CCNP ENTEPRRISE - ENARSI 300-410 Master Course

Explore how OSPF uses the link-state shortest path first algorithm to build a scalable, hierarchical network with areas, the backbone area zero, ABRs, DR/BDR, and LSA-based synchronization.

Demonstrates migrating from ospfv2 to ospfv3 for both ipv4 and ipv6, configuring a router with passive interfaces, and verifying neighbors and routing tables using show commands.

Learn to optimize OSPF for scalability by route summarisation, default routing, and area types such as stub, NSSA, and totally stub, plus virtual links and LSA types.

Explore how OSPF optimization uses stub and totally stubby areas to reduce the routing database and control default routes.

Troubleshoot OSPF by verifying routes, neighbors, interfaces, and area configurations. Use hello debugging and show commands to fix area mismatches and verify reachability via ping.

Explore redistribution across routing protocols, including BGP and OSPF. Learn to set metrics, manage one-way and mutual redistribution, and control routes with distribute lists, prefix lists, and route maps.

configure redistribution between ospf and eigrp for ipv4 and ipv6, set the address family and as numbers, apply metrics, and include connected routes; verify redistributed routes in routing tables.

Identify and fix redistribution issues by validating metrics, distribute lists, and default-information originate to prevent routing loops and suboptimal paths across IGP, OSPF, and BGP.

Demonstrates troubleshooting redistribution for IPv4 and IPv6, verifying neighbors and routes, assigning metrics, and configuring redistribution to advertise connected, summary, and default routes across address families.

Explore policy based routing to control path selection and load sharing using ACLs and route maps, then accelerate failure detection with bidirectional forwarding detection (BFD) across IPv4 and IPv6.

Learn how policy based routing controls paths by matching an access list to redirect traffic to a different next hop or server, using a route map and traceroute verification.

Explore bgp fundamentals, ibgp and ebgp neighbor relationships, path attributes, and next-hop processing to optimize transit, batching updates, split horizon, and multipath convergence in large networks.

Learn practical BGP optimization—weight attributes, route filtering and policy-based routing, peer groups, and scalability with route reflectors and confederations; implement authentication to secure BGP sessions.

Explore mp-bgp implementation by employing address families for IPv4 and IPv6, including multicast and unicast, to enable flexible transport and filtering.

Trace and resolve BGP issues by monitoring sessions, analyzing neighbor relationships (iBGP and eBGP), and using targeted commands and debug techniques for IPv4 and IPv6 MP-BGP.

Demonstrates troubleshooting BGP connectivity and next-hop issues with update-source, multi-hop, and next-hop self, using real-world debug and show commands to verify loopback reachability.

Learn how MPLS routes packets between sites using LDP and LSP, with ingress, intermediate, and egress routers, and how IGP and LDP propagate information.

Discover how MPLS L3 VPN isolates customer networks with VRFs, route distinguishers, and route targets, using BGP MP to propagate VPNv4/v6 routes across a provider edge network.

Explore MPLS L3 VPN routing for employee networks, detailing customer edge and provider edge roles, VRFs, label propagation, LDP, and penultimate hop popping for VPNv4/v6.

Explore mpls l3 vpn architecture, including p and c routers, vrfs, route distinguishers, and route targets, to isolate customers with overlapping address spaces using mp-bgp.

Master vrf lite to isolate multiple vpn domains with separate routing tables via virtual routing instances and route targets, supporting ipv4 and ipv6.

Configure multiple vrfs on a router, assign interfaces, enable vrf lite routing, and implement route leaking between vrfs with route distinguishers and route targets via bgp.

Explore DMVPN, a scalable dynamic multi-point VPN using hub-and-spoke with zero-touch provisioning, HRP and NHP server mappings, and IPsec encrypted tunnels for secure spoke-to-spoke connectivity.

Demonstrates implementing Cisco DMVPN with a hub-and-spoke design, configuring IPsec transforms and a DMVPN profile, and enabling multipoint SPF for spoke-to-spoke communication.

Explore how DHCP and CPV six automate IP address assignment, configure pools and options, and support manual binding, while enabling stateless auto configuration and IPv6 with relay agents and troubleshooting.

Demonstrates ipv6 address assignment with slaac and dhcpv6, including setting up a dhcp relay and pool, plus dns and domain name options for stateless and stateful configs.

Explore hands-on DHCP troubleshooting for IPv4 and IPv6, including relay configuration, DHCP pools, interface verification, and common misconfigurations, with debugging commands and relay fixes.

Learn IPv6 first-hop security through snooping, binding tables, and guards (RA guard, DHCPv6 guard, source and destination guards) to prevent spoofing and protect network discovery.

Secure Cisco routers by configuring IPv4 and IPv6 ACLs, including time-based rules, applying them on interfaces, and safeguarding the control plane with policing and reverse path forwarding.

Troubleshoot ipv4 and ipv6 access control lists on Cisco routers by diagnosing inbound vs outbound filters, adjusting to permit icmp, tcp/udp services, and validating connectivity across devices and ports.

Configure and verify unicast reverse path forward (uRPF) on Cisco routers, using strict mode, testing with trace routes, handling asymmetric routes with ACL exceptions, and verifying with show commands.

Explore troubleshooting infrastructure security and services through aaa concepts, including central and local authentication, tacacs+ and radius, snmp, and net flow for visibility and secure management.

Troubleshoot aaa authentication, scp, and ip sla on Cisco devices; configure aaa with username and password, enable ssh, and set ip sla schedule and responder.

Explore how DNA Center assurance enables proactive, predictive network troubleshooting with AI and machine learning, telemetry, health scores, and path trace to optimize enterprise networks.

Explore DNA Center's assurance dashboards, health metrics, and machine learning-driven insights to identify open issues, prioritize faults, and guide automated troubleshooting across devices and the network.

Learn how Cisco ISE and Cisco DNA Center work together to authenticate and onboard endpoints, apply group policies, and automate SD-Access across devices, with a design-to-assurance workflow.

DNA Center automates network discovery, inventory, and provisioning with templates, day zero onboarding, and IP address management to ensure consistent device images across sites.