CCNP Enterprise Certification Study Guide: Implementing and Operating Cisco Enterprise Network Core Technologies

ABOUT THE AUTHOR Ben Piper is an IT consultant who has created more than 20 training courses, covering Cisco routing and switching, Amazon Web Services, Puppet configuration management, and Windows Server Administration. He is the co-author of AWS Certified Cloud Practitioner Study Guide: Foundational (CLF-C01) Exam, AWS Certified Solutions Architect Study Guide: Associate (SAA-C01) Exam, AWS Certified SysOps Administrator Practice Tests: Associate (SOA-C01) Exam, and Learn Cisco Network Administration in a Month of Lunches.

• Introduction xxiAssessment Test xxviiiChapter 1 Networking Fundamentals 1The OSI Model 2The Upper Layers: Application, Presentation, and Session 4Making Sense of Layers 4The Lower Layers: Physical, Data Link, Network, and Transport 6Layer 1: The Physical Layer 7Layer 2: The Data Link Layer 8A Brief History of Ethernet 8The MAC Address Table 10Maximum Transmission Unit 12Subnet Limits 12Layer 3: The Network Layer 13Forwarding within a Subnet 14Forwarding between Subnets 14Address Resolution Protocol 16Fragmentation 17Routing vs. Forwarding 18Layer 4: The Transport Layer 18Transmission Control Protocol 19Encapsulation and Decapsulation 21Summary 22Exam Essentials 22Review Questions 24Chapter 2 Spanning Tree Protocols 29The Need for Spanning Tree 31VLANs and Trunking 32Dynamic Trunking 34Unconditional Trunking 35Active and Allowed VLANs 36Rapid Per-VLAN Spanning Tree 38Electing the Root Bridge 38Calculating the Root Ports 41Calculating the Root Ports of Indirectly Connected Switches 44Modifying Port Cost 46Modifying Port Priority 47Calculating Blocked Ports 48Port States 49Port Roles 49Link Types 49Multiple Spanning Tree 50Root Bridges and Port Priority 52Internal Spanning Tree 53Native VLAN 54Topology Change Detection 55Spanning Tree Extensions 55Root Guard 55BPDU Guard and BPDU Filter 57Unidirectional Link Detection 58Loop Guard 58Summary 58Exam Essentials 59Exercises 60Review Questions 62Chapter 3 Enterprise Network Design 67Physical Network Architectures 68Comparing Campus and Data Center Networks 69The Three-Tier Architecture 70The Two-Tier Collapsed Core: A Cheaper Alternative 73Layer 2 Design 74Switched and Routed Interfaces 75Switched Topologies 76Routed Access Topology 81EtherChannels 82Load-Balancing Methods 83Static EtherChannels 84Port Aggregation Control Protocol 88Link Aggregation Control Protocol 90First-Hop Redundancy Protocols 91Hot Standby Router Protocol 92Virtual Router Redundancy Protocol 94Gateway Load-Balancing Protocol 95Summary 97Exam Essentials 98Review Questions 100Chapter 4 Wireless LAN (WLAN) 105Radio Frequency Fundamentals 106Frequency and Amplitude 107Carrier Frequency 109Power Levels 110WLAN 802.11 Standards 115The Physical Layer: Frequencies and Channels 115Layer 2: 802.11 Media Access Control (MAC) 119Access Point Modes 124Autonomous 124Lightweight 124Wireless LAN Controller Selection Process 125Roaming and Location Services 126Roaming 126Location Services 128Summary 128Exam Essentials 129Review Questions 130Chapter 5 Open Shortest Path First (OSPF) 135Link-State Advertisements 136OSPF Areas 137LSA Types 137Neighbor Operations 141Configuring OSPF 142Configuring Area 0 on a Broadcast Network 142Viewing Neighbor Adjacencies 143Rigging the Designated Router Election 144Viewing and Understanding LSAs 146Authentication 154Passive Interfaces 158Injecting a Default Route 159Inter-Area Summarization 161Route Filtering 162Distribute Lists 162Summary 163Exam Essentials 164Exercises 164Review Questions 166Chapter 6 Enhanced Interior Gateway Routing Protocol (EIGRP) 171EIGRP Fundamentals 172EIGRP Packet Types 172The Diffusing Update Algorithm (DUAL) 173Weighted Metrics 176Configuring EIGRP 178Equal Cost Multipathing 181Modifying Metrics 182Switching Types 186Unequal Cost Multipathing 187Summary 190Exam Essentials 190Exercises 191Review Questions 192Chapter 7 The Border Gateway Protocol (BGP) 197BGP Fundamentals 198BGP AS Numbers 199BGP Session States 201Configuring BGP 202Advertising Prefixes 204Path Selection 205Route Redistribution among BGP, OSPF, and EIGRP 210Testing IP Reachability Using Tcl Scripts 214Troubleshooting 215Modifying Weight 218Advertising Summary Routes Using Route Aggregation 220Route Filtering Using Route Maps and Prefix Lists 222Summary 225Exam Essentials 226Exercises 226Review Questions 228Chapter 8 Network Address Translation and Multicast 233Network Address Translation 234Address Types 234Static NAT 236Dynamic NAT 241NAT Overload with Port Address Translation 247Outside Static NAT 250Removing NAT Configurations 251Multicast 252IP Multicast 253LAN Multicast 253Multicast Routing 257Configuring PIM 258Configuring a Multicast Receiver 262IP Multicast and Ethernet 264Summary 265Exam Essentials 267Exercises 268Review Questions 270Chapter 9 Quality of Service 275Understanding Quality of Service 276Classification and Marking 277Differentiated Services 277Layer 2 Marking 280Class Maps and Policy Maps 280Wireless QoS 281Policing 284Single-Rate, Two-Color Policing 284Single-Rate, Three-Color Policing 285Two-Rate Policing 287Queuing 288Class-Based Weighted Fair Queuing 288Low-Latency Queuing 293Explicit Congestion Notification 295Shaping 295Summary 297Exam Essentials 297Exercises 298Review Questions 299Chapter 10 Network Virtualization 303Virtual Machines, Hypervisors, and Network Virtualization 304Virtual Machines and Server Virtualization 305Network Virtualization 307Generic Routing Encapsulation Tunnels 312Configuring a GRE Tunnel to Tunnel IPv4 and IPv6 over IPv4 312Recursive Routing 318IP Security 319Internet Key Exchange 320Encapsulating Security Payload 320Configuring IPsec in Transport Mode with a GRE Tunnel 321Configuring IPsec in Tunnel Mode 324Location/ID Separation Protocol 326LISP Terminology 328Configuring LISP 328Simulating IP Mobility 332Is LISP a Routing Protocol? 334Virtual Extensible Local Area Network 334MAC Address Learning 335Forwarding 335Configuring VXLAN 336VXLAN Control Planes 336Configuring the Underlay 337Configuring the Overlay 338Configuring R1 and R2 339Virtual Routing and Forwarding 340Configuring a VRF 340Configuring Multi-VRF EIGRP 342Summary 345Exam Essentials 345Exercises 346Review Questions 347Chapter 11 Software-Defined Networking and Network Programmability 353What Is Software-Defined Networking? 355Software-Defined Access 356SD-Access Layers 357Physical Layer 357Network Underlay 358Fabric Overlay 359Controller Layer 363Management Layer 364Software-Defined WAN 369vManage Network Management System 370vSmart Controller 370vBond Orchestrator 371vEdge Routers 371Network Programmability and Automation 372The Cisco DNA Center Intent API 372vManage REST API 379NETCONF 383Embedded Event Manager 386Configuration Management Platforms 388Summary 391Exam Essentials 391Exercises 392Review Questions 393Chapter 12 Network Security and Monitoring 397Infrastructure Security 398Device Access 399Authentication, Authorization, and Accounting 402Access Control Lists 407Control Plane Policing 412Cisco Security Products 414AnyConnect Secure Mobility Client 414Umbrella 414Advanced Malware Protection ThreatGrid 414Advanced Malware Protection for Endpoints 415Firepower Next-Generation Firewall 415TrustSec 416MAC Security 418Wireless Security 418WebAuth 418Configuring WPA2 with 802.1X 422Configuring 802.1X on the Client 422Configure Preshared Keys 424Monitoring 425Conditional Debugs 425Simple Network Management Protocol (SNMP) 425Syslog 426Network Time Protocol 428NetFlow and Flexible NetFlow 429Switched Port Analyzer 432IP Service Level Agreement 434Summary 436Exam Essentials 437Exercises 438Review Questions 439Appendix Answers to Review Questions 443Chapter 1: Networking Fundamentals 444Chapter 2: Spanning Tree Protocols 445Chapter 3: Enterprise Network Design 447Chapter 4: Wireless LAN (WLAN) 448Chapter 5: Open Shortest Path First (OSPF) 450Chapter 6: Enhanced Interior Gateway Routing Protocol (EIGRP) 451Chapter 7: The Border Gateway Protocol (BGP) 453Chapter 8: Network Address Translation and Multicast 454Chapter 9: Quality of Service 456Chapter 10: Network Virtualization 457Chapter 11: Software-Defined Networking and Network Programmability 459Chapter 12: Network Security and Monitoring 460Index 463

Select Guide Rating