This blog will document my journey to being CCNP-Enterprise certified.
4.6 Configure and verify NETCONF and RESTCONF 5.3 Describe REST API security HTTPS / TLS REST APIs should use HTTPS, not plain HTTP.TLS provides encryption, integrity, and server authentication. Authentication Authorization Determines what an authenticated user/application is allowed to do.Think RBAC / least privilege.Authentication ≠ authorization. Tokens Usually sent in an HTTP header, commonly:Authorization: Bearer…
5.2 Configure and verify infrastructure security features 5.2.a ACLs Standard Source IPv4 address only Extended Source + destination + protocol + ports ACLs are processed top-down ACL effectively ends with: even though you don’t see it. Can use wildcard masks 5.2.b CoPP Verification of CoPP commands APIs Northbound vs Southbound Controller…
3.2.c Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships) Two routers can form a BGP peering relationship if they have working IP reachability to each other and the BGP session parameters match. Multiprotocol BGP = MBGP = allows IPv4 and IPv6 to coexist on the same device and…
3.2.b Configure simple OSPFv2/v3 environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point, and broadcast network types, and passive-interface) OSPF sends neighbor routers a Link-state advertisement (LSA). Inside the LSA is the link state and metric. Received LSAs are stored in a local database called the LSDB, and a router that receives an…
3.2 Layer 3 3.2.a Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. link state, load balancing, path selection, path operations, metrics, and area types) EIGRP diffusing update algorithm (DUAL) Topology table = contains all the network prefixes advertises in an AS Neighbors advertise the entire routing table when forming…
3.3.c Configure first hop redundancy protocols, such as HSRP, VRRP FHRP use Virtual Ips (VIPs) HSRP Config Why object tracking is needed: it’s needed because of R1 doesn’t actually go down but its link does, object tracking can detect the link down state and decrease R1’s priority so that R2 can preempt it Virtual Router…
3.3 IP Services 3.3.a Interpret network time protocol configurations such as NTP and PTP R1(config)# ntp master [#] = tell R1 to become an NTP server of # stratum R2(config)# ntp server [ip address] = tell R2 to become an NTP client of [server ip address] R2(config)# ntp server [ip address] source [loopback…
