About Course

NETWORK FUNDAMENTALS

• Explain the role and function of network components
• Describe characteristics of network topology architectures
• Compare physical interface and cabling types
• Identify interface and cable issues (collisions, errors, mismatch duplex, and/or speed)
• Compare TCP to UDP
• Configure and verify IPv4 addressing and subnetting
• Describe the need for private IPv4 addressing
• Configure and verify IPv6 addressing and prefix
• Compare IPv6 address types
• Verify IP parameters for Client OS (Windows, Mac OS, Linux)
• Describe wireless principles
• Explain virtualization fundamentals (virtual machines)
• Describe switching concepts

NETWORK ACCESS

• Configure and verify VLANs (normal range) spanning multiple switches
• Configure and verify interswitch connectivity
• Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)
• Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)
• Describe the need for and basic operations of Rapid PVST+ Spanning Tree
• Protocol and identify basic operations
• Compare Cisco Wireless Architectures and AP modes
• Describe physical infrastructure connections of WLAN components (AP,
• WLC, access/trunk ports, and LAG)
• Describe AP and WLC management access connections (Telnet, SSH, HTTP,
• HTTPS, console, and TACACS+/RADIUS)
• Configure the components of a wireless LAN access for client connectivity using GUI only such as WLAN creation, security settings, QoS profiles, and advanced WLAN settings

IP CONNECTIVITY

• Interpret the components of routing table
• Determine how a router makes a forwarding decision by default
• Configure and verify IPv4 and IPv6 static routing
• Configure and verify single area OSPFv2
• Describe the purpose of first hop redundancy protocol

IP SERVICES

• Configure and verify inside source NAT using static and pools
• Configure and verify NTP operating in a client and server mode
• Explain the role of DHCP and DNS within the network
• Explain the function of SNMP in network operations
• Describe the use of syslog features including facilities and levels
• Configure and verify DHCP client and relay
• Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, congestion, policing, shaping
• Configure network devices for remote access using SSH
• Describe the capabilities and function of TFTP/FTP in the network

SECURITY FUNDAMENTALS

• Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)
• Describe security program elements (user awareness, training, and physical access control)
• Configure device access control using local passwords
• Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)
• Describe remote access and site-to-site VPNs
• Configure and verify access control lists
• Configure Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)
• Differentiate authentication, authorization, and accounting concepts
• Describe wireless security protocols (WPA, WPA2, and WPA3)
• Configure WLAN using WPA2 PSK using the GUI

ARCHITECTURE

• Explain the different design principles used in an enterprise network
• Analyze design principles of a WLAN deployment
• Differentiate between on-premises and cloud infrastructure deployments
• Explain the working principles of the Cisco SD-WAN solution
• Explain the working principles of the Cisco SD-Access solution
• Describe concepts of wired and wireless QoS
• Differentiate hardware and software switching mechanisms

VIRTUALIZATION

• Describe device virtualization technologies
• Configure and verify data path virtualization technologies
• Describe network virtualization concepts

INFRASTRUCTURE

• Layer 2 Technology:
• Troubleshoot static and dynamic 802.1q trunking protocols
• Troubleshoot static and dynamic EtherChannels
• Configure and verify common Spanning Tree Protocols (RSTP and MST)
• Layer 3 Technology:
• Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. linked state, load balancing, path selection, path operations, metrics)
• Configure and verify simple OSPF environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point and broadcast network types, and passive interface)
• Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships)
• Wireless Technology
• Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference noise,
• band and channels, and wireless client devices capabilities
• Describe AP modes and antenna types
• Describe access point discovery and join process (discovery algorithms,
• WLC selection process)
• Describe the main principles and use cases for Layer 2 and Layer 3 roaming
• Troubleshoot WLAN configuration and wireless client connectivity issues
• IP Services
• Describe Network Time Protocol (NTP)
• Configure and verify NAT/PAT
• Configure first hop redundancy protocols, such as HSRP and VRRP
• Describe multicast protocols, such as PIM and IGMP v2/v3

NETWORK ASSURANCE

• Diagnose network problems using tools such as debugs, conditional debugs, trace route, ping, SNMP, and syslog
• Configure and verify device monitoring using syslog for remote logging 2019
• Cisco Systems, Inc. This document is Cisco Public. Page 3
• Configure and verify NetFlow and Flexible NetFlow
• Configure and verify SPAN/RSPAN/ERSPAN
• Configure and verify IPSLA
• Describe Cisco DNA Center workflows to apply network configuration, monitoring, and management
• Configure and verify NETCONF and RESTCONF

SECURITY

• Configure and verify device access control
• Configure and verify infrastructure security features
• Describe REST API security
• Configure and verify wireless security features
• Describe the components of network security design

AUTOMATION

• Interpret basic Python components and scripts
• Construct valid JSON encoded file
• Describe the high-level principles and benefits of a data modeling language, such as YANG
• Describe APIs for Cisco DNA Center and vManage
• Interpret REST API response codes and results in payload using Cisco DNA
• Center and RESTCONF
• Construct EEM applet to automate configuration, troubleshooting, or data collection
• Compare agent vs. agentless orchestration tools, such as Chef, Puppet,
• Ansible, and SaltStack

LAYER 3 TECHNOLOGIES

• Layer 3 Technologies
• Troubleshoot administrative distance (all routing protocols)
• Troubleshoot route map for any routing protocol (attributes, tagging, filtering)
• Troubleshoot loop prevention mechanisms (filtering, tagging, split horizon, route poisoning)
• Troubleshoot redistribution between any routing protocols or routing sources
• Troubleshoot manual and auto-summarization with any routing protocol
• Configure and verify policy-based routing
• Configure and verify VRF-Lite
• Describe Bidirectional Forwarding Detection

Troubleshoot EIGRP (classic and named mode)

• Address families (IPv4, IPv6)
• Neighbor relationship and authentication
• Loop-free path selections (RD, FD, FC, successor, feasible successor, stuck in active)
• Stubs
• Load balancing (equal and unequal cost)
• Metrics

Troubleshoot OSPF (v2/v3)

• Address families (IPv4, IPv6)
• Neighbor relationship and authentication
• Network types, area types, and router types
• Path preference

Troubleshoot BGP (Internal and External)

• Address families (IPv4, IPv6)
• Neighbor relationship and authentication (next-hop, mulithop, 4-byte AS, private AS, route refresh, synchronization, operation, peer group, states and timers)
• Path preference (attributes and best-path)
• Route reflector (excluding multiple route reflectors, confederations, dynamic peer)
• Policies (inbound/outbound filtering, path manipulation)

VPN Technologies

• Describe MPLS operations (LSR, LDP, label switching, LSP)
• Describe MPLS Layer 3 VPN
• Configure and verify DMVPN (single hub)

Infrastructure Security

• Troubleshoot device security using IOS AAA (TACACS+, RADIUS, local database)
• Troubleshoot router security features
• Troubleshoot control plane policing (CoPP) (Telnet, SSH, HTTP(S), SNMP,
• EIGRP, OSPF, BGP)
• Describe IPv6 First Hop security features (RA guard, DHCP guard, binding table, ND inspection/snooping, source guard)

Infrastructure Services

• Troubleshoot device management
• Troubleshoot SNMP (v2c, v3)
• Troubleshoot network problems using logging (local, syslog, debugs, conditional debugs, timestamps)
• Troubleshoot IPv4 and IPv6 DHCP (DHCP client, IOS DHCP server, DHCP relay, DHCP options)
• Troubleshoot network performance issues using IP SLA (jitter, tracking objects, delay, connectivity)
• Troubleshoot NetFlow (v5, v9, flexible NetFlow)
• Troubleshoot network problems using Cisco DNA Center assurance (connectivity, monitoring, device health, network health)

NETWORK INFRASTRUCTURE

Switched campus

• Switch administration
• Layer 2 protocols
• LAN technologies
• Spanning-Tree

Routing Concepts

• Administrative distance
• VRF-lite
• Static routing
• Policy-based routing
• VRF aware routing with any routing protocol
• Filtering with any routing protocol
• Manual summarization with any routing protocol
• Redistribution between any pair of routing protocols
• Routing protocol authentication
• Bidirectional Forwarding Detection

EIGRP

• Adjacencies
• Best path selection
• Operations
• EIGRP load-balancing
• EIGRP named mode
• Optimization, convergence and scalability

OSPF (v2 and v3)

• Adjacencies
• Network types, area types
• Path preference
• Operations
• Optimization, convergence and scalability

BGP

• IBGP and EBGP peer relationships
• Path selection
• Routing policies
• AS path manipulations
• Convergence and scalability
• Other BGP features

Multicast

• Layer 2 multicast
• Reverse path forwarding check
• PIM

SOFTWARE DEFINED INFRASTRUCTURE

Cisco SD Access

• Design a Cisco SD Access solution
• Cisco SD Access deployment
• Segmentation
• Assurance

Cisco SD-WAN

• Design a Cisco SD-WAN solution
• WAN edge deployment
• Configuration templates
• Localized policies (only QoS)
• Centralized policies

TRANSPORT TECHNOLOGIES AND SOLUTIONS

MPLS

• Operations
• L3VPN

DMVPN

• Troubleshoot DMVPN phase 3 with dual-hub
• Identify use-cases for FlexVPN

INFRASTRUCTURE SECURITY AND SERVICES

Device Security on Cisco IOS XE

• Control plane policing and protection
• AAA

Network Security

• Switch security features
• Router security features
• IPv6 First Hop Security features
• IEEE 802.1X Port-Based Authentication

System Management

• Device management
• SNMP
• Logging

Quality of Service

• End to end L3 QoS using MQC

Network Services

• First-Hop Redundancy protocols
• Network Time Protocol
• DHCP on Cisco IOS
• IPv4 Network Address Translation

Network optimization

• IP SLA
• Tracking object
• Flexible netflow

Network operations

• Traffic capture
• Cisco IOS-XE Troubleshooting tools

INFRASTRUCTURE AUTOMATION AND PROGRAMMABILITY

Data encoding formats

• JSON
• XML

Automation and scripting

• EEM applets
• Guest shell

Programmability

• Interaction with vManage API
• Interaction with Cisco DNA Center API
• Interaction with Cisco IOS XE API
• Deploy and verify model-driven telemetry