This blog will document my journey to being CCNP-Enterprise certified.
4.6 Configure and verify NETCONF and RESTCONF 5.3 Describe REST API security HTTPS / TLS REST APIs should use HTTPS, not plain HTTP.TLS provides encryption, integrity, and server authentication. Authentication Verifies who the client is. Common methods: username/password API key token OAuth 2.0 / bearer token Cisco APIs often return a token after authentication, which…
5.2 Configure and verify infrastructure security features 5.2.a ACLs Standard Source IPv4 address only Extended Source + destination + protocol + ports ACLs are processed top-down ACL effectively ends with: even though you don’t see it. Can use wildcard masks 5.2.b CoPP Verification of CoPP commands APIs Northbound vs Southbound Controller…
3.2.c Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships) Two routers can form a BGP peering relationship if they have working IP reachability to each other and the BGP session parameters match. Router bgp [process-id] Then any up interface Applies to both internal BGP and external BGP, meaning…
3.2.b Configure simple OSPFv2/v3 environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point, and broadcast network types, and passive-interface) OSPF sends neighbor routers a Link-state advertisement (LSA). Inside the LSA is the link state and metric. Received LSAs are stored in a local database called the LSDB, and a router that receives an…
3.2 Layer 3 3.2.a Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. link state, load balancing, path selection, path operations, metrics, and area types) EIGRP diffusing update algorithm (DUAL) Successor route = the best EIGRP path to a destination Successor = the next-first hop on the best path Feasible…
3.3.c Configure first hop redundancy protocols, such as HSRP, VRRP FHRP use Virtual Ips (VIPs) Hot Standby Router Protocol (HSRP, one VIP, two routers, failover), active standby HSRP is cisco proprietary, VRRP is open Gateway Load balancing protocol (GLBP, multiple routers, traffic can be round-robined to different routers, or statically assign a flow to a…
3.3 IP Services 3.3.a Interpret network time protocol configurations such as NTP and PTP R1(config)# ntp master [#] = tell R1 to become an NTP server of # stratum R2(config)# ntp server [ip address] = tell R2 to become an NTP client of [server ip address] R2(config)# ntp server [ip address] source [loopback…
