CCNP and CCIE Enterprise Core ENCOR 350-401

Cover
Title Page
Copyright Page
About the Authors
About the Technical Reviewers
Dedication
Acknowledgments
Contents
Introduction
Part I: Forwarding
	Chapter 1 Packet Forwarding
		“Do I Know This Already?” Quiz
		Foundation Topics
		Network Device Communication
			Layer 2 Forwarding
			Collision Domains
			Virtual LANs
			Access Ports
			Trunk Ports
			Layer 2 Diagnostic Commands
			Layer 3 Forwarding
			Local Network Forwarding
			Packet Routing
			IP Address Assignment
			Verification of IP Addresses
		Forwarding Architectures
			Process Switching
			Cisco Express Forwarding
			Ternary Content Addressable Memory
			Centralized Forwarding
			Distributed Forwarding
			Software CEF
			Hardware CEF
			Stateful Switchover
			SDM Templates
		Exam Preparation Tasks
Part II: Layer
	Chapter 2 Spanning Tree Protocol
		“Do I Know This Already?” Quiz
		Foundation Topics
		Spanning Tree Protocol Fundamentals
			IEEE 802.1D STP
			802.1D Port States
			802.1D Port Types
			STP Key Terminology
			Spanning Tree Path Cost
			Building the STP Topology
			Root Bridge Election
			Locating Root Ports
			Locating Blocked Designated Switch Ports
			Verification of VLANS on Trunk Links
			STP Topology Changes
			Converging with Direct Link Failures
			Indirect Failures
		Rapid Spanning Tree Protocol
			RSTP (802.1W) Port States
			RSTP (802.1W) Port Roles
			RSTP (802.1W) Port Types
			Building the RSTP Topology
		Exam Preparation Tasks
	Chapter 3 Advanced STP Tuning
		“Do I Know This Already?” Quiz
		Foundation Topics
		STP Topology Tuning
			Root Bridge Placement
			Modifying STP Root Port and Blocked Switch Port Locations
			Modifying STP Port Priority
		Additional STP Protection Mechanisms
			Root Guard
			STP Portfast
			BPDU Guard
			BPDU Filter
			Problems with Unidirectional Links
			STP Loop Guard
			Unidirectional Link Detection
		Exam Preparation Tasks
	Chapter 4 Multiple Spanning Tree Protocol
		“Do I Know This Already?” Quiz
		Foundation Topics
		Multiple Spanning Tree Protocol
			MST Instances (MSTIs)
			MST Configuration
			MST Verification
			MST Tuning
			Common MST Misconfigurations
			VLAN Assignment to the IST
			Trunk Link Pruning
			MST Region Boundary
			MST Region as the Root Bridge
			MST Region Not a Root Bridge for Any VLAN
		Exam Preparation Tasks
	Chapter 5 VLAN Trunks and EtherChannel Bundles
		“Do I Know This Already?” Quiz
		Foundation Topics
		VLAN Trunking Protocol
			VTP Communication
			VTP Configuration
			VTP Verification
		Dynamic Trunking Protocol
		EtherChannel Bundle
			Dynamic Link Aggregation Protocols
			PAgP Port Modes
			LACP Port Modes
			EtherChannel Configuration
			Verifying Port-Channel Status
			Viewing EtherChannel Neighbors
			LACP
			PAgP
			Verifying EtherChannel Packets
			LACP
			PAgP
			Advanced LACP Configuration Options
			LACP Fast
			Minimum Number of Port-Channel Member Interfaces
			Maximum Number of Port-Channel Member Interfaces
			LACP System Priority
			LACP Interface Priority
			Troubleshooting EtherChannel Bundles
			Load Balancing Traffic with EtherChannel Bundles
		Exam Preparation Tasks
Part III: Routing
	Chapter 6 IP Routing Essentials
		“Do I Know This Already?” Quiz
		Foundation Topics
		Routing Protocol Overview
			Distance Vector Algorithms
			Enhanced Distance Vector Algorithms
			Link-State Algorithms
			Path Vector Algorithm
		Path Selection
			Prefix Length
			Administrative Distance
			Metrics
			Equal Cost Multipathing
			Unequal-Cost Load Balancing
		Static Routing
			Static Route Types
			Directly Attached Static Routes
			Recursive Static Routes
			Fully Specified Static Routes
			Floating Static Routing
			Static Null Routes
			IPv6 Static Routes
		Virtual Routing and Forwarding
		Exam Preparation Tasks
	Chapter 7 EIGRP
		“Do I Know This Already?” Quiz
		Foundation Topics
		EIGRP Fundamentals
			Autonomous Systems
			EIGRP Terminology
			Topology Table
			EIGRP Neighbors
		Path Metric Calculation
			Wide Metrics
			Metric Backward Compatibility
			Load Balancing
		Failure Detection and Timers
			Convergence
		Route Summarization
		Exam Preparation Tasks
	Chapter 8 OSPF
		“Do I Know This Already?” Quiz
		Foundation Topics
		OSPF Fundamentals
			Inter-Router Communication
			OSPF Hello Packets
			Router ID
			Neighbors
			Designated Router and Backup Designated Router
		OSPF Configuration
			OSPF Network Statement
			Interface-Specific Configuration
			Statically Setting the Router ID
			Passive Interfaces
			Requirements for Neighbor Adjacency
			Sample Topology and Configuration
			Confirmation of Interfaces
			Verification of OSPF Neighbor Adjacencies
			Verification of OSPF Routes
		Default Route Advertisement
		Common OSPF Optimizations
			Link Costs
			Failure Detection
			Hello Timer
			Dead Interval Timer
			Verifying OSPF Timers
			DR Placement
			Designated Router Elections
			DR and BDR Placement
			OSPF Network Types
			Broadcast
			Point-to-Point Networks
			Loopback Networks
		Exam Preparation Tasks
	Chapter 9 Advanced OSPF
		“Do I Know This Already?” Quiz
		Foundation Topics
		Areas
			Area ID
			OSPF Route Types
		Link-State Announcements
			LSA Sequences
			LSA Age and Flooding
			LSA Types
			LSA Type 1: Router Link
			LSA Type 2: Network Link
			LSA Type 3: Summary Link
		Discontiguous Networks
		OSPF Path Selection
			Intra-Area Routes
			Interarea Routes
			Equal-Cost Multipathing
		Summarization of Routes
			Summarization Fundamentals
			Interarea Summarization
			Summarization Metrics
			Configuration of Interarea Summarization
		Route Filtering
			Filtering with Summarization
			Area Filtering
			Local OSPF Filtering
		Exam Preparation Tasks
	Chapter 10 OSPFv3
		“Do I Know This Already?” Quiz
		Foundation Topics
		OSPFv3 Fundamentals
			OSPFv3 Link-State Advertisement
			OSPFv3 Communication
		OSPFv3 Configuration
			OSPFv3 Verification
			Passive Interface
			Summarization
			Network Type
		IPv4 Support in OSPFv3
		Exam Preparation Tasks
	Chapter 11 BGP
		“Do I Know This Already?” Quiz
		Foundation Topics
		BGP Fundamentals
			Autonomous System Numbers
			Path Attributes
			Loop Prevention
			Address Families
			Inter-Router Communication
			BGP Session Types
			BGP Messages
			BGP Neighbor States
			Idle
			Connect
			Active
			OpenSent
			OpenConfirm
			Established
		Basic BGP Configuration
			Verification of BGP Sessions
			Prefix Advertisement
			Receiving and Viewing Routes
			BGP Route Advertisements from Indirect Sources
			Route Summarization
				Aggregate Address
				Atomic Aggregate
				Route Aggregation with AS_SET
			Multiprotocol BGP for IPv6
				IPv6 Configuration
				IPv6 Summarization
			Exam Preparation Tasks
	Chapter 12 Advanced BGP
		“Do I Know This Already?” Quiz
		Foundation Topics
		BGP Multihoming
			Resiliency in Service Providers
			Internet Transit Routing
			Branch Transit Routing
		Conditional Matching
			Access Control Lists
			Standard ACLs
			Extended ACLs
			Prefix Matching
			Prefix Lists
			IPv6 Prefix Lists
			Regular Expressions (regex)
		Route Maps
			Conditional Matching
			Multiple Conditional Match Conditions
			Complex Matching
			Optional Actions
			The continue Keyword
		BGP Route Filtering and Manipulation
			Distribute List Filtering
			Prefix List Filtering
			AS Path ACL Filtering
			Route Maps
			Clearing BGP Connections
		BGP Communities
			Well-Known Communities
			Enabling BGP Community Support
			Conditionally Matching BGP Communities
			Setting Private BGP Communities
		Understanding BGP Path Selection
			Routing Path Selection Using Longest Match
			BGP Best Path Overview
			Weight
			Local Preference
			Locally Originated via Network or Aggregate Advertisement
			Accumulated Interior Gateway Protocol
			Shortest AS Path
			Origin Type
			Multi-Exit Discriminator
			eBGP over iBGP
			Lowest IGP Metric
			Prefer the Oldest eBGP Path
			Router ID
			Minimum Cluster List Length
			Lowest Neighbor Address
		Exam Preparation Tasks
	Chapter 13 Multicast
		“Do I Know This Already?” Quiz
		Foundation Topics
		Multicast Fundamentals
		Multicast Addressing
			Layer 2 Multicast Addresses
		Internet Group Management Protocol
			IGMPv2
			IGMPv3
			IGMP Snooping
		Protocol Independent Multicast
			PIM Distribution Trees
			Source Trees
			Shared Trees
			PIM Terminology
			PIM Dense Mode
			PIM Sparse Mode
			PIM Shared and Source Path Trees
			Shared Tree Join
			Source Registration
			PIM SPT Switchover
			Designated Routers
			Reverse Path Forwarding
			PIM Forwarder
		Rendezvous Points
			Static RP
			Auto-RP
			Candidate RPs
			RP Mapping Agents
			PIM Bootstrap Router
			Candidate RPs
		Exam Preparation Tasks
Part IV: Services
	Chapter 14 QoS
		“Do I Know This Already?” Quiz
		Foundation Topics
		The Need for QoS
			Lack of Bandwidth
			Latency and Jitter
			Propagation Delay
			Serialization Delay
			Processing Delay
			Delay Variation
			Packet Loss
		QoS Models
		Classification and Marking
			Classification
			Layer 7 Classification
			Marking
			Layer 2 Marking
			Layer 3 Marking
			DSCP Per-Hop Behaviors
			Class Selector (CS) PHB
			Default Forwarding (DF) PHB
			Assured Forwarding (AF) PHB
			Expedited Forwarding (EF) PHB
			Scavenger Class
			Trust Boundary
			A Practical Example: Wireless QoS
		Policing and Shaping
			Placing Policers and Shapers in the Network
			Markdown
			Token Bucket Algorithms
			Types of Policers
			Single-Rate Two-Color Markers/Policers
			Single-Rate Three-Color Markers/Policers (srTCM)
			Two-Rate Three-Color Markers/Policers (trTCM)
		Congestion Management and Avoidance
			Congestion Management
			Congestion-Avoidance Tools
		Exam Preparation Tasks
	Chapter 15 IP Services
		“Do I Know This Already?” Quiz
		Foundation Topics
			Time Synchronization
			Network Time Protocol
			NTP Configuration
			Stratum Preference
			NTP Peers
		First-Hop Redundancy Protocol
			Object Tracking
			Hot Standby Router Protocol
			Virtual Router Redundancy Protocol
			Legacy VRRP Configuration
			Hierarchical VRRP Configuration
			Global Load Balancing Protocol
		Network Address Translation
			NAT Topology
			Static NAT
			Inside Static NAT
			Outside Static NAT
			Pooled NAT
			Port Address Translation
		Exam Preparation Tasks
Part V: Overlay
	Chapter 16 Overlay Tunnels
		“Do I Know This Already?” Quiz
		Foundation Topics
		Generic Routing Encapsulation (GRE) Tunnels
			GRE Tunnel Configuration
			GRE Configuration Example
			Problems with Overlay Networks: Recursive Routing
		IPsec Fundamentals
			Authentication Header
			Encapsulating Security Payload
			Transform Sets
			Internet Key Exchange
			IKEv1
			IKEv2
			IPsec VPNs
			Cisco Dynamic Multipoint VPN (DMVPN)
			Cisco Group Encrypted Transport VPN (GET VPN)
			Cisco FlexVPN
			Remote VPN Access
			Site-to-Site IPsec Configuration
			Site-to-Site GRE over IPsec
			Site-to-Site VTI over IPsec
		Cisco Location/ID Separation Protocol (LISP)
			LISP Architecture and Protocols
			LISP Routing Architecture
			LISP Control Plane
			LISP Data Plane
			LISP Operation
			Map Registration and Notification
			Map Request and Reply
			LISP Data Path
			Proxy ITR (PITR)
		Virtual Extensible Local Area Network (VXLAN)
		Exam Preparation Tasks
Part VI: Wireless
	Chapter 17 Wireless Signals and Modulation
		“Do I Know This Already?” Quiz
		Foundation Topics
		Understanding Basic Wireless Theory
			Understanding Frequency
			Understanding Phase
			Measuring Wavelength
			Understanding RF Power and dB
			Important dB Laws to Remember
			Comparing Power Against a Reference: dBm
			Measuring Power Changes Along the Signal Path
			Free Space Path Loss
			Understanding Power Levels at the Receiver
		Carrying Data Over an RF Signal
			Maintaining AP–Client Compatibility
			Using Multiple Radios to Scale Performance
			Spatial Multiplexing
			Transmit Beamforming
			Maximal-Ratio Combining
			Maximizing the AP–Client Throughput
		Exam Preparation Tasks
	Chapter 18 Wireless Infrastructure
		“Do I Know This Already?” Quiz
		Foundation Topics
		Wireless LAN Topologies
			Autonomous Topology
			Lightweight AP Topologies
		Pairing Lightweight APs and WLCs
			AP States
			Discovering a WLC
			Selecting a WLC
			Maintaining WLC Availability
			Cisco AP Modes
		Leveraging Antennas for Wireless Coverage
			Radiation Patterns
			Gain
			Beamwidth
			Polarization
			Omnidirectional Antennas
			Directional Antennas
		Exam Preparation Tasks
	Chapter 19 Understanding Wireless Roaming and Location Services
		“Do I Know This Already?” Quiz
		Foundation Topics
		Roaming Overview
			Roaming Between Autonomous APs
			Intracontroller Roaming
		Roaming Between Centralized Controllers
			Layer 2 Roaming
			Layer 3 Roaming
			Scaling Mobility with Mobility Groups
		Locating Devices in a Wireless Network
		Exam Preparation Tasks
	Chapter 20 Authenticating Wireless Clients
		“Do I Know This Already?” Quiz
		Foundation Topics
		Open Authentication
		Authenticating with Pre-Shared Key
		Authenticating with EAP
			Configuring EAP-Based Authentication with External RADIUS Servers
			Configuring EAP-Based Authentication with Local EAP
			Verifying EAP-Based Authentication Configuration
		Authenticating with WebAuth
		Exam Preparation Tasks
	Chapter 21 Troubleshooting Wireless Connectivity
		“Do I Know This Already?” Quiz
		Foundation Topics
		Troubleshooting Client Connectivity from the WLC
			Checking the Client’s Connection Status
			Checking the Client’s Association and Signal Status
			Checking the Client’s Mobility State
			Checking the Client’s Wireless Policies
			Testing a Wireless Client
		Troubleshooting Connectivity Problems at the AP
		Exam Preparation Tasks
Part VII: Architecture
	Chapter 22 Enterprise Network Architecture
		“Do I Know This Already?” Quiz
		Foundation Topics
		Hierarchical LAN Design Model
			Access Layer
			Distribution Layer
			Core Layer
		Enterprise Network Architecture Options
			Two-Tier Design (Collapsed Core)
			Three-Tier Design
			Layer 2 Access Layer (STP Based)
			Layer 3 Access Layer (Routed Access)
			Simplified Campus Design
			Software-Defined Access (SD-Access) Design
		Exam Preparation Tasks
	Chapter 23 Fabric Technologies
		“Do I Know This Already?” Quiz
		Foundation Topics
		Software-Defined Access (SD-Access)
			What Is SD-Access?
			SD-Access Architecture
			Physical Layer
			Network Layer
			Underlay Network
			Overlay Network (SD-Access Fabric)
			SD-Access Fabric Roles and Components
			Fabric Control Plane Node
			SD-Access Fabric Concepts
			Controller Layer
			Management Layer
			Cisco DNA Design Workflow
			Cisco DNA Policy Workflow
			Cisco DNA Provision Workflow
			Cisco DNA Assurance Workflow
		Software-Defined WAN (SD-WAN)
			Cisco SD-WAN Architecture
			vManage NMS
			vSmart Controller
			Cisco SD-WAN Routers (vEdge and cEdge)
			vBond Orchestrator
			vAnalytics
			Cisco SD-WAN Cloud OnRamp
			Cloud OnRamp for SaaS
			Cloud OnRamp for IaaS
		Exam Preparation Tasks
	Chapter 24 Network Assurance
		Do I Know This Already?
		Foundation Topics
		Network Diagnostic Tools
			ping
			traceroute
		Debugging
			Conditional Debugging
			Simple Network Management Protocol (SNMP)
			syslog
		NetFlow and Flexible NetFlow
		Switched Port Analyzer (SPAN) Technologies
			Local SPAN
			Specifying the Source Ports
			Specifying the Destination Ports
			Local SPAN Configuration Examples
			Remote SPAN (RSPAN)
			Encapsulated Remote SPAN (ERSPAN)
			Specifying the Source Ports
			Specifying the Destination
		IP SLA
		Cisco DNA Center Assurance
		Exam Preparation Tasks
Part VIII: Security
	Chapter 25 Secure Network Access Control
		“Do I Know This Already?” Quiz
		Foundation Topics
		Network Security Design for Threat Defense
		Next-Generation Endpoint Security
			Cisco Talos
			Cisco Threat Grid
			Cisco Advanced Malware Protection (AMP)
			Cisco AnyConnect
			Cisco Umbrella
			Cisco Web Security Appliance (WSA)
			Before an Attack
			During an Attack
			After an Attack
			Cisco Email Security Appliance (ESA)
			Next-Generation Intrusion Prevention System (NGIPS)
			Next-Generation Firewall (NGFW)
			Cisco Firepower Management Center (FMC)
			Cisco Stealthwatch
			Cisco Stealthwatch Enterprise
			Cisco Stealthwatch Cloud
			Cisco Identity Services Engine (ISE)
		Network Access Control (NAC)
			802.1x
			EAP Methods
			EAP Chaining
			MAC Authentication Bypass (MAB)
			Web Authentication (WebAuth)
			Local Web Authentication
			Central Web Authentication with Cisco ISE
			Enhanced Flexible Authentication (FlexAuth)
			Cisco Identity-Based Networking Services (IBNS) 2.0
			Cisco TrustSec
			Ingress Classification
			Propagation
			Egress Enforcement
			MACsec
			Downlink MACsec
			Uplink MACsec
		Exam Preparation Tasks
	Chapter 26 Network Device Access Control and Infrastructure Security
		“Do I Know This Already?” Quiz
		Foundation Topics
		Access Control Lists (ACLs)
			Numbered Standard ACLs
			Numbered Extended ACLs
			Named ACLs
			Port ACLs (PACLs) and VLAN ACLs (VACLs)
			PACLs
			VACLs
			PACL, VACL, and RACL Interaction
		Terminal Lines and Password Protection
			Password Types
			Password Encryption
			Username and Password Authentication
			Configuring Line Local Password Authentication
			Verifying Line Local Password Authentication
			Configuring Line Local Username and Password Authentication
			Verifying Line Local Username and Password Authentication
			Privilege Levels and Role-Based Access Control (RBAC)
			Verifying Privilege Levels
			Controlling Access to vty Lines with ACLs
			Verifying Access to vty Lines with ACLs
			Controlling Access to vty Lines Using Transport Input
			Verifying Access to vty Lines Using Transport Input
			Enabling SSH vty Access
			Auxiliary Port
			EXEC Timeout
			Absolute Timeout
		Authentication, Authorization, and Accounting (AAA)
			TACACS+
			RADIUS
			Configuring AAA for Network Device Access Control
			Verifying AAA Configuration
		Zone-Based Firewall (ZBFW)
			The Self Zone
			The Default Zone
			ZBFW Configuration
			Verifying ZBFW
		Control Plane Policing (CoPP)
			Configuring ACLs for CoPP
			Configuring Class Maps for CoPP
			Configuring the Policy Map for CoPP
			Applying the CoPP Policy Map
			Verifying the CoPP Policy
		Device Hardening
		Exam Preparation Tasks
Part IX: SDN
	Chapter 27 Virtualization
		“Do I Know This Already?” Quiz
		Foundation Topics
		Server Virtualization
			Virtual Machines
			Containers
			Virtual Switching
		Network Functions Virtualization
			NFV Infrastructure
			Virtual Network Functions
			Virtualized Infrastructure Manager
			Element Managers
			Management and Orchestration
			Operations Support System (OSS)/Business Support System (BSS)
			VNF Performance
			OVS-DPDK
			PCI Passthrough
			SR-IOV
			Cisco Enterprise Network Functions Virtualization (ENFV)
			Cisco ENFV Solution Architecture
		Exam Preparation Tasks
	Chapter 28 Foundational Network Programmability Concepts
		“Do I Know This Already?” Quiz
		Foundation Topics
		Command-Line Interface
		Application Programming Interface
			Northbound API
			Southbound API
			Representational State Transfer (REST) APIs
			API Tools and Resources
			Introduction to Postman
			Data Formats (XML and JSON)
			Cisco DNA Center APIs
			Cisco vManage APIs
		Data Models and Supporting Protocols
			YANG Data Models
			NETCONF
			RESTCONF
		Cisco DevNet
			Discover
			Technologies
			Community
			Support
			Events
		GitHub
		Basic Python Components and Scripts
		Exam Preparation Tasks
	Chapter 29 Introduction to Automation Tools
		“Do I Know This Already?” Quiz
		Foundation Topics
		Embedded Event Manager
			EEM Applets
			EEM and Tcl Scripts
			EEM Summary
		Agent-Based Automation Tools
			Puppet
			Chef
			SaltStack (Agent and Server Mode)
		Agentless Automation Tools
			Ansible
			Puppet Bolt
			SaltStack SSH (Server-Only Mode)
			Comparing Tools
		Exam Preparation Tasks
	Chapter 30 Final Preparation
		Getting Ready
		Tools for Final Preparation
			Pearson Test Prep Practice Test Software and Questions on the Website
			Accessing the Pearson Test Prep Software Online
			Accessing the Pearson Test Prep Software Offline
			Customizing Your Exams
			Updating Your Exams
			Premium Edition
			Chapter-Ending Review Tools
		Suggested Plan for Final Review/Study
		Summary
Glossary
	A
	B
	C
	D
	E
	F
	G
	H
	I
	J
	K
	L
	M
	N
	O
	P
	Q
	R
	S
	T
	U
	V
	W–X
	Y
	Z
Appendix A: Answers to the “Do I Know This Already?” Questions
Appendix B: CCNP Enterprise Core ENCOR 350-401 Official Cert Guide Exam Updates
Index
	A
	B
	C
	D
	E
	F
	G
	H
	I
	J-K
	L
	M
	N
	O
	P
	Q
	R
	S
	T
	U
	V
	W
	X
	Y
	Z