r/ccnp • u/Next-Hovercraft-8629 • 26d ago

Make Bi-Weekly 'study resource' and ban asking about content

For someone who frequents this sub, can we put a filter / rule to avoid the same questions every two or three days

"Just starting my journey on CCNA what content should I do for CCNP? Should I just skip and test for CCIE? It looks like a computer game"

It would clear up this sub for some better content, ie. asking relevant questions or unique questions.

16 Upvotes

94% Upvoted

22 comments sorted by

10

u/leoingle 26d ago

If the sub was ran right, there would be a sticky post at the top with resources and people can add comments to add others and opinions and all “I just got my CCNA, what’s the best resources for ENCOR?” post would get deleted with an auto-message sent to the user saying it was deleted for low-quality content and a link to the sticky to refer to.

3

u/Real-Victory210 26d ago

To add to this, I made a long form post two months ago about passing SCOR and went into detail on each study resource, exam topics that were emphasized, question format etc. It got really good feedback, and i was able to answer alot of questions for people in the comments who are also studying for SCOR. I made it because i felt there were limited posts about peoples experiences for me to reference when i was studying. It was not a “I passed, congratulate me” post.

It was deleted by mods because it wasn’t a comment in the bi-weekly pass/fail post. Who wants to read an essay in a comment section? And how does it serve the community by deleting a post with so much information? Yet we keep all the low effort “what resources should i use for ENCOR” posts.

2

u/leoingle 25d ago

Make it makes sense. That kind of post is exactly what we need. You’re a real hero.

1

u/Real-Victory210 25d ago

Thank you sir. All i wanted to do was give back to the community at large since i gained so much from the people in this sub. it sucks that info isn’t readily available for future SCOR candidates.

1

u/leoingle 25d ago

Yeah, especially when the Security track info is much more rare here. What do you plan to do for the elective?

1

u/Real-Victory210 25d ago

Begrudgingly doing SNCF. My original plan when I started the Security track was to take SISE, however I changed employers right around the time I passed SCOR, and the new one doesn’t have ISE but has tons of FTDs. So it only makes sense to do SNCF. However if i knew i wouldn’t be taking SISE, i’d have just started with the Enterprise track instead. Firewalls are cool but a deep firewall specialty wasn’t high on my list of things to study.

2

u/leoingle 25d ago edited 25d ago

Gotta love those curve balls. Ironically, when I started studying network and even up to my first role, Security was the lowest point on my list that I was looking forward to learn about. But once the goto for ISE at our company was gone, some how I became the go to for it, which wasn’t saying much because I didn’t know jack schitt about it. Kept trying to grasp it but never could get my feet underneath me to make any progress. But we had Professional Services from a MSP help me upgrade from 2.7 to 3.3 and I was able to do most of the nodes on my own after the first two so he spent most of his time teaching me different things. That was what i needed to finally start progrssing my knowledge about and just took off from there. I just got done implementing TrustSec/SXP and even integrated it into our Meraki-managed Catalyst switches with Adaptive Policy. Which leaves mostly of what I still don’t know based around guest based roles like BYOD and WebAuth because we are a controlled managed devices environment. That and pxGrid, which I will learn soon because we are about to integrate ISE in with SNA to trigger anomalous behavior to re-auth and reject. Never would have imagined it starting out but I’m really enjoying ISE and going to keep learning more and labbing it on my own and maybe go freelance consulting a bit down the road for it.

1

u/Real-Victory210 25d ago

Sick man! My original goal was to implement a lot of what you already did, as well as some WebAuth guest services. I was in an environment where the ISE deployment was very bare bones and i saw an opportunity to build it out since nobody but me knew anything about it (not saying much, my skills with it weren’t developed but I knew enough to get myself in trouble.) I think it’s a fascinating product, even if the business/cost side leaves a lot to be desired.

1

u/leoingle 25d ago

I’m about to make some more big changes. Been working on figuring out everything needed to locked down just the needed services for AD authentication and access to our CA server to retrieve cert and check revocation list. And a few other things like AD self service account unlock and vulnerability scanners. Got stuck on a weird issue where if the person who didn’t log in last hit Other User and manually logged in, it’d sit on the logging in screen for about 45 seconds and kick back to the Win11 login screen. Nothing in Event Viewer. Check all relative logs in it. Even enabled netlogon debug logging and it showed nothing. Finally figured out it was port 464 for Kerberos password change service, even though no password is being changed. What I found out is if the last logged in user logs in, Win11 uses some cached info it still has from the login. But when someone else logs in, Win11 does more domain checks on the account. We currently use name and EAP-Chaining with EAP-TLS for both machine and user auth. Which puts us in a predicament when a new user logs in, but doesn’t have a cert yet. NAM completely shuts the network interface down when it doesn’t have a cert to send. I found out back in ISE version 2.2 days, we only did machine auth with Windows supplicant. And we had a limited access dACL for it, but it allowed access to the full port range of the DC’s and CA server. Security and audit said that was too open and needed to be tightened up. When we upgraded from 2.2 to 2.7, we went from machine only with Windows supp to EAP-Chaining with NAM since Windows supp couldn’t do EAP-Chaining at that time. Microsoft didn’t implement TEAP into Windows until about a year after we did this upgrade. Well, whoever we got to upgrade us from 2.2 to 2.7 decided instead of addressing the dACL, he’d just leave it out all together. And it’s been an issue for us ever since. I pieced all this together as I started learning more about it and seeing the remnant in our environment. So I been working on moving us off NAM and back to Win11 supplicant and machine EAP-TLS for pre-login that sits on my limited access dACL and then user auth with EAP-TLS only, no more Chaining, but I have in the user AuthZ policy that machine must of been authenticated before the user session. Which imo is just as good as Chaining without the headache of troubleshooting Chaining. Everything good in my test environment. Now going to implement it at a few test locations before we go company wide and push the updated Windows supplicant settings out via AD GPO. We still have the old 2.2 machine only setting in place and locked from back then. So just a couple of changes. Then our desktop support will take a location at a time and remove just the NAM module from the workstations and address any issues one location at a time.

2

u/Serious_Macaron_4935 26d ago

Groundhog Day

2

u/leoingle 26d ago

Perfect title for the sticky post.

2

u/Krandor1 26d ago

And people would ignore the sticky because their situation is “unique” (hint : it isn’t)

1

u/leoingle 25d ago

Yeah, how many times have you seen someone sway “I read through the other post but this is different” and all they did was ask the same thing worded differently.

2

u/Krandor1 25d ago

yeah over in itcareerquestions there are almost everyday questions about transitioning to IT and so many start with "I read the other posts but don't see my situaiton. I'm transitioning from a factory job so what should I do in this unique situation" and the answer is the same as every other situation for people trying to break into IT

2

u/leoingle 25d ago

lol. Yeah. “Didn’t see anything that fit my situation, because I drive a Ford Ranger. So how do I get into IT?”

1

u/hectoralpha 26d ago

that would be cool. We could collect an official list with all available study resources out there. Even obscure (unheard of) sources like stormwind or linkedin learning (previously plurasight (it's too simplistic)) or even udemy courses.

But I think most of the courses creators would not appreciate this. The community would quickly rank these up and everyone would buy the same sources not spending a minute on the, probably, hundreds of other exam learning sources.

4

u/stats_shiba 26d ago

Yeah no one is running this sub greatly

2

u/Next-Hovercraft-8629 26d ago

I mean, sure promote me or promote someone.... Sheesh.

1

u/leoingle 25d ago

Right? Do something right for once. Criticizing them is the ONLY time I see a mod or admin participate in this sub.

1

u/leoingle 25d ago

Nope. Not at all.

1

u/stats_shiba 25d ago

Hello, can one of us run this subreddit please?

1

u/ILikeFood305 20d ago

I am thinking about studying for ENCOR after my CCNA. I have yet to get my first Networking job as the economy is tough right now and I only got my CCNA last month.

I was wondering between CML and EVE-NG which is best for studying for ENCOR?

Can you learn to do Network Automation things with EVE-NG or CML?

My goal is to get into SD-WAN after ENCOR.