
Section 01 :
1. Course Introduction
2. What is Cloud Computing
3. Physical Cloud Data Center
4. Common Cloud Characteristics
5. Measured Services
6. Around the Corner Agile, Cloud-Scale Applications, and DevOps
7. 07 Chapter 02 Service Providers and Information Technology
8. 08 Service-Level Agreement
9. 09 Infrastructure as a Service
10. Platform as a Service
11. SaaS & XaaS
Section 3: Cloud Heights: Deployment Models
12. Public Clouds
13. Private Cloud
14. Community & Hybrid Clouds
15. Cisco Intercloud
Section 4: Behind the Curtain
16. Cloud Portal Cisco Prime Service Catalog
17. Cloud Orchestrator
18. Cloud Meter
19. Cloud Journey , Consolidation , Virtualization , Standardization &
Automation
20. Orchestration, Application Programming Interfaces , RESTful APIs
21. Around the Corner OpenStack
22. Introduction to Servers and Operating Systems
23. Server Virtualization History & Hypervisors
24. Virtual Machines & Hypervisors Architecture
25. Server Virtualization Features
26. Cloud Computing and Server Virtualization
27. What is Server ?
28. What is Virtualization ?
29. Types of Hyper-visors
30. Virtual Machine
31. Hypervisior Architecture
32. Server Virtualization Features
33. Virtual Machine Installation
34. Cloning Virtual Machines and Using Templates
35. Search & Delete Option
36. What is vSphere Availability
37. vSphere High Availability Lab
38. Enable Distributed Resource Scheduler DRS
39. vSphere Monitoring and Performance Slides
40. vSphere Monitoring and Performance Lab
Section 3: Virtual Machine Networking
41. Virtual Machines Networking
42. VMware vSphere Port Group & vSS
43. vSwitch0 or Standard Switch Lab
44. Port Group Properties
45. Introduction to Distributed Virtual Switch
46. Distributed Virtual Switch Walk-through
47. Create Distributed Port Group
48. Create new Distributed Virtual Switch
Chart a ccna to ccie journey by building deep data center expertise and broad skills in security, routing, and switching; embrace sdn, dna, and automation to boost talent-based career growth.
Identify high-demand areas for data center professionals, with cybersecurity, networking, cloud data center, virtualization, and programming as core skills; emphasize continuous learning and adaptability as keys to hiring trends.
Learn cloud computing fundamentals and virtualization for data center networks, covering cloud shapes, service models, deployment models, and VM networking with distributed virtual storage and virtual switching system.
The lecture outlines cloud characteristics such as on-demand self-service, rapid elasticity, resource pooling, and broad network access, and shows how cloud provisioning contrasts with traditional IT infrastructure.
Learn how measured services in cloud computing use visibility and monitoring to ensure accurate billing and latency-aware, multitenant access across IaaS, PaaS, SaaS and public, private, community, hybrid deployments.
Analyze customer requirements, plan infrastructure across applications and networks, and iteratively design, build, test, and operate cloud and data center solutions that adapt to changes and SLA needs.
Explore service level agreements, defining performance, uptime, mean time to recover, and data handling practices to ensure confidentiality, integrity, and privacy in cloud storage and related services.
Explore infrastructure as a service, where providers offer virtualization, servers, storage, and networking, while you deploy apps on your OS; AWS leads with regions, elastic compute, storage, and DNS services.
Explore platform as a service, where the provider offers the operating system and infrastructure software, while you run your app on Azure.
Explore SaaS, provider responsibilities, and the anything-as-a-service evolution, with examples like Google Docs and Cisco, backup as a service, disaster recovery as a service, and VPN as a service.
Compare public and private clouds, focusing on cost, control, and security, and examine how Amazon VPC enables a private cloud inside the public infrastructure.
Connect private and public clouds using Cisco Intercloud, leveraging cloud fabric director, cloud switch, and virtual security gateway to secure data and support internet of things, sensors, and big data.
Orchestrate heterogeneous data centers with physical and virtual compute, storage, and networking from multiple vendors, defining application profiles and containers, secure multi-tenant environments, metering, automation, and chargeback.
Explore how the cloud meter in a cloud software stack receives orchestration notifications, measures resource usage, and supports chargeback with on-demand and billing reports.
Explore the cloud journey workflow from consolidation to orchestration, detailing how resource sharing, virtualization across compute, storage, and network, standardization, and automation reduce manual errors and enable rapid migration.
Explore how orchestration drives cloud migration and automation using REST APIs to configure devices, manage inventory, and monitor networks with Python-enabled, API-driven tools.
Explore type one bare-metal and type two hypervisors, their hardware efficiency, and how virtualization supports reduced costs, redundancy, and faster provisioning for robust data center management.
Explore how virtual machines run on a hypervisor, sharing virtual CPU, memory, and storage. Examine VM file structures and extensions like dot vm and swap, using a Linux VM.
Highlight server virtualization features, including vm motion migration, high availability, fault tolerance, snapshots, cloning, and templates, plus resource load balancing, disaster recovery, and efficient storage provisioning.
Install a virtual machine on ESX by creating it from template, configuring data center, datastore, compatibility, and guest OS, then boot, remote into the VM, and perform a minimal install.
Demonstrate cloning virtual machines to create reusable templates, then deploy new VMs from those templates with hardware, storage, and OS customization settings.
Create and clone web server templates, then convert them into virtual machines for deployment. Use the extensive search to locate assets and manage storage and disk deletions.
Explore how vSphere availability uses a master–slave cluster to monitor protected virtual machines, restart them on alternative hosts, and automatically elect a master during failures.
Enable vSphere high availability, configure host failure responses and restart policies, and monitor heartbeat to optimize failover capacity and VM protection in a resilient cluster.
Enable distributed resource scheduler drs to automatically migrate vms between hosts based on resource utilization, and monitor cpu, memory, and network utilization with automation levels and alarms.
Explore vSphere monitoring and performance using vrealize and the vSphere client to track cpu, memory, network, and vm health in real time and history.
Explore virtual machines networking and learn how hypervisors control the physical network adapter, how VM traffic flows north-south and east-west through virtual switches and port groups with uplinks.
Learn how VMware vSphere port groups and the vSS standard switch organize interfaces into a support group with common properties and policies, and compare creating standard versus distributed virtual switches.
Explore configuring vSwitch0 and standard switches, understanding standard vs distributed virtual switches, vm kernel adapters, uplinks, port groups, and control plane vs data plane traffic.
Master port group properties, including security settings (promiscuous mode, mac address changes), traffic and bandwidth settings with burst buffering, and diverse load-balancing and failover options with network failure detection.
Explore the distributed virtual switch walkthrough to learn how to configure properties, topology, and features like net flow, port mirroring, and health checks within a distributed switch.
Begin with section 1.1 to cover link aggregation and the idea of a virtual channel and personal, taking each topic one by one.
Configure and verify a multi-layer VPC on Nexus switches, including a keep-alive management interface, domain peers, member links, and downstream switches, and analyze non-VPC connections using the S2P protocol.
Correcting a misconfigured VPC domain, the lecture explains dual active mode detection and the shutdown behavior, and demonstrates convergence and verification to restore a healthy VPC.
Explore how EtherChannel port aggregation with LACP bundles multiple interfaces to raise throughput, with per-application load balancing and manual or dynamic channel formation.
Demonstrates configuring an etherchannel using manual and LACP methods, defining interface ranges and channel groups, verifying status, and troubleshooting with logs and protocol details.
Learn to create and assign vlans on switches, configure access and trunk ports with 802.1Q trunking, and enable inter-vlan routing via a gateway to reduce broadcast domains and improve security.
Configure DTP to form trunks between switches by selecting encapsulation and manual or dynamic negotiation, with modes dynamic desirable and dynamic auto, and verify with commands.
Explore the aci policy model from tenants and bridge domains to application profiles, epgs, contracts, and filters. See how interface policies and switch profiles connect physical and virtual networks.
Explore bare metal lab setup for traditional Nexus connectivity inside an ASA, and configure interfaces, VLANs, trunks, and policy groups, domains, and pools to mirror Nexus configurations.
Explains the rapid spanning tree protocol and its faster convergence. Examines root bridge roles, designated ports, blocking, and port fast concepts.
Explore topology change notification in RSVP networks, where switches generate BPDU updates to speed convergence and ports move to forwarding via port fast, aided by uplink fast and backbone fast.
Engage in a rstp lab to configure three switches, enable rapid spanning tree, and verify root bridge, designated ports, and port states (blocking and forwarding) across the topology.
Configure and verify MST multiple spanning tree mappings by creating and naming instances, assigning ranges, and adjusting priorities to determine the route in the MST lab.
Learn how OSPF forms neighbor relationships, elects a DR/BDR, and synchronizes databases through hello packets and LSA exchanges, with hands-on lab steps in area zero networks.
Explore the OSPF network types, including point-to-point, point-to-multipoint, broadcast, and non-broadcast, and the role of metric and passive-interface in forming neighbor relationships and SPF decisions.
Perform an ospf lab to configure network types and metric across area zero and area twenty, set passive interfaces, and establish adjacency across broadcast, point-to-point, and non-broadcast links.
Explore configuring OSPF authentication at area zero and interface level, including authentication keys, and demonstrate virtual links to connect non-directly connected areas.
Engage in a hands-on OSPF authentication and virtual link lab, configuring Area zero, Area one, and Area two, and implementing plaintext or key-based authentication to connect the areas.
Explore OSPF area types from backbone area zero to areas one and two, learn route summarization, default routes, and the role of not-so-stubby areas and type seven to five conversions.
Explore OSPF area types and LSA types 1–2 and 3–5, and learn how default routes are generated and advertised for external networks, including forcing with the always command.
Perform an OSPFv3 lab on IPv6 routers, configure area zero, enable IPv6 unicast routing, and verify SPF, database, and prefixes across multiple interfaces.
Explore the IS-IS routing protocol, its area-based architecture with L1/L2 routers and IPv6 addressing, plus its partial updates and Dijkstra-based path selection.
Explore IS-IS types and topology exchanges, including hello and LSP packets, to build topology and routing tables. Understand L1/L2 backbone, area roles, and authentication.
Explore basics of BGP, its use cases, and how pod selection works within BGP, equipping you with essential BGP skills for data center networking.
perform a bgp basic lab to establish ibgp and ebgp sessions, verify directly connected neighbors, and monitor open and update exchanges with debug ip bgp and show commands.
continue the BGP basic lab, focusing on iBGP vs eBGP, by fixing the VCP to 200 and confirming assembly and QIP VCP are up, then review other basic configurations.
Explore bgp neighbors and synchronization in a lab, verify neighbor details, and understand the bgp synchronization rule, ibgp mesh considerations, and disabling synchronization with no synchronization.
In this BGP neighbor and synchronization lab, learners configure and verify BGP peers across a multi-device EVC/overlay network, set timers and passwords, and confirm neighbor establishment and routing readiness.
Execute a BGP route reflector confederation and peer groups lab, configure a peer group and reflection clients, and verify route propagation using ip bgp and related commands.
Understand how BGP best path selection uses weight and local preference to determine inbound and outbound paths and steer traffic between two ISPs through route maps and prefix lists.
Explore hands-on bgp best path selection in a multi-autonomous system lab, using route maps, prefix lists, and local preference to steer next-hop decisions.
Cover BFD, FHRP, and multicast protocols in this final session, completing the section on these topics.
Learn how bidirectional forwarding detection enables fast failure detection across media types, encapsulation, and topologies, with asynchronous mode, configurable intervals, and multipliers to speed convergence and profiling.
Explore VRRP, the virtual router redundancy protocol, highlighting how virtual IPs, priorities, and authentication enable active and backup roles and manual load balancing across groups.
Learn multicast basics, contrast unicast and multicast routing, define group joining and source-based routing, and cover IPv4 multicast addressing, MAC mapping, and RPF concepts.
Explore how IP multicast routing combines IGMP, multicast protocols, and IGPs to form source-based trees, prune and flood links, and manage membership reports using ICMP versions 1–3 and source-based filtering.
Understand protocol independent multicast (PIM) and compare dense mode flood-and-prune with sparse mode RP-based efficiency, including pruning, rendezvous point selection, and ACL-based RP mapping for bandwidth savings.
Verify protocol independent multicast PIM operation by examining rendezvous point, upstream and downstream interfaces, and flags; practice IP PIM commands to monitor multicast sources, group addresses, and RPF paths.
Explore data center fabric infrastructure in Asia, covering physical fabric components, fabric discovery, fabric policies, and internet policy, with security monitoring topics and virtual networking.
Explore ACI hardware topology and EPIC deployment options across generations 1–3, including Cisco Integrated Management Controller, redundancy with three-EPIC clusters, bonded interfaces, fabric connectivity, and out-of-band management.
Discover ACI hardware topology with Nexus 9000 switches, jazzes versus ASA mode, line cards, fabric architecture, and supervisor engines shaping throughput and scalability.
Learn the ACI bring-up process by configuring NIC bonding with bond zero for inbound and bond one for management, and obtaining a dynamic IP from the fabric.
Discover how to set up an ACI fabric: provision spine-leaf devices, configure IP and management settings, and auto-discover serial numbers, hostnames, and ISIS routing topology.
Explore fabric access policy in the ACA fabric, showing underlay and overlay, and how endpoint, virtual networks, templates, and contract shape the physical-to-logical connection.
Explore bare metal lab connectivity between traditional Nexus networks and ASA. Map VLANs, trunks, and host interfaces to ACI concepts like interface policies, domains, and VLAN pools.
Configure interface policies, policy groups, and attachable entity profiles in the aca lab, define physical domains and will pool, build a bank tenant with an application profile and endpoint groups.
Create an application profile with web epg and bridge domain, then map static ports and subnets, enabling unicast routing and icmp snooping.
Illustrates how to create and link app and web endpoint groups within a bridge domain, define contracts and filters, and apply provider-consumer relations to enable cross-EPG communication.
Explore fault management, event records, and audit logs in Nexus, distinguish direct versus indirect faults, and use the system dashboard to verify details and apply resolutions.
Explore the Cisco UCS architecture, detailing blade servers in chassis, io modules, fabric interconnects, network adapters, and the UCS manager for centralized control of east-west and north-south traffic.
This lecture explains the UCS bring-up process, connecting FI-A and FI-B via console, configuring independent control planes, setting up a new fabric with management IPs, and logging into UCS Manager.
Explore the UCS dashboard to navigate equipment, servers, fabric interconnects, and ports; review policies, service profiles, and maintenance settings to manage faults and environmental status.
Explain how a service profile captures server attributes like memory, processing, and storage. Describe how templates and a service provider apply policies and enable cloning and pools in networking.
Explore how to configure and manage UCS service profiles, from fabric interconnects and domain creation to VM networks and policy templates, including maintenance, association, and IQN DNS considerations.
Create and attach a service profile from a service provider template in the UCS manager, then build service profiles from templates and configure storage, local configuration, and networking policies.
Attach and validate a service profile to a blade server in this lab, review policies (global, local, storage, network), and verify the FSM state and running status.
Create pools, policies, and templates; build a service profile, attach to blade servers, and explore the networking tab, including U.S. policy and mac pool options.
Learn UCS network management 2 by configuring pools, policies, and service profiles, deploying blade servers, and monitoring FSM status through the Cavium console to bring up hardware.
Explore storage area networks and fibre channel terminologies such as WWN, FCI, and domain-area-port structures for mapping storage paths and building the logical routing table.
Explore hyper converged infrastructure and hyper flex, combining networking, compute, and storage with software defined networking and storage, using a three-node fabric for resilient virtualization.
Explore storage area networks and vHBAs, including how nic/hba cards connect servers to fabric channels, mezzanine cards and PCI Express form factors, and zoning rules that map hosts to storage.
Examine storage area network basics through Fibre Channel architecture, fabric channel concepts, host storage connections, and the role of fabric switches and FC/FCP protocols.
Explore fiber channel topologies, including point-to-point and switch fabric, showing how a server initiator connects to storage targets. Explain FC addressing with WWN and IP-like logical addresses across fabric ports.
Explore how fiber channel san fabrics map servers to storage, implement routing protocols with equal-cost multipath, and apply mac-based layer-2 routing and flood-based learning for discovery in data center fabrics.
Explore SAN data center concepts from FLOGI and PLOGI to zoning and VSAN, learning how port login and WW port name discovery enable secure, credit-based traffic and end-to-end fabric logging.
Learn how to create device aliases to map worldwide names to friendly names, enabling consistent, user-friendly identification across fabric replication and easier troubleshooting.
Explore san npv and npiv concepts to scale fabric by using node port virtualization, enabling multiple fci assignments and proxying in a fibre channel fabric for hosts and switches.
San port-channel and zoning are configured in dcNM, creating port-channels and assigning interfaces. Verify zoning by defining zone members, initiator, and target, then monitor activation and configuration status.
Explore FCoE, Fibre Channel over Ethernet, its end-to-end deployment, and the converged network adapter architecture that enables lossless transport by encapsulating Fibre Channel frames over Ethernet.
Explore FCoE part 02, highlighting high-performance FC offload, enhanced iConnect PCI Express, input virtualization (PIV), a complete network stack, and boot from SAN with converged network adapters.
Learn end-to-end FCoE configuration on Nexus 5K, including zero configuration, out-of-band management, and license checks, then set up VPC and map interfaces between storage and server.
Configure fcoe with virtual port channels and virtual fibre channels, map initiator and target in the visa database, and activate the Jones Act to control the fabric.
explore data center security and network services, including port security, security features, firewalls and security appliances, and service insertion, with troubleshooting scenarios.
Compare standard and extended acls and how they match destination, protocol, and fields. Apply them on ingress or egress interfaces, using wildcards to permit or deny networks.
Configure standard and extended ACLs, convert to named ACLs, and apply permit and deny rules on interfaces to manage loopback and host reachability in a data center lab.
This extended ACL lab demonstrates creating and applying an extended ACL to permit specific IP sources to selected destinations, with implicit denial.
Learn how private VLANs segment broadcast domains by creating a primary VLAN with secondary VLANs, using community and isolated types, and designating promiscuous gateways to control inter-VLAN communication.
Aci contracts govern communication between epg groups, using enforced or unenforced policies, micro segmentation, and provider–consumer rules with filters and subjects.
Explore the AAA framework—authentication, authorization, and accounting—along with identity services, policies, and rules for mac-based, 802.1x, and EAP authentication across wired, wireless, and VPN access.
Learn how access is controlled with ICE by authenticating endpoints over wired, wireless, and vpn using eap over lan and radius, and manage identities and policies via its dashboard.
Configure AAA and LDAP integration by creating a provider, defining group map rules, and applying them in Tripoli policies and login domains.
Explore policy-based routing and redirection, and advance into fabric connectivity with L3 transit routing and related protocols and mechanisms.
Execute an Ansible playbook to build L4 and L7 services, creating the application profile and endpoint group within a tenant and configuring eminent domain associations.
Understand the basics of management, including out-of-band management, and follow the reordered, management-first sequence for section six in this CCIE Data Center (v3.0) technical classes course.
Log into the fabric and create node management to enable out-of-band management. Configure the ip address, gateway, and external management network instanced profile with provider and consumer contracts.
Configure syslog logging by creating a log source and definition group, then set up local and remote destinations with chosen severity levels to monitor call home events and security logs.
Implement an SNMP configuration lab by creating an SNMP destination, building a filter and contract, and deploying an SNMP policy and profile for out-of-band management.
Learn how to configure ACI flow telemetry export, covering prerequisites in the fabric, BGP and AP configuration with a GTP contract, and connecting to an external collector.
Explore data plane packet capture using span, rspan, and erspan technologies, configure the source and destination, extend across layers, and analyze with Wireshark.
Configure a span port to mirror traffic from the source to the destination, capture packets with a sniffer, and analyze them with Wireshark to verify and inspect icmp traffic.
Explore configuring access span in the ACA fabric, including source interface, destination, tenant, application (EPG), and IP prefixes for monitoring traffic across the fabric.
Configure the date-and-time policy in Cisco ACI fabric policies, create and assign it to a policy group, enable authentication, and designate a preferred NTP server.
Explore ASA, cuba's quality of service, and ecorp; learn QE fundamentals and how to apply them inside your fabric, then create COP policies and review Ishikawa and land use.
Understand why quality of service is needed to manage congestion and packet loss. Classify traffic and map it to dscp values across Cisco hardware for end-to-end delivery.
Learn qos design and implementation across hardware, classify and mark traffic, map class of service costs, and apply policy maps to enforce high-priority traffic.
Design and implement qos across platforms by mapping 12 classes to priority queues with thresholds. Incorporate congestion avoidance and nexus mappings for efficient traffic management.
Learn how CAQ classification marking enforces QoS across Nexxus hardware in the fabric, applying ingress and egress policing and mapping marked traffic to EPG policies.
Explore the ACI QoS concepts, including condition management, deficit-based dequeue, and priority queuing within fabric and access policies, with emphasis on random early detection and congestion notification.
Learn to protect the control plane by creating and applying CoPP policies with policy maps and class maps, configuring traffic policing for ICMP redirects, multicast, and other control plane traffic.
Explore data center automation and orchestration as section 7.0 starts, focusing on the ASA object model APIs, Ansible basics, and Nexus switch automation with Python-driven playbooks.
Explore the ACA object model, where every element is a managed object in a tree, with logical, result, and concrete models guiding API-driven configuration to hardware, and understand object relationships.
Explore the ACI object model, policies, and relational object structures, then learn to query via GUI and review API and Python SDK documentation.
Install Ansible across Linux flavors using the official installation guide, with the pip command and system checks, then run an Ansible playbook to verify the setup.
Use a Python program to log into Nexus devices, enable the nxapi feature via a feature and API command, and run multi-host commands with Ansible-style connections.
Edit a python program to add nxapi feature, insert lines, comments, and time.sleep, then run and verify output from a remote server via ansible.
Explore how automated nxapi enables off-box management of Nexus devices using post-based transport, token authentication, and interface enablement to configure devices.
This lecture demonstrates using conditions and loops to set interface descriptions across ranges 1–5, 6–10, and 11–15 with an external variable and a playbook.
This lecture demonstrates converting raw command outputs into a Jinja2 format for Ansible playbooks, using variables, templates, and inventory data to generate structured interface facts and outputs.
Create and group host variables and group variables within an ansible inventory. Call features for deftest and production in the main program to orchestrate Nexus One and Nexus Two.
Learn to configure an Ansible playbook with groups and hosts, set hostnames, enable features, and manage transport and group variables across devices.
Create bridge domains with an Ansible playbook by defining inventory, external variables, and tasks, then deploy and verify the bridge domains and lab setup on the controller.
Create contracts with an Ansible playbook by configuring inventory and hosts, defining credentials, and listing contract items; run the playbook, validate certificates, and verify contracts in the epic controller.
Create an application profile and endpoint group with an Ansible playbook, defining inventory and variables, then verify the AP controller shows a three tier web app in the fabric.
Learn CNM orchestration and discovery within the storage area network, review related CNM lab videos, and explore an API video that completes this section.
Power up all lab interfaces to initialize the fabric and start the flogger process; observe CACP routing and initiator–target mappings in the flogger database.
Learn to perform basic san discovery and inventory with cnn management tools, discover mda switches, verify topology, and enable san collection to monitor fabric health via dashboards and reports.
learn to configure san dcnm port-channel and zoning by creating a port-channel, selecting interfaces, activating the zone, and verifying initiator and target connectivity.
Explore how the DCNM API enables configuring, updating, and automating networking, storage, and compute, via REST methods (put, post, get, delete) and Python integrations from the API docs.
Apply baseline configuration and policy to UCS Director to unify management of storage, compute, and network in a data center, deploy ESX hosts, and verify with NetApp and VMware.
Explore the basics of Intersight and learn how to claim devices and perform operations within the platform by following the playlist from video 104 to 111.
Learn Cisco Intersect architecture and cloud management, combining cloud-based and on-premises control of UCS and HyperFlex with telemetry, analytics, policy orchestration, and continuous integration for continuous upgrades.
Navigate the cloud-based dashboard to monitor health, inventory, and licenses across hyper flex clusters and fabric interconnects; explore alerts, search, and settings from a unified single pane of glass.
Learn how to manage UCS Manager via Intersight, launch UCS Manager instances, create and verify policies, and build service profiles to apply those policies across servers.
Enable l3 connectivity to outside by using border leaves as gateways, configuring entry and exit interfaces, and running routing protocols like BGP to distribute routes across the fabric.
Demonstrate a L3 outside lab in a fabric by configuring a tenant, external EPG network, and application profile, and creating ICMP contracts between internal and external EPGs.
Introduce Asia multisite concepts with a Scotland scenario, compare multisite theory to Bilderberg, and guide you through 15 videos of complete steps to master ACA multisite technology.
This lecture traces the evolution of the Cisco ACI fabric from single-part to multi-part to multi-site architectures. It highlights independent databases, multisite orchestrator, and the control plane via BGP VPN.
Compare A.S.A. multipart and multi-site architectures, highlighting single database and control plane in multipart versus independent databases and multisite orchestration for disaster recovery and policy enforcement.
Explore multisite architecture with two epi controller clusters managed by a multisite orchestrator, covering translation tables, local-to-destination mappings, L2 stretch, and intercept policies.
Orchestrate multiple sites with an active-active multisite orchestrator, deploying and enforcing policies across the environment. Define templates in the schema to create VRA, EPGs, and enable end-to-end visibility and troubleshooting.
Create and manage users in a multisite orchestrator by assigning roles such as power user or admin, entering user details, and configuring site and tenant permissions.
Configure route reflectors on both epic controllers and establish L3 domains with external domains, enabling BGP route reflection across San Francisco and New York sites.
This lecture guides infra configuration across San Francisco and New York sites, setting IP addresses, boards, oil spill policy, and unicast with multicast deployment and BGP basics.
Continue configuring layer 3 only communication across sites by creating site-specific templates, application profiles, and web epgs, defining subnets, and establishing contracts for cross-site connectivity.
Demonstrates layer 3 only communication across sites using shared services, creating bridge domains and contracts (web to dns) between san francisco and new york, and validating deployment on multisite controllers.
Master the basics of vxlan evpn with a data center lab, a hands-on bgp configuration walkthrough, and a guided playlist of 12 videos.
Explore vxlan basics, including overlay tunnels over an underlay, tunnel endpoints, ethernet/udp encapsulation, underlay routing with ISIS, and equal-cost multipath in a leaf-spine fabric.
Explore vxlan terminologies, including tunnel endpoints, overlay and underlay networks, and encapsulation, and understand how the control plane enables data center interconnect and multi-tenant segmentation.
Explore vxlan encapsulation with the inner and outer headers, udp carrying the vxlan payload, 24-bit vni for 16 million segments, and 50 bytes overhead, using port 4789.
This lecture explains vxlan types, including flood-and-learn, multicast, and replication, and shows how host learning and a BGP control plane optimize data center traffic.
Explore a spine-leaf topology with spine and leaf devices, detailing loopback and point-to-point ip addresses, and verify routing information while preparing to configure ibgp.
Configure multicast to support bomb traffic in vxlan fabric, including broadcast unknown unicast and multicast traffic with a rendezvous point. Enable pim on spine and leaf devices, and verify neighbors.
Configure a vxlan fabric overlay by mapping leaf and spine interfaces, enabling overlay features, and establishing L3 mappings with BGP for VPN connectivity across the anycast forwarding fabric.
Demonstrate end-to-end verification of a vxlan evpn control plane update by configuring leaf and server interfaces and testing connectivity with pings, then validating bgp adjacency and encapsulation.
Configure the border leaf to an external entity, connect the live device to the van router, expand toward internet servers, and verify end-to-end reach via redistribution.
Exam Description: The Cisco CCIE Data Center (v3.0) Practical
Exam is an eight-hour, hands-on exam that requires a candidate
to plan, design, deploy, operate, and optimize complex Data
Center networks.
Candidates are expected to program and automate the network
within their exam, as per exam topics below.
The following topics are general guidelines for the content likely
to be included on the exam. Your knowledge, skills and abilities on
these topics will be tested throughout the entire network lifecycle,
unless explicitly specified otherwise within this document.
The exam is closed book and no outside reference materials are allowed.
1. Data Center L2/L3 Connectivity (20%)
1.1 Layer 2 technologies
1.1.a Link Aggregation
1.1.a i vPC
1.1.a ii PortChannel
1.1.b Tagging/Trunking
1.1.c Static Path binding
1.1.d Spanning Tree Protocol
1.1.d i PVST
1.1.d ii MST
1.2 Routing Protocols and features
1.2.a OSPF (v2 and v3)
1.2.a i Authentication
1.2.a ii Adjacencies
1.2.a iii Network types and Area Types
1.2.a iv LSA Types
1.2.a v Route Aggregation/Summarization
1.2.a vi Route Redistribution
1.2.b ISIS
1.2.b i Adjacencies
1.2.b.i.1. Single area, single topology
1.2.b ii Network types, Levels and Router types
1.2.b.ii.1. NSAP addressing
1.2.b.ii.2. Point-to-point, broadcast
1.2.c BGP
1.2.c i Path Selection
1.2.c ii External and Internal Peering
1.2.c iii Route reflectors and Route Server
1.2.c iv Peer Templates
1.2.c v Multi-Hop EBGP
1.2.c vi Route Aggregation/Summarization
1.2.c vii Route Redistribution
1.2.d BFD
1.2.e FHRP
1.3 Multicast protocols
1.3.a PIM
1.3.a i Sparse Mode
1.3.a ii BiDir
1.3.a iii Static RP, BSR, AutoRP, PhantomRP
1.3.a iv IPv4 PIM Anycast
1.3.a v IPv4 Anycast RP using MSDP
1.3.b IGMP
1.3.b i IGMPv2, IGMPv3
1.3.b ii IGMP Snooping
1.3.b iii IGMP Querier
2. Data Center Fabric Infrastructure (15%)
2.1 Physical fabric components
2.1.a Fabric Discovery
2.1.b Controllers/Network Managers
2.1.c Switches
2.2 Fabric policies
2.2.a Access Policies
2.2.b Multi Tenancy
2.2.c Monitoring Policies
2.3 Tenant Policies
2.3.a Application profiles and EPGs
2.3.b Networking
2.3.c Security
2.4 Fabric Monitoring
2.4.a Faults
2.4.b Events
2.4.c Health indicators
2.4.d Audit Logs
2.5 Virtual Networking
2.5.a vSphere VDS
3. Data Center Fabric Connectivity (15%)
3.1 VRF lite
3.2 L3Out
3.2.a OSPF
3.2.a i Authentication
3.2.a ii Adjacencies
3.2.a iii Network types and Area Types
3.2.a iv Route Redistribution
3.2.b BGP
3.2.b i AS manipulation
3.2.b ii External and Internal Peering
3.2.b iii Route reflectors
3.2.b iv Route Redistribution
3.2.c Transit Routing
3.3 Inter Fabric connectivity
3.3.a Multi-Pod
3.3.b Multi-Site
3.3.c Virtual POD
3.3.d remote Leaf
3.4 Overlays
3.4.a VXLAN EVPN
4. Data Center Compute (15%)
4.1 Compute Resources
4.1.a UCSM Policies, Profiles and Templates
4.1.b Hyperflex
4.2 Compute Connectivity
4.2.a SAN/LAN uplinks
4.2.b Rack server integration
4.2.c Port Modes
5. Data Center Storage Protocols and Features (10%)
5.1 FC and FCoE
5.1.a Zoning
5.1.b NPV/NPIV
5.1.c Trunking
5.1.d Portchannel
5.1.e Load Balancing
5.2 iSCSI
5.2.a Authentication
5.2.b Multipathing
5.3 RoCE v2 over IP Networks
6. Data Center Security and Network Services (10%)
6.1 Security features
6.1.a ACL's
6.1.b First Hop Security
6.1.c Port security
6.1.d Private VLANs
6.1.e Contracts
6.2 RBAC
6.2.a Radius
6.2.b TACACS+
6.2.c LDAP
6.2.d AAA
6.3 Network Services Insertion and Redirection
6.3.a Policy Based Routing
6.3.b Policy Based Redirection
6.3.c Inter VRF communication
6.3.d Route Targets
6.3.e Prefix Lists
6.4 Services
6.4.a Flow/Telemetry Export
6.4.b SPAN
6.4.c SNMP
6.4.d Syslog
6.4.e DHCP
6.4.f NTP/PTP
6.5 Traffic management
6.5.a Queueing
6.5.b Policing
6.5.c Classification/Marking
6.5.d Scheduling
6.5.e CoPP
7. Data Center Automation and Orchestration (15%)
7.1 Data center tasks using scripts (Python and Ansible)
7.1.a Create, Read, Update, Delete using RESTful APIs
7.1.b Deploy and modify configurations
7.1.c Statistics, Data Collection
7.2 Data Center Automation and Orchestration using tools
7.2.a DCNM
7.2.b UCSD
7.2.b i Tasks