The CCIE RS coaching is conducted at CCIE coaching colleges, that has tutors, lecturers, and boot camps. In the CCIE, there are actually six tracks, significantly, Storage Networking, Voice and Wi-fi, Routing & Switching, Service Provider, and Security. This examination is considered to be highly tough and excellent one to clear, providing you with technical experience and dedication. This also makes you a member of an exclusive group of pros, makes your resume look grand, and will increase your credibility.

Moving forward in career certainly is the ambition of most IT pros. CCIE RS coaching will provide the platform to supply a bonus inside the job market.  Once you begin in search of higher opportunities in or exterior your company, the CCIE certification will provide help to attain your objective simply on this aggressive world.

You'll have many reasons for taking CCIE RS coaching; getting excessive salary could possibly be considered one of them. Getting this certification will not be a simple work; it takes years, sometimes, to clear the exams. It takes eighteen months and a whole bunch of dollars to clear this examination, which happens to be why there's large marketplace for such licensed pros. The plus side to it's that, with such limited certified gurus and high demand for them, the salaries offered are relatively high.

After receiving the CCIE RS coaching, you might be thought of to be an knowledgeable in the networking field. Subsequently, if a tough scenario arises, you might be at all times called in to settle the problem. When you will have this certification, you may be acknowledged worldwide for having high qualification in the networking and technology industry.

It is essential to understand the general means of CCIE RS coaching examination, so that you will understand the form of instruction which can be needed. This examination consists of two principal elements, the written, and the lab examination. The written half is of two hours size containing a number of-choice question. You'll be able to sit for the lab examination only if you are successful in the written examination.  The lab examination is an eight-hour one that can take a look at your capacity to put collectively networking and software equipment and your troubleshooting ability.  Three years are furnished for passing the lab examination, after which you really need to reappear for the written examination before continuing for the lab examination again.

A lot of the candidates showing for just a CCIE RS instruction examination do not go on the first attempt. Nonetheless, there is fairly a high price of success inside the second attempt. To enhance the probabilities of success in this examination, you should research the subjects that are examination specific. One essential issue to be kept in thoughts is that, after receiving this certificate, you should recertify each two years.

Consider mastering concerning the expertise in every area as listed inside the Cisco blueprint. It truly is recommended to have not less than four hundred hours of lab follow utilizing a simulated gear as a option to succeed inside of the CCIE security lab examination. Dedicate a part of your day in mastering every topic. There can be various study materials obtainable available in the market for better understanding of the subjects talked about inside the blueprint of Cisco. They assist you to in making ready yourself by way of the aid of structured software. You'll be able to spend money on a good coaching system, which lets you improve your degree of expertise.

You can go for online exercise packages from reputed corporations, which provide observe assessments and different helpful services to enhance your skills. CCIE safety can be utilized as a ladder in the direction of success. It will be accepted as a recognized certification plan within just the networking industry worldwide. A CCIE in security will open the gateway towards a shiny career.

Router1#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router2(config)#interface Async65

Router2(config-if)#encapsulation ppp

Router2(config-if)#dialer in-band

Router2(config-if)#dialer pool-member 1

Router2(config-if)#ppp authentication chap

Router2(config-if)#async default routing

Router2(config-if)#exit

Router2(config)#interface Dialer1

Router2(config-if)#ip address 10.1.99.56 255.255.255.0

Router2(config-if)#encapsulation ppp

Router2(config-if)#dialer remote-name dialhost

Router2(config-if)#dialer pool 1

Router2(config-if)#dialer idle-timeout 300

Router2(config-if)#dialer string 95551212

Router2(config-if)#dialer-group 1

Router2(config-if)#ppp authentication chap

Router2(config-if)#exit

Router2(config)#line aux 0

Router2(config-line)#modem inout

Router2(config-line)#transport input all

Router2(config-line)#no exec

Router2(config-line)#speed 115200

Router2(config-line)#exit

Router2(config)#username dialhost password dialpassword

Router2(config)#ip route 0.0.0.0 0.0.0.0 10.1.99.1 180

Router2(config)#dialer-list 1 protocol ip list 101

Router2(config)#access-list 101 deny eigrp any any

Router2(config)#access-list 101 permit ip any any

Router2(config)#router eigrp 55

Router2(config-router)#network 10.0.0.0

Router2(config-router)#exit

Router2(config)#end

Router2#

Much of this configuration is similar to the ISDN configuration. It uses a dialer interface in exactly the same way. But here, because there is only one async modem in this example, we can't benefit from PPP multilink.

The first part of this configuration example sets up the AUX port to run PPP and associates it with a dialer pool:

Router2(config)#interface Async65

Router2(config-if)#encapsulation ppp

Router2(config-if)#dialer in-band

Router2(config-if)#dialer pool-member 1

Router2(config-if)#ppp authentication chap

Router2(config-if)#async default routing

The only thing here that hasn't appeared in a previous example is the async default routing command. This command allows the async interface to support a routing protocol such as EIGRP. By default, routing protocols are disabled on async interfaces, so you need to enable it.

The number of this particular interface, Async65, wasn't selected at random. The router automatically assigns a line number to every interface that can be used for terminal access (including VTY lines, AUX lines, and Console lines), and it varies from router to router, depending on the hardware configuration. So we used the show line command to see which line number corresponded to the AUX port on this router:

Router1#show line

   Tty Typ     Tx/Rx    A Modem  Roty AccO AccI   Uses   Noise  Overruns   Int

     0 CTY              -    -      -    -    -      0       0     0/0       -

    65 AUX   9600/9600  -    -      -    -    -      0       0     0/0       -

*   66 VTY              -    -      -    -    -     10       0     0/0       -

*   67 VTY              -    -      -    -    -     19       0     0/0       -

    68 VTY              -    -      -    -    -      3       0     0/0       -

    69 VTY              -    -      -    -    -      0       0     0/0       -

    70 VTY              -    -      -    -    -      0       0     0/0       -

    71 VTY              -    -      -    -    -      0       0     0/0       -

    72 VTY              -    -      -    -    -      0       0     0/0       -

    73 VTY              -    -      -    -    -      0       0     0/0       -

    74 VTY              -    -      -    -    -      0       0     0/0       -

    75 VTY              -    -      -    -    -      0       0     0/0       -

Line(s) not in async mode -or- with no hardware support:

1-64

Router1#

As you can see, the AUX port is on line 65 on this router. It's important to do this before you attempt any of the rest of the configuration, so you know what to configure.

When you use the AUX port for dial backup, you also need to configure the terminal line information for this physical port:

Router2(config)#line aux 0

Router2(config-line)#modem inout

Router2(config-line)#transport input none

Router2(config-line)#no exec

Router2(config-line)#speed 115200

The first command here is modem inout, which configures the router to allow access to the modem, as well as allowing the modem access to the router. Then we added the command transport input none. By default, the router will act as a terminal server and allow you to connect through protocols like telnet to the AUX port. In this case, though, we want the router to reserve this port for routed traffic, so we disable all remote terminal access to the interface.

The no exec command is extremely important when using async dial, and almost universally ignored in Cisco references. By default, the router will start an EXEC session on your AUX port. So if you plug a terminal into this port, you will get a login prompt. Unfortunately, your modem doesn't know what to do with a login prompt. At best, it will just ignore it, so disabling the EXEC session is simply good form. But, at worst, we have seen problems where the modem attempts to respond to the login prompt, the EXEC session interprets this as a bad login attempt, and puts up a new prompt, to which the modem again attempts to respond. The result can be high CPU utilization and, more importantly, this activity will prevent the router from dialing. We strongly recommend disabling the EXEC session on any async dial ports, as we have done here.

And the last command in this section sets the line speed. It's important to remember that this is the speed between the router and the modem. The actual dial session will have a much lower net speed, likely less than 56 Kbps. However, it's a good idea to make the line speed as fast as the modem can support. This will ensure that you get the best possible speed. Note that the default speed here is only 9.6 Kbps. So, if you don't increase this value, you will not be able to get the full advantage of the compression capabilities of modern modems.

Router#show queue FastEthernet0/0

  Input queue: 0/75/105/0 (size/max/drops/flushes); Total output drops: 0

  Queuing strategy: weighted fair

  Output queue: 0/1000/96/0 (size/max total/threshold/drops)

     Conversations  0/1/128 (active/max active/max total)

     Reserved Conversations 0/0 (allocated/max allocated)

     Available Bandwidth 75000 kilobits/sec

Router#

Use the show queuing command to look the router's queuing configuration in general:

Router#show queuing

Current fair queue configuration:

  Interface           Discard    Dynamic  Reserved  Link    Priority

                      threshold  queues   queues    queues  queues

  FastEthernet0/0     96         128      258       8       1

  Serial0/0           64         256      37        8       1

  Serial0/1           96         128      256       8       1

Current DLCI priority queue configuration:

Current priority queue configuration:

List   Queue  Args

1      high   protocol ip          tcp port 198

1      high   protocol pppoe-sessi

2      high   protocol ip          udp port 199

3      low    default

3      high   protocol ip          list 101

Current custom queue configuration:

Current random-detect configuration:

Router#

The show queue and show queuing commands augment the show interface output, which also shows important queuing information:

Router#show interface FastEthernet0/0

FastEthernet0/0 is up, line protocol is up

  Hardware is AmdFE, address is 0001.9670.b780 (bia 0001.9670.b780)

  MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,

     reliability 255/255, txload 1/255, rxload 1/255

  Encapsulation ARPA, loopback not set

  Keepalive set (10 sec)

  Full-duplex, 100Mb/s, 100BaseTX/FX

  ARP type: ARPA, ARP Timeout 04:00:00

  Last input 00:00:00, output 00:00:00, output hang never

  Last clearing of "show interface" counters never

  Input queue: 0/75/105/0 (size/max/drops/flushes); Total output drops: 0

  Queuing strategy: weighted fair

  Output queue: 0/1000/96/0 (size/max total/threshold/drops)

     Conversations  0/1/128 (active/max active/max total)

     Reserved Conversations 0/0 (allocated/max allocated)

     Available Bandwidth 75000 kilobits/sec

  5 minute input rate 1000 bits/sec, 2 packets/sec

  5 minute output rate 2000 bits/sec, 2 packets/sec

     2495069 packets input, 181306312 bytes

     Received 2333309 broadcasts, 0 runts, 0 giants, 0 throttles

     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

     0 watchdog

     0 input packets with dribble condition detected

     1927544 packets output, 197958017 bytes, 0 underruns

     0 output errors, 0 collisions, 21 interface resets

     0 babbles, 0 late collision, 0 deferred

     0 lost carrier, 0 no carrier

     0 output buffer failures, 0 output buffers swapped out

Router#

The show queue command is a good starting point when looking at queuing issues. It tells you what queuing algorithm is used, as well as information about any drops:

Router#show queue FastEthernet0/0

  Input queue: 0/75/105/0 (size/max/drops/flushes); Total output drops: 0

  Queuing strategy: weighted fair

  Output queue: 0/1000/96/0 (size/max total/threshold/drops)

     Conversations  0/1/128 (active/max active/max total)

     Reserved Conversations 0/0 (allocated/max allocated)

     Available Bandwidth 75000 kilobits/sec

In this case, you can see that the interface uses WFQ. This can be slightly deceptive because we actually configured this interface for CBWFQ. The Reserved Connections line indicates that no RSVP reservation queues have been allocated for this interface. So if you tried to use RSVP on this interface, it would not work right now.

The show queue command gives no output at all when you use Custom Queuing or Priority Queuing on an interface.

The first section of output from the show queuing command gives some useful summary information on fair queuing parameters:

Router#show queuing

Current fair queue configuration:

  Interface           Discard    Dynamic  Reserved  Link    Priority

                      threshold  queues   queues    queues  queues

  FastEthernet0/0     96         128      258       8       1

  Serial0/0           64         256      37        8       1

  Serial0/1           96         128      256       8       1

In this case, you can immediately see and compare the queue sizes between different interfaces.

CCIE examination entails two assessments, which might be a CCIE composed test plus a CCIE lab test. In order to endeavor the lab exam, you need to apparent the authored examination. Should you be not inside a placement to clear the composed examination the very first time, you have to check out for any hundred and eighty days for retaking it. Just after clearing the developed check out, it really is optimum to help make an try out for the CCIE lab examination in eighteen months. It you're incapable to crystal clear the lab examination, then you definately must re-try within 12 months which has a watch to keep up the penned examination end result legitimate.

It's a time prohibit of two hours and is carried out in a range of have a look at centers across the world. The topics lined within the penned examination rely on the specialization or monitor you choose. For service provider, you could possibly decide upon from groups like Cable, DSL, IP Telephony, Dial, Material substance Networking, Optical, WAN switching, and Metro Ethernet. Every composed examination is crafted on the market within the beta style at a worth of $50 USD.

The CCIE lab test is unique in nature, as it can be an eight-hour test, which tests the power on the candidate to configure and troubleshoot networking tools. Cisco has big degree of package in its CCIE labs for use with the lab exams. The blue print belonging to the lab test is obtainable on its web pages. The lab examination is not offered in any way Pearson VUE or Prometric testing centers.

A regular CCIE R&S lab examination contains a two-hour hassle-taking pictures section by which you may be presented a collection of tickets for preconfigured networks throughout the CCIE labs. Make sure you have the ability to identify and resolve the faults. You can proceed towards the configuration part soon after you end the troubleshooting part.

A sound passing score is critical to aim a CCIE Labs exam. Cisco uses the help of proctors to guage the candidates from the preliminary rounds in its CCIE labs located worldwide. Factors are awarded when a criterion is met and grading is completed applying some computerized tools. The outcomes of a lab examination are mirrored within forty eight hrs. A move/fail is projected within the end end result and in case of a fail, the areas where you might be lacking behind are talked about so as to put together properly earlier than a re-try.

Cisco stands out inside the field of networking by providing a CCIE certification so that you can pursue your education as well as get acknowledged by a reputed organization. The CCIE lab test can be utilized being a platform to challenge your capability in varied tracks provided by Cisco. Attempting a lab test requires rigorous schooling and significant sense of understanding. The CCIE labs kind step one to your huge potential career.

Router#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#interface HSSI0/0

Router(config-if)#random-detect

Router(config-if)#random-detect precedence 0 10 20 10

Router(config-if)#random-detect precedence 1 12 20 10

Router(config-if)#random-detect precedence 2 15 25 15

Router(config-if)#random-detect precedence 3 18 25 15

Router(config-if)#random-detect precedence 4 20 30 20

Router(config-if)#random-detect precedence 5 22 30 20

Router(config-if)#random-detect precedence 6 30 40 25

Router(config-if)#random-detect precedence 7 40 50 100

Router(config-if)#random-detect precedence RSVP 45 50 100

Router(config-if)#exit

Router(config)#end

Router#

The new configuration method uses the same syntax as CBWFQ:

Router#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#class-map Prec5

Router(config-cmap)#description Critical

Router(config-cmap)#match ip precedence 5

Router(config-cmap)#exit

Router(config)#policy-map cb_wred

Router(config-pmap)#class Prec5

Router(config-pmap-c)#random-detect dscp-based

Router(config-pmap-c)#exit

Router(config-pmap)#class class-default

Router(config-pmap-c)#fair-queue 512

Router(config-pmap-c)#queue-limit 96

Router(config-pmap-c)#random-detect dscp-based

Router(config-pmap-c)#exit

Router(config-pmap)#exit

Router(config)#interface HSSI0/1

Router(config-if)#service-policy output cb_wred

Router(config-if)#exit

Router(config)#end

Router#

For the older method, you can set up the drop probabilities according to IP Precedence values by using the following command:

Router(config-if)#random-detect precedence 7 40 50 100

The first argument after the precedence keyword here is the IP Precedence value. The options are any integer between 0 and 7, or the keyword RSVP. After this are the minimum threshold, maximum threshold, and the so-called mark probability denominator.

The minimum threshold is the number of packets that must be in the queue before the router starts to discard. The probability at the minimum threshold is essentially zero, but it rises linearly as the number of packets in the queue rises. The maximum probability occurs at the maximum threshold. You specify the actual value of the probability at this maximum by using the mark probability denominator. In this case we have set the value to 100, which means that, at the maximum, we will discard one packet in 100. This means that halfway between the maximum and minimum thresholds, the router will drop one packet in 200.

Rather, it uses a moving average so that temporary bursts of data are not dropped. This configured minimum is the lower limit of this moving average, which is reached only when the congestion continues for a longer period of time.

If you do not change these values, the defaults take IP Precedence values into account. The default mark probability denominator is 10, so the router will discard one packet in 10. The default maximum threshold depends on the speed of the interface and the router's capacity for buffering packets, but it is the same for all Precedence values. So, by default, the only differences between WRED's treatment of different IP Precedence levels is in the minimum threshold. The default minimum threshold for packets with an IP Precedence of 0 is 50 percent of the maximum threshold. This value rises linearly with Precedence so that the minimum threshold for Precedence 7 and packets with RSVP reserved bandwidth allocations are almost the same as the maximum threshold.

In the new-style example, we have created only one class-based queue to show the principle. In practice, of course, you would probably want to create more than this. All of the traffic that doesn't have an IP Precedence value of 5 uses the default queue, where we have configured both WFQ and WRED.

This example uses DSCP-based random detection. WRED has a built-in ability to discriminate based on DSCP value, so that traffic streams with higher drop precedence values are more likely to drop packets. The default WRED settings when using DSCP-based random detection are shown in Table 11-1.

As Table 11-1 shows, the default DSCP-based thresholds are the same for every class. So, for example, AF12, AF22, AF32, and AF42 all begin dropping packets in a sustained congestion situation when the queue depth reaches 28 packets. They reach their maximum drop probability when there are 40 packets in the queue. In all cases, the drop probability at the maximum threshold value is 1/10 (the mark probability), meaning that the router will randomly drop one packet in 10.

You can change these values in a policy map as follows:

Router(config-pmap)#class AF1x

Router(config-pmap-c)#bandwidth percent 20

Router(config-pmap-c)#random-detect dscp-based

Router(config-pmap-c)#random-detect dscp af13 10 20

Router(config-pmap-c)#random-detect dscp af12 20 50

Router(config-pmap-c)#random-detect dscp af11 50 100 50

Router(config-pmap-c)#exit

In each of the random-detect dscp commands, the first argument is the DSCP value, followed by the minimum threshold, the maximum threshold, and the denominator of the mark probability. In the case of the AF11 entry, the router will start dropping these packets when there are more than 50 packets in the queue, and increase the probability until the number reaches 100. At that point, the probability of dropping a packet of this type will be one in 50.

Note that these thresholds apply to all traffic in the queue, not just traffic with this particular DSCP value. So there may be 20 AF11 packets, 10 AF12, and 20 more marked with the AF13 DSCP value. Since this adds up to 50 packets, the router will start to drop the AF11 packets. However, because the maximum thresholds for AF12 and AF13 packets are 50 and 20, respectively, the router will already be dropping packets of these types at the full rate (1 packet in 10 by default) before it starts to drop any AF11 packets.

This example assumes that you want to use DSCP values to control the WRED thresholds. This is not necessary, however. You can also use an unweighted version of the command as follows:

Router(config)#class-map AF11

Router(config-cmap)#match ip dscp af11

Router(config-cmap)#exit

Router(config)#policy-map example

Router(config-pmap)#class AF11

Router(config-pmap-c)#bandwidth percent 10

Router(config-pmap-c)#random-detect

Router(config-pmap-c)#exit

This is particularly useful when your class definitions already take DSCP values into account, as this class map does. Since there is no variation of DSCP values among the class of packets that have a DSCP value of AF11, it isn't necessary for WRED to look at the DSCP value again.

CCIE Bootcamps produce primarily probably the most simple approach of passing out the checks of CCIE. You will find quite a few organizations reasonably institutes which supply CCIE Bootcamp instruction similar to Cathay College. That has a watch to increase to be eligible for your bootcamps the institutes often times current a prerequisite. It helps to spice up the prospect of your candidates to move the CCIE exams in a very greater way than other folks. This prerequisite is termed CCNP standing.

The involved payment for using the CCIE Safety test is significant, so most candidates go to get a planning training course to cross it in a single sitting. Some unbiased companies and establishments furnish courses and workshop to people looking for CCIE Security coaching. However, most candidates choose to take advantage of the instructor-led and on-line workshops, which Cisco provide you with, like a half of Authorized Studying Companions system. The exercise possibilities are provided in addition to the educators are accepted by Cisco.

For that CCIE Safety certification, you must sign-up for that written examination within your area of specialization. Each of the exams are done for the Cisco authorized facility, which also accepts expenses for that test. The cost of using a CCIE composed examination is from $80 to $325. The prepared exam is supervised and carried out on a home pc. You'll find it of 1 or two hrs paper containing plenty of selections, drag and drop issues and fill inside blanks. Apart from white boards and markers for calculations, as a candidate for CCIE Protection coaching examination, you aren't authorized to hold some other item with the test corridor.

CCIE Bootcamp is accompanied which includes a variety of methods to provide the simplest planning substance for the pupils. They generally produce some must-have publications to prepare them for the developed CCIE just take a look at jointly with some world-wide-web entry for that Lab exam. Counting on these two classes the CCIE Bootcamps is divided into two sections. The divisions are class building and also Lab simulation. The class development consists of two phases and they are fingers-on coaching and lectured-based generally lessons. Within the category structure the students are presented with the data of Bit splitting, VLSM etc. However the lab simulation is vital aspect of CCIE Bootcamp. Right here the students are subjected to deal with lots of real-life challenges and also the troubleshooting talents are checked accordingly. That is certainly the greatest phase of CCIE Bootcamps the area the scholars are nicely-prepared for your Blueprintv4, MPLS and many others. These methodologies assistance pupils to troubleshoot any real-life troubles and greatly improve the power to discover the proper remedies.

But you can get handful of trusted institutes obtainable out there inside industry which delivers finish CCIE Bootcamps. One in every of a large number of properly-renowned institutes is Cathay School which renders very fine companies just in case of bootcamps for CCIE. They provide bootcamp facilities to tremendously huge amount of university college students from plenty of corners on the planet like Australia, Norway, United kingdom, Sweden, USA and a lot of significantly more. In accordance considering the statistics of this institute from 2005, they're sustaining document various proportion of passing charge in CCIE examination. This file is alone a sort of guarantee for them. There are plenty of brings about to select out Cathay School for CCIE Bootcamps. The report variety of passing fee of nearly 90% is the most alluring function of it. Other than it, a single other outstanding attribute often is the one-to-one lab coaching which allow the students to filter out the many doubts pertaining to any downside with the instructors.

The essential details referring to the bootcamp is obtainable into the trustworthy service webpage which is certainly cathayschool.com. It's a truly convenient website which will provide a couple of putting amenities like on-line Self-Study CCIE Lab Workbooks, one-on-one from the internet coaching, Instructor Led instruction and so forth. Every one of the amenities as well as the training course durations with each other considering the money are effectively-described right here such which the potential consumers need to not have to experience any kind of trouble with regards to CCIE Bootcamps.

Router#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#interface HSSI0/0

Router(config-if)#random-detect

Router(config-if)#random-detect precedence 0 10 20 10

Router(config-if)#random-detect precedence 1 12 20 10

Router(config-if)#random-detect precedence 2 15 25 15

Router(config-if)#random-detect precedence 3 18 25 15

Router(config-if)#random-detect precedence 4 20 30 20

Router(config-if)#random-detect precedence 5 22 30 20

Router(config-if)#random-detect precedence 6 30 40 25

Router(config-if)#random-detect precedence 7 40 50 100

Router(config-if)#random-detect precedence RSVP 45 50 100

Router(config-if)#exit

Router(config)#end

Router#

The new configuration method uses the same syntax as CBWFQ:

Router#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#class-map Prec5

Router(config-cmap)#description Critical

Router(config-cmap)#match ip precedence 5

Router(config-cmap)#exit

Router(config)#policy-map cb_wred

Router(config-pmap)#class Prec5

Router(config-pmap-c)#random-detect dscp-based

Router(config-pmap-c)#exit

Router(config-pmap)#class class-default

Router(config-pmap-c)#fair-queue 512

Router(config-pmap-c)#queue-limit 96

Router(config-pmap-c)#random-detect dscp-based

Router(config-pmap-c)#exit

Router(config-pmap)#exit

Router(config)#interface HSSI0/1

Router(config-if)#service-policy output cb_wred

Router(config-if)#exit

Router(config)#end

Router#

For the older method, you can set up the drop probabilities according to IP Precedence values by using the following command:

Router(config-if)#random-detect precedence 7 40 50 100

The first argument after the precedence keyword here is the IP Precedence value. The options are any integer between 0 and 7, or the keyword RSVP. After this are the minimum threshold, maximum threshold, and the so-called mark probability denominator.

The minimum threshold is the number of packets that must be in the queue before the router starts to discard. The probability at the minimum threshold is essentially zero, but it rises linearly as the number of packets in the queue rises. The maximum probability occurs at the maximum threshold. You specify the actual value of the probability at this maximum by using the mark probability denominator. In this case we have set the value to 100, which means that, at the maximum, we will discard one packet in 100. This means that halfway between the maximum and minimum thresholds, the router will drop one packet in 200.

Rather, it uses a moving average so that temporary bursts of data are not dropped. This configured minimum is the lower limit of this moving average, which is reached only when the congestion continues for a longer period of time.

If you do not change these values, the defaults take IP Precedence values into account. The default mark probability denominator is 10, so the router will discard one packet in 10. The default maximum threshold depends on the speed of the interface and the router's capacity for buffering packets, but it is the same for all Precedence values. So, by default, the only differences between WRED's treatment of different IP Precedence levels is in the minimum threshold. The default minimum threshold for packets with an IP Precedence of 0 is 50 percent of the maximum threshold. This value rises linearly with Precedence so that the minimum threshold for Precedence 7 and packets with RSVP reserved bandwidth allocations are almost the same as the maximum threshold.

In the new-style example, we have created only one class-based queue to show the principle. In practice, of course, you would probably want to create more than this. All of the traffic that doesn't have an IP Precedence value of 5 uses the default queue, where we have configured both WFQ and WRED.

This example uses DSCP-based random detection. WRED has a built-in ability to discriminate based on DSCP value, so that traffic streams with higher drop precedence values are more likely to drop packets. The default WRED settings when using DSCP-based random detection are shown in Table 11-1.

As Table 11-1 shows, the default DSCP-based thresholds are the same for every class. So, for example, AF12, AF22, AF32, and AF42 all begin dropping packets in a sustained congestion situation when the queue depth reaches 28 packets. They reach their maximum drop probability when there are 40 packets in the queue. In all cases, the drop probability at the maximum threshold value is 1/10 (the mark probability), meaning that the router will randomly drop one packet in 10.

You can change these values in a policy map as follows:

Router(config-pmap)#class AF1x

Router(config-pmap-c)#bandwidth percent 20

Router(config-pmap-c)#random-detect dscp-based

Router(config-pmap-c)#random-detect dscp af13 10 20

Router(config-pmap-c)#random-detect dscp af12 20 50

Router(config-pmap-c)#random-detect dscp af11 50 100 50

Router(config-pmap-c)#exit

In each of the random-detect dscp commands, the first argument is the DSCP value, followed by the minimum threshold, the maximum threshold, and the denominator of the mark probability. In the case of the AF11 entry, the router will start dropping these packets when there are more than 50 packets in the queue, and increase the probability until the number reaches 100. At that point, the probability of dropping a packet of this type will be one in 50.

Note that these thresholds apply to all traffic in the queue, not just traffic with this particular DSCP value. So there may be 20 AF11 packets, 10 AF12, and 20 more marked with the AF13 DSCP value. Since this adds up to 50 packets, the router will start to drop the AF11 packets. However, because the maximum thresholds for AF12 and AF13 packets are 50 and 20, respectively, the router will already be dropping packets of these types at the full rate (1 packet in 10 by default) before it starts to drop any AF11 packets.

This example assumes that you want to use DSCP values to control the WRED thresholds. This is not necessary, however. You can also use an unweighted version of the command as follows:

Router(config)#class-map AF11

Router(config-cmap)#match ip dscp af11

Router(config-cmap)#exit

Router(config)#policy-map example

Router(config-pmap)#class AF11

Router(config-pmap-c)#bandwidth percent 10

Router(config-pmap-c)#random-detect

Router(config-pmap-c)#exit

This is particularly useful when your class definitions already take DSCP values into account, as this class map does. Since there is no variation of DSCP values among the class of packets that have a DSCP value of AF11, it isn't necessary for WRED to look at the DSCP value again.

The CCIESecurityTraininginstruction includes a written examination to qualify and after that the lab examination. You could be advised to obtain in the least 3-5 many years of profession knowledge earlier than attempting this certification.

The examination for your CCIE Security is of two-hour duration with many possibilities. This is made up of hundred doubts, which will cover matters equal to program protocols, operating methods, protection technologies, safety protocols, and Cisco safety programs. The test materials are offered about the spot so you are not permitted to usher in exterior reference products.

Network engineers having a CCIE certificates are considered since the qualified from the community engineering self-control additionally, the masters of CISCO solutions. The CCIE has brought revolution in the community marketplace when considering technically demanding assignments and opportunities while using the obligatory instruments and methodologies. There is certainly a method which updates and reorganizes the instruments to provide good quality support. One can find many modes of CCIE Coaching like created examination preparation and effectivity based mostly lab. This will help to strengthen the efficiency and regular on the marketplace. CISCO has launched this certification coverage in 1993 which includes a see to differentiate the top specialists through the relaxation.

In order to be licensed, number one published examination needs to be passed after which must cross the lab test. CISCO at all instances tries to apply entirely totally different CCIE Workout procedures for bigger functionality. There are a selection of basic steps for that CCIE certification. The first move for certification is always to pass a two hours lasting personal computer centered for the most part MCQ oriented authored exam. For this test important payments need to be accomplished via on-line. This examination is related with examination vouchers and promotional codes. The authenticity of the voucher giving organization should be well recognised into the candidates. The promotional code need to be accessed effectively and just in case of fraudulent vouchers together with promotional codes mustn't satisfactory and CISCO won't repay the value. The candidates should wait around five days for your created examination right after payment and so they cannot sit for the exact examination for your subsequent 100 eighty days in the event of recertification.

That has a view to obtain certified and eligible for that CCIE Schooling some elements are for being remembered effectively. Following passing the developed examination the candidates possess a most of eighteen months time for trying the lab exam. If the time period exceeds then the authenticity within the created test are invalid. For that 1st timer used to own CCIE certification the composed exam is available inside of the type of Beta examination with special discounts offered. While in the Beta interval the candidates can sit only once for your test. The outcomes will occur inside six to eight weeks just after the examination is around.

The following move for your CCIE certification is definitely the Lab test. The shortlisted candidates with the composed test can exclusively use for that fingers-on lab exam. However there are lots of authored examination centers of CISCO then again Lab exam amenities are limited. You'll find it an 8 hour fingers-on sensible based mostly principally examination whereby the ability of troubleshooting and configuring neighborhood predominantly based troubles and software are checked. For that scheduling of Lab examination the shortlisted candidates on the previously prepared exam have got to existing the identification quantity alongside passing ranking as well as date of passing.

The fee for Lab examination needs to be cleared earlier than ninety days of the scheduled exam. With out the charge the reservation may possibly be cancelled. Once passing the Lab test blended with the authored examination the candidates can apply for that CCIE certification. By contemplating

There needs to be some thing that defines the different forms of visitors that you just need to prioritize. In general, the simpler the distinctions are to help make, the better. It is because all the assessments get router assets and introduce processing delays. The most common rules for distinguishing somewhere between targeted visitors forms use the packet's input interface and basic IP header particulars such as TCP port numbers. The following examples indicate the best ways to set an IP Precedence worth of fast (two) for all FTP management website traffic that arrives by the serial0/0 interface, and an IP Precedence of concern (1) for all FTP data potential customers. This distinction is feasible considering FTP control site traffic works by using TCP port 21, and FTP info uses port twenty.

The new system for configuring this works by using course maps. Cisco number one released this element in IOS Edition twelve.0(5)T. This method initially defines a class-map that specifies how the router will establish this sort of site visitors. It then defines a policy-map that actually makes the improvements for the packet's TOS discipline:

Router#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#access-list 101 permit any eq ftp any
Router(config)#access-list 101 permit any any eq ftp
Router(config)#access-list 102 permit any eq ftp-data any
Router(config)#access-list 102 permit any any eq ftp-data
Router(config)#class-map match-all ser00-ftpcontrol
Router(config-cmap)#description branch ftp control traffic
Router(config-cmap)#match input-interface serial0/0
Router(config-cmap)#match access-group 101
Router(config-cmap)#exit
Router(config)#class-map match-all ser00-ftpdata
Router(config-cmap)#description branch ftp data traffic
Router(config-cmap)#match input-interface serial0/0
Router(config-cmap)#match access-group 102
Router(config-cmap)#exit
Router(config)#policy-map serialftppolicy
Router(config-pmap)#description branch ftp traffic policy
Router(config-pmap)#class ser00-ftpcontrol
Router(config-pmap-c)#set ip precedence immediate
Router(config-pmap-c)#exit
Router(config-pmap)#class ser00-ftpdata
Router(config-pmap-c)#set ip precedence priority
Router(config-pmap-c)#exit
Router(config-pmap)#exit
Router(config)#interface serial0/0
Router(config-if)#ip route-cache policy
Router(config-if)#service-policy input serialftppolicy
Router(config-if)#exit
Router(config)#end
Router#

For before IOS versions, exactly where class-maps have been not on the market, you will have to implement policy-based routing to alter the TOS industry inside a packet. Applying this policy into the interface tells the router to utilize this policy to check all incoming packets on this interface and rewrite the ones that match the route map:Router#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#access-list 101 permit any eq ftp any
Router(config)#access-list 101 permit any any eq ftp
Router(config)#access-list 102 permit any eq ftp-data any
Router(config)#access-list 102 permit any any eq ftp-data
Router(config)#route-map serialftp-rtmap permit 10
Router(config-route-map)#match ip address 101
Router(config-route-map)#set ip precedence immediate
Router(config-route-map)#exit
Router(config)#route-map serialftp-rtmap permit 20
Router(config-route-map)#match ip address 102
Router(config-route-map)#set ip precedence priority
Router(config-route-map)#exit
Router(config)#interface serial0/0
Router(config-if)#ip policy route-map serialftp-rtmap
Router(config-if)#ip route-cache policy
Router(config-if)#exit
Router(config)#end
Router#

Earlier than it is easy to tag a packet for special treatment method, you will have to have an incredibly obvious thought of what sorts of site traffic want amazing cure, and even specifically what kind of unique procedure they'll have. Within the illustration, now we have made a decision to give a distinctive priority to FTP potential customers received on the specified serial interface. We exhibit how you can do this applying both the previous and new configuration ways.
This might appear for being a fairly synthetic illustration. Immediately after all, why would you care about tagging inbound page views you have previously acquired from a low-speed interface? In reality, amongst the most vital concepts for applying QoS inside a network is that you really should typically tag the packet as early as you possibly can, ideally in the edges of your network. Then, since it passes throughout the network, just about every router only must look at the tag, and isn't going to will want to do any added classification. In cases like this, we might ensure which the FTP page views returning within the other gouvernement is tagged from the initial router that gets it. So the outbound site visitors has already been tagged, and it is a waste of router sources to reclassify the outbound packets.

Countless organizations seriously just take this concept of marking in the edges an individual phase further, and remark each and every acquired packet. This can help to make sure that people aren't requesting exceptional QoS privileges they are not permitted to obtain. Having said that, you have to be careful of this for the reason that it could frequently disrupt authentic markings. As an example, a real-time software might possibly use RSVP to reserve bandwidth throughout the network. It really is crucial which the packets for this software possess the correct Expedited Forwarding (EF) DSCP marking or the network may not handle them thoroughly. Then again, you also will not wish to permit other non-real-time apps from this identical supply possess the similar EF priority degree. So, for everybody who is going to configure your routers to remark all incoming packets in the edges, make certain you perceive what incoming markings are respectable.

In that situation, the routers are managing DLSw to bridge SNA visitors as a result of an IP network. And so the routers on their own honestly design the IP packets. This generates a further problem due to the fact there exists no incoming interface. So that recipe uses community policy-based routing. The fact the router makes the packets also offers it an important gain considering it doesn't have to look at any DLSw packets that may just occur to pass through.

The advantages for the more recent class-map solution are not noticeable on this case in point, but among the initial great strengths appears if you'd like make use of the greater present day DSCP tagging scheme. Since the more mature policy-based routing strategy does not right help DSCP, you will have to faux it by environment both the IP Precedence together with the TOS independently as follows.

Router(config)#route-map serialftp-rtmap permit 10
Router(config-route-map)#match ip address 115
Router(config-route-map)#set ip precedence immediate
Router(config-route-map)#set ip tos max-throughput

In this case, the packet will wind up with an IP Precedence value of immediate, or 2 (010 in binary), and TOS of max-throughput, or 4 (0100 in binary).

Doing the same thing with the class-map method is much more direct:

Router(config)#policy-map serialftppolicy
Router(config-pmap)#class serialftpclass
Router(config-pmap-c)#set ip dscp af21

Class-maps may also be useful later on on this chapter when we discuss class-based weighted fair queuing and class-based traffic shaping.
It can be crucial to notice that all through this whole case in point, we've only set a specific value to the packet's TOS or DSCP subject. This, by by itself, would not affect how the packet is forwarded by using the network. To carry out that, you have to be certain that as each and every router from the network forwards these marked packets, the interface queues will react appropriately to this material.

Last but not least, we should note that though this recipe reveals two useful procedures of marking packets, by using Committed Access Amount (Automotive) capabilities. Car tends for being greater efficient on higher speed interfaces.

Router#configure terminal

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#access-list 103 permit ip any any precedence 5

Router(config)#access-list 104 permit ip any any precedence 4

Router(config)#access-list 105 permit ip any any precedence 3

Router(config)#access-list 106 permit ip any any precedence 2

Router(config)#access-list 107 permit ip any any precedence 1

Router(config)#queue-list 1 protocol ip 3 list 103

Router(config)#queue-list 1 protocol ip 4 list 104

Router(config)#queue-list 1 protocol ip 5 list 105

Router(config)#queue-list 1 queue 5 byte-count 3000 limit 55

Router(config)#queue-list 1 protocol ip 6 list 106

Router(config)#queue-list 1 protocol ip 7 list 107

Router(config)#queue-list 1 default 8

Router(config)#interface HSSI0/0

Router(config-if)#custom-queue-list 1

Router(config-if)#exit

Router(config)#end

Router#

When you enable Custom Queuing, the router automatically creates 16 queues for application traffic plus one more for system requirements. You can look at the queues with a normal show interface command:

Router#show interface Ethernet0

Ethernet0 is up, line protocol is up

  Hardware is Lance, address is 0000.0cf0.8460 (bia 0000.0cf0.8460)

  Internet address is 192.168.1.201/24

  MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec,

     reliability 255/255, txload 2/255, rxload 1/255

  Encapsulation ARPA, loopback not set, keepalive set (10 sec)

  ARP type: ARPA, ARP Timeout 04:00:00

  Last input 00:00:00, output 00:00:00, output hang never

  Last clearing of "show interface" counters never

  Input queue: 2/75/0 (size/max/drops); Total output drops: 0

  Queuing strategy: custom-list 1

  Output queues: (queue #: size/max/drops)

     0: 0/20/0 1: 0/20/0 2: 0/20/0 3: 0/20/0 4: 0/20/0

     5: 0/55/3 6: 5/20/0 7: 0/20/0 8: 0/20/0 9: 0/20/0

     10: 0/20/0 11: 0/20/0 12: 0/20/0 13: 0/20/0 14: 0/20/0

     15: 0/20/0 16: 0/20/0

  5 minute input rate 5000 bits/sec, 12 packets/sec

  5 minute output rate 106000 bits/sec, 24 packets/sec

     132910 packets input, 14513345 bytes, 0 no buffer

     Received 109570 broadcasts, 0 runts, 0 giants, 0 throttles

     9 input errors, 0 CRC, 0 frame, 0 overrun, 9 ignored, 0 abort

     0 input packets with dribble condition detected

     1028116 packets output, 85603681 bytes, 0 underruns

     1 output errors, 42 collisions, 8 interface resets

     0 babbles, 0 late collision, 4 deferred

     1 lost carrier, 0 no carrier

     0 output buffer failures, 0 output buffers swapped out

Router#

In this output, you can see that queue number 6 currently has 5 packets queued and waiting for delivery (6: 5/20/0), while queue number 5 has had to drop 3 packets due to congestion (5: 0/55/3).

The example assigns queue number 3 for all packets with the highest application IP Precedence value of 5. Similarly, packets with Precedence 4 use queue number 4, Precedence 3 use queue 5, Precedence 2 use queue 6, Precedence 1 use queue 7, and everything else uses queue number 8.

Custom Queuing does not assign a default queue for unclassified traffic, so you must remember to do this. The command in the example defines the default as queue number 8:

Router(config)#queue-list 1 default 8

Note that if there is another nonIP protocol such as IPX configured on this interface, it will also use the default queue. If you prefer to give this other protocol its own set of queues, you can use define them using access lists for that protocol. The configuration is nearly identical to the IP example we have shown, except for the exact access list syntax, which naturally depends on the protocol.

By default, the Custom Queuing scheduler visits all queues in order and takes an average of 1,500 bytes from each, and each queue can hold up to 20 packets. In the example, we changed these default values for queue number 5:

Router(config)#queue-list 1 queue 5 byte-count 3000 limit 55

This tells the scheduler to take an average of 3000 bytes from this queue on each pass, and to store up to 55 packets in the queue. Increasing the number of bytes will effectively increase the share of the bandwidth that this queue receives. Increasing the queue depth decreases the probability of tail drops. But it also increases the amount of time that a packet could theoretically spend in the queue, which may increase latency and jitter.

In this example, all of the traffic types are selected by the IP Precedence value. It is also possible to select based on specific applications. You can do this either with an access-list or, in some cases, using keywords in the queue-list command. For example, if you wanted to select all DLSw traffic and send it to queue number 9, you could create an access-list:

Router(config)#access-list 117 permit ip any eq 2065 any

Router(config)#access-list 117 permit ip any any eq 2065

Router(config)#access-list 117 permit ip any eq 2067 any

Router(config)#access-list 117 permit ip any any eq 2067

Router(config)#queue-list 1 protocol ip 9 list 117

Or you could do it like this:

Router(config)#queue-list 1 protocol dlsw 9

This second method is clearly easier, but the number of protocol types that can be defined this way is unfortunately rather limited.

We have three important final notes on Custom Queuing that you should bear in mind. The first point is that if traffic from all of these streams is present, the router will share traffic between them. In this example, we have used six different queues: one for each of the five application precedence levels, plus a default. By default, each will receive a roughly equal share of the total bandwidth. So you may be surprised to find that despite imposing different queues for the different traffic types, the important traffic still doesn't get a large enough share of the bandwidth. You can affect this with the byte-count keyword, as we discussed earlier. Note that the queues are serviced by byte count rather than packet count. So suppose you have two queues, one of which supports an interactive session with many short packets, and another that contains a bulk transfer with a few large packets. If you configure the router to service these queues with the same byte-count, it will tend to forward a lot more of the small packets. But the net share of the bandwidth will be roughly equal on average.

Second, in Custom Queuing, the traffic within each queue competes directly with all other traffic in the same queue. So, for example, if one user sends a burst of application traffic that fills one of the queues, this will cause tail drops for other users whose traffic uses the same queue.

And the third point is that the more queues you define, the smaller the share of the total bandwidth each queue receives. Further, having more queues increases the amount of processing the router has to do to segregate the traffic.

The second and third points compete with one another. The second one tends to point toward increasing the number of queues to limit the competition within each queue. But the third point should convince you that there is a point of diminishing returns where more queues will not help the situation. In practice, the third rule tends to win out. It rarely turns out to be beneficial to have more than five or six Custom Queues, unless some of those queues are only used very lightly.

Custom Queuing is an older QoS mechanism on Cisco routers. In most cases, you will likely find that a newer algorithm such as CBWFQ will be more flexible and give better results.