CCNP Enterprise Bootcamp

• 2-tier, 3-tier, fabric and cloud designs [1.1.a]
• Redundancy, FHRP and SSO [1.1.b]
• Where QoS and overlays fit in the design [1.4]

LAB Find the single points of failure in a three-tier campus

• Static and dynamic 802.1Q trunks with DTP [3.1.a]
• Native VLAN and allowed-list faults [3.1.a]
• Diagnosing with show, ping and syslog [4.1]

LAB Repair three broken trunks

• LACP, PAgP and static bundles [3.1.b]
• Mismatches that suspend members [3.1.b]
• EtherChannel as a redundancy tool [1.1.b]

LAB Bring a suspended bundle back up

• RSTP roles, states and root placement [3.1.c]
• Root guard and BPDU guard [3.1.c]
• Reading STP debugs [4.1]

LAB Move the root bridge and protect the edge

• MST regions, instances and VLAN mapping [3.1.c]
• MST and RSTP interoperation [3.1.c]
• Mapping errors that split a region [3.1.c]

LAB Build a two-instance MST region

• Type 1 and type 2 hypervisors [2.1.a]
• Virtual machines [2.1.b]
• Virtual switching [2.1.c]

LAB Trace a frame from a VM through a virtual switch

• Advanced distance vector vs link state [3.2.a]
• Metrics, path selection and load balancing [3.2.a]
• Administrative distance across sources [ENARSI 1.1]

LAB Predict which source wins the routing table

• IPv4 and IPv6 address families [ENARSI 1.9.a]
• Neighbors and authentication [ENARSI 1.9.b]
• EIGRP metrics [ENARSI 1.9.f]

LAB Convert classic EIGRP to named mode with authentication

• RD, FD, FC, successor and feasible successor [ENARSI 1.9.c]
• Stuck in active [ENARSI 1.9.c]
• Stubs [ENARSI 1.9.d]
• Equal and unequal cost load balancing [ENARSI 1.9.e]

LAB Add a feasible successor and load balance unequally

• Adjacency and network types [3.2.b]
• Passive interfaces [3.2.b]
• Internal, backbone, ABR and ASBR roles [ENARSI 1.10.c]

LAB Build a three-area OSPF network

• Stub, totally stubby and NSSA areas [ENARSI 1.10.c]
• Virtual links [ENARSI 1.10.c]
• Intra-area, inter-area and external paths [ENARSI 1.10.d]

LAB Repair a discontiguous area with a virtual link

• Nonbroadcast and multipoint networks [ENARSI 1.10.c]
• Neighbor authentication [ENARSI 1.10.b]
• OSPFv3 address families [ENARSI 1.10.a]
• Summarization and filtering [3.2.b]

LAB Run OSPFv3 for IPv4 and IPv6 with summarization

• Split horizon, route poisoning and tagging [ENARSI 1.3]
• Manual and auto-summarization [ENARSI 1.5]
• Bidirectional Forwarding Detection [ENARSI 1.8]

LAB Find the summary that blackholes traffic

• Matching, setting attributes and tagging [ENARSI 1.2]
• Filtering with route maps [ENARSI 1.2]
• Distribute lists vs route maps [ENARSI 1.2]

LAB Filter a route from one neighbor only

• Redistributing between EIGRP, OSPF and static [ENARSI 1.4]
• Seed metrics and distance traps [ENARSI 1.1]
• Tagging to stop feedback loops [ENARSI 1.3]

LAB Fix a two-point redistribution loop

• Directly connected eBGP neighbors [3.2.c]
• Neighbor states, timers and authentication [ENARSI 1.11.b]
• IPv4 and IPv6 address families [ENARSI 1.11.a]

LAB Peer an enterprise edge with two ISPs

• The best path algorithm step by step [3.2.c]
• Weight, local preference, AS path and MED [ENARSI 1.11.c]
• Reading the BGP table [ENARSI 1.11.c]

LAB Prefer one ISP for outbound traffic

• next-hop-self, multihop and peer groups [ENARSI 1.11.b]
• 4-byte and private AS numbers [ENARSI 1.11.b]
• Route reflector design [ENARSI 1.11.d]

LAB Replace an iBGP full mesh with a route reflector

• Inbound and outbound filtering [ENARSI 1.11.e]
• Path manipulation [ENARSI 1.11.e]
• Route refresh and soft reset [ENARSI 1.11.b]

LAB Steer inbound traffic with AS path prepending

• PBR concepts and configuration [3.2.d, ENARSI 1.6]
• VRF and VRF-Lite [2.2.a, ENARSI 1.7]
• EIGRP and BGP inside a VRF [ENARSI 1.9, 1.11]

LAB Split guest and corporate traffic with VRF-Lite

• HSRP and VRRP [3.3.c]
• NTP and PTP configurations [3.3.a]
• NAT and PAT [3.3.b]

LAB Fail over a gateway pair without losing NAT

• IPv4 and IPv6 DHCP server, client and relay [ENARSI 4.4]
• Console and VTY [ENARSI 4.1.a]
• SSH, HTTPS and SCP [ENARSI 4.1.b]
• TFTP and FTP [ENARSI 4.1.c]

LAB Fix a relay that hands out no leases

• IGMP v2/v3 and the RPF check [3.3.d]
• PIM sparse mode and SSM [3.3.d]
• Bidir PIM and MSDP [3.3.d]

LAB Follow a multicast stream through a PIM domain

• Classification and marking [1.4]
• Queuing, policing and shaping [1.4]
• Reading MQC policies [1.4]

LAB Interpret a voice QoS policy and find its error

• GRE and IPsec tunneling [2.2.b]
• mGRE [ENARSI 2.3.a]
• NHRP [ENARSI 2.3.b]

LAB Build a protected GRE tunnel between two sites

• IPsec protection for DMVPN [ENARSI 2.3.c]
• Dynamic neighbors [ENARSI 2.3.d]
• Spoke-to-spoke tunnels [ENARSI 2.3.e]

LAB Bring up a single-hub DMVPN with spoke-to-spoke traffic

• MPLS operations: LSR, LDP and LSP [ENARSI 2.1]
• MPLS Layer 3 VPN [ENARSI 2.2]
• LISP [2.3.a]
• VXLAN [2.3.b]

LAB Trace a label stack across a provider core

• SD-Access control and data planes [1.3.a]
• Traditional campus with SD-Access [1.3.b]
• SD-WAN control and data planes [1.2.a]
• SD-WAN benefits and limitations [1.2.b]

LAB Map traffic through a fabric and an SD-WAN overlay

• Lines and local users [5.1.a]
• AAA authentication and authorization [5.1.b]
• TACACS+ and RADIUS troubleshooting [ENARSI 3.1]

LAB Lock down VTY access with AAA and a local fallback

• Standard, extended and time-based ACLs [5.2.a, ENARSI 3.2.a]
• IPv6 traffic filters [ENARSI 3.2.b]
• uRPF [ENARSI 3.2.c]
• CoPP [5.2.b, ENARSI 3.3]

LAB Protect the control plane without breaking OSPF

• RA guard, DHCP guard and source guard [ENARSI 3.4]
• Threat defense, endpoint security and NGFW [5.4.a, 5.4.b, 5.4.c]
• TrustSec and MACsec [5.4.d]

LAB Block a rogue router advertisement

• Debugs, conditional debugs and syslog [4.1, ENARSI 4.3]
• SNMP v2c and v3 [ENARSI 4.2]
• SPAN, RSPAN and ERSPAN [4.3]

LAB Capture a failing flow with RSPAN

• Flexible NetFlow [4.2, ENARSI 4.6]
• IP SLA with tracking [4.4, ENARSI 4.5]
• Catalyst Center assurance and AI workflows [4.5, ENARSI 4.7]

LAB Fail over a static route with IP SLA tracking

• Python components and scripts [6.1]
• JSON [6.2]
• YANG [6.3]
• NETCONF and RESTCONF [4.6]

LAB Read and change interface data with RESTCONF

• Catalyst Center and SD-WAN Manager APIs [6.4]
• REST response codes and API security [6.5, 5.3]
• EEM applets [6.6]
• Agent vs agentless tools [6.7]

LAB Write an EEM applet that collects data on a flap

• Weak-domain review (ENCOR 1.0 to 6.0)
• ENARSI troubleshooting drill (1.0 to 4.0)
• Exam timing strategy
• Full-length practice exams

LAB Timed ENCOR and ENARSI practice exams