CCIE Enterprise Infrastructure

VTP and different versions

Pruning

LACP

Layer 2 and Layer 3

1d, 802.1w, and 802.1s

All Phases

Redundancy:

Two Clouds One Hub

Two Hubs one Cloud

Two hubs two Clouds

RD, CD, S, FC, FS, and FD

Configuration, and hidden debugging

Authentications: MD5, and SHA, Summarization

Load Balancing:Equal Cost, Unequal Cost, Add-Path, Filtering, Default Route Injection

Optimization: Query Propagation Boundary, IP FRR, STUB routing (All Options)

Metric: Classic, Wide Metric

Route Tags: Decimal and Dotted-Decimal Notations, OTP

Overview and special cases

GRE or Virtual-Links

LSAs, FA, and RFCs (1583, 1587, 2328, 3101, 5185 and many more)

Best Path Selection

Network Types

Area Types

Optimization: GTSM, LFA, Default Route Injection

Authentication: RFC 2328, RFC 5709, Summarization, Filtering

States

Establishing a Peer Session: Regular method,Peer-Groups,Templates,Best Path Selection

Attributes: Weight, AS-Path, Origin, Next-Hop, Local-Preference, Atomic-Aggregate Communities, Aggregator, and MED

Load Balancing: Equal Cost,Unequal Cost,Conditional Advertisement,Out/In Bound Route Filtering and the order,ORF,Multihoming Scenarios

AS-Path Manipulation: Regexp,Local-as,Allow-as,Remove-Private-as

Convergence and Scalability: Route Reflectors,Confederation,Aggregation (All Options)

Other BGP Features: MultiPath,Add-Path,Route-Refresh,Soft Reconfiguration

Acquiring an IPv6 Address:

IPv6 General Prefix

SLAAC

DHCPv6

Rapid-Commit

Relay

Prefix Delegation

IPv6 and DMVPN

EIGRPv6

OSPFv3: Both flavors, LSAs, RFCs

BGP for IPv6: IPv6 transport, and IPv4 route exchange

Transitional Solutions: NAT-PT,6VPE,Multicast,MLD,Static RP,BSR,Embedded RP,IPv6 Traffic Filters,RA Guard,ND Inspection

LDP, VRFs, RD, and RT

L3VPNs

Route Leaking

PE to CE Routing

Control Plane Policing

VACLs

Storm Control

DHCP Snooping

IP Source Guard

DAI

Private VLANs

Port Security

Access-lists

uRPF

Device Tracking

IPsec

Identity Use Case For FlexVPN: Site-to-Site, IKEv1, and IKEv2 Using Preshared Keys

1x Port Base Authentication : Device Roles,Port States,Authentication Process,Host Modes

FHRP: HSRP, VRRP, and GLBP

NAT: Static NAT, and PAT,Dynamic NAT,Policy-Base NAT,VRF-Aware NAT,VASI NAT

Cisco SD Access:

Design a Cisco SD Access solution

Underlay network (IS-IS, manual/PnP)

Overlay fabric design (LISP, VXLAN, Cisco TrustSec)

Fabric domains (single-site and multi-site using SD-WAN transit)

Cisco SD Access deployment:

Cisco DNA Center device discovery and device management

Add fabric node devices to an existing fabric

Host onboarding (wired endpoints only)

Fabric border handoff

Segmentation

Macro-level segmentation using VNs

Micro-level segmentation using SGTs (using Cisco ISE)

Assurance

Network and client health (360)

Monitoring and troubleshooting

Cisco SD-WAN:

Design a Cisco SD-WAN solution

Orchestration plane (vBond, NAT)

Management Plane (vManage)

Control Plane (vSmart, OMP)

Data Plane (vEdge/cEdge)

WAN edge deployment

Onboarding new edge routers

Orchestration with zero-touch provisioning/PnP

OMP

TLOC

Configuration templates

Localized policies (only QoS)

Centralized policies

Application aware Routing

Topologies