Posts Tagged ‘ juniper ’

For the Love of Networking or How I Learned to Stop Worrying and Love the Bomb

People usually tell you to do what you love. What they may not tell you is that you probably shouldn’t do something unless you love it.

There are obviously exceptions to this. If you need the work and can’t get anything else, you have to do what you have to do. However, with IT, the rule of “do what you love” seems particularly harsh.

I realize more and more that, with IT in general, if you don’t love what you do, you won’t get very far. You’ll probably work at a Tier I help desk for the rest of your life. While someone has to do it (and while it can be an art itself), I think most people aspire for more. Unfortunately, if you don’t love it, you won’t get any further.

As I study for my JNCIS, I have realized more and more that if I didn’t really want this, there’s no way I could pass it honestly. Sure, I could use a brain dump (read here for why not to) and pass, but that wouldn’t get me very far. I would either bomb every interview or get lucky, get hired, and then get fired within 30 days as my employer realizes I cheated on the test.

This stuff isn’t extremely simple. It’s not overly difficult, but you’re going to hate it if you don’t crave it. And if you hate it, how far do you realistically expect to get?

If you love it, don’t worry. It will all come with perseverance and dedication. Just study, ask questions, and delve deeper and deeper.

JNCIS-ENT Question of the Week #1 –

Q:

Aggregate Routes and Generated Routes are very similar. What is one of the biggest differences between the two?

A:

Generated routes have a next-hop value of the first contributing route, whereas aggregate routes have a next-hop value of reject. Chris has it.

JNCIA Question of the Week #6 – Commit Requirements

Q:

With a clean Juniper router (one that is using the factory default configuration), what must be set before the router will allow you to commit configuration changes? How is this option set?

A:

Chris got it right, of course. Root passwords are required to save configuration changes in Junos. The command to do so is:
set system root-authentication plain-text-password

If you’re reading this and preparing for JNCIA-Junos, be sure you know this. Even if it’s not on the exam, it’s a pretty basic skill. Don’t use Brain Dumps!

Building a Juniper Lab with Remote Access – The Access Gateway

GNS3 is a great tool that can help us in many ways. One thing that may not be very evident, however, is how we can set up our GNS3 lab for remote access so we can practice when we’re not at home. The aim of this article is to show you how to do that.

This is part one in a series. This article describes how to install OpenBSD in a virtual machine (using VirtualBox). We go through the initial installation as well as assigning IP addresses to our interfaces. In part 2, we install Python and write a Python script that controls access to our gateway server.

This article assumes that you have already created virtual machines in VirtualBox before. If you have not, it is extremely intuitive. If you still need help, please see the VirtualBox website (here) or search Google.

Before we get started, here is our finished product in GNS3:

10 routers connected to a switch.  Two interfaces on a server connected to same switch.  Cloud connected to same switch

GNS 3 Topology

First, please create a new Virtual Machine with the OS type of BSD and OpenBSD. You can use the defaults throughout the wizard. Now open up the settings for the VM. Go to the storage tab and set the CD/DVD image to be the install50.iso you obtained from the OpenBSD website (here). Next, go to the Network tab. We need two interfaces. One will be bridged while the other will be internal.

The bridged adapter will be the one that is on our physical LAN. It is what will let us into the box. The internal adapter will get us to the actual GNS3 lab, but it will not automatically pass traffic between the GNS3 lab and our LAN (and thus the internet). In this way, although we have given ourselves remote access to the GNS3 lab (through this OpenBSD server), we have also isolated the GNS3 lab because there are no routes on the OpenBSD box. We will later use hostnames on the OpenBSD box to simplify accessing equipment, but there still will be no routes.

Next, start your VM. Press enter at the “boot>” prompt. The system will run through some internal loading and present you with the following screen:

Installation screen for OpenBSD 5.0

Installation Screen

Please accept the defaults until you get to the network configuration. For em0, we will want to use DHCP. This is our first adapter–the one that is bridged. When that is finished, you should see it ask you if you wish to configure any additional interfaces. We do. Type “em1.”

The screen for if em1

Interface em1 Configuration

Now we need to enter some information. I use the following to match the requirements of my GNS3 lab:

  • IP Address – 10.0.0.1
  • Subnet Mask – 255.255.255.240 – This mask accommodates 14 interfaces total. My lab example has 11.

The installation will ask you to set a root password. Do this. Also create a new user with a password. Enable sshd by default. Disable root login for sshd.

Enter defaults until the system asks if you want to use a graphical environment, XWindows. Say no here. We don’t need a GUI.

No GUI option

Removing X Windows

Again, accept defaults until it asks you if you would like to create a new add or remove packages. YES! We want to remove all of the XWindows packages and the games package. Prepend the package name with a hyphen to remove it. So, enter the following commands:


-xserv50.tgz
-xfont50.tgz
-xshare50.tgz
-xetc50.tgz
-xbase50.tgz
-games50.tgz

Removing X WIndows and Games

Remove Packages

If there are more prompts, accept defaults. Finally, type reboot to restart the system. Remove the installation media.

At this point, we have a working OpenBSD system and gateway to the GNS3 network. We could stop here, but we are going to go farther in future articles because we might want to have access to this system for more than one person.

To access your network, be sure you open your firewall to the IP of your OpenBSD system. SSH to your public IP. You will be directed to your OpenBSD server. From here, ssh or telnet to your GNS3 routers.

Please ask if you have questions!

How to Trivialize a Certification in 10 Days – They’re Called Brain Dumps for a Reason

You ever know that one guy that had every certification known to man and he was still just barely brighter than a firefly? A firefly will do if you have no other source of light, but the sun and light bulbs and LEDs are a lot brighter in my book.

What Are They?

Some of you may not know what a brain dump is, or you might know it as a different name. A brain dump, simply put, is a collection of questions and answers that are lifted directly from a test. Sometimes these are provided by exam proctors who think they’re helping. Others are delivered by exam-takers who intentionally and knowingly break their NDA with a vendor. Sometimes they may be unwittingly discussed when peers are talking about their experiences. The bottom line is this: they give you the exact answers to the test.

So What?

Many people argue that they are an invaluable final preparation resource. Such claims may or may not have merit, but once again, this is cheating. Some test questions are extremely tricky and are intended to make you think. That’s the purpose of these exams: to make you think about what you’re striving for. They validate your skills. If you use a brain dump, how are you challenging yourself or validating your skills in any way? This brings us to our next point.

De-Valuation

The proliferation of these brain dumps has, in many ways, lessened the value of all certifications in general. For those who do not use these dumps and strive to learn a vendor’s way through trial of fire, it cheapens our own worth. It makes our hard work and dedication a trivial thing compared to someone who just crammed a dump and then took the test. Yes, in the long run it will be obvious who actually knows the material and who just used a brain dump. In the short run, however, it invalidates one of the primary selling points of certification: separation of knowledge and talent.

The Result

Remember that firefly analogy I made? It wasn’t just to be cute. I have known, and will know again in the future, people who have every certification ever known to man.

How often do you think I ask these people for their expert opinions?

  • (A) Sometimes
  • (B) Purple
  • (C) Always
  • (D) lol

If you guessed (C) Always, you should probably look for crayons in your brain (a la Homer Simpson).

On a more serious note, though, these people have historically utilized brain dumps until their eyes bled (because of all of the dumping their own brains did). They didn’t actually know anything about any of the products from any of the vendors from which they held certifications. I knew one guy who had his Network+ that didn’t know what a routing protocol was and another guy with his CCNA that couldn’t tell the difference between a management IP/interface and an interface/IP meant to pass traffic–despite the fact that this information was easily available just by reading the config!

Solution Proposal

This one goes out to all of the hiring managers out there. Or to anyone involved in the hiring process, really.

If you’re going to make a certification (or “equivalent knowledge”) a requirement for a job, don’t trust what’s on the paper to make that decision.

If you require a specific certificate or equivalent knowledge, then you need to have some sort of “hands-on” test during the in-person interview that validates the skills a candidate and his certificate claim to have. If hands-on is out of the question because you can’t afford a sufficient lab or for some other reason, at least have a theory test that the candidate must answer–and in person. A test prior to submitting an application isn’t really a test–the candidate can just use the Internets! And if he can’t find it on the Internets, I guarantee you one of two things: it doesn’t exist OR the candidate will call the creator of the Internets–Al Gore himself–and ask the all-knowing personally.

If you don’t have the technical know-how to judge something like that, ask your technical lead to sit in on the interview. If you don’t have one, pick your subject matter expert. If you don’t have an SME, get one.

Conclusion

Look, bottom line is that brain dumps are harmful for everyone. When you use them, you’re honestly just dumping nonsense onto your test. If you don’t understand the material, why do you want to lie with a piece of paper that says you do? If you do understand the material, why cheapen yourself (and others) by cheating?

[edit]

Post-Mortem Disclaimer

The views expressed here belong to me. They don’t belong to the company I work for, and they certainly don’t belong to any other being in existence. If I said it, then it’s what I feel. I’m sorry if you think that the words of an individual represent the views of a whole. You should probably go back to school for a while and learn some basic history/psychologically/math/anything.
[/edit]

JNCIA Question of the Week #5 – Benefits of Class of Service

Q:

Class of Service offers a number of benefits. From the list below, select 3.

  • Quicker Network Convergence
  • Eliminates Congestion
  • Prioritizes Latency-Sensitive Network Traffic, Such as VoIP
  • Allocates Bandwidth According to Service Type
  • Forces Packets Through, Eliminating Packet Loss
  • Alleviates Congestion, but Does Not Eliminate it

[edit]

A:

  • Prioritizes Latency-Sensitive Network Traffic, Such as VoIP
  • Allocates Bandwidth According to Service Type
  • Alleviates Congestion, but Does Not Eliminate it

Certification Future

2012 – The Year of Certifications.

This month alone, I plan on taking three certification exams. I’m waiting on a voucher to be e-mailed to me by the company, and if I get it in time, I’ll be taking my Network+ on Friday, January 13th.

I’ve scheduled my CCENT for Friday, January 20th.

I plan on taking my CCNA SP Ops (SSPO) on Friday, January 27th.

My JNCIS-ENT exam should be on Friday, February 10th.

Wish me luck!