About Course

ARCHITECTURE

• Explain the different design principles used in an enterprise network
• Analyze design principles of a WLAN deployment
• Differentiate between on-premises and cloud infrastructure deployments
• Explain the working principles of the Cisco SD-WAN solution
• Explain the working principles of the Cisco SD-Access solution
• Describe concepts of wired and wireless QoS
• Differentiate hardware and software switching mechanisms

VIRTUALIZATION

• Describe device virtualization technologies
• Configure and verify data path virtualization technologies
• Describe network virtualization concepts

INFRASTRUCTURE

• Layer 2 Technology:
• Troubleshoot static and dynamic 802.1q trunking protocols
• Troubleshoot static and dynamic EtherChannels
• Configure and verify common Spanning Tree Protocols (RSTP and MST)
• Layer 3 Technology:
• Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. linked state, load balancing, path selection, path operations, metrics)
• Configure and verify simple OSPF environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point and broadcast network types, and passive interface)
• Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships)
• Wireless Technology
• Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference noise,
• band and channels, and wireless client devices capabilities
• Describe AP modes and antenna types
• Describe access point discovery and join process (discovery algorithms,
• WLC selection process)
• Describe the main principles and use cases for Layer 2 and Layer 3 roaming
• Troubleshoot WLAN configuration and wireless client connectivity issues
• IP Services
• Describe Network Time Protocol (NTP)
• Configure and verify NAT/PAT
• Configure first hop redundancy protocols, such as HSRP and VRRP
• Describe multicast protocols, such as PIM and IGMP v2/v3

NETWORK ASSURANCE

• Diagnose network problems using tools such as debugs, conditional debugs, trace route, ping, SNMP, and syslog
• Configure and verify device monitoring using syslog for remote logging 2019
• Cisco Systems, Inc. This document is Cisco Public. Page 3
• Configure and verify NetFlow and Flexible NetFlow
• Configure and verify SPAN/RSPAN/ERSPAN
• Configure and verify IPSLA
• Describe Cisco DNA Center workflows to apply network configuration, monitoring, and management
• Configure and verify NETCONF and RESTCONF

SECURITY

• Configure and verify device access control
• Configure and verify infrastructure security features
• Describe REST API security
• Configure and verify wireless security features
• Describe the components of network security design

AUTOMATION

• Interpret basic Python components and scripts
• Construct valid JSON encoded file
• Describe the high-level principles and benefits of a data modeling language, such as YANG
• Describe APIs for Cisco DNA Center and vManage
• Interpret REST API response codes and results in payload using Cisco DNA
• Center and RESTCONF
• Construct EEM applet to automate configuration, troubleshooting, or data collection
• Compare agent vs. agentless orchestration tools, such as Chef, Puppet,
• Ansible, and SaltStack

LAYER 3 TECHNOLOGIES

• Layer 3 Technologies
• Troubleshoot administrative distance (all routing protocols)
• Troubleshoot route map for any routing protocol (attributes, tagging, filtering)
• Troubleshoot loop prevention mechanisms (filtering, tagging, split horizon, route poisoning)
• Troubleshoot redistribution between any routing protocols or routing sources
• Troubleshoot manual and auto-summarization with any routing protocol
• Configure and verify policy-based routing
• Configure and verify VRF-Lite
• Describe Bidirectional Forwarding Detection

Troubleshoot EIGRP (classic and named mode)

• Address families (IPv4, IPv6)
• Neighbor relationship and authentication
• Loop-free path selections (RD, FD, FC, successor, feasible successor, stuck in active)
• Stubs
• Load balancing (equal and unequal cost)
• Metrics

Troubleshoot OSPF (v2/v3)

• Address families (IPv4, IPv6)
• Neighbor relationship and authentication
• Network types, area types, and router types
• Path preference

Troubleshoot BGP (Internal and External)

• Address families (IPv4, IPv6)
• Neighbor relationship and authentication (next-hop, mulithop, 4-byte AS, private AS, route refresh, synchronization, operation, peer group, states and timers)
• Path preference (attributes and best-path)
• Route reflector (excluding multiple route reflectors, confederations, dynamic peer)
• Policies (inbound/outbound filtering, path manipulation)

VPN Technologies

• Describe MPLS operations (LSR, LDP, label switching, LSP)
• Describe MPLS Layer 3 VPN
• Configure and verify DMVPN (single hub)

Infrastructure Security

• Troubleshoot device security using IOS AAA (TACACS+, RADIUS, local database)
• Troubleshoot router security features
• Troubleshoot control plane policing (CoPP) (Telnet, SSH, HTTP(S), SNMP,
• EIGRP, OSPF, BGP)
• Describe IPv6 First Hop security features (RA guard, DHCP guard, binding table, ND inspection/snooping, source guard)

Infrastructure Services

• Troubleshoot device management
• Troubleshoot SNMP (v2c, v3)
• Troubleshoot network problems using logging (local, syslog, debugs, conditional debugs, timestamps)
• Troubleshoot IPv4 and IPv6 DHCP (DHCP client, IOS DHCP server, DHCP relay, DHCP options)
• Troubleshoot network performance issues using IP SLA (jitter, tracking objects, delay, connectivity)
• Troubleshoot NetFlow (v5, v9, flexible NetFlow)
• Troubleshoot network problems using Cisco DNA Center assurance (connectivity, monitoring, device health, network health)