CCIE Enterprise Infrastructure (v1.0) Exam Topics – Practical Exam

1. Network Infrastructure

• 1 Switched campus
  • 1.a Switch administration
  • 1.a i Managing MAC address table
  • 1.a ii Errdisable recovery
  • 1.a iii L2 MTU
  • 1.b Layer 2 protocols
  • 1.b i CDP, LLDP
  • 1.b ii UDLD
  • 1.c VLAN technologies
  • 1.c i Access ports
  • 1.c ii Trunk ports (802.1Q)
  • 1.c iii Native VLAN
  • 1.c iv Manual VLAN pruning
  • 1.c v VLAN database
  • 1.c vi Normal range and extended range VLANs
  • 1.c vii Voice VLAN
  • 1.c viii VTP
  • 1.d EtherChannel
  • 1.d i LACP, static
  • 1.d ii Layer 2, Layer 3
  • 1.d iii Load balancing
  • 1.d iv EtherChannel Misconfiguration Guard
  • 1.e Spanning- Tree Protocol
  • 1.e i PVST+, Rapid PVST+, MST
  • 1.e ii Switch priority, port priority, path cost, STP timers
  • 1.e iii PortFast, BPDU Guard, BPDU Filter
  • 1.e iv Loop Guard, Root Guard

1.2 Routing Concepts

• 2.a Administrative distance
• 2.b VRF-lite
• 2.c Static routing
• 2.d Policy Based Routing
• 2.e VRF aware routing with any routing protocol
• 2.f Route filtering with any routing protocol
• 2.g Manual summarization with any routing protocol
• 2.h Redistribution between any pair of routing protocols
• 2.i Routing protocol authentication
• 2.j Bidirectional Forwarding Detection

1.3 EIGRP

• 3.a Adjacencies
• 3.b Best path selection
• 3.b i RD, FD, FC, successor, feasible successor
• 3.b ii Classic Metrics and Wide Metrics
• 3.c Operations
• 3.c i General operations
• 3.c ii Topology table
• 3.c iii Packet types
• 3.c iv Stuck In Active
• 3.c v Graceful shutdown
• 3.d EIGRP load-balancing
• 3.d i Equal-cost
• 3.d ii Unequal-cost
• 3.d iii Add-path
• 3.e EIGRP Named Mode
• 3.f Optimization, convergence and scalability
• 3.f i Fast convergence requirements
• 3.f ii Query propagation boundaries
• 3.f iii IP FRR (single hop)
• 3.f iv Leak-map with summary routes
• 3.f v EIGRP stub with leak map

1.4 OSPF (v2 and v3)

• 4.a Adjacencies
• 4.b Network types, area types
• 4.c Path preference
• 4.d Operations
• 4.d i General operations
• 4.d ii Graceful shutdown
• 4.d iii GTSM (Generic TTL Security Mechanism)
• 4.e Optimization, convergence and scalability
• 4.e i Metrics
• 4.e ii LSA throttling, SPF tuning, fast hello
• 4.e iii LSA propagation control (area types)
• 4.e iv Stub router
• 4.e v Loop-free alternate
• 4.e vi Prefix suppression

1.5 BGP

• 5.a IBGP and EBGP peer relationships
• 5.a i Peer-group/update-group, template
• 5.a ii Active, passive
• 5.a iii Timers
• 5.a iv Dynamic neighbors
• 5.a v 4-bytes AS numbers
• 5.a vi Private AS
• 5.b Path selection
• 5.b i Attributes
• 5.b ii Best path selection algorithm
• 5.b iii Load-balancing
• 5.c Routing policies
• 5.c i Attribute manipulation
• 5.c ii Conditional advertisement
• 5.c iii Outbound Route Filtering
• 5.c iv Standard and extended communities
• 5.c v Multi-homing
• 5.d AS path manipulations
• 5.d i local-AS, allowas-in, remove-private-as
• 5.d ii Prepend
• 5.d iii Regexp
• 5.e Convergence and scalability
• 5.e i Route reflector
• 5.e ii Aggregation, as-set
• 5.f Other BGP features
• 5.f i Multipath, add-path
• 5.f ii Soft reconfiguration, Route Refresh

1.6 Multicast

• 6.a Layer 2 multicast
• 6.a i IGMPv2, IGMPv3
• 6.a ii IGMP Snooping, PIM Snooping
• 6.a iii IGMP Querier
• 6.a iv IGMP Filter
• 6.a v MLD
• 6.b Reverse path forwarding check
• 6.c PIM
• 6.c i Sparse Mode
• 6.c ii Static RP, BSR, AutoRP
• 6.c iii Group to RP Mapping
• 6.c iv Bidirectional PIM
• 6.c v Source-Specific Multicast
• 6.c vi Multicast boundary, RP announcement filter
• 6.c vii PIMv6 Anycast RP
• 6.c viii IPv4 Anycast RP using MSDP
• 6.c ix Multicast multipath

• 0 Software Defined Infrastructure

.1 Cisco SD Access

• 1.a Design a Cisco SD Access solution
• 1.a i Underlay network (IS-IS, manual/PnP)
• 1.a ii Overlay fabric design (LISP, VXLAN, Cisco TrustSec)
• 1.a iii Fabric domains (single-site and multi-site using SD-WAN transit)
• 1.b Cisco SD Access deployment
• 1.b i Cisco DNA Center device discovery and device management
• 1.b ii Add fabric node devices to an existing fabric
• 1.b iii Host onboarding (wired endpoints only)
• 1.b iv Fabric border handoff
• 1.c Segmentation
• 1.c i Macro-level segmentation using VNs
• 1.c ii Micro-level segmentation using SGTs (using Cisco ISE)
• 1.d Assurance
• 1.d i Network and client health (360)
• 1.d ii Monitoring and troubleshooting

2.2 Cisco SD-WAN

• 2.a Design a Cisco SD-WAN solution
• 2.a i Orchestration plane (vBond, NAT)
• 2.a ii Management plane (vManage)
• 2.a iii Control plane (vSmart, OMP)
• 2.a iv Data plane (vEdge/cEdge)
• 2.b WAN edge deployment
• 2.b i Onboarding new edge routers
• 2.b ii Orchestration with zero-touch provisioning/Plug-And-Play
• 2.b iii OMP
• 2.b iv TLOC
• 2.c Configuration templates
• 2.d Localized policies
• 2.e Centralized policies

3.0 Transport Technologies and Solutions

• 1 MPLS
  • 1.a Operations
  • 1.a i Label stack, LSR, LSP
  • 1.a ii LDP
  • 1.a iii MPLS ping, MPLS traceroute
  • 1.b L3VPN
  • 1.b i PE-CE routing
  • 1.b ii MP-BGP VPNv4/VPNv6
  • 1.b iii Extranet (route leaking)

3.2 DMVPN

• 2.a Troubleshoot DMVPN Phase 3 with dual-hub
• 2.a i NHRP
• 2.a ii IPsec/IKEv2 using pre-shared key
• 2.a iii Per-Tunnel QoS
• 2.b Identify use-cases for FlexVPN
• 2.b i Site-to-site, Server, Client, Spoke-to-Spoke
• 2.b ii IPsec/IKEv2 using pre-shared key
• 2.b iii MPLS over FlexVPN

4.0 Infrastructure Security and Services

• 1 Device Security on Cisco IOS XE
  • 1.a Control plane policing and p rotection
  • 1.b AAA

4.2 Network Security

• 2.a Switch security features
• 2.a i VACL, PACL
• 2.a ii Storm control
• 2.a iii DHCP Snooping, DHCP option 82
• 2.a iv IP Source Guard
• 2.a v Dynamic ARP Inspection
• 2.a vi Port Security
• 2.a vii Private VLAN
• 2.b Router security features
• 2.b i IPv6 Traffic Filters
• 2.b ii IPv4 Access Control Lists
• 2.b iii Unicast Reverse Path Forwarding
• 2.c IPv6 infrastructure security features
• 2.c i RA Guard
• 2.c ii DHCP Guard
• 2.c iii Binding table
• 2.c iv Device tracking
• 2.c v ND Inspection/Snooping
• 2.c vi Source Guard
• 2.d IEEE 802.1X Port-Based Authentication
• 2.d i Device roles, port states
• 2.d ii Authentication process
• 2.d iii Host modes

4.3 System Management

• 3.a Device management
• 3.a i Console and VTY
• 3.a ii SSH, SCP
• 3.a iii RESTCONF, NETCONF
• 3.b SNMP
• 3.b i v2c
• 3.b ii v3
• 3.c Logging
• 3.c i Local logging, syslog, debugs, conditional debugs
• 3.c ii Timestamps

4.4 Quality of Service

• 4.a End to end L3 QoS using MQC
• 4.a i DiffServ
• 4.a ii CoS and DSCP Mapping
• 4.a iii Classification
• 4.a iv Network Based Application Recognition (NBAR)
• 4.a v Marking using IP Precedence, DSCP, CoS
• 4.a vi Policing, shaping
• 4.a vii Congestion management and avoidance
• 4.a viii HQoS, Sub-rate Ethernet Link

4.5 Network Services

• 5.a First-Hop Redundancy Protocols
• 5.a i HSRP, GLBP, VRRP
• 5.a ii Redundancy using IPv6 RS/RA
• 5.b Network Time Protocol
• 5.b i Master, client
• 5.b ii Authentication
• 5.c DHCP on Cisco IOS
• 5.c i Client, server, relay
• 5.c ii Options
• 5.c iii SLAAC/DHCPv6 interaction
• 5.c iv Stateful, stateless DHCPv6
• 5.c v DHCPv6 Prefix Delegation
• 5.d IPv4 Network Address Translation
• 5.d i Static NAT, PAT
• 5.d ii Dynamic NAT, PAT
• 5.d iii Policy-based NAT, PAT
• 5.d iv VRF aware NAT, PAT
• 5.d v IOS-XE VRF-Aware Software Infrastructure (VASI) NAT

4.6 Network optimization

• 6.a IP SLA
• 6.a i ICMP probes
• 6.a ii UDP probes
• 6.a iii TCP probes
• 6.b Tracking object
• 6.c Flexible Netflow

4.7 Network operations

• 7.a Traffic capture
• 7.a i SPAN
• 7.a ii RSPAN
• 7.a iii ERSPAN
• 7.a iv Embedded Packet Capture
• 7.b Cisco IOS-XE troubleshooting tools
• 7.b i Packet Trace
• 7.b ii Conditional debugger (debug platform condition)

5.0 Infrastructure Automation and Programmability

• 1 Data encoding formats
  • 1.a JSON
  • 1.b XML

5.2 Automation and scripting

• 2.a EEM applets
• 2.b Guest shell
• 2.b i Linux environment
• 2.b ii CLI Python module
• 2.b iii EEM Python module

5.3 Programmability

• 3.a Interaction with vManage API
• 3.a i Python requests library and Postman
• 3.a ii Monitoring endpoints
• 3.a iii Configuration endpoints
• 3.b Interaction with Cisco DNA Center API
• 3.b i HTTP request (GET, PUT, POST) via Python requests library and Postman
• 3.c Interaction with Cisco IOS XE API
• 3.c i Via NETCONF/YANG using Python ncclient library
• 3.c ii Via RESTCONF/YANG using Python requests library and Postman
• 3.d Deploy and verify model-driven telemetry
• 3.d i Configure on-change subscription using gRPC