CCNP TSHOOT 300-135 2019 Video Boot Camp with Chris Bryant

Master advanced SDP features, including port fast, uplink fast, backbone fast, and guards such as route guard, loop guard, and BBDO filter, with guidance on global versus port-level application.

Enable port fast to move host port from blocking to forwarding, and learn when to apply it on non-trunking ports, avoiding trunks to prevent bridging loops and dhcp address delays.

Explore uplinkfast in switch networks, enabling immediate failover between uplinks, bypassing normal listening and learning delays, while managing costs, priorities, and mac address updates.

this lecture demonstrates route guard on switches to prevent rogue devices from becoming the root, blocking inferior bpdu on a port, and verifying with show spanning and inconsistent ports.

Explore how bpdu filter and bpdu guard, along with loop guard and port fast, protect spanning tree networks; use show spanning summary to monitor port states and prevent loops.

Enable udld to detect unidirectional links and preserve bidirectional connectivity, using normal and aggressive modes, and monitor dlt frames and echoes to shut down ports when no echo is received.

Explore rapid spanning tree protocol (RSTP) theory, including edge, alternate, and backup ports, designated and root ports, point-to-point vs shared ports, and faster topology change via BPDU updates.

Explore how rapid spanning tree protocol synchronizes a network of switches through proposals, self-synchronization, and ripple effects, and examine compatibility with traditional spanning tree and edge ports.

Explain advanced spanning tree concepts with MST and PVST, compare PBS and PBS plus, and show how MST regions map multiple VLANs to single STP instances to enable load balancing.

Learn how to allocate switch resources with SDM templates on multiplayer switches, switch between routing, switching, and security roles using SVM templates, and apply changes only after a reload.

Learn the fundamentals of OSPF, forming adjacencies, and troubleshooting on a broadcast network; use show ip OSPF interface and show ip OSPF neighbor, understand DR/BDR elections, hello and dead timers.

Practice configuring and troubleshooting OSPF hello and dead timers. Learn how timer mismatches prevent adjacencies, how defaults and manual changes affect neighbor relationships, and how to diagnose with debugs.

Learn how IP address masking affects OSPF adjacencies, diagnose mismatched masks with debug commands, and understand why point-to-point links omit DR/BDR elections in OSPF.

Learn to configure and troubleshoot OSPF NBMA hub-and-spoke networks, using neighbor statements, and enforce the hub as DR while spokes do not participate in DR/BDR.

Diagnose OSPF non-backbone isolation and implement a virtual link through a transit area to connect area 4 to area 0, using the remote router RID in the command.

Configure an OSPF virtual link by selecting the transit area (for example, 34) and configuring both ends, then verify with show ip ospf virtual-link and show ip ospf.

Apply ospf authentication in a live lab, compare three authentication types and two approaches, and configure interface level and area level authentication with keys and passwords.

Create password mismatches between OSPF peers, use IP OSPF debugs (hello and adjacency) to spot authentication issues, and restore neighbor adjacencies with proper authentication.

Spot authentication type mismatches in ospf by comparing type 1 (clear text), type 2 (md5), and type 0 (null); observe adjacency loss on broadcast networks and preview area authentication.

Configure OSPF area and interface level MD5 authentication across routers, using separate passwords for adjacencies while preserving clear text on broadcast links, and override area settings at the interface level.

Configure OSPF virtual links between area 0 and area 34 with MD5 authentication, align key IDs, and verify adjacency using show ip ospf and debug outputs.

Explore how OSPF passive interfaces suppress hello traffic while still advertising networks, reducing overhead, with a lab demonstration using debug ip ospf hello and clear ip route.

Explore mtu differences in ospf to see how they disrupt adjacency, trigger neighbor down events, and reveal practical debugging steps using show ip ospf neighbor.

Explore configuring and troubleshooting OSPF stub and total stub areas, including redistributing connected subnets, router IDs, and how default routes replace external entries to shrink the routing table.

Troubleshoot EIGRP neighbor adjacencies in a hub-and-spoke frame-relay network by confirming AS numbers, PVCs, and correct network commands to restore adjacency.

Explore EIGRP adjacency configuration using the network command and wildcard masks, including all-zeros masks and locally significant wildcards, plus how default hello and dead timers can cause flapping adjacencies.

Keep EIGRP metric weights and k-values consistent across existing and future neighbors to avoid adjacency drops; use passive-interface to stop hello packets on unused interfaces while still advertising networks.

Explain how split horizon affects EIGRP routing on Cisco serial interfaces, show how to disable it, and note subinterfaces as an alternative to avoid loops.

Remove obsolete frame-map commands, configure and test subinterfaces with correct IP addresses, verify adjacencies and split-horizon behavior, test loopback reachability, and note a reload is needed to remove subinterfaces.

Learn the rules of redistribution, debunk the myth of automatic route redistribution between EIGRP and OSPF, and understand how to troubleshoot redistribution without unintended cross-protocol leakage.

explore one-way redistribution from eigrp to rip, set a seed metric to overcome rip's 16 metric limit, and verify connectivity with ping before finalizing the redistribution.

Use traceroute and extended ping to locate where packets fail, test different source interfaces, and analyze router 3's return path, illustrating two-way route redistribution and debug IP packet.

Redistribute RIP and EIGRP, set seed metric and default metrics, use route maps, test connectivity with extended ping, and prepare for OSPF redistribution and filtering in subsequent videos.

Redistribute rip into ospf with the subnet option to include subnets, apply a seed metric (20), and use metric type control with route maps for fine-tuning redistribution.

Fine-tune redistribution by using route maps and ACLs to selectively modify metrics and route types when redistributing RIP routes into OSPF, including setting the default metric and denying specific networks.

Learn the fundamentals of HSRP, configure a router group and virtual IP address as the designated gateway, and troubleshoot state changes with show standby for transparent failover.

Implement hsrp interface tracking to monitor a serial link, configure a tracked object, and validate rapid failover as ospf adjacencies recover, with traceroute confirming the active path.

Configure hsrp route tracking to monitor an ip route with track one and threshold values, and observe how metric changes trigger failover between standby routers in an ospf lab.

Outlining the fundamentals of access control lists, this refresher emphasizes top-to-bottom evaluation, implicit deny, and standard vs extended ACLs, with notes on sequence numbers and show commands.

Begin a dynamic nat lab by defining inside and outside statements, creating an address pool, and applying ip nat inside source with an ACL; verify translations with targeted pings.

Strengthen remote access by configuring login and enable passwords, applying time-range ACLs to control telnet, and ensuring accurate clocks with ntp for secure certificate reliability.

Learn to configure the network time protocol on Cisco devices, use stratum levels with servers, clients, and peers, and verify synchronization with show ntp status and show ntp associations.

Explore BGP concepts like adjacencies, attributes, local preferences, and best path selection, and learn to troubleshoot by validating adjacencies and route advertisements using the network command.

Advertise routes with BGP using the network command, ensuring exact network matches and masks, and examine origin, next-hop, AS_PATH, local preference, and weight to identify valid and best routes.

Explore BGP origin codes and the AS-path attribute, and observe the best path selection process, including how origin and AS-path guide next-hop decisions.

See how BGP best-path selection uses weight and local preference, with a default local preference of 100, and how show ip bgp helps explain next-hop reachability.

Learn how the next-hop self command changes next hops. See how a soft reset refreshes BGP without tearing adjacencies, while path length and AS path shape best path.

Explore the multi-exit discriminator (med), an optional bgp attribute, and learn to influence path selection with route-maps, access-lists, and neighbor commands to balance traffic across links.

Explore BGP local preference inside the AS, comparing exit path selection, using show ip bgp to verify, and adjusting with the BGP default local-preference and route maps.

Explore the BGP weight attribute, its locally significant nature, and how a larger weight makes a path preferred. Learn default values and how to set weight to influence route selection.

Explore BGP route summarization with the aggregate address command to create a single summary for multiple networks, and learn the default behavior of advertising more specific routes.

Learn how BGP route reflectors simplify scaling by reflecting routes from clients to other clients, reducing full-mesh requirements. Understand update rules for clients, non-clients, and external peers.

Apply and verify BGP prefix lists to neighbor updates using the neighbor command, configure inbound and outbound filters with sequence numbers, and validate with show commands.

Explore BGP private AS numbers, learn how the router-id determines adjacencies, and review redistribution approaches between IGP and BGP, including routing loop cautions.

Explore vpn concepts for tshoot with Chris Bryant, focusing on crypto acl, ike policies, and related vpn components, illustrated with real-world troubleshooting tips and exam-oriented guidance.

Explore the theory behind virtual private networks, including IPsec components, data origin authentication, data integrity, and confidentiality, and compare AH and ESP across tunnel and transport modes.

Configure ike phase 1 for a vpn by enabling crypto isakmp and creating default and custom policies with pre-shared keys, 3des, md5, and a 86400-second lifetime; discuss policy matching.

Explore dynamic multipoint vpn (dmvpn) to enable on-demand spoke-to-spoke tunnels in a hub-and-spoke design, using mGRE and IPsec to secure multicast and optimize routing.

Explore VRF lab concepts by configuring subinterfaces, applying IP addresses, and verifying routing tables with show ip route vrf, then test connectivity with pings and set up VRF instances.

Configure three VRF OSPF instances in a lab, advertise loopback addresses, and verify adjacencies and routing. Explore easy virtual networking with VRF lite, trunking, tagging, and route replication.

Master vpn troubleshooting basics: ik policy priorities, lifetime rules, and crypto acl alignment for ipsec; ensure remote acl mirrors local acl and subinterface vlan references are correct.

Explore how security information and event management (SIEM) provides real-time analysis of security alerts across networks and applications, using data aggregation, correlation, and retention of logs.

Explore how to choose and configure a SIEM for your network, align vendor offerings with internal and external requirements, and define your end goals for real-time security visibility.

Explore recon (reconnaissance) attacks and phishing techniques, contrasting undetected information gathering with social engineering to prepare for future network breaches.

This module demonstrates a privilege escalation attack in action, reviews telnet security, and shows configuring line vty access and a high privilege level on Cisco devices.

Configure local authentication with login local, assign privilege level 15 to one user, and show how a missing enable password enables privilege escalation.

Explore privilege escalation and trust exploitation in network attacks, including brute-force password attempts. Examine denial-of-service and distributed denial-of-service attacks, DNS attacks, botnets, and syn flood scenarios.