CCNP ENARSI Exam Topics

Exam topics to review for the ENARSI exam. Lots and lots of troubleshooting of route redistribution.

1. Layer 3 Technologies- 35%
   • Troubleshoot administrative distance (all routing protocols)
   • Troubleshoot route map for any routing protocol (attributes, tagging, filtering)
   • Troubleshoot loop prevention mechanisms (filtering, tagging, split horizon, route poisoning)
   • Troubleshoot redistribution between any routing protocols or routing sources
   • Troubleshoot manual and auto-summarization with any routing protocol
   • Configure and verify policy-based routing
   • Configure and verify VRF-Lite
   • Describe Bidirectional Forwarding Detection
   • Troubleshoot EIGRP (classic and named mode)
     • Address families (IPv4, IPv6)
     • Neighbor relationship and authentication
     • Loop-free path selections (RD, FD, FC, successor, feasible successor, stuck in active)
     • Stubs
     • Load balancing (equal and unequal cost)
     • Metrics
   • Troubleshoot OSPF (v2/v3)
     • Address families (IPv4, IPv6)
     • Neighbor relationship and authentication
     • Network types, area types, and router types
     • (i) Point-to-point, multipoint, broadcast, nonbroadcast
     • (ii) Area type: backbone, normal, transit, stub, NSSA, totally stub
     • (iii) Internal router, backbone router, ABR, ASBR
     • (iv)Virtual link
     • Path preference
   • Troubleshoot BGP (Internal and External)
     • address families (IPv4, IPv6)
     • Neighbor relationship and authentication (next-hop, mulithop, 4-byte AS, private AS, route refresh, synchronization operation, peer group, states and timers)
     • Path preference (attributes and best-path)
     • Route reflector (excluding multiple route reflectors, confederations, dynamic peer)
     • Policies (inbound/outbound filtering, path manipulation)
2. VPN Technologies - 20%
   • Describe MPLS operations (LSR, LDP, label switching, LSP)
   • Describe MPLS Layer 3 VPN
   • Configure and verify DMVPN (single hub)
     • GRE/mGRE
     • NHRP
     • IPsec
     • Dynamic neighbor
     • Spoke-to-spoke
3. Infrastructure Security - 20%
   • Troubleshoot device security using IOS AAA (TACACS+, RADIUS, local database)
   • Troubleshoot router security features
   • IPv4 access control lists (standard, extended, time-based)
   • IPv6 traffic filter
   • Unicast reverse path forwarding (uRPF)
   • Troubleshoot control plane policing (CoPP) (Telnet, SSH, HTTP(S), SNMP, EIGRP, OSPF, BGP)
   • Describe IPv6 First Hop security features (RA guard, DHCP guard, binding table, ND inspection/snooping, source guard)
4. Infrastructure Services- 25%
   • Troubleshoot device management
     • Console and VTY
     • Telnet, HTTP, HTTPS, SSH, SCP
     • (T)FTP
   • Troubleshoot SNMP (v2c, v3)
   • Troubleshoot network problems using logging (local, syslog, debugs, conditional debugs, timestamps)
   • Troubleshoot IPv4 and IPv6 DHCP (DHCP client, IOS DHCP server, DHCP relay, DHCP options)
   • Troubleshoot network performance issues using IP SLA (jitter, tracking objects, delay, connectivity)
   • Troubleshoot NetFlow (v5, v9, flexible NetFlow)
   • Troubleshoot network problems using Cisco DNA Center assurance (connectivity, monitoring, device health, network health)