Master CCNP Enterprise Networking

🏢 Cisco Enterprise Architecture

Enterprise networks connect users, applications, servers, wireless devices, branch offices and cloud resources. The architecture should provide scalability, availability, security and predictable performance.

Three-Tier Architecture

• Access: Connects end devices.
• Distribution: Routing, policy and redundancy.
• Core: High-speed backbone.

Two-Tier Architecture

In smaller environments, distribution and core functions can be combined into a collapsed core.

🔗 Campus LAN

A campus LAN connects users and services inside an organization. Typical technologies include VLANs, trunks, STP, EtherChannel, inter-VLAN routing and first-hop redundancy.

Important Technologies

🔀 Switching Paths

Process Switching

The CPU processes packets individually. It is slower and CPU intensive compared with hardware forwarding.

CEF

Cisco Express Forwarding provides high-speed Layer 3 forwarding. CEF uses the FIB and adjacency table.

• FIB — Forwarding Information Base
• Adjacency Table

🧠 CAM Table

CAM, or Content Addressable Memory, stores MAC address information and associates MAC addresses with switch ports.

show mac address-table
show mac address-table dynamic
clear mac address-table dynamic

🟦 VLAN

A VLAN logically separates a Layer 2 network into independent broadcast domains.

• VLAN 10 — Users
• VLAN 20 — Servers
• VLAN 30 — Voice
• VLAN 40 — Management

vlan 10
 name USERS

interface gi0/1
 switchport mode access
 switchport access vlan 10

🚇 Trunking

A trunk carries traffic from multiple VLANs across one physical connection. Cisco networks commonly use IEEE 802.1Q.

interface gi0/24
 switchport mode trunk
 switchport trunk allowed vlan 10,20,30

Important Concepts

• Native VLAN
• Allowed VLANs
• VLAN tagging
• Access port
• Trunk port

🌳 STP

Spanning Tree Protocol prevents Layer 2 switching loops by creating a loop-free logical topology.

Important Concepts

• Root Bridge
• Root Port
• Designated Port
• Blocked/Alternate Port
• Bridge ID
• Path Cost

⚡ RSTP

Rapid STP, defined by IEEE 802.1w, provides faster convergence than traditional STP.

• Root port
• Designated port
• Alternate port
• Backup port

show spanning-tree
show spanning-tree root
show spanning-tree vlan 10

🧩 Multiple Spanning Tree

MST allows multiple VLANs to share a common spanning-tree instance, reducing STP overhead.

• MST Region
• MST Instance
• VLAN-to-instance mapping
• MST revision number

🛠 STP Troubleshooting

• Identify the root bridge.
• Check port roles.
• Check VLAN consistency.
• Check root priority.
• Check BPDU behavior.
• Check topology changes.

show spanning-tree detail
show spanning-tree blockedports
show spanning-tree summary

🔗 EtherChannel

EtherChannel combines multiple physical interfaces into one logical interface called a Port-Channel.

• Higher bandwidth
• Link redundancy
• Load distribution
• STP sees the bundle as one logical link

LACP

LACP is an IEEE standards-based link aggregation protocol.

interface range gi0/1-2
 channel-group 1 mode active

interface port-channel 1
 switchport mode trunk

Modes: active and passive.

PAgP

PAgP is Cisco's proprietary EtherChannel negotiation protocol.

• Desirable
• Auto

show etherchannel summary
show interfaces port-channel 1

🧭 Understanding EIGRP

EIGRP is an advanced distance-vector routing protocol. It uses DUAL to calculate loop-free paths.

Tables

• Neighbor Table
• Topology Table
• Routing Table

DUAL and EIGRP Metrics

• Successor
• Feasible Successor
• Feasible Distance
• Reported Distance
• Feasibility Condition

A feasible successor provides a loop-free backup path and allows fast convergence.

⚙️ Configure EIGRP

router eigrp 100
 network 10.0.0.0 0.0.0.255
 network 192.168.1.0 0.0.0.255
 no auto-summary

🛡 EIGRP Stub

Stub routing limits query propagation and is useful for branch routers.

router eigrp 100
 eigrp stub

📈 EIGRP Optimization

• Summarization
• Stub routing
• Metric tuning
• Route filtering
• Query boundaries
• Passive interfaces

🔧 EIGRP Troubleshooting

show ip eigrp neighbors
show ip eigrp topology
show ip route eigrp
show ip protocols

Check AS number, network statements, interfaces, authentication, K-values and passive interfaces.

🌐 OSPF Fundamentals

OSPF is a link-state routing protocol. It uses the SPF algorithm to calculate the shortest path.

• Router ID
• LSA
• LSDB
• Cost
• Areas
• DR / BDR

🤝 OSPF Neighbor States

🏢 Multiarea OSPF

Large OSPF networks can be divided into multiple areas. Area 0 is the backbone area.

• Internal Router
• ABR
• ASBR
• Backbone Area
• Non-backbone Areas

📚 Link State Database

The LSDB contains topology information learned through LSAs. Routers within the same area maintain synchronized LSDB information.

show ip ospf database
show ip ospf database router
show ip ospf database summary

🧩 OSPF Stub Areas

• Stub
• Totally Stubby
• NSSA
• Totally NSSA

Stub areas reduce the amount of external routing information inside an area.

⚙️ OSPF Tuning & Optimization

• Cost adjustment
• Reference bandwidth
• Summarization
• Passive interfaces
• Area design
• LSA filtering

interface gi0/0
 ip ospf cost 10

🔐 OSPF Authentication

OSPF authentication protects routing adjacencies against unauthorized neighbors.

Study:

• Plain-text authentication
• MD5 authentication
• Cryptographic authentication

🌍 OSPFv3

OSPFv3 is commonly used for IPv6 routing. IPv6 routing relies heavily on link-local addressing.

show ipv6 ospf neighbor
show ipv6 ospf database
show ipv6 route ospf

🔧 OSPF Troubleshooting

• Area mismatch
• Authentication mismatch
• Hello/dead timer mismatch
• MTU mismatch
• Network type mismatch
• Passive interface
• Incorrect router ID

show ip ospf neighbor
show ip ospf interface
show ip ospf
show ip route ospf

🌍 EBGP

External BGP operates between different autonomous systems.

router bgp 65001
 neighbor 192.0.2.2 remote-as 65002

🏢 IBGP

Internal BGP operates between routers belonging to the same autonomous system.

Large IBGP networks traditionally require a full mesh, which can be reduced using route reflectors.

🧠 BGP Path Selection

1. Weight
2. Local Preference
3. Locally originated route
4. Shortest AS Path
5. Origin
6. MED
7. eBGP over iBGP
8. IGP metric to next hop

🚀 BGP Advanced Features

• Prefix lists
• Route maps
• Communities
• Local preference
• MED
• Route aggregation
• Maximum prefix
• Authentication

🔁 Route Reflectors

Route reflectors reduce the need for a full-mesh IBGP design.

A route reflector can reflect selected routes between IBGP clients.

🌐 MP-BGP

Multiprotocol BGP supports multiple address families.

• IPv4
• IPv6
• VPNv4
• VPNv6

🔧 BGP Troubleshooting

show ip bgp summary
show ip bgp
show ip bgp neighbors
show ip route bgp

• Check TCP connectivity.
• Check AS numbers.
• Check neighbor state.
• Check update source.
• Check route policy.
• Check next-hop reachability.

🔄 Redistribution

Redistribution injects routes learned by one routing protocol into another routing protocol.

EIGRP
   ↓
Router
   ↓
OSPF

Route Maps

Route maps provide granular control over redistribution. They can match routes and modify attributes.

• Match prefix
• Set metric
• Set tags
• Filter routes

⚠ Redistribution Issues

• Routing loops
• Metric incompatibility
• Administrative distance
• Suboptimal paths
• Route feedback

Route tagging can help identify routes that have already passed through a redistribution point.

🎯 Policy-Based Routing

PBR forwards traffic based on policies instead of relying only on the routing table.

Possible matches:

• Source address
• Destination
• Protocol
• Access list

🛣 Path Control

Path control can be achieved using:

• BGP attributes
• PBR
• Administrative distance
• Routing metrics
• Route maps
• Prefix lists

🔥 HSRP

Hot Standby Router Protocol provides a virtual default gateway. One router normally operates as active and another as standby.

interface gi0/0
 standby 10 ip 192.168.10.1
 standby 10 priority 110
 standby 10 preempt

🛡 VRRP

Virtual Router Redundancy Protocol is a standards-based first-hop redundancy protocol.

• Virtual IP
• Master router
• Backup router
• Priority

Static NAT

One inside address maps to one global address.

ip nat inside source static
192.168.1.10 203.0.113.10

Dynamic NAT

Private addresses are translated using a configured pool of public addresses.

PAT

Port Address Translation allows many internal devices to share a single public IP using different TCP/UDP ports.

🔧 NAT Verification

show ip nat translations
show ip nat statistics
clear ip nat translation *

📦 VRF Concept

VRF creates multiple independent routing tables on a single router or Layer 3 device.

VRF-CORPORATE
VRF-GUEST
VRF-MANAGEMENT

Benefits

• Traffic isolation
• Multi-tenancy
• Overlapping IP addresses
• Segmentation
• MPLS VPN support

show vrf
show ip route vrf NAME

🔐 GRE

GRE encapsulates Layer 3 traffic inside a tunnel. It supports routing protocols across the tunnel.

🔒 VTI

Virtual Tunnel Interfaces provide virtual Layer 3 interfaces that can be used with IPsec.

• Site-to-site VPN
• Dynamic routing
• IPsec

🌐 DMVPN

Dynamic Multipoint VPN provides scalable hub-and-spoke and dynamic spoke-to-spoke connectivity.

• mGRE
• NHRP
• IPsec
• Dynamic routing

🏷 MPLS

Multiprotocol Label Switching forwards traffic using labels.

• Label
• LSR
• LER
• LSP
• Label switching

🏢 MPLS L3 VPN

CE ── PE ── P ── P ── PE ── CE

Important concepts:

• VRF
• Route Distinguisher
• Route Target
• MP-BGP
• MPLS Labels

Route Distinguisher

An RD makes otherwise overlapping customer prefixes unique inside the VPNv4/VPNv6 routing architecture.

Route Target

RT communities control which VPN routes are imported and exported between VRFs.

📡 Wireless Principles

• RF
• Frequency
• Channels
• Channel width
• Signal strength
• Noise
• SNR
• Interference
• Modulation

Common bands:

🏗 Wireless Deployment

• Autonomous AP
• Controller-based AP
• Cloud-managed wireless
• Centralized management

📶 AP Operation

Access points provide wireless connectivity between clients and the wired network.

• Association
• Authentication
• Encryption
• RF transmission
• Client management

🚶 Wireless Roaming

Roaming occurs when a wireless client moves from one AP to another while maintaining connectivity.

• 802.11r
• 802.11k
• 802.11v

📍 Location Services

Enterprise wireless infrastructure can use RF information to determine approximate client/device location.

Applications include:

• Asset tracking
• Client location
• Presence detection
• Analytics

🔑 Personal Authentication

WPA2/WPA3 Personal typically uses a pre-shared key.

🏢 Enterprise Authentication

Enterprise wireless commonly uses 802.1X and an authentication server such as RADIUS.

Client
  ↓
AP / WLC
  ↓
RADIUS
  ↓
Authentication Server

• 802.1X
• EAP
• RADIUS

🔧 Wireless Connectivity Troubleshooting

• SSID
• Authentication
• Encryption
• RF signal
• VLAN
• DHCP
• IP address
• DNS
• Roaming

📣 Multicast

Multicast allows one sender to efficiently send traffic to multiple receivers belonging to a multicast group.

• Multicast groups
• IGMP
• PIM
• RPF
• Multicast routing table

🔍 Multicast Troubleshooting

show ip mroute
show ip pim neighbor
show ip igmp groups

Verify group membership, PIM neighbors and reverse-path forwarding.

⚡ QoS

QoS manages network traffic to provide predictable service for important applications.

• Classification
• Marking
• Queuing
• Congestion management
• Congestion avoidance
• Policing
• Shaping

🎙 Priority Applications

• Voice
• Video
• Business-critical applications
• Interactive applications

DHCP

Automatically provides clients with IP configuration.

• IP address
• Subnet mask
• Default gateway
• DNS server
• Lease time

ip dhcp pool USERS
 network 192.168.10.0 255.255.255.0
 default-router 192.168.10.1
 dns-server 8.8.8.8

DHCP Troubleshooting

show ip dhcp binding
show ip dhcp pool
show ip dhcp conflict

• Check VLAN.
• Check DHCP pool.
• Check relay.
• Check address exhaustion.

DNS

DNS translates hostnames into IP addresses.

nslookup example.com
dig example.com

NTP

NTP synchronizes device clocks, which is important for logging, security and troubleshooting.

📋 Syslog

Syslog provides centralized logging of network events.

logging host 192.168.1.100
show logging

📊 Flexible NetFlow

Flexible NetFlow provides detailed information about network traffic flows.

• Top talkers
• Source/destination
• Applications
• Protocols
• Traffic volume
• Interfaces

⏱ Cisco IP SLA

IP SLA measures network performance and reachability.

• Latency
• Jitter
• Packet loss
• Response time
• Reachability

⚙ EEM

Embedded Event Manager automatically responds to device events.

Event
 ↓
EEM detects condition
 ↓
EEM executes action

Possible actions include executing commands, sending logs and changing configuration.

🔎 Traffic Analysis Tools

ping
traceroute
show ip route
show arp
show mac address-table
show interfaces
show cdp neighbors
show lldp neighbors
show logging

🏰 Defense in Depth

Identity
   ↓
Access Control
   ↓
Segmentation
   ↓
Firewall
   ↓
Monitoring
   ↓
Threat Detection

Standard ACL

Standard ACLs primarily filter traffic based on source IP.

access-list 10 permit 192.168.10.0 0.0.0.255

Extended ACL

Extended ACLs can filter based on source, destination, protocol and port.

access-list 101 permit tcp
192.168.10.0 0.0.0.255
any eq 443

ACL Rules

• ACLs are processed sequentially.
• First matching statement is used.
• There is an implicit deny at the end.
• Place specific entries before general entries.

Authentication

Who are you?

Authorization

What are you allowed to do?

Accounting

What did you do?

AAA Protocols

• RADIUS
• TACACS+

🛡 CoPP

Control Plane Policing protects the router CPU from excessive or malicious traffic.

• Classify traffic
• Apply policy
• Rate-limit unwanted traffic
• Protect routing protocols

Threats

• CPU exhaustion
• DoS attacks
• Excessive control-plane traffic
• Unauthorized protocol traffic

🐍 Python Basics

• Variables
• Strings
• Lists
• Dictionaries
• Conditions
• Loops
• Functions
• Modules
• Exception handling

Python Example

device = "Router1"

ip = "192.168.1.1"

print("Connecting to", device)
print("IP:", ip)

JSON

JSON is a lightweight structured data format widely used with network automation and APIs.

{
  "hostname": "R1",
  "interface": "GigabitEthernet0/0",
  "ip": "192.168.1.1"
}

APIs

An API allows software applications to communicate with network systems.

Automation Tool
      ↓
     API
      ↓
Network Device

• GET
• POST
• PUT
• PATCH
• DELETE

NPP

Place NPP in the programmatic-networking section of your study material and associate it with the terminology used by the specific Cisco course/version you are studying.

NETCONF

NETCONF is a network management protocol designed for programmatic configuration and retrieval of device data.

• SSH transport
• XML messages
• YANG data models
• Structured configuration

RESTCONF

RESTCONF provides REST-style access to configuration and operational data.

• HTTP/HTTPS
• JSON
• XML
• YANG

🧠 DNA Center

Cisco DNA Center provides centralized management, automation, policy and assurance for enterprise networks.

• Network discovery
• Device configuration
• Automation
• Monitoring
• Assurance
• Policy

Network Assurance

Assurance provides visibility into network health, client experience, applications and infrastructure.

🔷 SD-Access

SD-Access uses software-defined networking concepts to automate and secure campus networks.

• Underlay
• Overlay
• Fabric
• Identity
• Policy
• Automation

Core Technologies

• VXLAN
• LISP
• TrustSec
• Cisco DNA Center

🌐 SD-WAN

Cisco SD-WAN provides centralized management and policy-driven control of enterprise WAN connections.

• MPLS
• Internet
• 4G/5G
• Application-aware routing
• Centralized policies
• Security

Benefits

• Centralized control
• Dynamic path selection
• Application visibility
• WAN optimization
• Security integration

🔍 General Troubleshooting Process

1. Identify the problem
        ↓
2. Collect information
        ↓
3. Identify possible causes
        ↓
4. Test the most likely cause
        ↓
5. Implement solution
        ↓
6. Verify
        ↓
7. Document

🧰 Essential Commands

show running-config
show startup-config
show interfaces
show ip interface brief
show ip route
show ip protocols
show cdp neighbors
show lldp neighbors
show logging
show arp
show mac address-table

🔀 Switching Troubleshooting

• Check VLAN membership.
• Check trunk configuration.
• Check STP.
• Check EtherChannel.
• Check MAC address learning.

🧭 Routing Troubleshooting

• Check routing table.
• Check neighbor relationships.
• Check route advertisements.
• Check metrics.
• Check route filtering.
• Check redistribution.

🌐 BGP Troubleshooting

• Check TCP/179 connectivity.
• Check AS number.
• Check neighbor state.
• Check route policy.
• Check next-hop reachability.
• Check BGP attributes.

📡 Wireless Troubleshooting

• Client association
• Authentication
• RF conditions
• VLAN
• DHCP
• IP connectivity
• DNS
• Roaming