Options

Security Path here I come

RouteMyPacketRouteMyPacket Member Posts: 1,104
Hello All,

I've been in the game for years and always held a wide skill set (MS, Virtualization, R/S) but have now landed a focused Cisco role. I have had the good luck of working with ASA 5510's and Cisco gear over the last 5yrs and even in my new role, I am blessed with a massive environment with Active/Active 5510's, WLAN Controller 5508, 2 4507's as my core. Random 3560G, 3560 and 3750's spread throughout and of course CUCM and CCX.

I have decided on Security simply from my experience working with ASA's and my love of them. Now it is time to build a lab for home so I can fill in some grey areas in my knowledge and get prepared for sitting the tests. Even with my experience I think I want to sit the CCENT first to adapt myself to the testing world. Real life scenarios vs the way questions are proposed are quite different as we know so I need to get acquainted with Cisco's testing parameters.

Ok, on to the good stuff. While I plan to go CCENT->CCNA-S->CCNP-S (assuming you don't have to sit CCNA then go CCNA-S?) I want to build a lab that will see me through these goals and here is what I have in mind starting out

**Edit** Per Rougetadhg, looks like I will be going CCENT->CCNA->CCNA-S->CCNP?->CCNP-S (That's alot of tests and i'm crying inside now)

1 x ASA 5510
2 x Cisco 851w Routers *
1 x 3560 48 Port POE
1 x 3560 24 or 48 port non POE
1 x 4325 IDS/IPS (I understand this to perform both roles?)


* I like the 851w for the wireless functionality but at the end of the day i'm thinking two 1800's here would suffice as well.

I don't think I will be digging into the 4325 until after CCNA-S, but know it's a solid device for the Security route so might as well have it racked and ready.

I appreciate any advice moving forward. I'm pretty nervous about sitting the tests but now that I have gone 100% Cisco it's a necessity and that excites me to focus completely on Cisco instead of everything.

Thanks in advance!
Modularity and Design Simplicity:

Think of the 2:00 a.m. test—if you were awakened in the
middle of the night because of a network problem and had to figure out the
traffic flows in your network while you were half asleep, could you do it?

Comments

  • Options
    RoguetadhgRoguetadhg Member Posts: 2,489 ■■■■■■■■□□
    In order to succeed, your desire for success should be greater than your fear of failure.
    TE Threads: How to study for the CCENT/CCNA, Introduction to Cisco Exams

  • Options
    YFZbluYFZblu Member Posts: 1,462 ■■■■■■■■□□
    Welcome! Given your experience, you might consider the composite CCNA exam, instead of testing for both CCENT and CCNA.
  • Options
    swildswild Member Posts: 828
    Take a practice test. If you get a 90+ on the first try, take the combined exam. Anything less, and I would recommend splitting it in two, since it doesn't cost any more. ICND1 is pretty easy, but ICND2 kicked my ass.
  • Options
    RouteMyPacketRouteMyPacket Member Posts: 1,104
    Thanks, I really appreciate the insight into the composite exam and that is probably honestly the best option for someone like me but I admit I do have "grey" areas in my Cisco knowledge.

    I'd like some opinions on the lab I have chosen because I want to to get it purchased ASAP and start configuring. Then once the lab is up I would like to do as someone else suggested, take some quizzes and see how I fare. Shoot me a link if you have one and I'll try it but you have to promise not to laugh if I bomb it ok? icon_rolleyes.gif
    Modularity and Design Simplicity:

    Think of the 2:00 a.m. test—if you were awakened in the
    middle of the night because of a network problem and had to figure out the
    traffic flows in your network while you were half asleep, could you do it?
  • Options
    zrockstarzrockstar Member Posts: 378
    Hey RMP, scroll to the bottom of this link: How To Build A CCIE Rack | INE That is the topology for INE's CCIE lab. I think the INE lab is very highly regarded in the cert realm. Of course you don't have to start with everything all at once (although there are complete INE packages on ebay for around 2,500 - 3,000 iirc). My suggestion would be to pick and choose a few right now. The 1841's are what is recommended for Security. Obviously you will have to add the track specific items like ASA or IP phones. When I was doing the academy course for CCNA there was a lot of 3 router 3 switch labs. If I was you I would probably start by getting one of the 1841s and two of the 2610s. Then if you can afford the 3560s then go for it, but you can probably get by just fine with some 2950s for quite a while. Hope that helps.
  • Options
    RouteMyPacketRouteMyPacket Member Posts: 1,104
    Ok, one last check as I am ready to pull the trigger on the following

    Please tell me if I am going overboard and if so tell me how far this will take me or won't take me

    3 x 851w Routers
    1 x 48 3550
    1 x 24 3550
    1 x 24 3750

    I'll wait on the 5510 for now. I see so many conflicting opinions on lab builds, wish it were clear cut for each cert level

    Thing that concerns me is IOS differences, I study and work on 851's and then the CCNA composite test has 2600's or something...could be annoying and I would prefer to avoid that situation if possible so if I just need something completely different than the above, please let me know.

    I have found a cheap 1841 router on craigslist so other options are available.
    Modularity and Design Simplicity:

    Think of the 2:00 a.m. test—if you were awakened in the
    middle of the night because of a network problem and had to figure out the
    traffic flows in your network while you were half asleep, could you do it?
  • Options
    zrockstarzrockstar Member Posts: 378
    I don't know a whole lot about the 850 series, you don't see them discussed much here. I don't believe they support all IOS commands and protocols... I could be wrong though, but I swear those don't support OSPF or EIGRP or something like that. I would definitely pick up that 1841 though, you can literally use that from CCNA all the way to CCIE and everything in between. Did you check out the link I posted?
  • Options
    RouteMyPacketRouteMyPacket Member Posts: 1,104
    I am leaning towards 1800 routers. I did see your link zrockstar and thank you and looking at it, it would be better to just go with the 1841's now and the 3550 and add 3560/3570 later along with the ASA 5510

    I've got the following priced on Amazon now

    3 x 1841 ISR's
    2 x 3550 48 port
    1 x On Stage Rack
    1 x American DJ PC-100A Rack Mount Power Switcher

    Grand Total $890

    Not bad eh?



    ***Edit**

    Gear has been ordered and i'm excited to get it all racked in and i'll post a pic once that is done.
    Modularity and Design Simplicity:

    Think of the 2:00 a.m. test—if you were awakened in the
    middle of the night because of a network problem and had to figure out the
    traffic flows in your network while you were half asleep, could you do it?
  • Options
    RouteMyPacketRouteMyPacket Member Posts: 1,104
    OK, I am done for awhile! Just bought 3 x WIC-2T's for these routers and bought assorted Cat6 cables. Someone comfort me and tell me it's ok because this gear will carry me far past CCNA icon_lol.gif
    Modularity and Design Simplicity:

    Think of the 2:00 a.m. test—if you were awakened in the
    middle of the night because of a network problem and had to figure out the
    traffic flows in your network while you were half asleep, could you do it?
  • Options
    RouteMyPacketRouteMyPacket Member Posts: 1,104
    Starting to piece what has come in together...

    Modularity and Design Simplicity:

    Think of the 2:00 a.m. test—if you were awakened in the
    middle of the night because of a network problem and had to figure out the
    traffic flows in your network while you were half asleep, could you do it?
  • Options
    YFZbluYFZblu Member Posts: 1,462 ■■■■■■■■□□
    Looks good! I'm jealous of your 5510

    *stares at my corporate credit card*

    I'm resisting the urge!
  • Options
    RouteMyPacketRouteMyPacket Member Posts: 1,104
    YFZblu wrote: »
    Looks good! I'm jealous of your 5510

    *stares at my corporate credit card*

    I'm resisting the urge!


    lol...yeah having an actual 5510 in a home lab is sweet. I am actually bidding on one now and maybe tomorrow I will win it. Other then that my lab is put together now...now what? haha

    One of my 1841's is v1 so no mounting holes..no biggie. Still looking to maybe add a layer 2 switch but i'm pretty set to knock the CCNA Composite out then be ready to move onto CCNA-S


    So here it is today

    3 x 1841's with WIC-2T and one T1 DSU/CSU WIC
    2 x 3550

    I've got 4 7941's on hand as well for future use and will add the 5510 ASAP or when a deal comes about.

    Modularity and Design Simplicity:

    Think of the 2:00 a.m. test—if you were awakened in the
    middle of the night because of a network problem and had to figure out the
    traffic flows in your network while you were half asleep, could you do it?
Sign In or Register to comment.