Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR)

Module 1: Architecture

• Explain the different principles used to create an enterprise network design
• Analyse design principles used for WLAN deployment
• Distinguish on-premises and cloud infrastructure deployments
• Explain the principles of the Cisco SD-WAN solution
• Explain the principles of the Cisco SD-Access solution
• Describe concepts of wireless and wired QoS
• Differentiate hardware and software mechanisms of switching

Module 2: Virtualization

• Describe various device virtualization technologies
• Configure and verify data path (e.g. VRF, GRE) virtualization technologies
• Describe concepts of network virtualization

Module 3: Infrastructure

• Describe multicast protocols, such as IGMP v2/v3 and PIM
• Describe modes of AP and types of antenna
• Describe AP discovery and join process (WLC selection process, discovery algorithms)
• Describe NTP (Network Time Protocol)
• Describe Layer 1 concepts of wireless, such as RF power, RSSI, SNR, bands and channels, interference and wireless client devices capabilities
• Configure and verify common Spanning Tree Protocols(STPs), such as RSTP and MST
• Configure and verify simple OSPF environments, including establishing neighbor adjacency, multiple normal areas, and passive interface)
• Configure and verify OSPF route filtering and summarization
• Configure and verify different types of OSPF Networks (point-to-point and broadcast network)
• Configure and verify eBGP between connected routers (best path selection algorithm and neighbor relationships)
• Configure and verify NAT and PAT
• Configure FHRP (First Hop Redundancy Protocols (HSRP and VRRP)
• Troubleshoot 802.1q trunking protocols
• Troubleshoot EtherChannels for static and dynamic
• Troubleshoot issues of wireless client connectivity
• Compare EIGRP and OSPF in terms of advanced distance vector vs. linked state, path selection methods/algorithm, metrics and load balancing,

Module 4: Network Assurance

• Diagnose network problems by using various tools like SNMP, ping, traceroute, and debugging
• Configure and verify NetFlow, Flexible NetFlow and Syslog
• Configure and verify SPAN, RSPAN, and ERSPAN
• Configure and verify IPSLA
• Describe Cisco DNA Center workflows to apply network configuration, management and monitoring
• Configure and verify RESTCONF and NETCONF

Module 5: Network Security

• Describe REST API security
• Describe the network security design components
• Configure and verify access control for devices
• Configure and verify elements of infrastructure security
• Configure and verify features of wireless security features

Module 6: Automation

• Interpret basic components and scripts of Python
• Construct valid JSON encoded file
• Describe the high-level principles and benefits of a data modeling language
• Describe APIs for vManage and Cisco DNA Centre
• Explain REST API response codes and results in payload using Cisco DNA Center and RESTCONF
• Create EEM Applet to Automate configuration, troubleshooting
• Compare agent vs. agentless orchestration tools like Puppent, SaltStack Chef and Ansible

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI 300-410)

Module 1: Layer 3 Technologies

• Troubleshoot
  • route-map in routing protocols
  • Routing loop prevention methods.
  • Redistribution of routes between routing protocols
  • Administrative distance for all routing protocols
  • Auto and Manual Summarization of routes
  • EIGRP (named and classic mode)
  • OSPFv2 and OSPFv3
  • iBGP and eBGP
• Configure and verify
  • policy based routing
  • VRF Lite
• Describe Bidirectional Forwarding Detection

Module 2: VPN Technologies

• Describe
  • MPLS operations
  • MPLS Layer 3 VPN
• Configure and verify
  • DMVPN

Module 3: Infrastructure Security

• Troubleshoot
  • Device security using IOS AAA (TACACS+, RADIUS, local database)
  • Router security features
    • IPv4 access control lists (standard, extended, time-based)
    • IPv6 traffic filter
    • Unicast reverse path forwarding (uRPF)

• Control plane policing (CoPP) (Telnet, SSH, HTTP(S), SNMP, EIGRP, OSPF, BGP)

• Describe
  • IPv6 First Hop security features (RA guard, DHCP guard, binding table, ND inspection/snooping, source guard) 

Module 4: Infrastructure Services 

• Troubleshoot
  • Device management, SNMP (version 2c, version 3)
  • Network problems using logging
  • IPv4 and IPv6 DHCP
  • Network performance issues using IP SLA
  • NetFlow (version 5, version 9, flexible NetFlow)
  • Network problems using Cisco DNA Center assurance (connectivity, monitoring, device health, network health)