CCNP ISCW Official Exam Certification Guide

As I've found to be typical w/ Cisco's Exam Certification series, there simply is not enough information to use this as your only study source. I took the exam last week and passed: 915/1000, however it was only because I used TWO other study sources [the lab book and CBT videos]. Cable and DSL theory was explained well, however the PPPoE configurations given were INCORRECT. I have an 871-K9 running 12.4(9)T4 using ATT DSL and thus requires PPPoE w/ PAP authentication. "pppoe enable" will NOT work, it is an incomplete command. You need "pppoe enable group global" in order for the connection to form. Furthermore you need the command "ppp authentication pap CALLIN." [They neglected the CALLIN portion of the command.] MPLS coverage was well explained HOWEVER they FAIL to discuss VRF and the syntax to configure this. NOTE: I had -three- questions on this subject. I liked the IPSec section, and site-to-site IMO is probably the most important subject on the exam for real-world application; they did a decent job explaining IPSec operations and CLI/SDM configuration. The IPSec GRE section left a little to be desired. As far as the test is concerned I personally had a "scenario" based question. Be sure you can troubleshoot GRE configurations, typically by looking for mismatched source/destination IP's or subnet masks. The section covering the various security features [router hardening, AAA, ACL's, CBAC/IOS Firewall, and IPS] were covered well enough to pass the exam; however in the real world you'll probably need to dig a little deeper. I suggest going to Cisco's website and downloading the 12.4T IOS Security Configuration Guide. Cisco no longer uses the "inspect" syntax for CBAC, but has switched to zone-based firewalls. Futhermore 128mb.sdf and 256mb.sdf are no longer used or updated. They have switched to the v.5 signature format. THE BOTTOM LINE: if you want to pass this test you'll need to also purchase the ISCW Lab Portfolio [excellent book by the way]. Be comfortable looking through IPSec and Firewall configs on SDM, and configuring DSL & AAA access. You should know the config commands cold.