Inter VLAN Routing (part 1)

Network devices in different VLANs cannot communicate with one another without a router to route traffic between the VLANs. In most network environments, VLANs are associated with individual networks or subnetworks.

Configuring VLANs helps control the size of the broadcast domain and keeps local traffic local. However, when an end station in one VLAN needs to communicate with an end station in another VLAN, interVLAN communication is required. This communication is supported by interVLAN routing. You configure one or more routers to route traffic to the appropriate destination VLAN.



When Host A in VLAN 10 needs to communicate with Host B in VLAN 10, it sends a packet addressed to that host. Switch A forwards the packet directly to Host B, without sending it to the router.

When Host A sends a packet to Host C in VLAN 20, Switch A forwards the packet to the router, which receives the traffic on the VLAN 10 interface. The router checks the routing table, determines the correct outgoing interface, and forwards the packet out the VLAN 20 interface to Switch B. Switch B receives the packet and forwards it to Host C.

CCIE EXAM POLICY

CCIE EXAM POLICY (AS PER CISCO GUIDELINE )


•Age Requirements
In compliance with the Cisco Privacy Policy, age requirements for Cisco certification are as follows:
• Underage Minors are children under 13 who may not test or receive certification even w/parental consent
Minors are individuals between 13–17 years of age who may test and receive certification w/parental consent
Individuals 18 years or older are eligible for certification without any age-related restriction
For more information, please refer to the Cisco Career Certification and Confidentiality Agreement.
Conduct
Candidates must agree they will not compromise the integrity or confidentiality of any Cisco certification exam or certification program. Prohibited actions are described in the Cisco Career Certifications and Confidentiality Agreement. Remedies for violating the policy can include a lifetime ban on all future exams and voiding of all previous certifications.

Confidentiality
The questions and answers of the certification exams are the exclusive and confidential property of Cisco and are protected by Cisco's intellectual property rights. Candidates taking Cisco exams must agree they have read and will abide by the terms and conditions of the Cisco Career Certifications and Confidentiality Agreement before beginning each exam.


Correspondence
All official correspondence to certified CCIEs and candidates is sent to the email address in the CCIE database. This database is SEPARATE from the Cisco customer database. Changing an email address in the Cisco customer database does not automatically update the CCIE database. CCIEs and candidates must keep their CCIE email address updated in order to ensure they received all official correspondence.


Exam Discounts, Vouchers and Promotional Codes
Neither Cisco nor Pearson VUE, its primary test delivery partner, guarantees the authenticity of discount vouchers or promotional codes that are obtained from any individuals or entities other than Pearson VUE.

Individuals or Cisco affiliated partners who use certifications discount vouchers or promotional codes that are fraudulent or otherwise obtained from an unauthorized source (including legitimate vouchers for attempted re-use) may risk up to and including a lifetime ban on all future exams, the nullification of all previous certifications or other program sanctions at the discretion of Cisco. Cisco will not compensate candidates for fraudulent vouchers or vouchers obtained from an unauthorized source.


Exam Violations
Disclosure of test content is strictly prohibited. Please report any suspicious activity as described in Cisco's Exam Violation Rules.


Lab Exam: Double Booking
CCIE candidates are allowed to schedule only a single CCIE lab exam date at any location for each CCIE track. Double booking for lab exams in the same track, at either the same location or different locations, is not permitted by the database. Candidates will be allowed to simultaneously schedule lab exams for different tracks.


Lab Exam: Exam Rules
Candidates for the CCIE written exam or lab exam are not allowed to bring anything into the exam room or take anything out. This includes, but is not limited to: notes, documentation, watches, laptops, keyboards, pagers, PDAs, and mobile phones. DO NOT confer or consult with anyone about the exam while taking the exam or after the exam is completed. During an exam, you may only discuss your exam with the lab engineer.


Lab Exam: Payment

Price not confirmed and is subject to change until full payment is made.

Types. Lab sites in China and Japan will only accept payment via wire transfer. All other locations accept online credit card payment (American Express, Visa, Mastercard, or Eurocard) See “Lab Exam: Scheduling and Payment” for details. You are responsible for any fees your financial institution may charge to complete the payment transaction.

Due Date. Full payment must be received at least 90 days before the lab exam date. Only one e-mail notice is sent as a payment reminder. Payments generally take one to seven business days to process, so be sure to initiate payment in advance of the due date. It is important that if payment will be made by wire transfer, that the payment is scheduled well in advance to prevent the lab date being dropped. Exams for which payment is not received by the due date will be automatically dropped from the schedule. If you still wish to take the lab, you must rebook the exam online and complete your payment. There is no guarantee that your original date will still be available once it has been dropped for non-payment. If you book an exam for a date less than 90 days away, you must complete payment on the day you book the exam or the registration cannot be submitted. Candidates are ultimately responsible for making the lab payment in a timely manner and Cisco will not be held liable for any candidates automatically dropped due to non-payment.

Processing. Credit card payments entered into the system will be processed on the payment due date, exactly 90 days prior to your lab date, as will invoices for all payment types. Be sure the company name, invoicing address and email address are complete and accurate to ensure proper delivery of your invoice. No invoices will be generated before the lab exam due date.

Lab Exam: Rescheduling, Canceling and Postponing
Prior to Due Date. Cancellations or changes to the exam date, location, or track must be made prior to the payment due date--90 days before the scheduled lab date. To make any changes, you must log into the Lab Scheduling tool and drop your current lab. Then you can reschedule according to preferred date, location and track. You may book an exam for a date less than 90 days away, if you complete payment on the day you book the exam.

If you need to cancel an exam before the due date, and paid via a wire transfer that has already cleared, you are eligible for a full refund by requesting support via the Certifications Online Support tool.

After Due Date. Changes and cancellations are not permitted after the payment due date--90 days prior to the scheduled lab date--and no refunds will be issued. If you are not able to attend your scheduled lab date, contact support to let them know the lab seat will not be used. You will still forfeit your payment, but you will be allowed to book another exam date immediately. If you do not contact support, you will be marked as a "no show" for the exam and be barred from booking another exam for 30 days.

Candidates Requiring Visas. If you require a visa to attend your lab exam, it is strongly recommended you apply 10-12 weeks before your lab date. Candidates who fail to obtain required visas will still be bound by these cancellation policies and must cancel their lab exam before the payment due date to be eligible for a full refund. For more information in requesting a CCIE Invitation Letter, please visit our CCIE: Invitation Letter (Entrance Visa) Instant Answer.


Lab Exam: Reevaluation of Lab Results
Exam results appeals are available for the routing and switching, security, and service provider technology tracks. Only exams with potential to change from fail to pass will have the option to request an appeal, based on years of historical data. Appeals are not available for the voice or storage tracks due to equipment limitations.
An appeal consists of a second proctor loading your configurations into a rack to recreate the test and re-score the entire exam. This process takes up to three weeks after receipt of payment. Only one appeal per lab attempt is permitted.
The result of the appeal is a confirmation of the existing fail or an update to a pass.
Payment Terms
Make your request within 14 days following your exam date by using the "Request for Reread" link next to your lab record. Each appeal costs $250.00 USD plus any applicable local taxes. Payment is made online via credit card and your card will be charged upon receipt of the request. You may not cancel the appeal request once the process has been initiated. Refunds are given only when results change from fail to pass.
Lab Exam: Retakes
All candidates must wait 30 days between CCIE lab attempts. Please note the 30 days starts from the day after a failed lab exam.


Lab Exam: Scoring
You must obtain an overall score of at least 80% to pass the lab exam. You can view your lab exam results online (login required), usually within 48 hours. Results are Pass/Fail and failing score reports indicate major topic areas where additional study and preparation may be useful.


Lab Exam: Start Times
Start times for exams are indicated in email can also found on the web page associated with each lab location (for a list, see Lab Exam Locations). Pleaseverify your email address in your candidate profile so we can notify you of any changes. If you have any questions about the start time of your exam, please contact CCIE customer support through the Certifications Online Support tool . If you arrive more than two hours after the start of your exam, you will not be allowed to start. If you arrive less than two hours late, you will be allowed to start but you must finish with the rest of the group.


Logo Guidelines
Certified CCIEs may only use the CCIE logo as provided and in accordance with the published Logo Guidelines.


Recertification
To maintain active CCIE status, CCIEs are required to pass either a CCIE written exam of their choosing from among all of the currently available written exams, or a CCIE lab exam in a new track every 24 months. Candidates can only apply one passed written exam towards recertification for every 24 month recertification period. Certification candidates are responsible for keeping track of their certification expiration dates; your recertification deadline can be viewed online anytime (with login) at Certification Status. Subsequent recertification deadlines are always based on your original certification date, not on when you took your last recertification exam.

If your CCIE recertification requirements are not completed on or before the certification's expiration date, your CCIE certification will be suspended for one year. Candidates have one year to recertify their CCIE certification by passing the required written exam. If a candidate does not recertify prior to the one year suspension period, all CCIE certification requirements must be completed again to obtain the certification (pass both the written exam and the lab exam.) Please see Recertification for detailed information.


Travel Costs
Under no circumstances will Cisco reimburse travel costs for CCIE lab exams.


Written Exam: Expiration
Candidates must make an initial attempt of the CCIE lab exam within 18 months of passing the CCIE written exam. Candidates who do not pass must re-attempt the lab exam within 12 months of their last scored attempt in order for their written exam to remain valid. If a candidate does not pass the lab exam within three years of passing the written exam, he or she must retake the written exam before being allowed to attempt the lab exam again.

Written Exam: Retakes
There is no limit to the number of attempts that can be made on the written exam. However, candidates must wait 5 calendar days between exam attempts. Once a candidate passes a particular written exam, he or she may not retake that same exam for at least 180 days. (Though rare, this may occur in certain recertification situations.)
Written Exam: Scoring
Pass marks are set by using statistical analysis and are subject to change. The pass score is given on the Examination Score Sheet at the end of the test. Along with the candidate's score, there is a notation of either PASS or FAIL. Scores on written exams are automatically downloaded from testing vendors, but may take up to 10 days to appear in the CCIE database.
PROVIDED BY CISCO SYSTEMS

core knowledge exam removed from ccie track

Core Knowledge Questions Removed for CCIE R&S and Voice Lab Exams
With more than six months of exam results now available, Cisco is now able to report that the troubleshooting components of the CCIE R&S v4.0 and CCIE Voice v3.0 lab exams are performing well in validating expert level networking skills. Considering these results, Cisco has decided to eliminate the Core Knowledge questions from the current CCIE R&S v4.0 and CCIE Voice v3.0 Lab Exams. Beginning on May 10, 2010, CCIE R&S and CCIE Voice Lab Exams, in all global locations, will no longer include the four open-ended Core Knowledge questions. The total lab time will remain eight hours. For the CCIE R&S Lab Exam, this means candidates will begin with the two-hour Troubleshooting section, followed by a six-hour Configuration section. For CCIE Voice, candidates will have the full eight hours to complete the integrated exam. At this time, only the R&S and Voice certifications have been designed and validated to allow removal of Core Knowledge.

HSRP vs VRRP vs GLBP

Cisco Hot-Standby Router Protocol (HSRP):

Created by Cisco, for Cisco in 1994
Uses a default hello timer of 3 seconds with a hold timer of 10 seconds
u need unique IP add. as a virtual gateway ip.
active router
standby router

Virtual Router Redundancy Protocol (VRRP)

Created by the IETF in 1999
Works between multiple vendors
Has faster timers than HSRP by default - hello of 1 second, hold timer of 3 seconds
u haven't any need of unique IP add u can use any assigned physical ip as a virtual gateway.
master router
backup router

Gateway Load Balancing Protocol (GLBP)

Created by Cisco, for Cisco in 2005
Identical features to HSRP, but allows an active-active connection that adds load-balancing features
One AVG(active virtual gateway)
Many AVF(active virtual forwarders)

HSRP

HSRP stands for Hot Standy Routing Protocol which provides Automatic Router backup when an active router in the group fails. HSRP allows building resiliency in the networkgateways wherein should an Active Router fail in a HSRP group, the standby router assumes the role of the active router and continue routing packets.
HSRP works by sending multicast "Hello" messages (default: every 3 secs). If the Standby router do not receive any Hello packets from the active router for a preset time (default 10secs) then it assumes the active router is down and becomes the active router. Also, if we are tracking an interface and if the tracked interface is down, the Active Router reduces its priority so a Standby Router can assume to role of Primary Router.
A realtime example would be access to a service providers servers at a remote location. Lets say there are two distinct routes to the same server(s), each through individual routers. The clients on the internal network segment are configured to send the traffic through a gateway. The gateway being the HSRP Address. Then the Server is accessible through one service provider always (based on the active router). However, in a disaster situation when the active router goes down, the standby router assumes the active router role and continues to serve connection to the remote servers but using the other serviceprovider. This way routing redundancy is provided to a remote resource.



To setup HSRP on a pair of routers,
Router 1:

From the Interface Configuration Mode add the IP Address of the Interface
hsrp-router1#conf t
hsrp-router1(config)# int fa0/0
hsrp-router1(config-if)# ip address 192.168.0.2 255.255.255.0

Set the Virtual IP Address

Sets the Virtual IP Address for the interface where "1" is the HSRP group and "92.168.0.1" is the Virtual IP for the HSRP group.

hsrp-router1(config-if)# standby 1 ip 192.168.0.1

Enable Preempt

This is required to make the router from being a Standby Router to an Active Router when it finds the Active Router is down or if it has become the higher priority router in the group
hsrp-router1(config-if)# standby 1 preempt

Set Router Priority

The default priority is "100". We set here as "110" to make the Router 1 as active.
hsrp-router1(config-if)# standby 1 priority 110

Set Authentication String

This is an optional plain text 8 character string that can be used in the multicast "hello" packets to authenticate the HSRP group.

hsrp-router1(config-if)# standby 1 authentication LocalLAN
Set Timers

Sets the time period between the "hello" packets and the hold time before assuming an active router is down. Default is 3seconds and 10 seconds respectively.

hsrp-router1(config-if)# standby 1 timers 5 15

Track Interface

If you track interface to check link status then the following command will track an interface and when the tracked link is down, the active router will mark its priority low so as to allow a Standby router to take over.

hsrp-router1(config-if)# standby 1 track se0/0

Repeat the procedure altering the IP Address of the Local interface and the priority and the tracked interface.

Router 2:
hsrp-router2#conf t
hsrp-router2(config)# int fa0/0
hsrp-router2(config-if)# ip address 192.168.0.3 255.255.255.0
hsrp-router2(config-if)# standby 1 ip 192.168.0.1
hsrp-router2(config-if)# standby 1 preempt
hsrp-router2(config-if)# standby 1 priority 100
hsrp-router2(config-if)# standby 1 authentication LocalLAN
hsrp-router2(config-if)# standby 1 timers 5 15
hsrp-router2(config-if)# standby 1 track se0/0
Thats it. HSRP configuration is complete. You may test the connectivity to a remote route and see for yourself the redudancy in place.

Cisco EtherChannel Topologies(5)

Cisco EtherChannel Technology over CWDM

This figure shows a sample network where Gigabit links are used with Gigabit EtherChannel and CWDM technologies. In Figure 5, four gigabit links have been combined to obtain a total aggregated bandwidth of 4 gigabits. Without incorporating CWDM technologies into the solution, four runs of fiber need to be installed between the two campus points of presence (POPs). By employing CWDM GBICs and two CWDM add/drop multiplexers, the number of runs of fiber can be reduced to one. This translates into significant savings depending on the distance to be spanned by the EtherChannel connection.

Cisco EtherChannel Topologies(4)

Cisco EtherChannel Technology Interconnecting Servers, Switches, and Routers Across the Campus

This figure shows a complete network design based on Cisco EtherChannel technology. As in the previous examples, links from the wiring closets are brought into the data center using 400 Mbps channels, providing bandwidth and resiliency. In the data center, routers are interconnected with EtherChannel connections, providing improved performance by having more bandwidth available to route between subnets. Here the router is configured with two dual-link EtherChannel connections to provide 400 Mbps of bandwidth on each subnet. The EtherChannel technology provides load balancing across two links within the channel based on IP addresses, and the links within the channel can use ISL encapsulation to support multiple subnets per link. The last component in this network design is a server attached via a four-link EtherChannel connection, which provides 800 Mbps of bandwidth to the network. Typical platforms that would require such bandwidth would be high-end Pentium Pro servers, enterprise servers, and high-end graphics imaging and rendering servers. As shown in Figure 4, the server is connected via a multiple-link EtherChannel connection—an excellent match for the bandwidth needs of locally attached users and the users serviced via the router.