CCNP Enterprise Core

Open, scrollable catalog. Use the jump links or simply scan the chips below.

IP Services SD-WAN SDA Intra-AS MPLS VPNs VPN & Crypto Data Center (Nexus) Switching Routing (OSPF/BGP/EIGRP) Device Admin (TACACS+/ISE) Wireless FTD Intro

IP Services

Core services you deploy on real networks.

Infrastructure Services

ZBF overview & placement First-Hop Redundancy (HSRP/VRRP/GLBP) DHCP server & relay Network Time Protocol (NTP) AAA basics (local / RADIUS / TACACS+) IP SLA use-cases NAT / PAT designs OSPF service integration

SD-WAN

End-to-end workflow: controllers, onboarding, templates & policies.

Getting Started

What is SD-WAN? Control/management/data planes Controller footprint & options WAN Edge choices (vEdge/cEdge) VPNs & VRFs on fabric nodes

Controller Bring-up

Enterprise CA installation vManage init (CLI/GUI) vBond init & registration vSmart init & registration Edge registration workflow

Templates & Device Onboarding

Templates 101 Feature — System/Banner Feature — VPN0 / VPN512 Feature — OSPF (VPN0) Device Templates — Branch vEdge Internal routing (HQ & branches) Service VPN build & rollout OMP/TLOC/ECMP flow & tests HQ vEdge templates (VPN 0/1/512) CSR templates (VPN 0/1 + OSPF)

Policies & Traffic Engineering

Policy framework overview App-Aware Policy (Telnet/Web) App-Aware Policy with DPI TLOC steering & failover Route filtering Hub-and-Spoke via TLOC Direct Internet Access (DIA)

Scaling & NAT Scenarios

Multi-edge / multi-transport TLOC extensions Edges behind NAT

QoS & Localized Policies

QoS concepts in SD-WAN Building custom components Schedulers & queues Applying localized policy Interface params via templates

Software-Defined Access (SDA)

Fabric concepts, DNAC + ISE integration, design → discovery → provisioning.

Fundamentals

SDN & SDA concepts SDA vs. ACI (compare) Control & data planes Shared services & external reach Virtual Networks & macro-segmentation Roles & components

DNAC & ISE Integration

Integration overview Configure DNAC ↔ ISE Border & Fusion initial configs

Design & Discovery

Sites/buildings hierarchy Servers: AAA/NTP Credentials & IP pools Discover seed device Assign to site & provision Underlay for manual discovery Discover edge nodes Cleanup for LAN automation Enable LAN automation Reserve overlay/underlay pools

Provision & Policy

Create VNs & transit (L3 handoff) Host onboarding Provision control-border Provision edges Fusion ↔ border alignment Users & groups in ISE Auth profiles & policies DHCP for clients Validate macro-segmentation Create SGTs Policy using SGTs Default contract (deny-all) SGACL (contract) build & apply

Multicast & QoS

Concise labs and validations.

Multicast

Multicast fundamentals & lab

Quality of Service

QoS classification, marking & shaping

Intra-AS MPLS VPNs

From label switching to advanced PE-CE options and extranets.

Core & Labels

Packet & label switching Unicast routing on core BGP-free core with LDP/RSVP MPLS VPN overview

PE-CE Routing

VRFs on PE (CUST-A) PE-CE with RIPv2 PE-CE with OSPF MP-BGP on PEs (VPNv4) EIGRP as PE-CE Static/default to CE BGP as PE-CE (AS-Override/Allowas-in)

Troubleshooting & Advanced

Route propagation & checks Traffic path through VPN VPN extranets via export-maps OSPF super-backbone / Domain-ID OSPF sham-link RR-based VPNv4 design

Securing Networks Using VPNs

IPSec, GRE, DMVPN, GETVPN, IKEv2 & FlexVPN with VRF-aware designs.

Core VPNs

IPSec essentials GRE & SVTI mGRE & DMVPN (Ph I/II/III) GETVPN (single/redundant KS) VRF-aware VPNs

IKEv2 & FlexVPN

IKEv2 crypto-maps IKEv2 SVTI FlexVPN site-to-site

PKI / CA

Router as CA server

Data Center Technologies (Nexus)

VDCs, L2/L3, vPC & FEX, and modern overlays: VXLAN, OTV, FabricPath.

VDC & Platform Basics

Create & init VDC mgmt interface feature enablement aliases & save interface naming checkpoint/rollback

L2 & L3 Foundation

VLANs & trunks SVIs Port-channel (static/LACP) IP ACLs Remote management Rapid-PVST & tuning MST L3 topology Static / EIGRP / OSPF

vPC & FEX

vPC design & build FHRP overview (HSRP/VRRP) vPC peer-gateway FEX with port-channels FEX with vPC

Overlays & Fabric

VXLAN base VXLAN L2VNI VXLAN L3VNI OTV (unicast/multicast) FabricPath intro FabricPath + vPC (vPC+)

Switching

Layer-2 Ethernet building blocks.

L2 Essentials

Ethernet fundamentals

Routing — OSPF / BGP / EIGRP

Condensed catalog of the core routing tracks (see detailed tracks on page).

OSPF Highlights

Baseline config & neighbors LSAs (1/2/3/4/5) Multi-area & summarization Area types (Stub/Tot-Stub/NSSA) Redistribution & tags Virtual links, BFD, IP-FRR

BGP Highlights

eBGP/iBGP basics Filtering (ACL/PL/AS-Path) Aggregation options Attributes (LP/MED/Weight) Advanced: RR, multipath, confeds

EIGRP Highlights

Classic & named mode Load-balancing & summaries Filtering & MD5/SHA auth Redistribution scenarios BFD with EIGRP

Device Administration using TACACS+ / ISE

Intro to ISE + AAA, then TACACS+/RADIUS across routers, switches, WLC & ASA.

ISE & AAA Fundamentals

Device Admin overview NDGs & device objects Authentication Authorization Accounting

TACACS+ End-to-End

Routers — config & ISE Routers — verification Switches — config & ISE Switches — verification WLC — config & ISE WLC — verification ASA — ISE & ASA config ASA — verification

RADIUS Workflows

Routers — config / ISE / verify Switches — config / ISE / verify WLC — config / ISE / verify

Wireless Technologies

From campus L2/L3 fundamentals to WLC, FlexConnect, ISE/AD & guest access.

Campus Foundation

VLANs & port types VTP & lab Spanning-Tree (STP) L2→L3 mapping (intro) HSRP DHCP services / relay NTP & lab Static & default routes EIGRP / OSPF quick labs

WLC & WLAN Builds

Wired topology + Smart Macro Routing for AP join DHCP & relay to register APs AP registration checks WLC init (CLI) Central switched WLAN Port-channels on WLC RF channels (manual) FlexConnect WLAN

ISE / AD / Guest

ISE + WLC auth Groups & auth profiles Policy mapping WPA/WPA2 (802.1X) AD integration & certs Guest onboarding & anchors Sponsor portal MAB for APs

Autonomous & ME

Autonomous AP (end users) Root/Non-Root bridge Client filtering Workgroup-bridge (AAP/WLC) Mobility Express (arch/setup) ISE + ME integration ME CLI baseline & auth

Introduction to FTD

From FMC/FTD bring-up to basic access control and verification.

Bring-up & Integration

FTD overview (video) FMC init (CLI/GUI) FTD init (CLI) Register FTD to FMC Interface baseline Basic ACP to allow traffic