CCNP

Cisco Certified Network Professional

IP Routing (300-101)

Network Principles

  • Identify Cisco Express Forwarding concepts
  • FIB
  • Adjacency table
  • Explain general network challenges
  • Unicast
  • Out-of-order packets
  • Asymmetric routing
  • Describe IP operations
  • ICMP Unreachable and Redirects
  • IPv4 and IPv6 fragmentation
  • TTL
  • Explain TCP operations
  • IPv4 and IPv6 (P)MTU
  • MSS
  • Latency
  • Windowing
  • Bandwidth-delay product
  • Global synchronization
  • Describe UDP operations
  • Starvation
  • Latency
  • Recognize proposed changes to the network
  • Changes to routing protocol parameters
  • Migrate parts of the network to IPv6
  • Routing protocol migration

Layer 2 Technologies

  • Configure and verify PPP
  • Authentication (PAP, CHAP)
  • PPPoE (client-side only)
  • Explain Frame Relay
  • Operations
  • Point-to-point
  • Multipoint

Layer 3 Technologies

  • Identify, configure, and verify IPv4 addressing and submitting
  • Address types (Unicast, broadcast, multicast, and VLSM)
  • ARP
  • DHCP relay and server
  • DHCP protocol operations
  • Identify IPv6 addressing and submitting
  • Unicast
  • EUI-64
  • ND, RS/RA
  • Autoconfigure (SLAAC)
  • DHCP relay and server
  • DHCP protocol operations
  • Configure and verify static routing
  • Configure and verify default routing
  • Evaluate routing protocol types
  • Distance vector
  • Link state
  • Path Vector
  • Describe administrative distance
  • Troubleshoot passive interfaces
  • Configure and verify VRF Lite
  • Configure and verify filtering with any protocol
  • Configure and verify redistribution between any routing protocols or routing sources
  • Configure and verify manual and auto-summarization with any routing protocol
  • Configure and verify policy-based routing
  • Identify suboptimal routing
  • Explain ROUTE maps
  • Configure and verify loop prevention mechanisms
  • Route tagging and filtering
  • Split-horizon
  • Route poisoning
  • Configure and verify RIPv2
  • Describe Ring
  • Describe EIGRP packet types
  • Configure and verify EIGRP neighbor relationship and authentication
  • Configure and verify EIGRP stubs
  • Configure and verify EIGRP load balancing
  • Equal cost
  • Unequal cost
  • Describe and optimize EIGRP metrics
  • Configure and verify EIGRP for IPv6
  • Describe OSPF packet types
  • Configure and verify OSPF neighbor relationship and authentication
  • Configure and verify network types, area types, and router types
  • Point-to-point, multipoint, broadcast, no broadcast
  • LSA types, area type: backbone, normal, transit, stub, NSSA, totally stub
  • Internal router, backbone router, ABR, ASBR
  • Virtual link
  • Configure and verify OSPF path preference
  • Configure and verify OSPF operations
  • Configure and verify OSPF for IPv6
  • Describe, configure, and verify BGP peer relationships and authentication
  • Peer group
  • Active, passive
  • States and timers
  • Configure and verify EBGP (IPv4 and IPv6 address families)
  • EBGP
  • 4-byte AS number
  • Private AS
  • Explain BGP attributes and best-path selection

VPN Technologies

  • Configure and verify GRE
  • Describe DMVPN (single hub)
  • Describe Easy Virtual Networking (EVN)

Infrastructure Security

  • Describe IOS AAA using local database
  • Describe device security using IOS AAA with TACACS+ and RADIUS
  • AAA with TACACS+ and RADIUS
  • Local privilege authorization fallback
  • Configure and verify device access control
  • Lines (VTY, AUX, console)
  • Management plane protection
  • Password encryption
  • Configure and verify router security features
  • IPv4 access control lists (standard, extended, time-based)
  • IPv6 traffic filter
  • Unicast reverse path forwarding

Infrastructure Services

  • Configure and verify device management
  • Console and VTY
  • Telnet, HTTP, HTTPS, SSH, SCP
  • (T)FTP
  • Configure and verify SNMP
  • Configure and verify logging
  • Local logging, Syslog, debugs, conditional debugs
  • Timestamps
  • Configure and verify Network Time Protocol (NTP)
  • NTP master, client, version 3, version 4
  • NTP authentication
  • Configure and verify IPv4 and IPv6 DHCP
  • DHCP client, IOS DHCP server, DHCP relay
  • DHCP options (describe)
  • Configure and verify IPv4 Network Address Translation (NAT)
  • Static NAT, dynamic NAT, PAT
  • Describe IPv6 NAT
  • NAT64
  • NPTv6
  • Describe SLA architecture
  • Configure and verify IP SLA
  • ICMP
  • Configure and verify tracking objects
  • Tracking objects
  • Tracking different entities (for example, interfaces, IPSLA results)
  • Configure and verify Cisco Net Flow
  • Net Flow v5, v9
  • Local retrieval
  • Export (configuration only)

IP Switched Networks (300-115)

Layer 2 Technologies

  • Configure and verify switch administration
  • SDM templates
  • Managing MAC address table
  • Troubleshoot Err-disable recovery
  • Configure and verify Layer 2 protocols
  • CDP, LLDP
  • UDLD
  • Configure and verify VLANs
  • Access Ports
  • VLAN database
  • Normal, extended VLAN, voice VLAN
  • Configure and verify trucking
  • VTPv1, VTPv2, VTPv3, VTP pruning
  • dot1Q
  • Native VLAN
  • Manual pruning
  • Configure and verify Ether Channels
  • LACP, PAGP, manual
  • Layer 2, Layer 3
  • Load balancing
  • Ether Channel misconfiguration guard
  • Configure and verify spanning tree
  • PVST+, RPVST+, MST
  • Switch priority, port priority, path cost, STP Timers
  • Port Fast, BPDU guard, BPDU filter
  • Loop guard and Root guard
  • Configure and verify other LAN switching technologies
  • SPAN, RSPAN
  • Describe chassis virtualization and aggregation technologies
  • StackWise

Infrastructure Security

  • Configure and verify switch security features
  • DHCP snooping
  • IP Source Guard
  • Dynamic ARP inspection
  • Port security
  • Private VLAN
  • Describe device security using Cisco IOS AAA with TACACS+ and RADIUS
  • AAA with TACACS+ and RADIUS
  • Local privilege authorization fallback

Infrastructure Services

  • Configure and verify first-hop redundancy protocols
  • HSRP
  • VRRP
  • GLBP

Troubleshooting and Maintaining (300-135)

Network Principles

  • Use Cisco IOS troubleshooting tools
  • Debug, conditional debug
  • Ping and traceroute with extended options
  • Apply troubleshooting methodologies
  • Diagnose the root cause of networking issues (analyze symptoms, identify and describe root cause)
  • Design and implement valid solutions
  • Verify and monitor resolution

Layer 2 Technologies

  • Troubleshoot switch administration
  • SDM templates
  • Managing MAC address table
  • Troubleshoot Err-disable recovery
  • Troubleshoot Layer 2 protocols
  • CDP, LLDP
  • UDLD
  • Troubleshoot VLANs
  • Access Ports
  • VLAN database
  • Normal, extended VLAN, voice VLAN
  • Troubleshoot trucking
  • VTPv1, VTPv2, VTPv3, VTP pruning
  • dot1Q
  • Native VLAN
  • Manual pruning
  • Troubleshoot Ether Channels
  • LACP, PAGP, manual
  • Layer 2, Layer 3
  • Load balancing
  • Ether Channel misconfiguration guard
  • Troubleshoot spanning tree
  • PVST+, RPVST +, MST
  • Switch priority, port priority, path cost, STP Timers
  • Port Fast, BPDU guard, BPDU filter
  • Loop guard, Root guard
  • Troubleshoot other LAN switching technologies
  • SPAN, RSPAN
  • Troubleshoot chassis virtualization and aggregation technologies
  • Stack wise

Layer 3 Technologies

  • Troubleshoot IPv4 addressing and submitting
  • Address types (Unicast, broadcast, multicast, and VLSM)
  • ARP
  • DHCP relay and server
  • DHCP protocol operations
  • Troubleshoot IPv6 addressing and submitting
  • Unicast
  • EUI-64
  • ND, RS/RA
  • Autoconfigure (SLAAC)
  • DHCP relay and server
  • DHCP protocol operations
  • Troubleshoot static routing
  • Troubleshoot default routing
  • Troubleshoot administrative distance
  • Troubleshoot passive interfaces
  • Troubleshoot VRF Lite
  • Troubleshoot filtering with any protocol
  • Troubleshoot any routing protocols or routing sources
  • Troubleshoot manual and auto-summarization with any routing protocol
  • Troubleshoot policy-based routing
  • Troubleshoot suboptimal routing
  • Troubleshoot loop prevention mechanisms
  • Route tagging, filtering
  • Split-horizon
  • Route poisoning
  • Troubleshoot RIPv2
  • Troubleshoot EIGRP neighbor relationship and authentication
  • Troubleshoot loop-free path selection
  • RD, FD, FC, successor, feasible successor
  • Troubleshoot EIGPR operations
  • Stuck in active
  • Troubleshoot EIGRP stubs
  • Troubleshoot EIGRP load balancing
  • Equal cost
  • Unequal cost
  • Troubleshoot EIGRP metrics
  • Troubleshoot EIGRP for IPv6
  • Troubleshoot OSPF neighbor relationship and authentication
  • Troubleshoot network types, area types, and router types
  • Point-to-point, multipoint, broadcast, no broadcast
  • LSA types, area type: backbone, normal, transit, stub, NSSA, totally stub
  • Internal router, backbone router, ABR, ASBR
  • Virtual link
  • Troubleshoot OSPF path preference
  • Troubleshoot OSPF operations
  • Troubleshoot OSPF for IPv6
  • Troubleshoot BGP peer relationships and authentication
  • Peer group
  • Active, passive
  • States and timers
  • Troubleshoot EBGP
  • EBGP
  • 4-byte AS number
  • Private AS

VPN Technologies

  • Troubleshoot GRE

Infrastructure Security

  • Troubleshoot IOS AAA using local database
  • Troubleshoot device access control
  • Lines (VTY, AUX, console)
  • Management plane protection
  • Password encryption
  • Troubleshoot router security features
  • IPv4 access control lists (standard, extended, time-based)
  • IPv6 traffic filter
  • Unicast reverse path forwarding

Infrastructure Services

  • Troubleshoot device management
  • Console and VTY
  • Telnet, HTTP, HTTPS, SSH, SCP
  • (T)FTP
  • Troubleshoot SNMP
  • v2
  • v3
  • Troubleshoot logging
  • Local logging, Syslog, debugs, conditional debugs
  • Timestamps
  • Troubleshoot Network Time Protocol(NTP)
  • NTP master, client, version 3, version 4
  • NTP authentication
  • Troubleshoot IPv4 and IPv6 DHCP
  • DHCP client, IOS DHCP server, DHCP relay
  • DHCP options (describe)
  • Troubleshoot IPv4 Network Address Translation (NAT)
  • Static NAT, Dynamic NAT, PAT
  • Troubleshoot SLA architecture
  • Troubleshoot tracking objects
  • Tracking objects
  • Tracking different entities (for example, interfaces, IPSLA results)