CCNP All-in-1 Video Boot Camp With Chris Bryant

Explore switching fundamentals by contrasting hubs and switches, explain csma/cd and collision domains, and learn how switches dynamically build the mac address table to forward frames.

Adjust the dynamic mac address table aging to control how long learned addresses stay, using the command mac address table aging time and iOS help to confirm units.

Explore dynamically learned mac addresses and vlan behavior as a cable moves between ports, examining the mac address table, aging time, and vlans on a multi-layer switch.

Explore auto negotiation, speed, and duplex concepts with real-world examples; examine fast link pulses, parallel detection, and duplex mismatches to diagnose transmission issues.

Explains power in line configurations on a switch, including auto max with milliwatts, consumption control, and high-priority inline power, with cooling and wattage cautions.

Explore dynamic vlan fundamentals and vlan membership policy (vmp) to auto adjust ports as hosts move, using show vlan id and mark and drag techniques for quick verification.

Troubleshoot vlan 5 connectivity in a lab by validating switch connections with show CDP neighbor, running targeted pings, and verifying physical cabling to ensure accurate host reachability.

Explore the differences between ISL and 802.1Q, showing ISL's double tagging overhead versus 802.1Q's four-byte tag and native VLAN handling for efficient trunking.

Explain vlan 9 trunking fundamentals, including dynamic modes and 802.1Q vs ISL encapsulation, and how negotiation works with DTP. Emphasize disabling DTP and using unconditional trunking for security.

Explore dynamic trunking protocol (DTP) concepts in VLAN 10, verifying port-level DTP status with show interface and filtering, then disable DTP on a port range and confirm trunks remain up.

Conclude the DTP lab on sw2 by configuring unconditional trunking, turning off DTP negotiation, and verifying trunk status with show interface trunk, including relevant switchport mode trunk commands.

Configure voice VLANs on switch ports to prioritize voice traffic using trunk or access links, apply 802.1p tagging, and enable port fast to reduce jitter.

Explore how vtp domains and versions 1-3 enable scalable vlan management across switches, using trunk connections and case-sensitive domain names to automate vlan advertisements.

Learn how VTP config revision numbers drive advertisement processing, resolve ties with subset ads, and apply best practices to reset revisions and manage summary and subset advertisements.

Understand vlan trunking protocol version compatibility and the benefits of pruning, showing how version 3 supports the full vlan range and how pruning reduces broadcast, multicast, and unknown unicast traffic.

Explore how STP uses BPDU types and bids (priority and MAC), configuration BPDU use, and root bridge election to determine the network root.

Learn to identify root and non-root bridges in spanning-tree protocol with show spanning-tree commands, distinguish route bridges from the local switch, and interpret route and designated ports.

Adjust STP path costs based on port speeds to influence spanning-tree routing, and observe how changing a port path cost triggers rapid transitions through listening, learning, and forwarding.

Master STP timers and how to change them, including hello time, max age, and forward delay, for route and bridge IDs, with static or dynamic diameter options.

Explore how spanning-tree route priorities are set using route primary and route secondary commands, how system-id extension affects the priority, and why priority values must follow 4096-based increments.

Port fast lets a port move from blocking to forwarding, speeding host connectivity. Enable it only on non trunk access ports, and verify with show spanning to avoid bridging loops.

Enable uplink fast on access switches to shorten STP convergence. Enable the feature globally to apply to all ports, not per port, and support immediate cutover with an uplink group.

Learn how backbone fast speeds recovery from indirect link failures by detecting inferior BPDU, ensuring root bridge transitions, and using the simple spanning backbonefast command on Cisco switches.

Demonstrates root guard in action, preventing rogue switches from becoming the route by configuring route guard on the interface to switch four, and verifying with spanning-tree and inconsistent-port checks.

Learn how BPDU guard on portfast ports blocks BPDU from unauthorized devices, places the port in error-disabled state, and can be applied across all portfast ports for safer switch robustness.

Master BPDU filter, BPDU guard, and loop guard in spanning tree, learn global and per-port enablement for portfast, and use show spanning summary to monitor port states.

Understand how udld detects unidirectional links by sending dlt frames every 15 seconds and awaiting an echo; in aggressive mode, the port shuts down after eight consecutive dlt frames.

Explore how rapid spanning tree protocol speeds convergence, extends STP (802.1w), and uses edge, point-to-point, alternate, and backup ports with BPDU hello-time propagation and topology change notifications.

Explore CST, MST, and PVST and how MST maps multiple VLANs to a single STP instance using regions, MSDE configuration, and a mapping table to optimize performance.

Learn how etherchannel aggregates two to eight parallel links into a single port channel to boost bandwidth. See how channel groups and negotiation protocols (LACP and PAGP) handle failures.

Explore the virtual switching system (VSS) and stack wise concepts, including VSL control, multi-chassis ether channels, and the active–standby role, with emphasis on failover through stateful switchover and nonstop forwarding.

Learn how stackwise links up to nine switches into a single, master-led stack with one IP address, autoconfig, swift failover, and seamless capacity growth through the IOS image management.

Explore how HSRP elects the active router by priority (default 100) and preemption, with notes on the highest IP address rule and how to verify and adjust elections.

Explore hsrp load balancing on a two-switch mls network by configuring active and standby roles with virtual router ip addresses and groups, and balancing traffic through dual default gateways.

Learn to configure hsrp timers and md5 authentication, including key chains and key strings, to secure standby routers and ensure consistent hello and hold times.

Understand VRRP fundamentals, including master and backup roles and default preemption, and configure object tracking to adjust priority for seamless failover.

Learn how to manage GLBP with AVG roles, adjust priorities with preemption, and verify primary and standby gateways using show glbp brief, noting virtual MAC addresses.

Explore GLBP AVG selection and AVF tracking by adjusting router priority with preemption and configuring interface tracking with weighting and thresholds to govern AVF eligibility.

Demonstrate port security in action by configuring static and dynamic mac addresses, handling violations, and verifying secure up states using show commands in a lab environment.

Explore port security aging time options, including absolute and inactivity aging for static and dynamic mac addresses, and verify units: seconds vs minutes using iOS help.

Discover how port security sticky addressing converts secure dynamic mac addresses to sticky entries that persist after reloads by saving them in the running config.

Demonstrate error disable recovery in port security by simulating a port security violation, adjusting the timer, and recovering the port after enforcing three secure MAC addresses.

Explore dot1x port-based authentication for enterprise networks, detailing radius-based server integration, EAP extensions, and the interaction between controlled and uncontrolled ports with AAA enablement.

Configure local span to mirror traffic from source ports to a destination port for a network analyzer, and extend visibility with remote span across switches.

Configure remote span across switches by defining a remote span vlan, assigning source ports, and setting a destination port (example vlan 30 to 0/10), with ether channel considerations.

Explore VLAN ACLs on a multilayer switch, using extended IP ACLs and VLAN access maps to block intra-vlan traffic and apply match and action filtering.

Learn private VLAN terminology and port types—promiscuous, community, and isolated—and how primary private VLANs map to secondary VLANs, enabling restricted host communication and lab-ready mastery.

Master private vlan lab concepts by configuring primary and secondary lands, community and isolated types, with promiscuous ports, associations, and mappings for secure network segmentation.

Demonstrate private vlan verification via key commands to reveal primary and secondary vlan mappings, community or isolated type, port details, and host associations, administrative and operational modes for trunking checks.

Explore DHCP fundamentals through discover, offer, request, and ack exchanges, with a Cisco multilayer switch as the DHCP server, configuring pools, exclusions, DNS, default gateway, and conflict checks.

Participate in a DHCP assignment lab, monitor lease addresses and the next available address, and configure IP helper-address to relay broadcast DHCP messages for dynamic or static bindings.

Learn to configure DHCP manual bindings by using client identifiers and MAC addresses, verify bindings in the DHCP binding table, and manage static addresses within dedicated pools.

Explore DHCPv6 auto-configuration, including self-generated link-local addresses, duplicate address detection, and router solicitation/advertisement for full IPv6 setup with or without a DHCPv6 server.

Enable dhcp snooping to act as a firewall between hosts and untrusted dhcp servers. Classify interfaces as trusted or untrusted and extend the trust boundary with option 82.

Learn how dynamic ARP inspection prevents ARP cache poisoning and man-in-the-middle attacks by validating ARP messages against a trusted IP-to-MAC database built from DCP snooping, with trusted and untrusted ports.

See how IP source guard prevents IP spoofing through MAC-IP binding with DHCP snooping, and learn to enable IP verify source using port security or smart log in a lab.

Finish the IP source guard lab by binding MAC, VLAN, and IP addresses, then review VLAN hopping prevention tips, including double tagging, native VLAN, dot1q tagging, and port hardening.

Learn to use Cisco discovery protocol (CDP) to view neighbors and timers, enable or disable globally or per interface, compare versions, and consider LLDP for vendor-neutral discovery.