CCNP Enterprise Design ENSLD 300-420 Official Cert Guide

Anthony Bruno, CCIE No. 2738, is an enterprise architect with British Telecom (BT) with more than 30 years of experience in the internetworking field. Previously, he worked for International Network Services (INS) and Lucent Technologies, and he was a captain in the U.S. Air Force. He has consulted for many enterprise and service provider customers in the design, implementation, and optimization of large-scale networks. Anthony leads architecture and design teams in building next-generation networks for customers. Anthony completed a master of science degree in electrical engineering at the University of Missouri–Rolla in 1994 and a bachelor of science in electrical engineering at the University of Puerto Rico–Mayaguez in 1990. For the past 23 years, he has coauthored CCNP Enterprise Design ENSLD 300-420 Official Cert Guide: Designing Cisco Enterprise Networks and five editions of the CCDA Official Cert Guide for Cisco Press. Outside work, Anthony enjoys running marathons and Spartan obstacle races, and he has finished eight Ironman distance triathlons. He is also an avid genealogist and ancestry tree researcher. As an FAA certified remote pilot, Anthony also enjoys piloting his drone at home and when traveling. Steve Jordan, CCIE No. 11293, is a principal architect with J. Network Architects and has 26 years of experience in the field of internetworking. For the last 16 years, Steve has specialized in data center and network security architectures involving compute, network, security, storage, and virtualization. Over the years, Steve has consulted with many enterprise and service provider customers in both pre-sales and post-sales engineering and architecture roles, along with working at several Cisco Gold Partners. He has extensive experience in data center and security architecture design and has implemented solutions in many energy, financial, gaming, healthcare, hospitality, and telecommunications industries. Steve is a 20-Year triple CCIE in the tracks of Enterprise Infrastructure, Storage Networking, and Data Center. His other certifications include CCNA, CCNP Enterprise, VMware VCIX6-NV, and VCP6-NV. Steve lives in Houston, Texas, and when he is not working on technology, Steve can be found traveling to new places, enjoying sporting events, attending concerts, and trading stocks. For the past 17 years, Steve has also coauthored CCNP Enterprise Design ENSLD 300-420 Official Cert Guide: Designing Cisco Enterprise Networks and three editions of the CCDA Official Cert Guide.

Introduction xxxi
Chapter 1 Internet Protocol Version 4 (IPv4) Design 2
“Do I Know This Already?” Quiz 2
Foundation Topics 4
IPv4 Header 5
ToS 7
IPv4 Fragmentation 10
IPv4 Addressing 11
IPv4 Address Classes 12
Class A Addresses 12
Class B Addresses 13
Class C Addresses 13
Class D Addresses 13
Class E Addresses 13
IPv4 Address Types 13
IPv4 Private Addresses 14
NAT 14
IPv4 Address Subnets 17
Mask Nomenclature 17
IP Address Subnet Design Example 18
Determining the Network Portion of an IP Address 19
Variable-Length Subnet Masking 19
VLSM Address Assignment: Example 1 20
Loopback Addresses 21
IP Telephony Networks 22
VLSM Address Assignment: Example 2 22
IPv4 Addressing Design 24
Goals of IPv4 Address Design 24
Planning for Future Use of IPv4 Addresses 24
Performing Route Summarization 24
Planning for a Hierarchical IP Address Network 25
Private and Public IP Address and NAT Guidelines 26
Steps for Creating an IPv4 Address Plan 27
Case Study: IP Address Subnet Allocation 28
Address Assignment and Name Resolution 29
Recommended Practices of IP Address Assignment 30
BOOTP 30
DHCP 30
DNS 32
ARP 34
References and Recommended Readings 35
Exam Preparation Tasks 37
Chapter 2 Internet Protocol Version 6 (IPv6) Design 44
“Do I Know This Already?” Quiz 44
Foundation Topics 47
Introduction to IPv6 47
IPv6 Header 48
IPv6 Address Representation 50
IPv4-Mapped IPv6 Addresses 51
IPv6 Prefix Representation 51
IPv6 Address Scope Types and Address Allocations 52
IPv6 Address Allocations 52
IPv6 Unicast Addresses 53
Global Unicast Addresses 53
Link-Local Addresses 54
Unique Local IPv6 Address 54
Global Aggregatable IPv6 Address 55
IPv4-Compatible IPv6 Addresses 55
IPv4-Mapped IPv6 Addresses 55
IPv6 Anycast Addresses 55
IPv6 Multicast Addresses 56
IPv6 Mechanisms 58
ICMPv6 58
IPv6 Neighbor Discovery Protocol 59
IPv6 Name Resolution 60
Path MTU Discovery 61
IPv6 Address-Assignment Strategies 61
Manual Configuration 61
SLAAC of Link-Local Address 61
SLAAC of Globally Unique IPv6 Address 62
DHCPv6 63
DHCPv6 Lite 63
IPv6 Security 63
IPv6 Routing Protocols 64
RIPng 64
EIGRP for IPv6 64
OSPFv3 64
IS-IS for IPv6 64
BGP4 Multiprotocol Extensions (MP-BGP) for IPv6 65
IPv6 Addressing Design 65
Planning for Addressing with IPv6 65
Route Summarization with IPv6 65
IPv6 Private Addressing 66
IPv6 for the Enterprise 66
IPv6 Address Allocation 66
Partly Linked IPv4 Address into IPv6 67
Whole IPv4 Address Linked to IPv6 67
IPv6 Addresses Allocated per Location and/or Type 67
IPv4-to-IPv6 Migration Strategies and Deployment Models 68
Dual-Stack Migration Strategy 68
IPv6 over IPv4 Tunneling Strategy 69
Manual Configured Tunnels and GRE Tunnels 69
Automatic Tunnel Mechanisms 69
6to4 Tunnels 69
6RD Tunnels 70
IPv6 ISATAP Tunnels 70
IPv6/IPv4 Translation Strategy 71
DNS64 71
NAT64 71
Stateless NAT64 71
Stateful NAT64 71
IPv6 Deployment Models 73
Dual-Stack Model 73
Hybrid Model 74
Service Block Model 75
IPv6 Deployment Model Comparison 76
IPv6 Comparison with IPv4 76
References and Recommended Readings 77
Exam Preparation Tasks 80
Chapter 3 Routing Protocol Characteristics, EIGRP, and IS-IS 90
“Do I Know This Already?” Quiz 90
Foundation Topics 92
Routing Protocol Characteristics 92
Static Versus Dynamic Route Assignment 93
Interior Versus Exterior Routing Protocols 94
Distance-Vector Routing Protocols 95
EIGRP 96
Link-State Routing Protocols 96
Distance-Vector Routing Protocols Versus Link-State Protocols 96
Hierarchical Versus Flat Routing Protocols 97
Classless Versus Classful Routing Protocols 97
IPv4 Versus IPv6 Routing Protocols 98
Administrative Distance 99
Routing Protocol Metrics and Loop Prevention 100
Hop Count 100
Bandwidth 101
Cost 101
Load 102
Delay 103
Reliability 103
Maximum Transmission Unit 103
Routing Loop-Prevention Schemes 104
Split Horizon 104
Poison Reverse 104
Counting to Infinity 105
Triggered Updates 105
Summarization 105
EIGRP 105
EIGRP Components 106
Protocol-Dependent Modules 106
Neighbor Discovery and Recovery 106
RTP 107
DUAL 107
EIGRP Timers 109
EIGRP Metrics 109
EIGRP Packet Types 110
EIGRP Design 111
EIGRP Scaling Techniques 111
EIGRP Stub Routers 112
EIGRP Variance Command 113
EIGRP for IPv4 Summary 113
EIGRP for IPv6 (EIGRPv6) Networks 114
EIGRP for IPv6 Design 114
EIGRP in the Data Center 115
EIGRP for IPv6 Summary 115
IS-IS 116
IS-IS Metrics 116
IS-IS Operation and Design 117
IS-IS NET Addressing 117
IS-IS DRs 117
IS-IS Interface Types 117
IS-IS Area Design 118
IS-IS Authentication 119
IS-IS for IPv6 120
IS-IS Summary 121
References and Recommended Readings 121
Exam Preparation Tasks 122
Chapter 4 OSPF, BGP, and Route Manipulation 132
“Do I Know This Already?” Quiz 132
Foundation Topics 134
OSPFv2 134
OSPFv2 Metric 135
OSPFv2 Adjacencies and Hello Timers 135
OSPF Message Types 136
OSPFv2 Areas 137
OSPF Area Design Considerations 137
OSPF Router Types 138
OSPF DRs 140
LSA Types 140
Autonomous System External Path Types 141
OSPF Stub Area Types 142
Stub Areas 142
Totally Stubby Areas 142
NSSAs 143
Virtual Links 143
OSPFv2 Router Authentication 143
OSPFv2 Summary 144
OSPFv3 144
OSPFv3 Changes from OSPFv2 145
OSPFv3 Areas and Router Types 145
OSPFv3 LSAs 146
OSPFv3 Summary 148
BGP 148
BGP Neighbors 149
eBGP 149
iBGP 150
Route Reflectors 151
Confederations 152
BGP Administrative Distance 154
BGP Attributes, Weight, and the BGP Decision Process 154
BGP Path Attributes 154
Next-Hop Attribute 154
Local Preference Attribute 154
Origin Attribute 155
Autonomous System Path (AS_Path) Attribute 155
MED Attribute 156
Community Attribute 157
Atomic Aggregate and Aggregator Attributes 157
Weight Attribute 157
BGP Decision Process 158
eBGP Multihop 161
BGP Multipath 161
BGP Summary 161
Route Manipulation 161
PBR 162
Route Summarization 162
Route Redistribution 164
Default Metric 167
OSPF Redistribution 167
Route Filtering 167
Transit Traffic 168
Bidirectional Forwarding Detection (BFD) 168
Graceful Restart and Non-Stop Routing 169
Virtual Routing and Forwarding (VRF) 169
References and Recommended Readings 169
Exam Preparation Tasks 170
Chapter 5 IP Multicast and Network Management 180
“Do I Know This Already?” Quiz 180
Foundation Topics 182
IP Multicast Review 182
Multicast Addresses 182
Layer 3 to Layer 2 Mapping 183
IGMP 184
IGMPv1 184
IGMPv2 184
IGMPv3 185
CGMP 185
IGMP Snooping 186
Sparse Versus Dense Multicast 186
Multicast Source and Shared Trees 187
PIM 187
PIM-SM 187
PIM DR 188
Auto-RP 188
BIDIR-PIM 188
PIM-SSM 189
MSDP 189
Summary of Multicast Protocols 189
IPv6 Multicast Addresses 190
Network Management Design 190
SNMP 191
SNMP Components 191
Network Management Design Considerations 192
In-Band Versus Out-of-Band Network Management 192
Network Management Traffic Prioritization 192
MIB 192
SNMP Versions 194
SNMPv1 194
SNMPv2 194
SNMPv3 195
Other Network Management Technologies 196
RMON 196
RMON2 197
NetFlow 197
NetFlow Compared to RMON and SNMP 200
CDP 201
LLDP 202
Syslog 202
References and Recommended Readings 203
Exam Preparation Tasks 205
Chapter 6 Enterprise LAN Design and Technologies 214
“Do I Know This Already?” Quiz 214
Foundation Topics 216
Hierarchical Network Models 216
Benefits of the Hierarchical Model 216
Hierarchical Network Design 217
Core Layer 218
Distribution Layer 218
Access Layer 219
Hierarchical Model Examples 221
VSS 222
Hub-and-Spoke Design 222
Collapsed Core Design 223
Building Triangles and Redundant Links 224
Local Versus End-to-End VLAN Design Models 225
LAN Media 225
Ethernet Design Rules 226
100 Mbps Fast Ethernet Design Rules 226
Gigabit Ethernet Design Rules 227
1000BASE-LX Long-Wavelength Gigabit Ethernet 228
1000BASE-SX Short-Wavelength Gigabit Ethernet 228
1000BASE-CX Gigabit Ethernet over Coaxial Cable 228
1000BASE-T Gigabit Ethernet over UTP 228
10 Gigabit Ethernet Design Rules 229
10 Gigabit Ethernet Media Types 229
EtherChannel 230
Port Aggregation Considerations 231
Comparison of Campus Media 231
Power over Ethernet (PoE) 232
Spanning Tree Protocol and Layer 2 Security Design Considerations 232
Spanning Tree Protocol Metrics 233
PVST+ 234
Rapid PVST+ 234
Alignment of Spanning Tree Protocol with FHRP 234
MST 234
Cisco Spanning Tree Protocol Toolkit 235
PortFast 235
UplinkFast 235
BackboneFast 235
Loop Guard 236
Root Guard 236
BPDU Guard 236
BPDU Filter 236
Unidirectional Link Detection (UDLD) Protocol 237
Layer 2 Security 238
References and Recommended Readings 239
Exam Preparation Tasks 240
Chapter 7 Advanced Enterprise Campus Design 250
“Do I Know This Already?” Quiz 250
Foundation Topics 251
Campus LAN Design and Best Practices 252
Network Requirements for Applications 252
Best Practices for Hierarchical Layers 253
Access Layer Best Practices 253
Distribution Layer Best Practices 257
Core Layer Best Practices 258
Campus Layer Best Practices 258
VTP Considerations 260
High Availability Network Services 260
Redundancy Models 260
First-Hop Redundancy for LAN High Availability 261
Server Redundancy 264
Route Redundancy 264
Link Media Redundancy 266
Redundancy Models Summary 267
Large-Building LANs 267
Enterprise Campus LANs 268
Small and Medium Campus Design Options 270
Campus LAN QoS Considerations 270
References and Recommended Readings 272
Exam Preparation Tasks 272
Chapter 8 WAN for the Enterprise 280
“Do I Know This Already?” Quiz 280
Foundation Topics 282
WAN Overview 282
WAN Defined 282
WAN Edge Module 284
Enterprise Edge Modules 284
WAN Transport Technologies 285
Layer 2 VPN 286
MPLS Layer 3 VPN 286
Metro Ethernet 287
SONET/SDH 287
Dense Wavelength-Division Multiplexing 289
Dark Fiber 289
Wireless: 4G/5G 289
SD-WAN Customer Edge 291
WAN Link Categories 292
Ordering WAN Technology 293
WAN Connectivity Options Summary 293
Site-to-Site VPN Design 294
VPN Benefits 294
IPsec 296
IPsec Direct Encapsulation 296
DMVPN 297
Service Provider VPNs: Layer 2 Versus Layer 3 298
Virtual Private Wire Services 299
VPWS Layer 2 VPN Considerations 299
Virtual Private LAN Service 299
VPLS Layer 2 VPN Considerations 300
MPLS Layer 3 VPNs 300
MPLS Layer 3 Design Overview 300
MPLS Layer 3 VPN Considerations 301
Generic Routing Encapsulation 301
GETVPN 301
Cloud-Based Services 301
References and Recommended Readings 302
Exam Preparation Tasks 303
Chapter 9 WAN Availability and QoS 310
“Do I Know This Already?” Quiz 310
Foundation Topics 312
WAN Design Methodologies 312
Response Time 314
Throughput 314
Reliability 314
Bandwidth Considerations 314
Design for High Availability 315
Defining Availability 315
Deployment Models 316
Redundancy Options 316
Single-Homed Versus Multi-Homed WANs 317
Single-Homed MPLS WANs 317
Multi-Homed MPLS WANs 318
Hybrid WANs: Layer 3 VPN with Internet Tunnels 318
Internet Connectivity 319
Internet for Remote Sites 320
High Availability for the Internet Edge 321
Backup Connectivity 321
Failover 322
QoS Strategies 322
Best-Effort QoS 323
DiffServ 323
IntServ 324
Designing End-to-End QoS Policies 324
Classification and Marking 324
Shaping 324
Policing 325
Queuing 325
Congestion Management 325
Priority Queuing 326
Custom Queuing 326
Weighted Fair Queuing 326
Class-Based Weighted Fair Queuing 326
Low-Latency Queuing 326
Link Efficiency 327
Window Size 327
References and Recommended Readings 327
Exam Preparation Tasks 328
Chapter 10 SD-Access Design 334
“Do I Know This Already?” Quiz 334
Foundation Topics 336
SD-Access Architecture 336
SD-Access Fabric 337
Underlay 337
Overlay 338
Control Plane 339
Data Plane 340
Automation 340
Wireless 341
Security and ISE 343
SD-Access Fabric Design Considerations for Wired and Wireless Access 344
Overlay Design 344
Fabric Design 345
Control Plane Design 345
Border Design 346
Segmentation 346
Virtual Networks 347
Scalability 348
Very Small Site Design Considerations 349
Small Site Design Considerations 349
Medium Site Design Considerations 350
Large Site Design Considerations 350
Over-the-Top 351
Fabric Wireless 351
Multicast 352
References and Recommended Readings 352
Exam Preparation Tasks 353
Chapter 11 SD-WAN Design 360
“Do I Know This Already?” Quiz 360
Foundation Topics 361
SD-WAN Architecture 362
Orchestration Plane 363
Management Plane 363
Control Plane 364
Data Plane 364
vEdge Color Attributes 364
Overlay Management Protocol 364
Onboarding and Provisioning 366
Zero Touch Provisioning (ZTP) 366
Onboarding a vEdge Router via Manual Configuration 367
Onboarding Cisco IOS XE SD-WAN Routers 367
SD-WAN Security 367
SD-WAN Design Considerations 368
Control Plane Design 368
Scalability 369
High Availability and Redundancy 369
Site Redundancy 370
Transport Redundancy 370
Network/Headend Redundancy 370
Controller Redundancy 371
LAN Design 371
vEdge DHCP Server 373
Direct Internet Access (DIA) 373
Security Design 373
VPN Segmentation 373
VPN Topology Design 374
Access Control Lists (ACLs) 375
SD-WAN Migration Strategy 375
QoS in SD-WAN 376
Bidirectional Forwarding Detection (BFD) 376
Policies 376
Application-Aware Routing 377
vEdge Interface Queues 377
Multicast over SD-WAN 378
Cisco SD-WAN Cloud OnRamp 379
Benefits of Cisco SD-WAN Cloud OnRamp 379
Cisco SD-WAN Cloud OnRamp Solutions 379
References and Recommended Readings 380
Exam Preparation Tasks 381
Chapter 12 Automation 390
“Do I Know This Already?” Quiz 390
Foundation Topics 392
Introduction to Network APIs and Protocols 392
Network APIs and Protocol Concepts 393
Evolution of Programmability 393
Data Encoding Formats 394
JSON 394
XML 395
Data Models 395
Model-Driven Programmability Stack 395
REST 396
YANG, NETCONF, and RESTCONF Explored 397
YANG Concepts 397
NETCONF Concepts 399
RESTCONF Concepts 401
NETCONF and RESTCONF Compared 402
IETF, OpenConfig, and Cisco YANG Models 403
IETF 403
OpenConfig 404
Cisco YANG Models 404
Model-Driven Telemetry 404
Streaming Telemetry Data 404
Model-Driven Telemetry Concepts 405
Subscription Explained 406
Periodic Publication 406
On-Change Publication 407
Defining GRPC and GNMI 407
Dial-In Approaches 408
Dial-Out Approaches 408
References and Recommended Readings 409
Exam Preparation Tasks 409
Chapter 13 Final Preparation 416
Getting Ready 416
Tools for Final Preparation 417
Pearson Cert Practice Test Engine and Questions on the Website 417
Accessing the Pearson Test Prep Software Online 417
Accessing the Pearson Test Prep Software Offline 418
Customizing Your Exams 418
Updating Your Exams 419
Premium Edition 420
Chapter-Ending Review Tools 420
Suggested Plan for Final Review/Study 420
Summary 420
Chapter 14 CCNP Enterprise Design ENSLD 300-420 Official Cert Guide Exam Updates 422
The Purpose of This Chapter 422
About Possible Exam Updates 422
Impact on You and Your Study Plan 423
News About the Next Exam Release 424
Updated Technical Content 424
Appendix A Answers to the “Do I Know This Already?” Quiz Questions Q&A Questions 426
Appendix B OSI Model, TCP/IP Architecture, and Numeric Conversion 452
Glossary 466
Online Elements
Appendix C Memory Tables
Appendix D Memory Tables Answer Key
Appendix E Study Planner
Glossary


9780138247263 TOC 12/6/2023