CCIE Enterprise Infrastructure v1

Address: Sarrinah Enclave, 8-1-40/A/106, Samta Colony, Shaikpet, Hyderabad -

500008, Telangana. Email: [email protected], Phone: +91 99082 43786

Join us for the best CCIE

Enterprise Infrastructure v1.0 training

CCIE Enterprise

Infrastructure v1.0



Basic Switching

Ÿ Switch administration

Ÿ Managing MAC address table

Ÿ Errdisable recovery

Ÿ L2 MTU

Ÿ Layer 2 protocols

Ÿ CDP, LLDP

Ÿ UDLD

Ÿ VLAN technologies

Ÿ Access ports

Ÿ Trunk ports (802.1Q)

Ÿ Native VLAN

Ÿ Manual VLAN pruning

Ÿ VLAN database

Ÿ Normal range and extended range VLANs

Ÿ Voice VLAN

Ÿ VTP

Ÿ EtherChannel

Ÿ LACP, static

Ÿ Layer 2, Layer 3

Ÿ Load balancing

Ÿ EtherChannel Misconfiguration Guard

Ÿ Spanning Tree Protocol

Ÿ PVST+, Rapid PVST+, MST

Ÿ Switch priority, port priority, path cost, STP timers

Ÿ PortFast, BPDU Guard, BPDU Filter

Ÿ Loop Guard, Root Guard

Routing Concepts

Ÿ Administrative distance

Ÿ VRF-lite

Ÿ Static routing

Ÿ Policy Based Routing

Ÿ VRF-aware routing with any routing protocol

Ÿ Route filtering with any routing protocol

Ÿ Manual summarization with any routing protocol



Ÿ Redistribution between any pair of routing protocols

Ÿ Routing protocol authentication

Ÿ Bidirectional Forwarding Detection

EIGRP

Ÿ Adjacencies

Ÿ Best path selection

Ÿ RD, FD, FC, successor, feasible successor

Ÿ Classic Metrics and Wide Metrics

Ÿ Operations

Ÿ General operations

Ÿ Topology table

Ÿ Packet types

Ÿ Stuck In Active

Ÿ Graceful shutdown

Ÿ EIGRP load balancing

Ÿ Equal-cost

Ÿ Unequal-cost

Ÿ Add-path

Ÿ EIGRP Named Mode

Ÿ Optimization, convergence and scalability

Ÿ Fast convergence requirements

Ÿ Query propagation boundaries

Ÿ IP FRR (single hop)

Ÿ Leak-map with summary routes

Ÿ EIGRP stub with leak map

Ÿ Adjacencies

Ÿ Network types, area types

Ÿ Path preference

Ÿ Operations

Ÿ General operations

Ÿ Graceful shutdown

Ÿ GTSM (Generic TTL Security Mechanism)

Ÿ Optimization, convergence and scalability

Ÿ Metrics

Ÿ LSA throttling, SPF tuning, fast hello

Ÿ LSA propagation control (area types)



Ÿ Stub router

Ÿ Loop-free alternate

Ÿ Prefix suppression

BGP

Ÿ IBGP and EBGP peer relationships

Ÿ Peer-group/update-group, template

Ÿ Active, passive

Ÿ Timers

Ÿ Dynamic neighbors

Ÿ 4-byte AS numbers

Ÿ Private AS

Ÿ Path selection

Ÿ Attributes

Ÿ Best path selection algorithm

Ÿ Load balancing

Ÿ Routing policies

Ÿ Attribute manipulation

Ÿ Conditional advertisement

Ÿ Outbound Route Filtering

Ÿ Standard and extended communities

Ÿ Multi-homing

Ÿ AS path manipulations

Ÿ local-AS, allowas-in, remove-private-as

Ÿ Prepend

Ÿ Regexp

Ÿ Convergence and scalability

Ÿ Route reflector

Ÿ Aggregation, as-set

Ÿ Other BGP features

Ÿ Multipath, add-path

Ÿ Soft reconfiguration, Route Refresh

Multicast

Ÿ Layer 2 multicast

Ÿ IGMPv2, IGMPv3

Ÿ IGMP Snooping, PIM Snooping



Ÿ IGMP Querier

Ÿ IGMP Filter

Ÿ MLD

Ÿ Reverse path forwarding check

Ÿ PIM

Ÿ Sparse Mode

Ÿ Static RP, BSR, AutoRP

Ÿ Group to RP Mapping

Ÿ Bidirectional PIM

Ÿ Source-Specific Multicast

Ÿ Multicast boundary, RP announcement filter

Ÿ PIMv6 Anycast RP

Ÿ IPv4 Anycast RP using MSDP

Ÿ Multicast multipath

Ÿ Path selection

Cisco SD Access

Ÿ Design a Cisco SD Access solution

Ÿ Underlay network (IS-IS, manual/PnP)

Ÿ Overlay fabric design (LISP, VXLAN, Cisco TrustSec)

Ÿ Fabric domains (single-site and multi-siteusing SD-WAN transit)

Ÿ Cisco SD Access deployment

Ÿ Cisco DNA Center device discovery and device management

Ÿ Add fabric node devices to an existing fabric

Ÿ Host onboarding (wired endpoints only)

Ÿ Fabric border handoff

Ÿ Segmentation

Ÿ Macro-level segmentation using Vns

Ÿ Micro-level segmentation using SGTs (using Cisco ISE)

Ÿ Assurance

Ÿ Network and client health (360)

Ÿ Monitoring and troubleshooting

Cisco SD-WAN

Ÿ Design a Cisco SD-WAN solution

Ÿ Orchestration plane (vBond, NAT)



Ÿ Management plane (vManage)

Ÿ Control plane (vSmart, OMP)

Ÿ Data plane (vEdge/cEdge)

Ÿ WAN edge deployment

Ÿ Onboarding new edge routers

Ÿ Orchestration with zero-touch provisioning/Plug-And-Play

Ÿ OMP

Ÿ TLOC

Ÿ Configuration templates

Ÿ Localized policies (only QoS)

Ÿ Centralized policies

Ÿ Application Aware Routing

Ÿ Topologies

MPLS

Ÿ Operations

Ÿ Label stack, LSR, LSP

Ÿ LDP

Ÿ MPLS ping, MPLS traceroute

Ÿ L3VPN

Ÿ PE-CE routing

Ÿ MP-BGP VPNv4/VPNv6

Ÿ Extranet (route leaking)

DMVPN

Ÿ Troubleshoot DMVPN Phase 3 with dual-hub

Ÿ NHRP

Ÿ IPsec/IKEv2 using pre-shared key

Ÿ Per-Tunnel QoS

Ÿ Identify use cases for FlexVPN

Ÿ Site-to-site, Server, Client, Spoke-to-Spoke

Ÿ IPsec/IKEv2 using pre-shared key

Ÿ MPLS over FlexVPN

Security and Services

Ÿ Device Security on Cisco IOS XE

Ÿ Control plane policing and protection

Ÿ AAA



Ÿ Network Security

Ÿ Switch security features

Ÿ VACL, PACL

Ÿ Storm control

Ÿ DHCP Snooping, DHCP option 82

Ÿ IP Source Guard

Ÿ Dynamic ARP Inspection

Ÿ Port Security

Ÿ Private VLAN

Ÿ Router security features

Ÿ IPv6 Traffic Filters

Ÿ IPv4 Access Control Lists

Ÿ Unicast Reverse Path Forwarding

Ÿ IPv6 infrastructure security features

Ÿ RA Guard

Ÿ DHCP Guard

Ÿ Binding table

Ÿ Device tracking

Ÿ ND Inspection/Snooping

Ÿ Source Guard

Ÿ IEEE 802.1X Port-Based Authentication

Ÿ Device roles, port states

Ÿ Authentication process

Ÿ Host modes

Ÿ System Management

Ÿ Device management

Ÿ Console and VTY

Ÿ SSH, SCP

Ÿ RESTCONF, NETCONF

Ÿ SNMP

Ÿ v2c

Ÿ v3

Ÿ Logging

Ÿ Local logging, syslog, debugs, conditional debugs

Ÿ Timestamps



Ÿ Quality of Service

Ÿ End to end L3 QoS using MQC

Ÿ DiffServ

Ÿ CoS and DSCP Mapping

Ÿ Classification

Ÿ Network Based Application Recognition (NBAR)

Ÿ Marking using IP Precedence, DSCP, CoS

Ÿ Policing, shaping

Ÿ Congestion management and avoidance

Ÿ HQoS, Sub-rate Ethernet LinkŸ

Ÿ Network Services

Ÿ First Hop Redundancy Protocols

Ÿ HSRP, GLBP, VRRP

Ÿ Redundancy using IPv6 RS/RA

Ÿ Network Time Protocol

Ÿ Master, client

Ÿ Authentication

Ÿ DHCP on Cisco IOS

Ÿ Client, server, relay

Ÿ Options

Ÿ SLAAC/DHCPv6 interaction

Ÿ Stateful, stateless DHCPv6

Ÿ DHCPv6 Prefix DelegationŸ

Ÿ IPv4 Network Address Translation

Ÿ Static NAT, PAT

Ÿ Dynamic NAT, PAT

Ÿ Policy-based NAT, PAT

Ÿ VRF-aware NAT, PAT

Ÿ IOS-XE VRF-Aware Software Infrastructure (VASI) NAT

Ÿ Network optimization

Ÿ IP SLA

Ÿ ICMP probes

Ÿ UDP probes

Ÿ TCP probes

Ÿ Tracking object



Ÿ Flexible NetFlow

Ÿ Network operations

Ÿ Traffic capture

Ÿ SPAN

Ÿ RSPAN

Ÿ ERSPAN

Ÿ Embedded Packet Capture

Ÿ Cisco IOS-XE troubleshooting tools

Ÿ Packet Trace

Ÿ Conditional debugger (debug platform condition)

Automation and Programmability

Ÿ Data encoding formats

Ÿ JSON

Ÿ XML

Ÿ Automation and scripting

Ÿ EEM applets

Ÿ Guest shell

Ÿ Linux environment

Ÿ CLI Python module

Ÿ EEM Python module

Ÿ Programmability

Ÿ Interaction with vManage API

Ÿ Python requests library and Postman

Ÿ Monitoring endpoints

Ÿ Configuration endpoints

Ÿ Interaction with Cisco DNA Center API

Ÿ HTTP request (GET, PUT, POST) via Python requests library and Postman

Ÿ Interaction with Cisco IOS XE API

Ÿ Via NETCONF/YANG using Python ncclient library

Ÿ Via RESTCONF/YANG using Python requests library and Postman

Ÿ Deploy and verify model-driven telemetry

Ÿ Configure on-change subscription using gRPC

CCIE Enterprise Infrastructure v1

Documents

Transcript of CCIE Enterprise Infrastructure v1