. It is also written in plain English which can be a challenge with many technical books.

Learn more about MPLS in the enterprise - If you are feeling like learning about how you can implement MPLS inside of your own enterprise network then I would recommend buying Network Virtualization by Kumar Reddy and Victor Moreno. I was lucky enough to have Rick Davis translate the whole idea of utilizing MPLS in a campus environment into plain English for me a couple years back. From that point I was able to really expand my knowledge base and start asking the right questions from a firm foundational understanding of the technology. Kumar and Victors book took my understanding to the next level, showing how to incorporate many very cool features to make a MPLS network stand on its head if you want to. I can say (and actually have said to Kumar Reddy) that this book redefined my data center designs for large corporate and enterprise customers. I really recommend that you add this to your collection.Similar Posts:

--Colin McNamara

Reader question – Why are corporations looking for BGP experience?

Tags: BGP, blog, C, CCIE, CCNA, CISCO, Colin, Data Center, DESIGN, hiring, Learning, Mike, MPLS, NDA, Network, Provider, service provider, Technology, virtualization

What being married to a geek who does search engine optimization gets you

colinmcnamara — Sat, 05 Jan 2008 03:35:00 +0000

I have been learning all the right ways to build a website that Google can understand. Along the way I set a couple of goals.

The first and foremost goal is to only use “white hat” or legal ways of increasing her visibility
Get Ashley on page 1 for four target keywords
Get An indented listing

Well, it looks like I met my initial goals. Now to move to some more generic keywords and see what goes from there.
Copyright ©2008 | Colin McNamara | CCIE 18233 | All Rights Reserved”

http://www.2cups.com

“The difficult we do immediately, the impossible just takes a little longer.”Similar Posts:

--Colin McNamara

What being married to a geek who does search engine optimization gets you

Tags: blog, C, CCIE, Colin, Learning, legal, san

created a new map of ashley’s site

colinmcnamara — Thu, 01 Jan 1970 00:00:00 +0000

I have been learning many of the guidelines of being a good site for Google lately. Man has it been an eye opener. As part of that eye opening, I updated some pages on the wifes site. I found this cool tool called a sitemap tool that creates a list of all pages in XML .. handy huh?

http://www.ashleymcnamara.com/index2.php

http://www.ashleymcnamara.com/articles/2007/05/19/mama-rocks/

--Colin McNamara

created a new map of ashley’s site

Tags: C, CCIE, Colin, HP, Learning, NDA

Updated CCIE numbers

colinmcnamara — Sat, 17 Nov 2007 19:56:00 +0000

CCIEs Worldwide

Though CCIEs are members of an exclusive group, they can be found in countries on every continent. Use the map and tables below to discover your peers around the world.

Americas
EMEA
Pacific Rim
Africa
Asia
Cana
Europe
Middle East
Pacific Islands
South America
United States

Total of Worldwide CCIEs:		15658 (last updated 11.14.2007)
Total of Routing and Switching CCIEs:		14329
Total of Security CCIEs:		1207
Total of Service Provider CCIEs:		650
Total of Storage Networking CCIEs:		99
Total of Voice CCIEs:		601

Multiple Certifications:

Many CCIEs have gone on to pass the certification exams in additional tracks, becoming a “multiple CCIE.” Below are selected statistics on CCIEs who are certified in more than one track.

Total with multiple certifications worldwide:		1344
Total of Routing and Switching and Security CCIEs:		517
Total of Routing and Switching and Service Provider CCIEs:		300
Total of Routing and Switching and Storage Networking CCIEs:		23
Total of Routing and Switching and Voice CCIEs:		182
Total with 3 or more certifications		210

http://www.2cups.com

“The difficult we do immediately, the impossible just takes a little longer.”Similar Posts:

--Colin McNamara

Updated CCIE numbers

Tags: blog, C, CCIE, certification, CISCO, Colin, Learning, Network, Provider, security, service provider, storage, switch

Why was Storage Networking my first CCIE? And What did I do to prepare?

colinmcnamara — Thu, 21 Jun 2007 04:59:00 +0000

I got a question on groupstudy about my background, and why I chose Storage as my first CCIE. It seems like a good idea to post it here also.

My background is all over the place. It goes from running a small ISP when I was 18 to managing international CallManager clusters, to enterprise data center design and migrations. I swear that I have tech ADD. I see something new and I am like.. oooooh shiny, lets do a sniff and see how it works.

I actually attempted the Route Switch lab twice in 2002 (still had token ring and dlsw still) but got activated for the war before I could get my number. I can tell you.. that sucked horribly.

So, why did I choose to get my Storage CCIE first instead of finishing up my Route Switch first? Well, over the past couple years I have done a significant amount of IP storage (NFS, ISCSI, ATA over Ethernet, etc) including building my own IP storage heads based on linux. I had also done a little bit of fiber channel work. I felt that I had a significant advantage compared to most network engineers in the storage networking space. And, I think more importantly, the topics that I had to study were new and fresh. Whereas when I cracked open my Route Switch books.. I honestly wasn’t to excited about it at the time ( I think I was holding a grudge from my first attempts in 2002).

The partner e-learning central portion of Cisco has an Excellent lab access to labgear.net. It gives you 2 hour segments of time with 2 mds’s (both with IPS blades), 1 2 port jbod, and 2 2 port servers. They also have introductory tutorials for most major technology segments.

I did all of those, along with the every E-learning class that was on PEC. I think the major ones were the Design, Support, and CASSI classes.I took that, sat for the design and support specialist exams, and took my written last December.

After doing all that work, I was honestly 70% there. I took a little break for january and febuary (There was no open lab dates) and then started hitting the labs I think at the end of febuary.

For the majority of my practice I used the labs available through PEC. I also was able to weasel my way into 8 hour sessions every sunday from our channel SE. (I owe him plenty of drinks at networkers this year) For those 8 hour sessions I had labs created to summarize the major technology areas and to be as evil as possible to myself.

I had one attempt which didn’t work out as well as I would have liked. In RTP the lab starts at 7:15. This means if you are from the west coast like I am you will be getting up at 3:00 am in the morning for your lab. That royally kicked my but. I diverted from my attack plan and ended up
running out of time. It was a classic example of letting the lab run you, instead of you running the lab.

Luckily a data opened up just over a month later. I spent that time just working on my speed (speed is the secret sauce). I migrated to using Fabric Manager (gui interface) instead of command line. After 2 practice runs my time had dropped 25%. I also flew out to RTP 3 days before, and made sure to relax and get on east coast time.

For my final prep I got access to iementor’s lab. Their lab is excellent. I cannot reinforce enough how much it contributed to my confidence in that final week. Roman was really cool about working with an existing candidate to get me squeezed in. They are really cool guys, and they have the only workbook on the market right now.

So, I used their lab 2 days before mine, and then just chilled the day before. The day of the lab I had 70 points by lunch, and had completed configuration of the lab by 12:30. I spent the rest of the day reviewing my configurations (found 2 errors), fixing one bug, and generally harassing the proctor to make sure I didn’t misinterpret anything.

So.. if I had it all to do over again what would I do. I would still do the PEC stuff, and continue to primarily live in the Doc CD. Though I would probably pony up the cash and buy the iementor book and more lab time with them.

--Colin McNamara

Why was Storage Networking my first CCIE? And What did I do to prepare?

Tags: blog, C, CCIE, CISCO, Colin, Data Center, DESIGN, error, Learning, linux, mds, NDA, Network, Networkers, Pic, san, storage, storage ccie, switch, Technology