1.1 Switched campus

• Switch administration
• Managing MAC address table
• Errdisable recovery
• L2 MTU
• Layer 2 protocols
• CDP, LLDP
• UDLD
• VLAN technologies
• Access ports
• Trunk ports (802.1Q)
• Native VLAN
• Manual VLAN pruning
• VLAN database
• Normal range and extended range VLANs
• Voice VLAN
• VTP
• EtherChannel
• LACP, static
• Layer 2, Layer 3
• Load balancing
• EtherChannel Misconfiguration Guard
• Spanning- Tree Protocol
• PVST+, Rapid PVST+, MST
• Switch priority, port priority, path cost, STP timers
• PortFast, BPDU Guard, BPDU Filter
• Loop Guard, Root Guard

1.2 Routing Concepts

• Administrative distance
• VRF-lite
• Static routing
• Policy Based Routing
• VRF aware routing with any routing protocol
• Route filtering with any routing protocol
• Manual summarization with any routing protocol
• Redistribution between any pair of routing protocols
• Routing protocol authentication
• Bidirectional Forwarding Detection

1.3 EIGRP

• Adjacencies
• Best path selection
• RD, FD, FC, successor, feasible successor
• Classic Metrics and Wide Metrics
• Operations
• General operations
• Topology table
• Packet types
• Stuck In Active
• Graceful shutdown
• EIGRP load-balancing
• Equal-cost
• Unequal-cost
• Add-path
• EIGRP Named Mode
• Optimization, convergence and scalability
• Fast convergence requirements
• Query propagation boundaries
• IP FRR (single hop)
• Leak-map with summary routes
• EIGRP stub with leak map

1.4 OSPF (v2 and v3)

• Adjacencies
• Network types, area types
• Path preference
• Operations
• General operations
• Graceful shutdown
• GTSM (Generic TTL Security Mechanism)
• Optimization, convergence and scalability
• Metrics
• LSA throttling, SPF tuning, fast hello
• LSA propagation control (area types)
• Stub router
• Loop-free alternate
• Prefix suppression

1.5 BGP

• IBGP and EBGP peer relationships
• Peer-group/update-group, template
• Active, passive
• Timers
• Dynamic neighbors
• 4-bytes AS numbers
• Private AS
• Path selection
• Attributes
• Best path selection algorithm
• Load-balancing
• Routing policies
• Attribute manipulation
• Conditional advertisement
• Outbound Route Filtering
• Standard and extended communities
• Multi-homing
• AS path manipulations
• local-AS, allowas-in, remove-private-as
• Prepend
• Regexp
• Convergence and scalability
• Route reflector
• Aggregation, as-set
• Other BGP features
• Multipath, add-path
• Soft reconfiguration, Route Refresh

1.6 Multicast

• Layer 2 multicast
• IGMPv2, IGMPv3
• IGMP Snooping, PIM Snooping
• IGMP Querier
• IGMP Filter
• MLD
• Reverse path forwarding check
• PIM
• Sparse Mode
• Static RP, BSR, AutoRP
• Group to RP Mapping
• Bidirectional PIM
• Source-Specific Multicast
• Multicast boundary, RP announcement filter
• PIMv6 Anycast RP
• IPv4 Anycast RP using MSDP
• Multicast multipath

2.1 Cisco SD Access

• 2.1.a Design a Cisco SD Access solution
• 2.1.a i Underlay network (IS-IS, manual/PnP)
• 2.1.a ii Overlay fabric design (LISP, VXLAN, Cisco TrustSec)
• 2.1.a iii Fabric domains (single-site and multi-site using SD-WAN transit)
• 2.1.b Cisco SD Access deployment
• 2.1.b i Cisco DNA Center device discovery and device management
• 2.1.b ii Add fabric node devices to an existing fabric
• 2.1.b iii Host onboarding (wired endpoints only)
• 2.1.b iv Fabric border handoff
• 2.1.c Segmentation
• 2.1.c i Macro-level segmentation using VNs
• 2.1.c ii Micro-level segmentation using SGTs (using Cisco ISE)
• 2.1.d Assurance
• 2.1.d i Network and client health (360)
• 2.1.d ii Monitoring and troubleshooting

2.2 Cisco SD-WAN

• 2.a Design a Cisco SD-WAN solution
• 2.a i Orchestration plane (vBond, NAT)
• 2.a ii Management plane (vManage)
• 2.a iii Control plane (vSmart, OMP)
• 2.a iv Data plane (vEdge/cEdge)
• 2.b WAN edge deployment
• 2.b i Onboarding new edge routers
• 2.b ii Orchestration with zero-touch provisioning/Plug-And-Play
• 2.b iii OMP
• 2.b iv TLOC
• 2.c Configuration templates
• 2.d Localized policies
• 2.e Centralized policies

3.1 MPLS

• Operations
• Label stack, LSR, LSP
• LDP
• MPLS ping, MPLS traceroute
• L3VPN
• PE-CE routing
• MP-BGP VPNv4/VPNv6
• Extranet (route leaking)

3.2 DMVPN

• Troubleshoot DMVPN Phase 3 with dual-hub
• NHRP
• IPsec/IKEv2 using pre-shared key
• Per-Tunnel QoS
• Identify use-cases for FlexVPN
• Site-to-site, Server, Client, Spoke-to-Spoke
• IPsec/IKEv2 using pre-shared key
• MPLS over FlexVPN

4.1 Device Security on Cisco IOS XE

• Control plane policing and p rotection
• AAA

4.2 Network Security

• Switch security features
• VACL, PACL
• Storm control
• DHCP Snooping, DHCP option 82
• IP Source Guard
• Dynamic ARP Inspection
• Port Security
• Private VLAN
• Router security features
• IPv6 Traffic Filters
• IPv4 Access Control Lists
• Unicast Reverse Path Forwarding
• IPv6 infrastructure security features
• RA Guard
• DHCP Guard
• Binding table
• Device tracking
• Inspection/Snooping
• Source Guard
• IEEE 802.1X Port-Based Authentication
• Device roles, port states
• Authentication process
• Host modes

4.3 System Management

• Device management
• Console and VTY
• SSH, SCP
• RESTCONF, NETCONF
• SNMP
• v2c
• v3
• Logging
• Local logging, syslog, debugs, conditional debugs
• Timestamps

4.4 Quality of Service

• End to end L3 QoS using MQC
• DiffServ
• CoS and DSCP Mapping
• Classification
• Network Based Application Recognition (NBAR)
• Marking using IP Precedence, DSCP, CoS
• Policing, shaping
• Congestion management and avoidance
• HQoS, Sub-rate Ethernet Link

4.5 Network Services

• First-Hop Redundancy Protocols
• HSRP, GLBP, VRRP
• Redundancy using IPv6 RS/RA
• Network Time Protocol
• Master, client
• Authentication
• DHCP on Cisco IOS
• Client, server, relay
• Options
• SLAAC/DHCPv6 interaction
• Stateful, stateless DHCPv6
• DHCPv6 Prefix Delegation
• IPv4 Network Address Translation
• Static NAT, PAT
• Dynamic NAT, PAT
• Policy-based NAT, PAT
• VRF aware NAT, PAT
• IOS-XE VRF-Aware Software Infrastructure (VASI) NAT

4.6 Network optimization

• IP SLA
• ICMP probes
• UDP probes
• TCP probes
• Tracking object
• Flexible Netflow

4.7 Network operations

• Traffic capture
• SPAN
• RSPAN
• ERSPAN
• Embedded Packet Capture
• Cisco IOS-XE troubleshooting tools
• Packet Trace
• Conditional debugger (debug platform condition)

5.1 Data encoding formats

• JSON
• XML

5.2 Automation and scripting

• EEM applets
• Guest shell
• Linux environment
• CLI Python module
• EEM Python module

5.3 Programmability

• Interaction with vManage API
• Python requests library and Postman
• Monitoring endpoints
• Configuration endpoints
• Interaction with Cisco DNA Center API
• HTTP request (GET, PUT, POST) via Python requests library and Postman
• Interaction with Cisco IOS XE API
• Via NETCONF/YANG using Python ncclient library
• Via RESTCONF/YANG using Python requests library and Postman
• Deploy and verify model-driven telemetry
• Configure on-change subscription using gRPC