CCIE Enterprise Infrastructure v1.1 — Exam Topics

1.0 Network Infrastructure 30%

1.1 Switched campus

• 1.1.aSwitch administration
  • Managing MAC address table
  • Errdisable recovery
  • L2 MTU
• 1.1.bLayer 2 protocols
  • CDP, LLDP
  • UDLD
• 1.1.cVLAN technologies
  • Access ports
  • Trunk ports (802.1Q)
  • Native VLAN
  • Manual VLAN pruning
  • Normal range and extended range VLANs
  • Voice VLAN
• 1.1.dEtherChannel
  • LACP, static
  • Layer 2, Layer 3
  • Load balancing
  • EtherChannel misconfiguration guard
  • Identify multichassis EtherChannel use cases
• 1.1.eSpanning Tree Protocol
  • PVST+, Rapid PVST+, MST
  • Switch priority, port priority, tuning port/path cost, STP timers
  • PortFast, BPDU guard, BPDU filter
  • Loop guard, root guard

1.2 Routing concepts

• 1.2.aAdministrative distance
• 1.2.bStatic routing (unicast, multicast)
• 1.2.cPolicy-based routing
• 1.2.dVRF-Lite
• 1.2.eVRF-aware routing with BGP, EIGRP, OSPF, and static
• 1.2.fRoute leaking between VRFs using route maps and VASI
• 1.2.gRoute filtering with BGP, EIGRP, OSPF, and static
• 1.2.hRedistribution between BGP, EIGRP, OSPF, and static
• 1.2.iRouting protocol authentication
• 1.2.jBidirectional Forwarding Detection
• 1.2.kL3 MTU

1.3 EIGRP

• 1.3.aAdjacencies
• 1.3.bBest path selection
  • Reported distance, computed distance, feasible distance, feasibility condition, successor, feasible successor
  • Classic metrics and wide metrics
• 1.3.cOperations
  • General operations
  • Topology table
  • Packet types
  • Stuck-in-active
  • Graceful shutdown
• 1.3.dEIGRP named mode
• 1.3.eOptimization, convergence, and scalability
  • Query propagation boundaries
  • Leak-map with summary routes
  • EIGRP stub with leak map

1.4 OSPF (v2 and v3)

• 1.4.aAdjacencies
• 1.4.bOSPFv3 address family support
• 1.4.cNetwork types, area types
• 1.4.dPath preference
• 1.4.eOperations
  • General operations
  • Graceful shutdown
  • GTSM (Generic TTL Security Mechanism)
• 1.4.fOptimization, convergence, and scalability
  • Metrics
  • LSA throttling, SPF tuning
  • Stub router
  • Prefix suppression

1.5 BGP

• 1.5.aIBGP and EBGP peer relations
  • Peer groups, templates
  • Active, passive
  • Timers
  • Dynamic neighbors
  • 4-byte AS numbers
  • Private AS numbers
• 1.5.bPath selection
  • Attributes
  • Best path selection algorithm
  • Load balancing
• 1.5.cRouting policies
  • Attribute manipulation
  • Conditional advertisement
  • Outbound route filtering
  • Standard and extended communities
  • Multihoming
• 1.5.dAS path manipulations
  • local-as, allowas-in, remove-private-as
  • AS path prepending
  • Regular expressions
• 1.5.eConvergence and scalability
  • Route reflectors
  • Aggregation, as-set
• 1.5.fOther BGP features such as soft reconfiguration and route refresh

1.6 Multicast

• 1.6.aLayer 2 multicast
  • IGMPv2, IGMPv3
  • IGMP snooping, PIM snooping
  • IGMP querier
  • IGMP filter
  • MLD
• 1.6.bReverse path forwarding check
• 1.6.cPIM
  • Sparse mode
  • Static RP, BSR, Auto-RP
  • Group-to-RP mapping
  • Source Specific Multicast
  • Multicast boundary, RP announcement filter
  • PIMv6 anycast RP
  • IPv4 anycast RP using MSDP
  • Multicast multipath

2.0 Software-Defined Infrastructure 25%

2.1 Cisco SD-Access

• 2.1.aUnderlay
  • Manual
  • LAN automation / PnP
  • Device discovery and device management
  • Extended nodes / policy extended nodes
• 2.1.bOverlay
  • LISP, BGP control planes
  • VXLAN data plane
  • Cisco TrustSec policy plane
  • L2 flooding
  • Native multicast
• 2.1.cFabric design
  • Single-site campus
  • Multisite
  • Fabric in a box
• 2.1.dFabric deployment
  • Host onboarding
  • Authentication templates
  • Port configuration
  • Multisite remote border
  • Border priority
  • Adding devices to fabric
• 2.1.eFabric border handoff
  • SDA, SDWAN, IP transits
  • Peer device (Fusion router)
  • Layer 2 border handoff
• 2.1.fSegmentation
  • Macro segmentation using virtual networks
  • Micro-level segmentation using SGTs and SGACLs

2.2 Cisco SD-WAN

• 2.2.aController architecture
  • Management plane (vManage)
  • Orchestration plane (vBond)
  • Control plane (vSmart)
• 2.2.bSD-WAN underlay
  • WAN Cloud Edge deployment (AWS, Azure, Google Cloud)
  • WAN Edge deployment (hardware)
  • Greenfield, brownfield, and hybrid deployments
  • System configuration (system IP, site ID, org name, vBond address)
  • Transport configuration (underlay and tunnel interfaces, allowed services, TLOC extension)
• 2.2.cOverlay Management Protocol (OMP)
  • OMP attributes
  • IPsec key management
  • Route aggregation
  • Redistribution
  • Additional features (BGP AS path propagation, SDA integration)
• 2.2.dConfiguration templates
  • CLI templates
  • Feature templates
  • Device templates
• 2.2.eCentralized policies
  • Data policies
  • Application-aware routing policies
  • Control policies
• 2.2.fLocalized policies
  • Access lists
  • Route policies

3.0 Transport Technologies and Solutions 15%

3.1 Static point-to-point GRE tunnels

3.2 MPLS

• 3.2.aOperations
  • Label stack, LSR, LSP
  • LDP
  • MPLS ping, MPLS traceroute
• 3.2.bL3VPN
  • PE-CE routing using BGP
  • Basic MP-BGP VPNv4/VPNv6

3.3 DMVPN

• 3.3.aTroubleshoot DMVPN Phase 3 with dual hub
  • NHRP
  • IPsec/IKEv2 using preshared key

4.0 Infrastructure Security and Services 15%

4.1 Device security on Cisco IOS XE

• 4.1.aControl plane policing and protection
• 4.1.bAAA

4.2 Network security

• 4.2.aSwitch security features
  • VACL, PACL
  • Storm control
  • DHCP snooping, DHCP option 82
  • IP Source Guard
  • Dynamic ARP Inspection
  • Port security
• 4.2.bRouter security features
  • IPv6 traffic filters
  • IPv4 access control lists
  • Unicast Reverse Path Forwarding
• 4.2.cIPv6 infrastructure security features
  • RA Guard
  • DHCP Guard
  • Binding table
  • Device tracking
  • ND Inspection/Snooping
  • Source Guard

4.3 System management

• 4.3.aDevice management
  • Console and VTY
  • SSH, SCP
  • RESTCONF, NETCONF
• 4.3.bSNMP (v2c, v3)
• 4.3.cLogging
  • Local logging, syslog, debugs, conditional debugs
  • Configuration change notification and logging
  • Timestamps

4.4 Quality of Service

• 4.4.aDifferentiated Services architecture
• 4.4.bClassification, trust boundary
• 4.4.cNetwork Based Application Recognition (NBAR)
• 4.4.dMarking DSCP values in IPv4 and IPv6 headers
• 4.4.ePolicing, shaping
• 4.4.fCongestion management and avoidance
• 4.4.gHQoS
• 4.4.hEnd-to-end Layer 3 QoS using MQC

4.5 Network services

• 4.5.aFirst-Hop Redundancy Protocols
  • HSRP, VRRP
  • Redundancy using IPv6 RS/RA
• 4.5.bTime synchronization protocols
  • NTP as a client
  • PTP design considerations
• 4.5.cDHCP on Cisco devices
  • Client, server, relay
  • Options
  • SLAAC/DHCPv6 integration
  • Stateful, stateless DHCPv6
  • DHCPv6 Prefix Delegation
• 4.5.dIPv4 Network Address Translation
  • Static NAT, PAT
  • Dynamic NAT, PAT
  • Policy-based NAT, PAT
  • VRF-aware NAT, PAT
  • VRF-aware Software Infrastructure (VASI) NAT

4.6 Network optimization

• 4.6.aIP SLA (ICMP, UDP, TCP probes)
• 4.6.bTracking objects and lists
• 4.6.cFlexible NetFlow

4.7 Network operations

• 4.7.aTraffic capture
  • SPAN, RSPAN, ERSPAN
  • Embedded packet capture
• 4.7.bTroubleshooting tools
  • Data path packet trace
  • Conditional debugger (debug platform condition)

5.0 Infrastructure Automation and Programmability 15%

5.1 Data encoding formats

• 5.1.aJSON
• 5.1.bXML
• 5.1.cYAML
• 5.1.dJinja

5.2 Automation and scripting

• 5.2.aEEM applets
• 5.2.bGuest shell
  • Linux environment
  • CLI Python module
  • EEM Python module

5.3 Programmability

• 5.3.aInteraction with vManage API
  • Python requests library and Postman
  • Monitoring endpoints
  • Configuration endpoints
• 5.3.bInteraction with Cisco DNA Center API using HTTP requests (GET, PUT, POST) via Python requests library and Postman
• 5.3.cDeploy and verify model-driven telemetry
  • Configure on-change subscription using gRPC