640-554 notes to come soon for those who want an outline for their studies

Well good luck!

Thats great you will be sharing notes as well. I am just starting CCNA security today actually. I heard it only uses CCP and is more of an multiple guess type of test. Is that correct?

union122

Great ! I am planning NA -Sec. also.

Yes, for the most part, it is all CCP. When you go over IDS/IPS, AAA, NTP, ACLs, etc you will be shown how to do most of the commands (Except IDS/IPS), but you'll also get a hands on of how it's done in CCP as well. As for command line, most of it comes in on parser views, ntp (Very simple to configure), AAA, IOS resilient config, a handful of user interface commands, etc. You'll also get to configure a basic VPN on CCP and a basic ASA config on ASDM (I don't have ASDM so I'm just overviewing that part). If you have GNS3, you can get CCP working by configuring one of the interfaces on your router to attach to a Microsoft loopback adapter (Which you have to configure) to a cloud interface within GNS3, and you just have to input the IP and login info when in CCP. You'll need the following commands for it to discover:

#ip http server (Or ip http secure-server if you add ssh. I'd just stick with telnet)
#ip http authentication local
#username *username* privilege 15 (You MUST have privilege 15 for it to work) secret *password*
#line vty 0 4
#login local

There is documentation to get this working on the net. Just type "CCP in GNS3" and you should have something come up. If I can I'll add a tutorial when I write the notes.

One thing I did not find in the OCG that I found in the exam topics on Cisco's website is PVLANs (Private VLANs). Make sure you check that out as well.

Thanks for the insight. Im sure I will refer back here quite often.

Here's some good documentation on PVLAN:

Configuring Isolated Private VLANs on Catalyst Switches - Cisco

Basically, private vlans are a L2 feature that allows you to prevent communication to some devices and allow to others (Not necessarily on the same vlan).
-Promiscuous ports can communicate with everyone (Also called "primary" private vlan)
-Community ports can communicate with promiscuous ports and themselves
-Isolated ports can ONLY communicate with promiscuous ports
I'll add it into my notes, but I don't think they require the configs. Just the concept.

Thanks that is great, I don't feel like this test will be to bad considering my background. Are the bryant videos more up to date then cbtnuggets?

I used the Bryant Videos primarily. Honestly, I only went over a few of the CBT Nuggets videos so I couldn't tell you, but from what I watched, they pretty much had the same stuff as Bryant did (Except the teachers had different methods of delivery). I've heard plenty of good for CBT Nuggets on this cert track though.

thenappyone

[FONT=arial, sans-serif]I recently started my CCNA Sec studies myself and find the Nuggets vids to be pretty good. I like Keith Barker's enthusiasm, his vids are pretty easy to watch in comparison to others that I have seen.[/FONT]

Yeah I have always liked the teaching method at cbtnuggets.

Looks like you are well prepared. Good luck! Plus if your name comes from where I think it comes...the force will be strong with you and you will score 1000/1000

Master Of Puppets wrote: »

Looks like you are well prepared. Good luck! Plus if your name comes from where I think it comes...the force will be strong with you and you will score 1000/1000

Well if your name comes from where I think it comes... I believe the force has been strong with you as well looking at your cert track @Master of Puppets. I hunt, therefore I am!

FYI notes are almost complete. Got VPN, IPv6, and defense-in depth to complete and that should be it. Book overview is two-thirds complete. CCP overview about halfway.

It seems we are on the same page

Awesome.

You obviously know what you will need for the exam so I don't think there is anything I can add besides emphasasing on being comfortable with CCP because it really is needed for the test.

https://drive.google.com/file/d/0B0MMqHN75RpGTW1nNVNNVmNPUTA/edit?usp=sharing

In that case, I will be doing plenty of CCP lab before the test!

Update: Second draft of notes

Update: Exam scheduled for 15 May. Just got done with the promo test today so it's off to finalizing my studies and getting this test done. Then onto ROUTE!

Wow those are some great notes to expand on, that will be extremely helpful. Test will be here before you know it, good luck!

showbo

Thank you, just downloaded the 2nd revision and will be studying this for sure!

Alright guys, the link above is no longer valid. These are my final notes I will be posting below (I added a few topics and added on to certain ones as well. There was some spelling errors too). If you see any errors in the text, please let me know. Thanks!

Update: CCP labbing's been consistent. Gonna do a little more labbing and overview the vids, books and notes before the test next Thursday.

https://drive.google.com/file/d/0B0MMqHN75RpGcjRnMmd6aUktRDA/edit?usp=sharing

Good luck on Thursday! Seek and destroy!

Well, good news guys: I passed

949. Overall it was a fair test but I know where about half of my mistakes were haha. I'll say that CCP
labbing came in handy though!

That's great to hear, congrats! What's next?

Onto the CCNP! I wanna start out with ROUTE because a lot of the switch stuff I know due to my job. BGP, IPv6 and route filtering will be the newest topics to me in terms of depth

atorven

Congrats, do you mind sharing your CCP labbing techniques, at the moment that's my weakest area.

In terms of that, I primarily used Chris Bryant and the Lab Manual to practice all the CCP. They both had a lot of the same stuff, but the biggest ones emphasized in both of the materials were NTP, ACLs, Security Audit feature, the Firewall stuff, setting up AAA services, template creation, user profiles, and setting up the VPN. Here's the link for the lab manual: http://cisco.inf.fh-brs.de/CCNA_Security/en_Security_Lab_SLM_PDF_v1100.pdf

For me, I basically setup a router on GNS3 and applied EVERYTHING to the router I could (Making sure I didn't lock myself out with either the audit wizard or the firewall lol

) and then afterwords I went through and checked out how everything came together. I wish we could use a gui like this at work! It would make configuration so much easier! Unfortunately it's against regulation

Congrats! Thanks for the insight as well, been going through the book and your outline. Good luck with CCNP!

snadam

Congrats from one Metallica fan to another

\m/