CCIE SEC v1.0 Lab Preparation.

Most of the Lab can be achieved 95% using Virtuals, Depends on what resource you have, you can use IOL image instead of vIOS and CSR1000v, you can only use CSR1000v only where required (the features not available on IOL)

I use Combination of PNETLabs or CML 2.8 for my practice, also used VM Like DNAC and ISE 3.X

One should be planning for the Lab attempt and strategy to crack the Lab success, Do IP address is very important, Lab Practice will guide what IP addressing used in the Lab for the Management.

Look around in the internet for the Lab network Diagram for the CCIE SEC v1 Lab you find plenty of Lab topology available how the Lab Looks like. Due to non-disclosure i am not going to post in my Blog that diagrams.

Design section will be 32Q – 3 hours, No carry forward time even if you finish early.

DOO Section 4 Sections – 5 hours, You attempt any section, some section need to be done order to get correct outcome – Example you need to have ASA configured for the Remote Access VPN to work.

I will be posting the Labs every week each technology what i am learning until i attempt the LAB.

Major focus on the Labs :

Anyconnect VPN.
Clientless SSL VPN.
Site-to-site IPSec VPN.
FlexVPN.
ASA Active/Standby Configuration.
ASA Multi-Context Active/Active Configuration.
ASA Cluster Configuration.
Zone based Firewall On Router.
ISE Configuration.
ISE and AD Integration.
ISE and DNAC Integration.
802.1X configuration.
MAB Configuration.
Trustsec Configuration / SGT tagging.
Dynamic ARP Inspection.
Device Administration using TACACS.
Syslog Configuration.
Web Security Appliance and WCCP configuration.
Umbrella configuration.
Programmability.

Happy Labbingggggggggggggggggggggggggggggggg.!!!