CCNP Enterprise: ENARSI 300-410 v1.1

Stay informed with monthly updates as Cisco changes the syllabus; we have already integrated most topics and will add new ones to the course.

Cisco now includes labs in the ENARSI exam, about four to six, so prepare all course labs and practice with Packet Tracer, Gns3, or Cisco Modeling Lab.

Discover the CCNP ENARSI NRC pathway, detailing the mandatory Encore exam and two-exam certification, with topics from routing protocols, redistribution, and VRF to BGP, VPN, MPLS, and security.

Apply OSI-based troubleshooting with top-down, bottom-up, and divide-and-conquer approaches. Document problems, define the issue, and escalate to vendors when needed, using ping, traceroute, and telnet testing as available.

Master common troubleshooting commands for Cisco routers and switches, using show commands, Telnet/SSH remote access, ping and trace routes, and conditional debugging to isolate issues.

Solve a ticket by verifying IP config and gateway, pinging the path, and testing port 443 with telnet from the edge router to locate server vs network issues.

Explore ip addresses, ipv4 and ipv6, classful vs classless subnetting, default masks for a/b/c, private vs public ip, nat, dhcp, apipa, and loopback 127.0.0.1.

Explore routed versus routing protocols and how networks are exchanged globally. Learn distance vector and link-state routing, interior and exterior gateway protocols, and examples like RIP, OSPF, IS-IS, and BGP.

Learn how floating static routes act as backup paths, adjust administrative distance to favor the primary ISP, and configure default routes for multi-ISP failover using packet tracer and gns3.

Learn how routers use the longest match to pick the best route, preferring the highest subnet mask. Verify with hands-on labs, trace routes, and rip configurations.

Explore EIGRP theory with a lab, covering dual algorithm, multicast updates, MD5 authentication, VLSM and CIDR, equal and unequal load balancing, and the three core tables: neighbor, topology, and routing.

Explore EGP metric theory with a lab, showing how bandwidth and delay (K1 and K3) determine the metric and route selection.

Explore eigrp path selection optimization through a lab that demonstrates equal-cost load balancing and how adjusting bandwidth and delay metrics redirects routes.

Explore EIGRP packet theory through a hands-on lab that demonstrates hello, update, acknowledgement, query, and reply packets; learn neighbor discovery, multicast hello, and alternate path queries.

Explore advertised distance and reported distance, define feasible distance, successor, and feasible successor, and practice identifying the best and backup routes in a hands-on lab.

Learn how EIGRP auto summarization aggregates routes to classful networks, why classless subnets require manual summarization, and how to verify using show ip route and show ip protocol.

Master manual summarization by calculating and configuring a summarized route using IP summarization address and subnet mask, and disable auto summary to improve routing stability and efficiency.

Explore how EIGRP equal-cost load balancing distributes traffic across multiple links to the same destination, with default four paths and up to 32 paths via configuration.

Learn how EIGRP performs unequal cost load balancing by multiplying routes with variance, bringing multiple paths into the routing table alongside equal cost routes.

Secure EIGRP using MD5 authentication by creating a common keychain with matching key IDs and strings, and applying authentication on all interfaces to block attackers.

Explore egp stuck in active, where a router queries neighbors for an alternate path and, if no reply within a three minute hold time, removes the route in a lab.

Explore how EIGRP stubs limit query traffic and boost network stability by configuring receive only, connected, static, summary, redistribution, and leak map options.

This lecture explains bidirectional forwarding detection, BFD, a fast protocol to detect link failures in milliseconds and work with OSPF, BGP, IS-IS, EIGRP, and HSRP.

Explore eigrp modes theory with a lab, comparing classic method and name mode introduced in iOS 15. Understand address family IPv4/IPv6, authentication, split horizon, and summarization.

Learn to install eve ng, configure vmware, and use winscp with putty to load router and switch images for a basic ccnp lab (community edition).

Demonstrates installing the eve ng community edition iso on vmware workstation, creating a ubuntu 64‑bit VM, configuring resources, and loading router, switch, and Palo Alto images with the permission command.

Explore practical EIGRP troubleshooting, matching subnet and k values, verifying autonomous system numbers, and checking layer two issues, ACL blocks, multicast traffic, passive interfaces, and timers.

Guide hands-on eigrp troubleshooting labs by verifying arp, as-number consistency, and interface uptime to fix neighborships using show ip route, show ip interface brief, and show run commands.

Explain VRF concepts and the difference between VRF with MPLS and VRF light. Illustrate a lab setup with red and blue VRFs and OSPF configurations to show routing table isolation.

Learn to configure vrf with eigrp in a two-site lab, creating separate vrfs and enabling ip vrf forwarding for isolation between company a and b, validated with show and traceroute.

Explore policy based routing (PBR) to change the next hop for traffic, override routing tables using ACLs and route-maps, and apply it on edge routers in a lab.

Explore how OSPF, an open standard link-state routing protocol, works across areas, backbone area zero, and LSA flooding, with configuration basics, authentication, timers, and equal-cost load balancing.

Configure a basic ospf lab in eveng, building neighbor, database, and routing tables on two routers, using network and interface methods, with area zero and loopback addresses.

Learn OSPF terminology, including backbone area, area borders ABR, internal routers, DR/BDR election, and LSA flooding, to design scalable networks with efficient routing.

Explore DR and BDR concepts in OSPF, including designating routers, backup designated router, election criteria (priority, then router ID), and how they reduce flooding in a lab.

Learn the essential ospf neighbor requirements, including matching hello and dead timers, same mtu, same subnet and area, non-passive interfaces, unique router ids, and consistent authentication.

Explain how the OSPF metric uses cost, computed as reference bandwidth divided by interface bandwidth, with a 100 mb reference bandwidth, and practice with a three-router lab.

Describe the five OSPF packets—hello, database description, link state request, link state update, and link state acknowledgment—and how they form and maintain neighbor adjacency and exchange LSDB information.

Explore the seven OSPF states—dawn, init, two-way, start, exchange, loading, and full—and how adjacency forms, DR/BDR elections, and LSDB exchange drive full database synchronization in lab scenarios.

Explore the five OSPF network types—point-to-point, broadcast, non-broadcast, point-to-multipoint, and point-to-multipoint non-broadcast—along with their timers and DR/BDR roles, and practice verification commands.

Explore OSPF multi-area configurations, backbone area zero, ABR, and virtual links. Learn redistribution with RIP, and how area borders enable inter-area routing in practical labs.

Secure OSPF routing with authentication to prevent unauthorized neighborships and route disclosure. Learn plaintext vs MD5 options, create a keychain, apply it on interfaces, and verify neighborship with show commands.

Explore how OSPF uses LSA to share router and network information and how area types, ABR and DR/BDR roles enable inter-area routing with LSA types one to five and seven.

Configure an OSPF three-router lab to model area zero and area one, redistribute routes, and implement stub, total stub, and non stub area configurations with ABR behavior and LSA types.

Learn how OSPF uses a backbone area for inter-area routing and how to configure a virtual link when backbone connectivity is absent, enabling communication between areas.

Learn how to use OSPF passive interface to suppress hello packets on LAN and ISP links, preventing unnecessary neighborship and improving security.

Explore how OSPF path selection chooses routes when multiple same-destination paths exist, prioritizing intra-area, inter-area, external type 1 and 2, with non-stubby areas demonstrated.

Explore OSPF address family theory and lab practice, contrasting IPv4's version two with IPv6's version three, and learn how address family enables OSPF version three on 15.1+ routers.

Learn practical OSPF troubleshooting with theory and labs, focusing on interface status, neighbor formation, area and subnet consistency, timers, authentication, ACLs, and router IDs.

Troubleshoot administrative distance by comparing routing protocols and adjusting ad values to influence which path installs, using a three-router lab with OSPF, RIP, and EGP and floating static routes.

Learn manual summarization in OSPF, focusing on ABR and ASBR roles and route aggregation. See how reducing the routing table saves memory, bandwidth, CPU cycles, and improves stability.

Explain why auto summarization in EIGRP is unreliable, demonstrate how to disable it, and guide manual summarization using IP summary address on interfaces to create a /21 route.

This lecture demonstrates auto summarization issues in a three-router lab, showing how it creates classful routes from discontiguous subnets, causing confusion; disable auto summarization with no auto summary to fix.

Explore redistribution theory and a hands-on lab showing how a router runs multiple routing protocols, exchanging routes between OSPF and RIP (EGP), with default metrics and loop prevention.

Explore BGP basics: understand border gateway protocol, TCP port 179, and how BGP advertises internal servers on the internet. Contrast iBGP and eBGP, attributes, and manual neighbor configuration.

Explore internal BGP theory and hands-on lab with two routers, configuring IBGP basics, neighbors, networks, and BGP attributes, and analyzing routing, neighbor, and forwarding tables.

This lecture covers ebgp configuration with ttl one and administrative distance twenty, neighbor setup, network advertisement, and route verification using show ip bgp summary and show ip route.

Learn the six BGP neighbor states: idle, connect, active, open, open confirm, and established, and how the TCP handshake and open messages establish a unicast BGP session on port 179.

Examine the four BGP message types. Open messages include version, router ID, and hold time; update messages carry routes and withdrawals; keepalive messages signal; notification messages signal errors.

Learn how to configure BGP active and passive roles, fixing port 179 with transport connection mode to satisfy firewall policies and maintain stable neighbor connections after resets.

Describes BGP timers, with keepalive at 62nd and hold on time three times the value, to adjust timers using BGP timer commands and verify with show ip bgp neighbor.

Illustrates how BGP next hop self fixes reachability when routes traverse BGP peers; apply the next-hop-self command and advertise the in-between network to restore connectivity.

Learn how to use BGP multihop and update-source loopback to establish external BGP sessions over non-direct paths, addressing TTL and reachability issues across two hops.

Explore how BGP peer groups simplify large-scale neighbor configurations, reducing errors and CPU load by applying policies to a group, with update-source loopback and ebgp multihop lab examples.

Learn how BGP uses attributes to select the best path and influence traffic, covering weight, local preference, origin, as-path, next hop, and MD.

Learn to steer a 2.2.2.0/24 route in a three-router bgp lab using weight and route maps, choosing ISP1 or ISP2 as the source.

Explore BGP local preference in a four-router lab with loopback neighborship, update-source loopback, and next-hop self, covering iBGP and eBGP, reachability via OSPF or static routes.

Demonstrates as-path prepending in a three-router BGP lab, using route maps and ACL to manipulate as-path length and steer traffic to the preferred next hop.

Explore a BGP origin lab showing how the origin attribute affects route selection. The network command yields I, redistribution yields ?, and if both appear, I is preferred.

Learn to manipulate BGP MED attributes in a hands-on lab. Use route maps and direct methods to influence path selection among R1, R2, and R3 by adjusting MED values.

Explore how BGP neighbor relationships form over a TCP three-way handshake, emphasize reachability and unique router IDs, and differentiate iBGP and eBGP while practicing with labs and Wireshark.

Configure BGP authentication with MD5 using passwords and keychains to secure neighbor sessions, ensuring both routers share the same credentials; verify sessions and routes with basic show commands.

Explore how BGP synchronization affects iBGP and eBGP, preventing routes learned from a neighbor from being advertised when enabled. Old routers enable it by default; new routers disable it.

Demonstrates how BGP synchronization affects route sharing among neighbors, showing that enabled synchronization prevents routes learned from one neighbor from being advertised to others, with a hands-on lab and verifications.

Explains the iBGP split-horizon rule and how route reflectors, full mesh, or BGP confederation solve the loop avoidance, illustrated by a three-router lab and the need for an IGP.

Explore BGP Confederation theory with a lab, comparing full mesh, route reflector, and BGP confederation to reduce IBGP peers and TCP session load while addressing split horizon rules.

Explore how BGP route refresh preserves sessions while updating policies, comparing hard reset, soft reconfiguration, and route refresh; learn defaults, memory/CPU trade-offs, and when to use each.

Explore a practical BGP route refresh lab, comparing hard resets, soft reconfiguration, and route refresh, showing uptime impact, memory use, and verification with show ip bgp.

Explore configuring BGP address families for IPv4 and IPv6 using multi-protocol BGP in Cisco IOS, with basics of IPv6 routing and advertising networks.

Explore multi-protocol BGP address family configurations for IPv4 and IPv6 in a two-router lab with loopback interfaces. Configure address families, enable IPv6 routing, and verify neighbor sessions and network advertisements.

Learn to configure multi-protocol BGP with IPv4 and IPv6, including setting up interfaces, loopbacks, neighbors, and address family unicast routes, and advertising networks across R1 and R2.

Explore how BGP filtering controls routes advertised or received to improve security and performance. Learn inbound and outbound filtering using ACLs, prefix lists, route maps, and distribution lists.

Learn the basics of dynamic host configuration protocol and the Dora process—discover, offer, request, and acknowledge. Configure dhcp on routers and practice troubleshooting with packet tracer labs.

Configure a DHCP server on a router in EVE-NG, create a DHCP pool with default gateway, DNS, and domain name, and capture the DHCP handshake with Wireshark.

Explore dhcp relay agent theory with a lab, showing how layer 3 devices convert broadcasts to unicast, forward requests to the dhcp server, and relay replies using ip helper address.

Learn practical DHCP troubleshooting theory and lab tickets. Cover connectivity, VLAN, relay agent, and server issues with hands-on checks of IP address allocation and helper configurations.

Explore SNMp theory and lab practice to monitor and manage network devices using a SNMp manager and agents, MIBs, trap messages, and get/set operations with popular NMS tools.

Configure SNMP version 3 with authentication and privacy on the router, using MD5 and ABC passwords, and verify by traps from a loopback interface.

Learn snmp troubleshooting by verifying reachability between the agent and server, checking ports 161 and 162 udp, and ensuring correct community strings, ip addresses, and firewall acls.

Learn how Cisco NetFlow tracks traffic flows, identifies top talkers, and configures router export to a NetFlow server, with lab guidance on version five and nine deployments.

Learn netflow troubleshooting to monitor traffic, identify top talkers, and assess network performance. Verify reachability, firewall and ACL rules, correct netflow server IP and port, and proper configuration.

Understand syslog as a system log, and configure logging to a dedicated syslog server. Interpret log entries with timestamps, severity, and messages.

Configure a syslog server to collect router logs for troubleshooting. Understand log format and severity, and use debug and conditional debug to isolate issues while monitoring remotely.

IP SLA, a Cisco network feature that enables internet protocol service level agreement to measure and monitor network performance using ICMP echo pings and track for failover.

Master device management from console port access to remote management via vty lines, using telnet or ssh, with snmp and ftp/tftp and scp for secure file transfer.

Enable http and https on Cisco ios to manage devices via a web browser, using ports 80 and 443; troubleshoot with IP, credentials, and ACL/firewall checks.

Learn ftp and tftp theory, configuration, authentication, and troubleshooting for backing up, restoring, and upgrading router and switch images, including ports 69, 20, and 21 in a lab.

Cisco DNA Center serves as a centralized controller and digital network architecture. Access a single dashboard to design networks, push policies, monitor health, and remotely manage devices via templates.

Limit router cpu traffic with control plane policing by selecting traffic with acls, mapping to class and policy maps, applying a service policy on the control plane, facilitating troubleshooting.

Explore authentication, authorization, and accounting (AAA) and how centralized servers like Cisco ISE manage access to routers and switches. See a packet tracer lab with tacacs+ and radius and troubleshooting.

Master AAA concepts through a Cisco Ise lab, implementing authentication, authorization, and accounting with TACACS, and configuring R1 and a switch in a VMware setup with logs.

Explore the theory and hands-on lab of access control lists (ACLs), covering standard and extended ACLs, time-based ACLs, top-to-bottom processing, and interface-based application to manage traffic.

Learn to block specific services and allow others in this extended acl lab, using ports and protocols (http 80, https 443, ssh 22) with source and destination filtering.

Learn to create and apply name-based standard and extended ACLs on interfaces, replacing number-based access lists, with remarks and hands-on lab practice.

Configure extended name ACLs by applying near the source, deny ICMP from a PC to a web server while permitting TCP port 80, with logging and resequencing.

Time-based ACLs restrict access to times using absolute or periodic schedules. Define a time range, apply the ACL with the range on an interface, and verify with show access list.

Urpf blocks spoofing by validating the source against the routing table, with strict and loose modes demonstrated in a Cisco router and Kali Linux lab.

Learn how a vpn creates a virtual private network over the internet to securely connect head office and branch offices and remote users, using ipsec encryption, authentication, integrity, and anti-replay.

Explore GRE tunneling as a Cisco-developed generic routing encapsulation that connects head office and branch over the internet, supports multicast, and is secured by layering IPsec for encryption.

Explore cryptography basics, including plaintext, ciphertext, encryption and decryption, and the distinction between symmetric and asymmetric methods; understand hashing, hash values, and algorithms like MD5 and SHA.

Explore how IPsec secures data with confidentiality, integrity, authentication, and anti-replay, through two-phase ike, esp encryption, and crypto maps that tie phase one, phase two, and interesting traffic.

Execute an ipsec lab to configure a site-to-site vpn between head office and branch office using pre-shared keys, crypto maps, and tunnel policies, validating with show commands and encrypted traffic.

Explore dynamic multipoint VPN (DMVPN) theory and lab: hub-and-spoke GRE/IPsec tunnels, NHRP dynamic maps, and three deployment phases enabling scalable spoke-to-spoke tunnels with phase three optimizations.

Explore how multiprotocol label switching forwards IP packets by labels, speeding networks with LDP for label distribution and the roles of provider edge, label switching path, and PHP.

Explains how MPLS forwards packets by labels using LDP, describes MPLS L3 VPN with VRF, RD and RT, and outlines multiprotocol BGP VPNv4 for inter-provider routing between PE and CE.

Learn how split horizon prevents routing loops in distance-vector protocols, and how route poisoning and route tagging with route maps prevent redistribution loops across protocols.

Learn IPv6 fundamentals: 128-bit addresses in eight 16-bit blocks, colon notation, and why IPv6 replaces IPv4; configure stateless and stateful autoconfiguration, anycast, no broadcast, and EUI-64 with IPsec basics.

Explore IPv6 dhcp concepts, including stateful and stateless autoconfiguration, dhcpv6 messages, pool configuration, and security features like binding table, guard, and network discovery inspection.