Hi All,
I passed the security lab yesterday in Lagos (mobile lab) on my first attempt.
Thanks to everyone that was a part of this journey.
1. God: For grace, strength, courage, provision and favour.
2. Family: For all the support. Thanks a million.
3. Friends: You guys are the best. It's not easy to have so many friends when all you do is sit and stare at a screen all day.
4. Study Partners: (Tacack, Deolu, Peter) It was fun studying with you guys. Wishing Peter all the best as he takes the lab today!
5. Study groups: OSL totally rocks. Groupstudy, CLND and IEOC are also very helpful.
6. Everyone that wished me Luck :)
Study Materials
I used INE study materials (because I fell in love with them since my R&S) and they are very good. IPExpert also has some quality materials too. Yusuf's labs are also incredible and they show you what to look out for in the lab.
Once again, thanks for everything.
Cheers,
Amplebrain, CCIE R&S and Sec
Thursday, June 17, 2010
Wednesday, June 2, 2010
XXI
In Real world,
1. We live in the 21st century
2. The legal adult age in most countries - Alcohol, rent-a-car etc.
In mathematics
3. A Fibonacci Number
4. A Triangular Number
5. A star number
6. An octagonal number
7. composite Number
8. A Harshad Number
9. A Motzkin number
Symbolism/Religion
10. Number of the perfection by excellence, 3 x 7, according to the Bible.
11. 21 chapters in the Gospel of St John
In Science/Networking :)
12. FTP port number
13. Atomic Number of Scandium
In entertainment & Sports:
14. Used to be a TV show
15. 21 points are required to win a game of badminton and tennis
16. A card game, also known as blackjack
17. Name of favorite movie :)
18. Number of spots on a cubical dice
Trivia:
19. Number of shots fired in a salute of Royalty
History20. Number of demands sent to the Chinese by the Japanese in 1915
and finally.
21. That's how old I become today :)
Yep, Happy birthday to me! Thanks to everyone who has made the day special so far.
Cheers!
Amplebrain.
1. We live in the 21st century
2. The legal adult age in most countries - Alcohol, rent-a-car etc.
In mathematics
3. A Fibonacci Number
4. A Triangular Number
5. A star number
6. An octagonal number
7. composite Number
8. A Harshad Number
9. A Motzkin number
Symbolism/Religion
10. Number of the perfection by excellence, 3 x 7, according to the Bible.
11. 21 chapters in the Gospel of St John
In Science/Networking :)
12. FTP port number
13. Atomic Number of Scandium
In entertainment & Sports:
14. Used to be a TV show
15. 21 points are required to win a game of badminton and tennis
16. A card game, also known as blackjack
17. Name of favorite movie :)
18. Number of spots on a cubical dice
Trivia:
19. Number of shots fired in a salute of Royalty
History20. Number of demands sent to the Chinese by the Japanese in 1915
and finally.
21. That's how old I become today :)
Yep, Happy birthday to me! Thanks to everyone who has made the day special so far.
Cheers!
Amplebrain.
Wednesday, May 26, 2010
7 wishes for 21
Its exactly 7 days to my 21st, and I am very excited. I am trying to make a wish list and I am finding it so hard (I'm just not used to making wishes :)
Anyway, here's my list - Just 7 items.
7. A smartphone: I'ld like a device that would keep me away from my laptop. I spend approximately 16hrs with *her* per day.
6. A PhotoAlbum: Yes, I intend to keep one :-)
5. A book - I can never omit this. Learning is what keeps me alive :) I'ld let you choose the kind of book :)
4. A transition ceremony: I personally consider 21 as the full transition to adulthood. I'ld like to celebrate this transition in a special way :)
3. A sincere opportunity to give back: All my life, I have experienced divine and human help in all my endeavors. I believe in paying-it-forward so I am looking for a *sincere* opportunity to give back in the little way I can.
2. A special gift in exactly 21days from now :)
1. A gift from the maker: Something special from the one who started me on this journey and has kept me for the past 2 decades.
That's it :-)
Cheers!
Amplebrain.
Anyway, here's my list - Just 7 items.
7. A smartphone: I'ld like a device that would keep me away from my laptop. I spend approximately 16hrs with *her* per day.
6. A PhotoAlbum: Yes, I intend to keep one :-)
5. A book - I can never omit this. Learning is what keeps me alive :) I'ld let you choose the kind of book :)
4. A transition ceremony: I personally consider 21 as the full transition to adulthood. I'ld like to celebrate this transition in a special way :)
3. A sincere opportunity to give back: All my life, I have experienced divine and human help in all my endeavors. I believe in paying-it-forward so I am looking for a *sincere* opportunity to give back in the little way I can.
2. A special gift in exactly 21days from now :)
1. A gift from the maker: Something special from the one who started me on this journey and has kept me for the past 2 decades.
That's it :-)
Cheers!
Amplebrain.
Saturday, May 8, 2010
GETVPN With Multicast Rekeying
Hi All,
A post by fellow CCIE-Sec Candidate TacAck made me do some research/revision on GETVPN Rekey. I would highlight my findings in this post.
1. There are 2 modes: Unicast and Multicast.
2. The Rekey address command references an access-list that is downloaded to the group members which makes them automatically join the group (for multicast Rekeying)
3. With Rekey Authentication, The crypto keys must be generated
4. Rekey is triggered by changing the SA access-list. Rekeys are retransmitted for a number of times n after a period p. This can be adjusted with the "rekey retransmit p n" command
Here is a sample config for the KS:
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
crypto isakmp key CISCO address 192.168.123.1
crypto isakmp key CISCO address 192.168.123.2
crypto ipsec transform-set TRANS esp-3des esp-md5-hmac
crypto ipsec profile GET
set transform-set TRANS
crypto gdoi group GET
identity number 123
server local
rekey address ipv4 REKEY
rekey retransmit 10 number 2
rekey authentication mypubkey rsa GET
sa ipsec 1
profile GET
match address ipv4 GET
replay counter window-size 64
address ipv4 192.168.32.3
ip access-list ext REKEY
permit udp host 192.168.32.3 ho 239.0.0.1
A post by fellow CCIE-Sec Candidate TacAck made me do some research/revision on GETVPN Rekey. I would highlight my findings in this post.
1. There are 2 modes: Unicast and Multicast.
2. The Rekey address command references an access-list that is downloaded to the group members which makes them automatically join the group (for multicast Rekeying)
3. With Rekey Authentication, The crypto keys must be generated
4. Rekey is triggered by changing the SA access-list. Rekeys are retransmitted for a number of times n after a period p. This can be adjusted with the "rekey retransmit p n" command
Here is a sample config for the KS:
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
crypto isakmp key CISCO address 192.168.123.1
crypto isakmp key CISCO address 192.168.123.2
crypto ipsec transform-set TRANS esp-3des esp-md5-hmac
crypto ipsec profile GET
set transform-set TRANS
crypto gdoi group GET
identity number 123
server local
rekey address ipv4 REKEY
rekey retransmit 10 number 2
rekey authentication mypubkey rsa GET
sa ipsec 1
profile GET
match address ipv4 GET
replay counter window-size 64
address ipv4 192.168.32.3
ip access-list ext REKEY
permit udp host 192.168.32.3 ho 239.0.0.1
5. If an ASA is placed in between the KS and the GMs; two things must be considered.
1. Allowing GETVPN traffic especially if GMs are outside since the GM initiate the registration process. A hole should be punched to allow udp destination 848
2. Multicast traffic should be forwarded by the ASA. If the GMs are directly connected as in a STUB, then the "igmp forward" should be enough to forward the traffic.
Nuff said, time to take a break :)
Cheers, Amplebrain
1. Allowing GETVPN traffic especially if GMs are outside since the GM initiate the registration process. A hole should be punched to allow udp destination 848
2. Multicast traffic should be forwarded by the ASA. If the GMs are directly connected as in a STUB, then the "igmp forward" should be enough to forward the traffic.
Nuff said, time to take a break :)
Cheers, Amplebrain
Wednesday, April 28, 2010
My Favorite RFC
Hi,
I have had to review several RFCs in the course of preparing for the security CCIE. Common ones include RFC 1918, 2827, 3704 and 3330 which are on the test. Other Fun RFCs include 2385, 3715, 3945 and 3947.
Today, I stumbled on what I would call my favorite RFC 1882 - 12 Days of technology before Christmas. This is a classic geeky joke. :D
Enjoy!
Cheers, Amplebrain
I have had to review several RFCs in the course of preparing for the security CCIE. Common ones include RFC 1918, 2827, 3704 and 3330 which are on the test. Other Fun RFCs include 2385, 3715, 3945 and 3947.
Today, I stumbled on what I would call my favorite RFC 1882 - 12 Days of technology before Christmas. This is a classic geeky joke. :D
Enjoy!
Cheers, Amplebrain
Saturday, April 24, 2010
Ups and Downs
Hi All,
I have been extremely busy with work and studies. I hardly find time to prepare a technical post.
I salute everyone who had their CCIE while working on a full-time job (well, almost everyone did :-)
Sometimes, I feel ready, sometimes, like today, I just don't know. I definitely still have some work to do. In any case, I strongly feel that I'ld be ready for the beast if I can maximize the remaining 7weeks.
Nuff said, Time to get back to studying? Where are my routes :-)
I have been extremely busy with work and studies. I hardly find time to prepare a technical post.
I salute everyone who had their CCIE while working on a full-time job (well, almost everyone did :-)
Sometimes, I feel ready, sometimes, like today, I just don't know. I definitely still have some work to do. In any case, I strongly feel that I'ld be ready for the beast if I can maximize the remaining 7weeks.
Nuff said, Time to get back to studying? Where are my routes :-)
Monday, April 5, 2010
Hardcore Studying
Hi All,
Happy Easter Celebrations to everyone.
I have been extremely busy these past few weeks and I hardly have anytime to create a detailed post. Merging work with studies hasn't been as easy as I thought :(
I am trying to see if i can put in approx 40hrs a week till my security lab in June...That should average to about 320 - 350 hrs of study before the security lab day. Currently using INE materials with gradedlabs rackrental. The Equipments are a little old though. Ild like to try out the proctorlabs if I can fit it into the budget.
I noticed that when connecting to the Workstations remotely either using VNC or Remote desktop;
1. Do not change the Adapter settings for the external interface.
2. Do not set another default gateway for the Lab interface as multiple default gateways confuse the Windows operating system.
3. Watch out for split tunnels when using EZVPN... You can lose your connection if you don't specify the split tunnel as the TestPC would attempt to route all INTERNET traffic through the EZVPN Tunnel.
Have fun studying...
Amplebrain
Happy Easter Celebrations to everyone.
I have been extremely busy these past few weeks and I hardly have anytime to create a detailed post. Merging work with studies hasn't been as easy as I thought :(
I am trying to see if i can put in approx 40hrs a week till my security lab in June...That should average to about 320 - 350 hrs of study before the security lab day. Currently using INE materials with gradedlabs rackrental. The Equipments are a little old though. Ild like to try out the proctorlabs if I can fit it into the budget.
I noticed that when connecting to the Workstations remotely either using VNC or Remote desktop;
1. Do not change the Adapter settings for the external interface.
2. Do not set another default gateway for the Lab interface as multiple default gateways confuse the Windows operating system.
3. Watch out for split tunnels when using EZVPN... You can lose your connection if you don't specify the split tunnel as the TestPC would attempt to route all INTERNET traffic through the EZVPN Tunnel.
Have fun studying...
Amplebrain
Subscribe to:
Posts (Atom)