
Access your free ccna security course within the ccnp route boot camp, go to section 12, and watch introductory, attacks and defenses, vpn videos over six to eight weeks.
Compare tcp and udp, noting tcp guarantees delivery with a three way handshake and flow control, while udp offers best effort delivery for lower overhead in voice and video.
Analyze how multiple traffic types require multiplexing across UDP and TCP, review port numbers 69, 25, 80, and examine TCP enhancements such as selective acknowledgments, time stamps, and ECN.
Explore PPP over serial links and PPP over Ethernet, compare encapsulation options, and master PAP vs CHAP authentication, including troubleshooting with debugs and mismatches.
Review 4 explains how hosts use the default gateway, how routers reference the routing table, and how static routes, the ip route command, and administrative distance establish reachability.
Explore the fundamentals of EIGRP, including adjacencies and successors, feasible successors, and rapid convergence, through how the routing, topology, and neighbor tables work with hello packets in an autonomous system.
Explore an EIGRP NBMA frame-relay lab: configure no auto, use wildcard masks, set up loopbacks, verify neighbors, and troubleshoot routing convergence with pings and debug output.
Explore EIGRP loopback advertisements and split horizon in a hub-and-spoke lab, showing how split horizon blocks routing updates and how disabling it affects adjacencies.
Explore how EIGRP determines successors and feasible successors, analyzes multiple paths between routers, and enables equal-cost load balancing through feasible distance metrics in a lab.
Explore how EIGRP handles a broken neighbor: the feasible successor is promoted to successor, topology tables update, and multiple paths to 172.12.23.0 reappear, preparing for unequal cost load balancing.
Discover how the EIGRP variance command enables unequal costs load balancing by using feasible distance to select routes, while keeping metrics unchanged and showing the routing table results.
Explore how EIGRP's DUAL algorithm handles route failure by using feasible successors and neighbor queries, distinguishing active versus passive routes and the impact of a missing feasible successor.
Explore EIGRP packet types and timers, including hello, update, acknowledgment, query, and reply packets, and understand reliable versus unreliable delivery and neighbor discovery.
Learn how per-interface EIGRP hello timers affect neighbor adjacencies; misaligned seven or thirty second intervals can cause flapping, since the hold time is three times the hello time unless changed.
Explore the show ip eigrp neighbor output, examining age, address, interface, uptime, rtt, retransmission timeout, queue, and sequence number to diagnose eigrp adjacencies and distance concepts.
Explore advanced EIGRP distances: learn how feasible distance, advertised distance, and the feasibility condition determine valid, loop-free paths and feasible successors in route optimization.
Explore eigrp concepts of feasible distance, advertised distance, and the feasibility condition to identify feasible successors and manage equal and unequal cost load balancing with variance.
Explore how EIGRP handles default and non-default administrative distances, comparing internal routes (AD 90) with external routes (AD 170), and learn how redistribution and no auto-summary affect routing behavior.
Explore how EIGRP auto summarization affects discontiguous networks and equal costs load sharing, showing why turning off auto summary on specific routers and performing manual summarization improves routing accuracy.
Explore manual EIGRP route summarization by consolidating seven subnets into a single 100.0.0.0/13 summary, using binary bit analysis and a 255.248.0.0 mask, with null0 loop prevention.
Explore how eigrp uses administrative distance 5 for summary routes and how stub routing reduces routing-table size in hub-and-spoke networks, advertising only directly connected and summary routes with stub command.
Discover how to reduce EIGRP traffic by making interfaces passive, verify adjacencies, and use default passive interface settings to apply broadly while selectively re-enabling specific interfaces.
Master EIGRP metric weights by configuring K-values, prioritizing bandwidth and delay, understanding six numeric values, and avoiding mismatches that break neighbor adjacency.
Explore practical eigrp interface design, ip address planning, and bandwidth management for hub-and-spoke networks, including subinterfaces, cir, and bandwidth percent tuning with real-world labs.
Create a default static route and propagate it into eigrp via redistribution, then explore the ip default network approach to originate a gateway of last resort.
Master how to use the ip default network command to advertise a default route in EIGRP, mark a candidate default, and understand related caveats and iOS version quirks.
Demonstrates configuring eigrp authentication with a key chain, setting a key string, applying it on interfaces, and validating adjacency recovery between routers.
Compare rip with ospf, a link-state protocol using lsas and the spf algorithm. Verify adjacencies with show ip ospf neighbor and interface, learn dr, bdr, area numbers, and stub areas.
Explore how OSPF elects a designated router and backup designated router on a broadcast segment, using priorities, router IDs, and loopback addresses to ensure fast convergence.
Explore how OSPF designates a designated router and backup designated router in a three-router broadcast segment, and watch how DR/BDR roles shift when a router goes offline and returns.
Begin building a large ospf network by configuring a broadcast segment between routers 1 and 5, verify adjacency to reach full state, and consider dr and bdr workload.
Learn to configure ospf in an nbma hub-and-spoke network, make the hub the designated router by setting nonhub interface priorities to zero, and verify adjacencies with show ip ospf neighbor.
Build a point-to-point OSPF network by configuring serial links, area zero and area 13, examining neighbors, interface types, and why DR/BDR elections are unnecessary on point-to-point links.
Explore how missing subnets reveal a design rule violation in OSPF: every area must have a router interface in area zero, fixed by a virtual link through transit area 34.
Explore why using multiple OSPF areas, not one big area zero, creates hierarchy, reduces SPF recalculations and LSA traffic, and keeps routing tables concise through area boundaries.
Learn how ospf calculates interface costs from reference bandwidth and interface speed, and adjust costs with auto cost or per-interface settings while keeping reference bandwidth consistent across routers.
Use the bandwidth command to adjust the interface cost for a 56 kbps link, compare OSPF paths, and observe how bandwidth changes influence OSPF routing and QoS settings.
Set and verify an OSPF router ID, understand when changes take effect (reload or clear process), and watch adjacencies restore as the router ID updates, with show ip ospf neighbor.
Analyze how four routers on a broadcast segment form partial OSPF adjacencies and monitor dead times, and explain why full adjacencies don’t occur with four or more routers.
Explore OSPF router types and LSA types, including internal, backbone, ABR, and ASBR, and learn how LSA types 1 through 7 shape areas, redistribution, and database size.
Explore configuring OSPF route redistribution and stub areas to reduce routing table size, injecting loopback networks into the OSPF domain, and understanding external type 2 metrics and next-hop behavior.
Configure OSPF stub and total stub areas by setting the stub flag and no summary on the router, reducing routing table size while preserving a default route.
Learn how to configure not so stub areas (NSSA) in OSPF, create total stub areas, redistribute connected subnets, and manage default and external type 2 routes.
Explore the differences between E-1 and E-2 OSPF external routes, and learn how metrics reflect full path versus seed metric when redistributing routes.
Explore OSPF advanced techniques for route redistribution and route summarization, using area range and summary address commands to optimize ABR routing and inter-area scalability.
Configure OSPF authentication across area zero with the authentication and authentication key commands, understanding type 0, type 1, and type 2 authentication and their impact on adjacencies.
Learn how to configure OSPF MD5 authentication on a hub-and-spoke network, enable message digest keys on interfaces, verify adjacencies, and confirm area 0 security.
Learn how route redistribution moves static and dynamic routes into a separate routing process, set seed metric, and prevent routing loops when OSPF and GOP networks have multiple entrance points.
Redistribute OSPF into RIP version 2 with seed metrics, exploring hop-count metrics, no auto-summary, and practical lab steps to verify routes and connectivity.
Debug and verify one-way route redistribution from router 3 into OSPF using extended ping and debug IP packets, examining E-2 vs E-1 metrics and show IP route results.
Explore how route redistribution can cause suboptimal routing and routing loops, compare RIP and OSPF administrative distances, and verify paths with ping and traceroute.
Learn to adjust administrative distance to make OSPF preferred over RIP using the distance command, for all OSPF routes or specific sources with optional ACLs.
Learn to change the OSPF administrative distance for targeted routes using the distance command, including a source-based RID, a wildcard mask, and an ACL, then verify with routing checks.
Learn how to use the OSPF distance command to change administrative distance for external, intra-area, and inter-area routes, filter with ACLs, and verify results with show commands.
learn how to redistribute eigrp routes, apply default or specific metrics, and adjust administrative distance for internal and external routes, internal 90 and external 170, to influence routing.
Learn to fine-tune redistribution into OSPF with distribute lists and ACLs, permitting all but specific routes (for example 8 and 9), configuring outgoing updates, and verifying results.
Explore how to use a distribute list to filter routes advertised on a given interface in eigrp without breaking adjacencies, and verify with show ip protocols and access lists.
Explore route redistribution with distribute lists in Cisco routers, learn seed and default metrics, apply distribution filters to control rip routes, and analyze impacts on internal and external routes.
Explain how multiple distribute lists coexist, comparing general versus interface-specific ACL filters, and how out/in routing updates interact with redistribution, metrics, and OSPF external types.
Learn to write and verify a route map for redistributing routes from RIP to OSPF, using ACL-based matches to set metrics, route types, and apply a deny and catch-all.
Apply a route-map to redistribute rip routes into ospf, verify by testing before and after, adjust the seed metric and route types, and ensure nonmatching routes fall to default behavior.
Learn how to implement single point two-way route redistribution between RIP and OSPF using route maps and tagging to prevent routing loops, including configuring and verifying with show ip route.
Learn to control route redistribution between RIP and OSPF using route maps, sequence numbers, and a tag 20 denial to prevent routing loops, with verification via show route map.
Study policy routing theory and application with route maps to steer traffic via specific next hops. Practice inbound and local policy routing, standard and extended ACLs, and trace route validation.
Apply extended ACL and policy routing to route traffic from 30.1.1.5 to 4.4.4.4 via 172.12.1.2, while other traffic uses the normal path.
Demonstrates local policy routing on router 1, applying IP local policy globally, testing with trace routes from multiple loopback sources, and validating compatibility with regular policy routing.
Explore the theory of virtual private networks, including IPsec, AH/ESP, IKE, tunnel versus transport modes, and the five steps to establish and tear down a VPN.
Configure ike phase 1 vpn on routers, enable isakmp, define a default and a custom policy with 3des, md5, pre-shared keys, and an 86400-second lifetime, and review how policies match and are prioritized across peers.
Configure a pre-shared key for the remote peer and define a tunnel mode ipsec transform set, then ensure endpoints agree on encryption algorithms and lifetime (300 seconds) for the SA.
Configure and verify an IPsec VPN using crypto ACLs and crypto maps, understanding inbound/outbound traffic, mirror image ACLs, and transform sets for a secure tunnel.
Explore how DMVPN with multipoint GRE and NHRP enables dynamic spoke-to-spoke VPN connections, reducing hub overhead while securing traffic with IPsec.
Explore a VRF lite lab in a router-on-a-stick setup, creating three VRFs mapped to dot1Q subinterfaces to separate traffic across VLANs 2, 3, and 4.
In this VRF lab part 2, we verify per‑VRF routing tables after assigning IPs to sub interfaces and use show ip route vrf to see the instance entries. We then test connectivity with targeted pings and prepare for a bonus OSPF lab.
Configure three OSPF instances in the VRF lab with separate process numbers and areas to establish adjacencies. Advertise loopback interfaces and verify neighbors, while exploring easy virtual networking.
VRF lab part 4 demonstrates ping tests to router loopbacks, confirming connectivity and finishing the VR lab before moving on to IP version 6.
Learn the fundamentals of IPv6, including 128-bit addresses, no broadcasts, and easier route summarization, plus practical compression techniques like zero and leading zero compression.
Discover how IPv6 interface identifiers are automatically created via EUI-64 from MAC address, including the FFE insertion and UL bit handling, and relate it to link-local and global unicast addresses.
Explore IPv6 stateless and stateful autoconfiguration, including link-local address generation, interface identifiers, duplicate address detection, router solicitation and advertisement, and neighbor solicitation messages.
Configure OSPFv3 for IPv6 on Cisco routers, enable IPv6 unicast routing, apply OSPF per interface, set a router-id, and verify adjacencies with show ipv6 ospf neighbor.
Configure OSPFv3 by assigning loopbacks to area 1 and area 5, enable OSPF on interfaces, and verify adjacency and IPv6 reachability with ping and show commands.
Configure ipv6 ospfv3 on a two-router point-to-point network, enable ipv6 on interfaces, set area 14, verify adjacency, and examine routing table entries with router 1 as the next hop.
Configure IPv6 unicast routing and IPv6 OSPF on router 1 and 2 for an NBMA hub-and-spoke network, set router IDs and priorities, establish link-local neighbors, and verify adjacencies and interfaces.
Learn IPv6 route redistribution into OSPFv3 by redistributing connected networks, compare v2 and v3 nuances (subnets, no seed metric), and verify stub area 14 with no summary.
Configure IPv6 EIGRP on routers, assign router-id, form adjacencies, and verify routes with show commands; explore redistribution and default metric while comparing IPv6 EIGRP behavior to OSPF.
Configure RIPng on IPv6 lab routers, enable the process, verify routing with show ipv6 rip, and compare default information originate versus default information only while watching convergence.
Troubleshoot IPv6 OSPF v3 by diagnosing an area zero connectivity issue and implementing a virtual link to restore full adjacency, then verify with show ipv6 ospf and ping tests.
Explore IPv6 migration strategies from IPv4 to IPv6, including dual stacking, six to four tunneling, and translation with NAT64 and DNS64, plus stateless and stateful options, edge-to-core rollout.
Explore standard and extended ACL logic for inbound and outbound traffic, including implicit deny, wildcard masks, host/any usage, and show command verification.
Analyze access-control lists to determine the correct ACL order, distinguishing standard from extended ACLs, and apply specific versus general rules to deny particular sources while allowing others.
Explore extended ACLs by denying traffic from 31.1.0/24 to 4.4.4.4 with ACL 1:44, applied on interface, and verify with show ip access-list, show ip interface, and check ospf adjacencies.
Configure a named ACL to replace the numbered ACL, apply it via an inbound IP access group on an interface, and verify with ping. It also notes logging cautions.
Define time ranges (absolute or periodic) for ACLs and apply them to telnet sessions. Verify activation with show commands and ensure clocks are synchronized with network time protocol.
Explore enable password vs enable secret, password encryption, and the risks of telnet lab practices, login settings, and over the shoulder network attacks, plus one-size-fits-all passwords.
Build a local username/password database for vty access, require username then password, assign privilege level 15 for selective users, and encrypt passwords with service password-encryption while avoiding clear-text passwords.
Describe secure shell as an encrypted alternative to telnet, set up ssh with rsa keys, and implement snmp v3 with authentication and encryption alongside v1/v2 community strings and traps.
Configure the network time protocol to synchronize time across routers and servers, selecting stratum sources, and using server-client, peer-to-peer, or broadcast/multicast modes with authentication.
Configure ap authentication between routers 3 and 4, set keys and trusted sources, verify with show ap association detail, and restrict syncing to time server via an ap access group.
Configure a.p broadcast lab using the broadcast service, set router 2 as the a.p server and router 4 as the a.p client, then observe a.p association and debug ap packet.
Explore unicast RPF to verify unicast packets using loose or strict mode. Configure with ip verify unicast source reachable via any interface and observe effects on default routes in verification.
Configure ip helper address on the entering interface to forward UDP broadcasts as unicast to a destination, including default ports like 67/68, 53, 69, and modify with ip forward-protocol udp.
Learn to safely use the debug ip packet command by filtering with an ACL to limit output, illustrate source and destination rules, and verify with show commands.
Spot memory issues on Cisco routers by signs such as telnet rejection and console hangs, then use show memory, show memory allocating process totals, and show memory summary to diagnose.
Learn how core dumps capture router memory and when to run them under tech support guidance, using exception core file and exception region size commands via tftp, rcp, or flash.
Explore how BGP differs from IGPs and defines autonomous systems, peers, and path attributes. Learn when to deploy or avoid BGP and how updates and adjacencies work.
Explain BGP peering concepts: internal vs external peers and direct neighbors with AS numbers. Demonstrate adjacency setup with router bgp and neighbor commands, and verify established connections.
Explore iBGP peering with loopback interfaces, configure update source and multihop, and verify adjacency using show ip bgp summary and show ip bgp neighbor, including static routes to loopback endpoints.
Establish eBGP peering with loopback interfaces using update source and BGP multi-hop, and deploy static routes to reach non-directly connected peers.
Master advertising routes with BGP using the network command, ensure exact network and mask matching, and grasp core path attributes like origin, next-hop, and local preference.
Explore BGP attributes like origin and AS-path, and the best path selection process using origin codes i, e, and ?, to prevent routing loops.
Explore how BGP selects best path using weight and local preference, and why an equal path may be discarded due to an inaccessible next hop, demonstrated with show ip bgp.
Explore how the next hop self command changes BGP next-hop addresses and alters route selection, with a soft reset to refresh adjacencies and a comparison of iBGP and eBGP paths.
Explore the next-hop address rule in BGP, showing how external and internal routes determine next hops, and how route advertisements preserve or assign next-hop based on advertising interface.
Learn how the BGP mult exit discriminator (med) is an optional attribute and use route maps to set med values, influence best path selection, and balance traffic across multiple links.
Explore BGP local preference, how it guides exit paths within an AS, and set it globally using default local pref while verifying with show ip bgp.
Learn to selectively adjust BGP local preference with a route map, using an ACL to target routes and apply outbound changes to a neighbor, shaping next-hop and best path decisions.
Learn how the BGP weight attribute, locally significant to the router, influences path selection, with practical lab demos of next-hop changes, default weights, and weight-based route preference.
Examine BGP weight manipulation, verify changes with show ip bgp, and apply route maps and access lists to influence next-hop selection.
Learn how to summarize routes in BGP by identifying common bits, deriving a summary route and mask, and using the aggregate address command to advertise the summary.
Explore how BGP synchronization and split-horizon rules restrict route advertisements, why full-mesh IBGP is impractical, and how route reflectors and no sync help scale networks.
Learn how BGP route reflectors solve split horizon by turning a hub router into a reflector, advertising routes to clients while avoiding full mesh with non-clients.
Learn how BGP prefix lists filter route advertisements more efficiently than ACLs, using implicit and explicit denies and top-to-bottom matching on Cisco routers.
Apply BGP prefix lists to filter outbound updates across neighbors, using named lists, sequence numbers, and verification commands to ensure exact denial and permit rules.
Explore private autonomous system numbers, BGP router-id selection, and safe redistribution practices, including hard-coding router-id and redistributing between IGP and BGP with caution.
The CCNP ROUTE 300-101 exam is generally considered the toughest of the three exams you must pass in order to earn your CCNP. Get ready to pass it with a little help from Chris Bryant, CCIE #12933.
You can watch the videos as often as you like until you pass the CCNP ROUTE exam! Your download ability and online access NEVER expire.
Since 2005, I've prepared CCNP candidates for success on the difficult routing exam - currently called the CCNP ROUTE exam -- and now I'm going to do the same for you.
No prepackaged slides here - you'll see lab after lab on REAL Cisco routers, all designed to teach you the finer points of advanced Cisco routing and prepare you for success in the exam room and real-world networking. From BGP to route redistribution, from multi-area OSPF to distribute-lists, it's all here - and there's a forum right here on this site where you can ask me questions.
Your access to this online course is unlimited - you can watch the videos as often as you like and for as long as it takes for you to pass! Let's get started!
Chris Bryant
CCIE #12933
"The Computer Certification Bulldog"