Learn CCIE Enterprise Infrastructure V1.1
from Scratch

Switched Campus

• Configuring and verifying basic layer 2 operations
• Configuring and verifying layer 2 protocols: CDP, LLDP, UDLD
• Configuring and verifying VLANs and Trunks, Voice VLAN
• Configuring and verifying EtherChannel
• Configuring and verifying STP, RSTP, MST, and related features

Routing Protocols

Configuring IPv4 and IPv6 static routing

OSPF

• • • Configuring OSPF Adjacencies
    • Configure simple OSPFv2/v3 environments, including multiple normal areas, summarization, and filtering.

BGP

• • • Configure and verify BGP between directly connected neighbors
    • Understanding best path selection algorithm and neighbor relationships

Routing Concepts

• • • Configuring Policy-Based Routing
    • Configuring VRF Lite
    • Configuring Routing Protocol Authentications

Wireless

• Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference, noise, bands, channels, and wireless
  client devices capabilities
•  Describe AP modes and antenna types
• Describe access point discovery and join process (discovery algorithms, WLC selection process)
• Describe the main principles and use cases for Layer 2 and Layer 3 roaming
• Troubleshoot WLAN configuration and wireless client connectivity issues using GUI only
• Describe wireless segmentation with groups, profiles, and tags
• Configure and verify wireless security features : 802.1X, WebAuth, PSK, EAPOL (4-way handshake)

IP Services and Security

• Configuring Time Synchronization Protocols: NTP, PTP
• Configure NAT/PAT
• Configuring FHRP: HSRP, VRRP
• Understanding multicast protocols, such as RPF check, PIM and IGMP v2/v3
• Interpret wired and wireless QoS configurations
  o QoS components
  o QoS policy
• Lines and local user authentication
• Configuring Control Plane Policing and Protection
• Configuring AAA
• ACLs
• Configuring wireless security features: 802.1X WebAuth PSK EAPOL (4-way handshake)
• Understanding the components of network security design:
  o Threat defense
  o Endpoint security
  o Next-generation firewall
  o TrustSec and MACsec
  o Network access control with 802.1X, MAB, and WebAuth
• Understanding network diagnosing tools like : debugs, conditional debugs, traceroute, ping, SNMP, and syslog
• Configure and verify Flexible NetFlow
• Configure SPAN/RSPAN/ERSPAN
• Configure and verify IPSLA

Virtualization

• Understanding device virtualization technologies:
  o Hypervisor type 1 and 2
  o Virtual machine
  o Virtual switching
• Configure static point-to-point GRE tunnels between two sites.
• Configuring and verifying IPsec tunnelling.
• Describing LISP and VXLAN.

Routing Protocols:

EIGRP

• Configuring EIGRP Adjacencies
• Understanding EIGPR Best Path Selection, EIGRP Metric, Feasibility Condition
• Configuring and verifying EIGRP Operations: Topology Table, Stuck-In-Active, Graceful Shutdown
• Configuring EIGRP Named Mode
• Configuring Leak-Map with Summary Routes
• Configuring EIGRP stub with Leak-Map

OSPF

• Configuring OSPFv3 address family
• Configuring OSPF Network Types and Area Types
• Exploring OSPF Path Preference Decisions
• Configuring and verifying OSPF Operations: Graceful shutdown, GTSM
• Configuring and verifying OSPF optimization options: SPF Tuning, LSA Throttling, Stub router, Prefix
  Suppression.

BGP

• Configuring Peer Groups and templates, Active/Passive Connections, Timers, ynamic Neighbors
• Verifying and Manipulating default Path Selection Criteria
• Configuring Routing Policies: Attribute Manipulation, Conditional Advertisements, Route filtering,
  Communities, Multihoming
• Configuring AS Path manipulations

Multicast

• Configuring and verifying Layer2 Multicast
• Configuring and verifying Reverse Path Forwarding Check
• Configuring PIM: Sparse Mode, Static RP, BSR, Auto-RP
• Configuring Group-to-RP mapping
• Configuring Source Specific Multicasting
• Configuring Multicast Boundary, RP Announcements
• Configuring PIMv6 anycast RP
• Configuring Anycast RP using MSDP
• Configuring Multicast Multipath

Routing Concepts

• Configuring VRF Aware Routing, Route leaking between VRF
• Configuring Route Filtering
• Configuring Redistribution
• Configuring BFD (Bidirectional Forwarding Detection)
• Configuring L3 MTU

IP Services and Security:

• Configuring Switch security features like VACL, PACL, Storm Control, DHCP Snooping, IP Source Guard,
  Dynamic ARP Inspection, Port Security
• Configuring Router Security Features like IPv6 Traffic Filter, URPF
• Configuring IPv6 Infra Security features like RA Guard, DHCP Guard, Binding Table, Device Tracking, ND
  Inspection/snooping, Source Guard
• Quality of Service
  • Configuring DSCP
  • Configuring Classification and trust boundary
  • Configuring NBAR
  • Marking DSCP Values
  • Configuring Policing and Shaping
  • Configuring Congestion management and avoidance
  • Configuring HQoS
  • End to end layer3 QoS using MQC

• Network Services

  • Configuring IPv6 RS/RA
  • Configuring DHCP: DHCP Configurations, DHCP Options, SLAAC/DHCPv6 Integration, Stateful,
    Stateless DHCPv6, DHCP Prefix Delegation
  • Configuring NAT: Static, Dynamic, Policy Based, VRF Aware, VRF Aware Software Infrastructure (VASI)
  • Tracking Objects and lists

Transport Technologies

• Configuring and verifying the MPLS network with multiple LSRs
  o Troubleshooting using MPLS Ping and MPLS traceroute.
• Configuring L3 VPN
  o Establishing L3VPN between PE and CE routers.
  o Configuring basic MPBGP for L3VPN
  o Verifying end-to-end connectivity between devices.
•  Configuring DMVPN
  o Configuring NHRP for dynamic spoke-to-spoke communication
  o Implement IPsec/IKEv2 using the pre-shared key for secure communication
  o Troubleshooting DMVPN with dual hub

Cisco SD-WAN

• Understanding SDWAN Architecture
• Control plane and data plane operations
• Deploying controller site
• Deploying branch sites
• Understanding Overlay Management Protocol (OMP) architecture
• Configuring Templates
• Configuring network segmentation using service VPN between branches
• Implementing Direct Internet Access (DIA)
• Configuring Centralized Policies: Data Policies, Application-Aware Routing Policies, Control Policies, hub and spoke
• Localized Policies: Access Lists, Route Policies

Cisco SD-Access

• Configuring Underlay: Manual Configurations, LAN Automation, Device Discovery and Management, Extended Nodes/Policy Extended Nodes
• Configuring Overlay: LISP, BGP Control Planes, VXLAN Data Plane, Cisco TrustSec Policy plane, L2 Flooding, Native Multicast
• Fabric Designing and Deployment: Single Site/Multisite, Fabric in a box, Host onboarding, Authentication, Port Configuration, Multisite remote border, Border Priority, Adding devices.
• Fabric Border Handoff: SDA, SDWAN, IP Transits, Peer Device, Layer 2 border handoff
• Configuring Segmentation

• Understanding the fundamentals

  • Fundamental Python programming

    ▪ Python data structure

    ▪ Using Python to read from and write to a file

    ▪ Python loops and conditional code

  • Configuring IOS Devices using NETMIKO
  • Configure and verify NETCONF and RESTCONF
  • Introduction to RESTAPIs
  • Introduction to HTTP Request/Response model
  • Understanding the HTTP status codes
  • Creating queries to interact with the device

• Automation and Scripting

  • Creating EEM Applets
  • Introduction to Linux
  • CLI Python module
  • EEM Python Module

• Programmability

  • Interaction with vManage API using requests library and Postman
  • Interaction with DNA Center using HTTP requests
  • Deploying and verifying model-driven telemetry