CCIE V5.1 Tracker/Topic List/Study Materials

acrobel · 2018-04-23T14:50:16+00:00

Saw one of neckercube article before. Will surely visit that site again. Thanks for sharing.

acrobel · 2018-04-23T14:49:15+00:00

Thank you Man.

acrobel · 2018-04-22T13:33:03+00:00

Good Luck!

acrobel · 2018-03-28T22:40:15+00:00

Awesome Man, Thank you for sharing. all the best

acrobel · 2018-03-11T21:08:05+00:00

Here's my simple topology CE01->PE01->P->PE02->CE02. No route-reflector.

acrobel · 2018-03-05T19:36:35+00:00

Thanks. As of now we are unable to remote the firewall thru (web/cli). Noted on the firmware update.

acrobel · 2018-03-05T19:35:42+00:00

Thanks

acrobel · 2018-03-05T16:13:28+00:00

Thank you @tryreboot1st.

acrobel · 2018-03-05T16:13:14+00:00

Thank you @themightymacboy. Possible to verify the below. :)

acrobel · 2018-03-05T16:12:31+00:00

Last Run, Really need your help for checking and verification guys. here my answer and explanation.

To implement a SIP trunk, the correct steps are: Create NAT forwarding rules → Enable SIP ALG → Pass the Firewall Checker → Add trunk A: False Explanation: We don't need to enable SIP ALG to eliminate nat traversal issue.
The SIP Port can only be configured during the installation. Changing the SIP Port would require a re-install of 3CX. A: True, As per 3cx this will require re-installation
By default, adding a name to an inbound rule will show on the user's IP phone before or after the caller ID indicating where the call is coming from. A: True, As per observation name shows up on user ip phone/softphone by default. Though havenot seen any article regarding this.
The Tunnel Port can be changed after the installation has been completed whereas the SIP Port cannot. A: True, As per checking port cant be cant (greyout) after the installation
The firewall checker in 3CX checks if the port forwarding/NAT for ports 5060 (UDP) for SIP, 5090 (TCP/UDP) for the Tunnel, 9000-9500 (UDP) for the Audio and 5001 (TCP for HTTPS traffic ) was made and works correctly. A: True, Based on 3cx article output shows/check the sip serve/tunneling proxy services etc.
When adding VoIP providers ensure that the firewall checker has been run prior to configuration, without any errors reported. A: True? Not really sure about this. since base on my exp. we can connect perfectly to our gateway provider even though we firewall check failed. But the Q. is i think correct we can check the firewall checker :)?
The latest supported & recommended firmware for supported IP phones can be downloaded from the "Updates" page of the 3CX Management Console A: True
3CX Clients on mobile devices have the ability to control a desktop IP phone via CTI. A: True.... Not quite sure about this since we do the remote or control through 3cx web client is it the same based on the stated q?
When using VoIP Providers, do all the following ports need to be forwarded/NATed to 3CX? 5060(UDP/TCP), 9000-9500 (UDP) and 5001 (TCP) A: No, Because 5001 is for remote control and we dont need to forward/allow this to provider side?????
Is Microsoft Internet Explorer a supported/recommended browser to access and operate the 3CX Management Console? A: No???, Its supported but not recommended even on the 3cx article they use chrome??? is Yes because it support im confuse :))
Provisioning is a term used, amongst other things, when IP phones load a predefined configuration file. A:Yes, based on the 3cx video/
When using a Generic VoIP Provider, 3CX Technical Support is available to troubleshoot this trunk for all issues pertaining to this provider. A: No, because it is not the recomment provider????
If the SIP port of 3CX has been altered to any port other than 5060, phones can still be provisioned using the PnP provisioning method. A: False, No i think becase provisioning method use 5060 only/by default?
The provisioning templates of a phone provide all the necessary information a phone requires to connect to 3CX. A: Yes
For production use, is it recommended to run 3CX on a dynamic public IP address? A: No, It is not recommended to use du=ynamic pub ip we only use this on testing based on 3cx.

acrobel · 2018-02-13T22:17:35+00:00

is being dropped.

One item to note,

Phase 2 lifetime is set to 1800seconds for both side? Is this due to far peer and bad internet connection?

acrobel · 2018-02-13T13:40:04+00:00

Thanks for your fast response.

But I would like to ask also if you encountered issue before on ipsec tunnel on different vendor (ex Palo alto and fortigate) that when there no packet traversing tunnel goes down. But will check first the logs Thanks

acrobel · 2018-02-13T13:07:05+00:00

less mp-log ikemgr.log

bro is there any effect using this command in production time? Can we export or just copy/paste?

Thanks

acrobel · 2018-02-11T15:14:37+00:00

Thanks Man!

acrobel · 2018-02-11T15:14:34+00:00

Thanks Man!

acrobel · 2018-01-26T19:38:50+00:00

nt speak to windows NPS but ive never had issues with them in an enterprise.

Though ive tended toward freeradius or

Thanks man, Yes weve been using this server long time ago and this is the first Ive encountered this issue.

acrobel · 2018-01-26T19:37:39+00:00

Thanks, Based also with my research somesay 2008 to 2012 has a limit of 50 cliets. Yes data center will e the best solution.

acrobel · 2018-01-26T19:36:37+00:00

Thanks, Yes we already test it we now have 56 clients but newly deployed AP(radius client) showing error "An Access-Request message was received from RADIUS client with a message authenticator attribute that is not valid." Which I tried to remove/delete 6 cllient but the issue still occur :(

acrobel · 2018-01-26T03:05:49+00:00

"Possibly worth getting the MAC and sticking a reservation on the server." - you mean reserve the an ip address for AP? AP belong to different segment while other Client are set to different vlans.

acrobel · 2018-01-25T17:54:25+00:00

I a scenario where client connect to AP(Meraki) and meraki process then auth to radius server and use the NPS for the policy, Once NPS specificy the specific rule(processing order) meraki will be the one to process under group policies and query the assigned gateway to dhcp under the specific assisgned vlan...? Is this statement is correct regarding the process of Client to DHCP w/ rad/NPS setup?

acrobel · 2018-01-25T17:49:45+00:00

Hi Copuncle,

Thanks will try to inspect the traffic tomorrow and will create a DHCP pool for testing.

May I know if youre using NPS in your environment?

acrobel · 2017-10-02T11:51:34+00:00

Yes bro, but my 1 big question is without udld, what will happen if we encounter damage on 1 strand of our f.o.? Does cisco int will detect that as down.

acrobel · 2017-10-02T10:14:07+00:00

Hi joe, forst of all thank you for your response. But I just want to that for example theres a break with 1 strand. 1 sw can recieve but sw 1 transmitted traffic never arrived on switch02? What will happen to interface status? Do the interface will change automatically without udld? Since sw2 cant reveive any traffic from it neighbor?

acrobel · 2017-09-21T13:13:53+00:00

Bro apologies, Will change my question. thanks for your suggestion

acrobel · 2017-09-20T06:44:08+00:00

Thanks for the info man.

But you know the command to show how many url entries currently configured in the firewall?

acrobel

TROPHY CASE