دروه CCNP R&S سیسکو

Architecture:

• Explain the different design principles used in an enterprise network
• Enterprise network design such as Tier 2, Tier 3, and Fabric Capacity planning
• High availability techniques such as redundancy, FHRP, and SSO
• Analyze design principles of a WLAN deployment
• Wireless deployment models (centralized, distributed, controller-less, controller based, cloud, remote branch)
• Location services in a WLAN design
• Differentiate between on-premises and cloud infrastructure deployments
• Explain the working principles of the Cisco SD-WAN solution
• SD-WAN control and data planes elements
• Traditional WAN and SD-WAN solutions
• Explain the working principles of the Cisco SD-Access solution
• SD-Access control and data planes elements
• Traditional campus interoperating with SD-Access
• Describe concepts of wired and wireless QoS
• QoS components
• QoS policy
• Differentiate hardware and software switching mechanisms
• Process and CEF
• MAC address table and TCAM
• FIB vs. RIB

Virtualization:

• Describe device virtualization technologies
• Hypervisor type 1 and 2
• Virtual machine
• Virtual switching
• Configure and verify data path virtualization technologies
• VRF
• GRE and IPsec tunneling
• Describe network virtualization concepts
• LISP
• VXLAN

Infrastructure:

• Troubleshoot static and dynamic 802.1q trunking protocols
• Troubleshoot static and dynamic EtherChannels
• Configure and verify common Spanning Tree Protocols (RSTP and MST)
• Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. link)
• state, load balancing, path selection, path operations, metrics)
• Configure and verify simple OSPF environments, including multiple normal
• areas, summarization, and filtering (neighbor adjacency, point-to-point and broadcast network types, and passive interface)
• Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships)
• Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference noise, band and channels, and wireless client devices capabilities
• Describe AP modes and antenna types
• Describe access point discovery and join process (discovery algorithms, WLC selection process)
• Describe the main principles and use cases for Layer 2 and Layer 3 roaming
• Troubleshoot WLAN configuration and wireless client connectivity issues
• IP Services
• Describe Network Time Protocol (NTP)
• Configure and verify NAT/PAT
• Configure first hop redundancy protocols, such as HSRP and VRRP
• Describe multicast protocols, such as PIM and IGMP v2/v3

Network Assurance:

• Diagnose network problems using tools such as debugs, conditional debugs, trace route,
• ping, SNMP, and syslog
• Configure and verify device monitoring using syslog for remote logging Cisco Systems, Inc. This document is Cisco Page
• Configure and verify NetFlow and Flexible NetFlow
• Configure and verify SPAN/RSPAN/ERSPAN
• Configure and verify IPSLA
• Describe Cisco DNA Center workflows to apply network configuration, monitoring, and management
• Configure and verify NETCONF and RESTCONF

Security:

• Configure and verify device access control
• Lines and password protection
• Authentication and authorization using AAA
• Configure and verify infrastructure security features
• ACLs
• CoPP
• Describe REST API security
• Configure and verify wireless security features
• EAP
• WebAuth
• PSK
• Describe the components of network security design
• Threat defense
• Endpoint security
• Next-generation firewall
• TrustSec, MACsec
• Network access control with 802.1X, MAB, and WebAuth

Automation:

• Interpret basic Python components and scripts
• Construct valid JSON encoded file
• Describe the high-level principles and benefits of a data modeling language, such as
• YANG
• Describe APIs for Cisco DNA Center and vManage
• Interpret REST API response codes and results in payload using Cisco DNA Center and
• RESTCONF
• Construct EEM applet to automate configuration, troubleshooting, or data collection
• Compare agent vs. agentless orchestration tools, such as Chef, Puppet, Ansible, and
• SaltStack

Layer 3 Technologies:

• Troubleshoot administrative distance (all routing protocols)
• Troubleshoot route map for any routing protocol (attributes, tagging, filtering)
• Troubleshoot loop prevention mechanisms (filtering, tagging, split horizon, route poisoning)
• Troubleshoot redistribution between any routing protocols or routing sources
• Troubleshoot manual and auto-summarization with any routing protocol
• Configure and verify policy-based routing
• Configure and verify VRF-Lite
• Describe Bidirectional Forwarding Detection
• Troubleshoot EIGRP (classic and named mode)
• Address families (IPv4, IPv6)
• Neighbor relationship and authentication
• Loop-free path selections (RD, FD, FC, successor, feasible successor, stuck in active)
• Stubs
• Load balancing (equal and unequal cost)
• Metrics
• Troubleshoot OSPF (v2/v3)
• Address families (IPv4, IPv6)
• Neighbor relationship and authentication
• Network types, area types, and router types
• Point-to-point, multipoint, broadcast, nonbroadcast
• Area type: backbone, normal, transit, stub, NSSA, totally stub
• Internal router, backbone router, ABR, ASBR
• Virtual link
• Path preference
• Troubleshoot BGP (Internal and External)
• Address families (IPv4, IPv6)
• Neighbor relationship and authentication (next-hop, mulithop, 4-byte AS, private AS, route refresh, synchronization, operation, peer group, states and timers)
• Path preference (attributes and best-path)
• Route reflector (excluding multiple route reflectors, confederations, dynamic peer)
• Policies (inbound/outbound filtering, path manipulation)

VPN Technologies:

• Describe MPLS operations (LSR, LDP, label switching, LSP)
• Describe MPLS Layer 3 VPN
• Configure and verify DMVPN (single hub)
• GRE/mGRE
• NHRP
• IPsec
• Dynamic neighbor
• Spoke-to-spoke

Infrastructure Security:

• Troubleshoot device security using IOS AAA (TACACS+, RADIUS, local database)
• Troubleshoot router security features
• IPv4 access control lists (standard, extended, time-based)
• IPv6 traffic filter
• Unicast reverse path forwarding (uRPF)
• Troubleshoot control plane policing (CoPP) (Telnet, SSH, HTTP(S), SNMP, EIGRP, OSPF, BGP)
• Describe IPv6 First Hop security features (RA guard, DHCP guard, binding table, ND inspection/snooping, source guard)

Infrastructure Services:

• Troubleshoot device management
• Console and VTY
• Telnet, HTTP, HTTPS, SSH, SCP
• (T)FTP
• Troubleshoot SNMP (v2c, v3)
• Troubleshoot network problems using logging (local, syslog, debugs, conditional debugs, timestamps)
• Troubleshoot IPv4 and IPv6 DHCP (DHCP client, IOS DHCP server, DHCP relay, DHCP options)
• Troubleshoot network performance issues using IP SLA (jitter, tracking objects, delay, connectivity)
• Troubleshoot NetFlow (v5, v9, flexible NetFlow)
• Troubleshoot network problems using Cisco DNA Center assurance (connectivity, monitoring, device health, network health)