Network Assurance

• Diagnose network problems using tools such as debugs, conditional debugs, trace route, ping, SNMP, and syslog

• Configure and verify device monitoring using syslog for remote logging 2019 Cisco Systems, Inc. This document is Cisco Public. Page 3

• Configure and verify NetFlow and Flexible NetFlow

• Configure and verify SPAN/RSPAN/ERSPAN

• Configure and verify IPSLA

• Describe Cisco DNA Center workflows to apply network configuration, monitoring, and management

• Configure and verify NETCONF and RESTCONF

Configure and verify device access control

• Lines and password protection

• Authentication and authorization using AAA

Configure and verify infrastructure security features

• ACLs

• CoPP

Describe REST API security

Configure and verify wireless security features

• EAP

• WebAuth

• PSK

Describe the components of network security design

• Threat defence

• Endpoint security

• Next-generation firewall

• Trust Sec, MAC sec

• Network access control with 802.1X, MAB, and Web Auth

Automation

• Interpret basic Python components and scripts

• Construct valid JSON encoded file

• Describe the high-level principles and benefits of a data modeling language, such as YANG

• Describe APIs for Cisco DNA Center and vManage

• Interpret REST API response codes and results in payload using Cisco DNA Center and RESTCONF

• Construct EEM applet to automate configuration, troubleshooting, or data collection

• Compare agent vs. agentless orchestration tools, such as Chef, Puppet, Ansible, and SaltStack

300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Layer 3 Technologies

• Troubleshoot administrative distance (all routing protocols)

• Troubleshoot route map for any routing protocol (attributes, tagging, filtering)

• Troubleshoot loop prevention mechanisms (filtering, tagging, split horizon, route

• poisoning)

• Troubleshoot redistribution between any routing protocols or routing sources

• Troubleshoot manual and auto-summarization with any routing protocol

• Configure and verify policy-based routing

• Configure and verify VRF-Lite

• Describe Bidirectional Forwarding Detection

Troubleshoot EIGRP (classic and named mode)

• Address families (IPv4, IPv6)

• Neighbour relationship and authentication

• Loop-free path selections (RD, FD, FC, successor, feasible successor, stuck in

• active)

• Stubs

• Load balancing (equal and unequal cost)

• Metrics

Troubleshoot OSPF (v2/v3)

• Address families (IPv4, IPv6)

• Neighbour relationship and authentication

• Network types, area types, and router types

• Point-to-point, multipoint, broadcast, non-broadcast

• Area type backbone, normal, transit, stub, NSSA, totally stub

• Internal router, backbone router, ABR, ASBR

• Virtual link

• Path preference

Troubleshoot BGP (Internal and External)

Address families (IPv4, IPv6)

Neighbor relationship and authentication (next-hop, mulithop, 4-byte AS, private

AS, route refresh, synchronization, operation, peer group, states and timers)

Path preference (attributes and best-path)

Route reflector (excluding multiple route reflectors, confederations, dynamic

peer)

Policies (inbound/outbound filtering, path manipulation)

VPN Technologies

• Describe MPLS operations (LSR, LDP, label switching, LSP)

• Describe MPLS Layer 3 VPN

• Configure and verify DMVPN (single hub)
• GRE/mGRE
• NHRP
• IPsec
• Dynamic Neighbor
• Spoke-to-spoke

Infrastructure Services

• Troubleshoot device security using IOS AAA (TACACS+, RADIUS, local database)

• Troubleshoot router security features
• IPv4 access control lists (standard, extended, time-based)
• IPv6 traffic filter
• Unicast reverse path forwarding (uRPF)

• Troubleshoot control plane policing (CoPP) (Telnet, SSH, HTTP(S), SNMP, EIGRP, OSPF, BGP)

• Describe IPv6 First Hop security features (RA guard, DHCP guard, binding table, ND inspection/snooping, source guard)

Troubleshoot Device Management

• Console and VTY

• Telnet, HTTP, HTTPS, SSH, SCP

• (T)FTP

Troubleshoot SNMP (v2c, v3)

Troubleshoot network problems using logging (local, syslog, debugs, conditional debugs, timestamps)

Troubleshoot IPv4 and IPv6 DHCP (DHCP client, IOS DHCP server, DHCP relay, DHCP options)

Troubleshoot network performance issues using IP SLA (jitter, tracking objects, delay, connectivity)

Troubleshoot NetFlow (v5, v9, flexible NetFlow) Troubleshoot network problems using Cisco DNA Center assurance (connectivity, monitoring, device health, network health)