CCNP TSHOOT 300-135 2019 Video Boot Camp with Chris Bryant

Master advanced SDP features, including port fast, uplink fast, backbone fast, and guards such as route guard, loop guard, and BBDO filter, with guidance on global versus port-level application.

Explore uplinkfast in switch networks, enabling immediate failover between uplinks, bypassing normal listening and learning delays, while managing costs, priorities, and mac address updates.

this lecture demonstrates route guard on switches to prevent rogue devices from becoming the root, blocking inferior bpdu on a port, and verifying with show spanning and inconsistent ports.

Explore how rapid spanning tree protocol synchronizes a network of switches through proposals, self-synchronization, and ripple effects, and examine compatibility with traditional spanning tree and edge ports.

Learn the fundamentals of OSPF, forming adjacencies, and troubleshooting on a broadcast network; use show ip OSPF interface and show ip OSPF neighbor, understand DR/BDR elections, hello and dead timers.

Practice configuring and troubleshooting OSPF hello and dead timers. Learn how timer mismatches prevent adjacencies, how defaults and manual changes affect neighbor relationships, and how to diagnose with debugs.

Diagnose OSPF non-backbone isolation and implement a virtual link through a transit area to connect area 4 to area 0, using the remote router RID in the command.

Create password mismatches between OSPF peers, use IP OSPF debugs (hello and adjacency) to spot authentication issues, and restore neighbor adjacencies with proper authentication.

Spot authentication type mismatches in ospf by comparing type 1 (clear text), type 2 (md5), and type 0 (null); observe adjacency loss on broadcast networks and preview area authentication.

Explore configuring and troubleshooting OSPF stub and total stub areas, including redistributing connected subnets, router IDs, and how default routes replace external entries to shrink the routing table.

Troubleshoot EIGRP neighbor adjacencies in a hub-and-spoke frame-relay network by confirming AS numbers, PVCs, and correct network commands to restore adjacency.

Explain how split horizon affects EIGRP routing on Cisco serial interfaces, show how to disable it, and note subinterfaces as an alternative to avoid loops.

Remove obsolete frame-map commands, configure and test subinterfaces with correct IP addresses, verify adjacencies and split-horizon behavior, test loopback reachability, and note a reload is needed to remove subinterfaces.

Learn the rules of redistribution, debunk the myth of automatic route redistribution between EIGRP and OSPF, and understand how to troubleshoot redistribution without unintended cross-protocol leakage.

explore one-way redistribution from eigrp to rip, set a seed metric to overcome rip's 16 metric limit, and verify connectivity with ping before finalizing the redistribution.

Use traceroute and extended ping to locate where packets fail, test different source interfaces, and analyze router 3's return path, illustrating two-way route redistribution and debug IP packet.

Redistribute rip into ospf with the subnet option to include subnets, apply a seed metric (20), and use metric type control with route maps for fine-tuning redistribution.

Fine-tune redistribution by using route maps and ACLs to selectively modify metrics and route types when redistributing RIP routes into OSPF, including setting the default metric and denying specific networks.

Configure hsrp route tracking to monitor an ip route with track one and threshold values, and observe how metric changes trigger failover between standby routers in an ospf lab.

Outlining the fundamentals of access control lists, this refresher emphasizes top-to-bottom evaluation, implicit deny, and standard vs extended ACLs, with notes on sequence numbers and show commands.

Begin a dynamic nat lab by defining inside and outside statements, creating an address pool, and applying ip nat inside source with an ACL; verify translations with targeted pings.

Strengthen remote access by configuring login and enable passwords, applying time-range ACLs to control telnet, and ensuring accurate clocks with ntp for secure certificate reliability.

Explore BGP concepts like adjacencies, attributes, local preferences, and best path selection, and learn to troubleshoot by validating adjacencies and route advertisements using the network command.

See how BGP best-path selection uses weight and local preference, with a default local preference of 100, and how show ip bgp helps explain next-hop reachability.

Explore the multi-exit discriminator (med), an optional bgp attribute, and learn to influence path selection with route-maps, access-lists, and neighbor commands to balance traffic across links.

Explore BGP local preference inside the AS, comparing exit path selection, using show ip bgp to verify, and adjusting with the BGP default local-preference and route maps.

Apply and verify BGP prefix lists to neighbor updates using the neighbor command, configure inbound and outbound filters with sequence numbers, and validate with show commands.

Explore BGP private AS numbers, learn how the router-id determines adjacencies, and review redistribution approaches between IGP and BGP, including routing loop cautions.

Explore vpn concepts for tshoot with Chris Bryant, focusing on crypto acl, ike policies, and related vpn components, illustrated with real-world troubleshooting tips and exam-oriented guidance.

Explore the theory behind virtual private networks, including IPsec components, data origin authentication, data integrity, and confidentiality, and compare AH and ESP across tunnel and transport modes.

Configure ike phase 1 for a vpn by enabling crypto isakmp and creating default and custom policies with pre-shared keys, 3des, md5, and a 86400-second lifetime; discuss policy matching.

Explore dynamic multipoint vpn (dmvpn) to enable on-demand spoke-to-spoke tunnels in a hub-and-spoke design, using mGRE and IPsec to secure multicast and optimize routing.

Master vpn troubleshooting basics: ik policy priorities, lifetime rules, and crypto acl alignment for ipsec; ensure remote acl mirrors local acl and subinterface vlan references are correct.

Explore how security information and event management (SIEM) provides real-time analysis of security alerts across networks and applications, using data aggregation, correlation, and retention of logs.

Explore how to choose and configure a SIEM for your network, align vendor offerings with internal and external requirements, and define your end goals for real-time security visibility.

Explore privilege escalation and trust exploitation in network attacks, including brute-force password attempts. Examine denial-of-service and distributed denial-of-service attacks, DNS attacks, botnets, and syn flood scenarios.