CCIE Enterprise Infrastructure v1.1

• 1.1 Switched campus
  • 1.1.a Switch administration
    • 1.1.a (i) Managing MAC address table
    • 1.1.a (ii) Errdisable recovery
    • 1.1.a (iii) L2 MTU
  • 1.1.b Layer 2 protocols
    • 1.1.b (i) CDP, LLDP
    • 1.1.b (ii) UDLD
  • 1.1.c VLAN technologies
    • 1.1.c (i) Access ports
    • 1.1.c (ii) Trunk ports (802.1Q)
    • 1.1.c (iii) Native VLAN
    • 1.1.c (iv) Manual VLAN pruning
    • 1.1.c (v) Normal range and extended range VLANs
    • 1.1.c (vi) Voice VLAN
  • 1.1.d EtherChannel
    • 1.1.d (i) LACP, static
    • 1.1.d (ii) Layer 2, Layer 3
    • 1.1.d (iii) Load balancing
    • 1.1.d (iv) EtherChannel misconfiguration guard
    • 1.1.d (v) Identify multichassis EtherChannel use cases
  • 1.1.e Spanning Tree Protocol
    • 1.1.e (i) PVST+, Rapid PVST+, MST
    • 1.1.e (ii) Switch priority, port priority, tuning port/path cost, STP timers
    • 1.1.e (iii) PortFast, BPDU guard, BPDU filter
    • 1.1.e (iv) Loop guard, root guard
• 1.2 Routing concepts
  • 1.2.a Administrative distance
  • 1.2.b Static routing (unicast, multicast)
  • 1.2.c Policy-based routing
  • 1.2.d VRF-Lite
  • 1.2.e VRF-aware routing with BGP, EIGRP, OSPF, and static
  • 1.2.f Route leaking between VRFs using route maps and VASI
  • 1.2.g Route filtering with BGP, EIGRP, OSPF, and static
  • 1.2.h Redistribution between BGP, EIGRP, OSPF, and static
  • 1.2.i Routing protocol authentication
  • 1.2.j Bidirectional Forwarding Detection
  • 1.2.k L3 MTU
• 1.3 EIGRP
  • 1.3.a Adjacencies
  • 1.3.b Best path selection
    • 1.3.b (i) Reported distance, computed distance, feasible distance, feasibility condition, successor, feasible successor
    • 1.3.b (ii) Classic metrics and wide metrics
  • 1.3.c Operations
    • 1.3.c (i) General operations
    • 1.3.c (ii) Topology table
    • 1.3.c (iii) Packet types
    • 1.3.c (iv) Stuck-in-active
    • 1.3.c (v) Graceful shutdown
  • 1.3.d EIGRP named mode
  • 1.3.e Optimization, convergence, and scalability
    • 1.3.e (i) Query propagation boundaries
    • 1.3.e (ii) Leak-map with summary routes
    • 1.3.e (iii) EIGRP stub with leak map
• 1.4 OSPF (v2 and v3)
  • 1.4.a Adjacencies
  • 1.4.b OSPFv3 address family support
  • 1.4.c Network types, area types
  • 1.4.d Path preference
  • 1.4.e Operations
    • 1.4.e (i) General operations
    • 1.4.e (ii) Graceful shutdown
    • 1.4.e (iii) GTSM (Generic TTL Security Mechanism)
  • 1.4.f Optimization, convergence, and scalability
    • 1.4.f (i) Metrics
    • 1.4.f (ii) LSA throttling, SPF tuning
    • 1.4.f (iii) Stub router
    • 1.4.f (iv) Prefix suppression
• 1.5 BGP
  • 1.5.a IBGP and EBGP peer relations
    • 1.5.a (i) Peer groups, templates
    • 1.5.a (ii) Active, passive
    • 1.5.a (iii) Timers
    • 1.5.a (iv) Dynamic neighbors
    • 1.5.a (v) 4-byte AS numbers
    • 1.5.a (vi) Private AS numbers
  • 1.5.b Path selection
    • 1.5.b (i) Attributes
    • 1.5.b (ii) Best path selection algorithm
    • 1.5.b (iii) Load balancing
  • 1.5.c Routing policies
    • 1.5.c (i) Attribute manipulation
    • 1.5.c (ii) Conditional advertisement
    • 1.5.c (iii) Outbound route filtering
    • 1.5.c (iv) Standard and extended communities
    • 1.5.c (v) Multihoming
  • 1.5.d AS path manipulations
    • 1.5.d (i) local-as, allowas-in, remove-private-as
    • 1.5.d (ii) AS path prepending
    • 1.5.d (iii) Regular expressions
  • 1.5.e Convergence and scalability
    • 1.5.e (i) Route reflectors
    • 1.5.e (ii) Aggregation, as-set
  • 1.5.f Other BGP features such as soft reconfiguration and route refresh
• 1.6 Multicast
  • 1.6.a Layer 2 multicast
    • 1.6.a (i) IGMPv2, IGMPv3
    • 1.6.a (ii) IGMP snooping, PIM snooping
    • 1.6.a (iii) IGMP querier
    • 1.6.a (iv) IGMP filter
    • 1.6.a (v) MLD
  • 1.6.b Reverse path forwarding check
  • 1.6.c PIM
    • 1.6.c (i) Sparse mode
    • 1.6.c (ii) Static RP, BSR, Auto-RP
    • 1.6.c (iii) Group-to-RP mapping
    • 1.6.c (iv) Source Specific Multicast
    • 1.6.c (v) Multicast boundary, RP announcement filter
    • 1.6.c (vi) PIMv6 anycast RP
    • 1.6.c (vii) IPv4 anycast RP using MSDP
    • 1.6.c (viii) Multicast multipath

• 2.1 Cisco SD-Access
  • 2.1.a Underlay
    • 2.1.a (i) Manual
    • 2.1.a (ii) LAN automation / PnP
    • 2.1.a (iii) Device discovery and device management
    • 2.1.a (iv) Extended nodes / policy extended nodes
  • 2.1.b Overlay
    • 2.1.b (i) LISP, BGP control planes
    • 2.1.b (ii) VXLAN data plane
    • 2.1.b (iii) Cisco TrustSec policy plane
    • 2.1.b (iv) L2 flooding
    • 2.1.b (v) Native multicast
  • 2.1.c Fabric design
    • 2.1.c (i) Single-site campus
    • 2.1.c (ii) Multisite
    • 2.1.c (iii) Fabric in a box
  • 2.1.d Fabric deployment
    • 2.1.d (i) Host onboarding
    • 2.1.d (ii) Authentication templates
    • 2.1.d (iii) Port configuration
    • 2.1.d (iv) Multisite remote border
    • 2.1.d (v) Border priority
    • 2.1.d (vi) Adding devices to fabric
  • 2.1.e Fabric border handoff
    • 2.1.e (i) SDA, SDWAN, IP transits
    • 2.1.e (ii) Peer device (Fusion router)
    • 2.1.e (iii) Layer 2 border handoff
  • 2.1.f Segmentation
    • 2.1.f (i) Macro segmentation using virtual networks
    • 2.1.f (ii) Micro-level segmentation using SGTs and SGACLs
• 2.2 Cisco SD-WAN
  • 2.2.a Controller architecture
    • 2.2.a (i) Management plane (vManage)
    • 2.2.a (ii) Orchestration plane (vBond)
    • 2.2.a (iii) Control plane (vSmart)
  • 2.2.b SD-WAN underlay
    • 2.2.b (i) WAN Cloud Edge deployment (AWS, Azure, Google Cloud)
    • 2.2.b (ii) WAN Edge deployment (hardware)
    • 2.2.b (iii) Greenfield, brownfield, and hybrid deployments
    • 2.2.b (iv) System configuration (system IP, site ID, org name, vBond address)
    • 2.2.b (v) Transport configuration (underlay and tunnel interfaces, allowed services, TLOC extension)
  • 2.2.c Overlay Management Protocol (OMP)
    • 2.2.c (i) OMP attributes
    • 2.2.c (ii) IPsec key management
    • 2.2.c (iii) Route aggregation
    • 2.2.c (iv) Redistribution
    • 2.2.c (v) Additional features (BGP AS path propagation, SDA integration)
  • 2.2.d Configuration templates
    • 2.2.d (i) CLI templates
    • 2.2.d (ii) Feature templates
    • 2.2.d (iii) Device templates
  • 2.2.e Centralized policies
    • 2.2.e (i) Data policies
    • 2.2.e (ii) Application-aware routing policies
    • 2.2.e (iii) Control policies
  • 2.2.f Localized policies
    • 2.2.f (i) Access lists
    • 2.2.f (ii) Route policies

• 3.1 Static point-to-point GRE tunnels
• 3.2 MPLS
  • 3.2.a Operations
    • 3.2.a (i) Label stack, LSR, LSP
    • 3.2.a (ii) LDP
    • 3.2.a (iii) MPLS ping, MPLS traceroute
  • 3.2.b L3VPN
    • 3.2.b (i) PE-CE routing using BGP
    • 3.2.b (ii) Basic MP-BGP VPNv4/VPNv6
• 3.3 DMVPN
  • 3.3.a Troubleshoot DMVPN Phase 3 with dual hub
    • 3.3.a (i) NHRP
    • 3.3.a (ii) IPsec/IKEv2 using preshared key

• 4.1 Device security on Cisco IOS XE
  • 4.1.a Control plane policing and protection
  • 4.1.b AAA
• 4.2 Network security
  • 4.2.a Switch security features
    • 4.2.a (i) VACL, PACL
    • 4.2.a (ii) Storm control
    • 4.2.a (iii) DHCP snooping, DHCP option 82
    • 4.2.a (iv) IP Source Guard
    • 4.2.a (v) Dynamic ARP Inspection
    • 4.2.a (vi) Port security
  • 4.2.b Router security features
    • 4.2.b (i) IPv6 traffic filters
    • 4.2.b (ii) IPv4 access control lists
    • 4.2.b (iii) Unicast Reverse Path Forwarding
  • 4.2.c IPv6 infrastructure security features
    • 4.2.c (i) RA Guard
    • 4.2.c (ii) DHCP Guard
    • 4.2.c (iii) Binding table
    • 4.2.c (iv) Device tracking
    • 4.2.c (v) ND Inspection/Snooping
    • 4.2.c (vi) Source Guard
• 4.3 System management
  • 4.3.a Device management
    • 4.3.a (i) Console and VTY
    • 4.3.a (ii) SSH, SCP
    • 4.3.a (iii) RESTCONF, NETCONF
  • 4.3.b SNMP (v2c, v3)
  • 4.3.c Logging
    • 4.3.c (i) Local logging, syslog, debugs, conditional debugs
    • 4.3.c (ii) Configuration change notification and logging
    • 4.3.c (iii) Timestamps
• 4.4 Quality of Service
  • 4.4.a Differentiated Services architecture
  • 4.4.b Classification, trust boundary
  • 4.4.c Network Based Application Recognition (NBAR)
  • 4.4.d Marking DSCP values in IPv4 and IPv6 headers
  • 4.4.e Policing, shaping
  • 4.4.f Congestion management and avoidance
  • 4.4.g HQoS
  • 4.4.h End-to-end Layer 3 QoS using MQC
• 4.5 Network services
  • 4.5.a First-Hop Redundancy Protocols
    • 4.5.a (i) HSRP, VRRP
    • 4.5.a (ii) Redundancy using IPv6 RS/RA
  • 4.5.b Time synchronization protocols
    • 4.5.b (i) NTP as a client
    • 4.5.b (ii) PTP design considerations
  • 4.5.c DHCP on Cisco devices
    • 4.5.c (i) Client, server, relay
    • 4.5.c (ii) Options
    • 4.5.c (iii) SLAAC/DHCPv6 integration
    • 4.5.c (iv) Stateful, stateless DHCPv6
    • 4.5.c (v) DHCPv6 Prefix Delegation
  • 4.5.d IPv4 Network Address Translation
    • 4.5.d (i) Static NAT, PAT
    • 4.5.d (ii) Dynamic NAT, PAT
    • 4.5.d (iii) Policy-based NAT, PAT
    • 4.5.d (iv) VRF-aware NAT, PAT
    • 4.5.d (v) VRF-aware Software Infrastructure (VASI) NAT
• 4.6 Network optimization
  • 4.6.a IP SLA (ICMP, UDP, TCP probes)
  • 4.6.b Tracking objects and lists
  • 4.6.c Flexible NetFlow
• 4.7 Network operations
  • 4.7.a Traffic capture
    • 4.7.a (i) SPAN, RSPAN, ERSPAN
    • 4.7.a (ii) Embedded packet capture
  • 4.7.b Troubleshooting tools
    • 4.7.b (i) Data path packet trace
    • 4.7.b (ii) Conditional debugger (debug platform condition)
      

• 5.1 Data encoding formats
  • 5.1.a JSON
  • 5.1.b XML
  • 5.1.c YAML
  • 5.1.d Jinja
• 5.2 Automation and scripting
  • 5.2.a EEM applets
  • 5.2.b Guest shell
    • 5.2.b (i) Linux environment
    • 5.2.b (ii) CLI Python module
    • 5.2.b (iii) EEM Python module
• 5.3 Programmability
  • 5.3.a Interaction with vManage API
    • 5.3.a (i) Python requests library and Postman
    • 5.3.a (ii) Monitoring endpoints
    • 5.3.a (iii) Configuration endpoints
  • 5.3.b Interaction with Cisco DNA Center API using HTTP requests (GET, PUT, POST) via Python requests library and Postman
  • 5.3.c Deploy and verify model-driven telemetry
    • 5.3.c (i) Configure on-change subscription using gRPC
      

coming soon