CCNP Automation Bootcamp

• OpenConfig, IETF and native models [ENAUTO 1.1]
• Reading an RFC 8340 tree [ENAUTO 1.5]
• IaC vs low code vs custom apps [1.5]

LAB Map a VLAN requirement to the right YANG paths

• Protocol comparison [ENAUTO 1.2]
• JSON payloads with YANG Suite and pyang [ENAUTO 1.3]
• XML payloads [ENAUTO 1.4]
• YAML or JSON config from a YANG model [2.7]

LAB Build interface payloads in JSON and XML

• Pagination [1.6]
• Complex and persistent authentication [1.6]
• Rate limiting and error handling [1.6]

LAB Pull every device from a paginated, rate-limited API

• Netmiko config and show workflows [ENAUTO 2.1]
• Python for VLANs, OSPF and ACLs [1.4]
• Parsing command output [ENAUTO 2.1]

LAB Push VLANs to three switches and verify

• NETCONF sessions and edit-config [ENAUTO 2.2]
• Filters and get-config [ENAUTO 2.2]
• Troubleshooting NETCONF errors [ENAUTO 2.6]

LAB Configure OSPF over NETCONF

• RFC 8040 operations [1.3]
• Python with requests [ENAUTO 2.3]
• Troubleshooting RESTCONF and YANG errors [ENAUTO 2.6]

LAB Manage ACLs with RESTCONF and fix a 400 error

• Merge, squash and conflict resolution [2.1.a]
• cherry-pick [2.1.b]
• reset, checkout and revert [2.1.c, 2.1.d, 2.1.e]

LAB Recover a bad config commit three ways

• Playbooks for VLANs, OSPF, interfaces and ACLs [1.1]
• IOS XE resource modules [ENAUTO 2.4]
• Inventory and variables [1.1]

LAB Standardize interface settings across a site

• Providers, state and plan [1.2]
• Managing VLANs and ACLs [1.2]
• Detecting drift [1.2]

LAB Build and change a VLAN set with Terraform

• Docker Compose services, networks and volumes [2.5]
• CML topologies for testing [2.4]
• Enterprise topology simulation [ENAUTO 4.2]

LAB Run a toolchain in Compose against a CML lab

• Integrating a source of truth [2.6]
• Jinja2 loops, conditionals and filters [ENAUTO 3.3]
• Rendering configs from data [2.6]

LAB Render branch configs from a source of truth

• Build and prevalidation stages [2.3.a, 2.3.b]
• Deploy stage [2.3.c]
• Post-validation stage [2.3.d]

LAB Build a four-stage pipeline for a VLAN change

• Diagnosing pipeline failures [2.2]
• pyATS change validation [3.4]
• Platform APIs in testing [ENAUTO 4.1]

LAB Fix a failing pipeline and add a pyATS check

• Device-level Day 0 options [ENAUTO 2.5]
• Bootstrapping configs from templates [ENAUTO 2.5]
• Verifying the first boot [ENAUTO 2.5]

LAB Bring a new router online with zero touch

• EEM applets [ENAUTO 2.7]
• Guest shell [ENAUTO 2.7]
• On-box Python [ENAUTO 2.7]

LAB Save a backup automatically on every config change

• Telemetry architecture [3.1]
• Subscriptions by CLI, NETCONF and RESTCONF [ENAUTO 4.5]
• Choosing what to stream [3.1]

LAB Stream interface counters to a collector

• Day 0 with a controller [ENAUTO 3.1]
• Python against Catalyst Center [ENAUTO 3.2]
• Configuration templates [ENAUTO 3.3]

LAB Claim and provision a device through the API

• Image management [ENAUTO 4.3]
• Health monitoring [ENAUTO 4.4]
• Ansible against controllers [ENAUTO 3.4]

LAB Report devices that fail the golden image

• Python against SD-WAN Manager [ENAUTO 3.2]
• Health data [ENAUTO 4.4]
• REST troubleshooting [ENAUTO 3.6]

LAB List unhealthy tunnels across sites

• Organization and network calls [ENAUTO 3.2]
• Day 0 with Meraki [ENAUTO 3.1]
• Ansible for Meraki [ENAUTO 3.4]

LAB Build a new branch network from code

• Policy enforcement [ENAUTO 3.5]
• Compliance monitoring [ENAUTO 3.5]
• Segmentation through ISE APIs [ENAUTO 3.5]

LAB Quarantine an endpoint by API

• Webhook monitoring from controllers [ENAUTO 4.6]
• ThousandEyes data for change checks [ENAUTO 4.1]
• REST API troubleshooting [ENAUTO 3.6]

LAB Gate a change on a ThousandEyes test result

• Consuming the ACI REST API [1.6]
• Webex notifications as a log target [3.2]
• Picking the right tool [1.5]

LAB Post deployment results to a Webex space

• A logging strategy for syslog and webhooks [3.2]
• Diagnosing from logs and output [3.3]

LAB Trace a failed run from its logs

• Input validation [3.6]
• Authentication and secret management [3.6]
• CA-signed TLS certificates [3.5]

LAB Remove hardcoded secrets and add input checks

• NETCONF and RESTCONF faults [ENAUTO 2.6]
• REST API faults [ENAUTO 3.6]
• Pipeline faults [2.2]

LAB Repair three broken automations

• Benefits and risks: privacy, IP, validation [4.1]
• AI-assisted development [ENAUTO 5.2]
• AI in controller platforms [ENAUTO 5.1]

LAB Review AI-generated code and list its defects

• Interpreting AI solution risks [4.2]
• Risks in enterprise AI automation [ENAUTO 5.3]

LAB Threat model an AI change assistant

• MCP server design [4.3]
• Exposing network data to an agent [ENAUTO 5.4]
• Read-only safeguards [4.2]

LAB Build an MCP server that returns interface status

• An LLM agent for network tasks [4.4]
• Evaluating AI recommendations [4.5]

LAB Score an agent's answers against ground truth

• Choosing the approach [1.5]
• The full pipeline [2.3]
• pyATS validation [3.4]
• MCP integration [4.3]

LAB Ship a validated change from commit to production

• Weak-domain review (AUTOCOR 1.0 to 4.0)
• ENAUTO domain review (1.0 to 5.0)
• Exam timing strategy
• Full-length practice exams

LAB Timed AUTOCOR and ENAUTO practice exams