How to use wireshark

Hello everyone

In this post, I will introduce to how to use wireshark when you study CCIE wireless.  I had said
that Capture is the magic tool. If you want to become a good wireless engineer, you should be good at using Capture - Wireshark and Onmipeek.

Wireshark is wire packet capture and Onmipeek is wireless packet caputre. I will focus on wire packet caputre - Wireshark, which you can capture CAPWAP packet.

// Where you can download //
https://www.wireshark.org/

// How to capture //
There are three steps.
1. Set CAPWAP protocol on Wireshark
   Go to your wireshark and select [Edit] > [Preference] >[CAPWAP], as you can see the following

  

2. Understand your topology and set the capture point
    You should master your topology, such as which switch port that connects to Access Points(AP) and which switch port that connects to Wireless Lan Controller (WLC).  Once you have done it, you can capture AP port or WLC port as the capture points, as you see this picture. Maybe, someone will ask do you need to capture both. Well, if you can, it is better to do that. But if you do not have PC, you can select one of them. For example, If you can CAPWAP join process you can capture the AP port, or if you can see how roaming work, it is better to caputre WLC port.

 
  

3. Set monitor session on switch.
   You can give the following setting on your switch 

   monitor session 10 source interface Gi2/19 <= this port connects WLC/AP
   monitor session 10 destination interface Gi1/48  <=this port connects your PC having wireshark


 Good Luck !!

Be the CCIE

Hello everyone.

My name is Bin Han from China. I am living in Japan now.
Sep. 30th, 2014 is my luck day, since I passed CCIE wireless(#44957) after 13-month hard study.

In this 13 months, I faced a lot of problems since there are not so many study resources about CCIE wireless comparing CCIE R&S.  Form today, I want to share my experience and studying resource with everyone. Hope this blog can help you to pass CCIE wireless.

Our problems is - "how do you become the CCIE wireless as soon as possible."

I have three advices from my experience.

1.  Pass written exam as soon as possible and reserve Lab exam
     In my case, I passed written exam in the first month on Sep 30th, 2013 and reserve lab exam at the same day.

2.  Focus on your weak points base on blueprint and make your plan to struggle them , these parts are very  hard for me
     a.  Wireless Security
     b.  H-reap / Flexconnect
     c.  Wireless multicast
     d.  WIreless Qos
     e.  Autonormous
     f.  Capwap protocol
     g. ACS
To study them, there are three magic tools, "wired / wireless capture", "debug" and "sequence".  In other words, using capture and debug to understand the sequence.  Of course, in this blog I will teach you how to capture and debug :).
CCIE wireless blueprint: http://www.cisco.com/web/learning/exams/docs/ccieWireless_Lab.pdf

3. Exercise, exercise and exercise.
In lab exam, you can operate WLC / AP from GUI, but do not expect it. This is because GUI speed is not good and there are a lot of things in lab exam. Do CLI as soon as you can ! -- I think this is the only way to up your speed.  Once you are good at CLI, I think you will love it.

Good luck !