CCNP and CCIE Data Center Core DCCOR 350-601 Official Cert Guide

Somit Maloo, CCIE No. 28603, CCDE No. 20170002, is a content architect from the data center team in the Learning & Certifications’ organization. He holds a master’s degree in telecommunication networks and a bachelor’s degree in electronics and telecommunication engineering. He is also a penta CCIE in routing and switching, service provider, wireless, security, and data center technologies. Somit holds various industry-leading certifications, including CCDE, PMP, RHCSA, and VMware VCIX6 in Data Center and Network Virtualization. Somit has extensive experience in designing and developing various data center courses for the official Cisco curriculum. He started his career as a Cisco TAC engineer. Somit has more than 13 years of experience in the networking industry, working mostly with data center networks. You can reach Somit on Twitter: @somitmaloo.Iskren Nikolov, CCIE No. 20164, CCSI No. 32481, MCT Alumni, content architect, engineer, and developer with the Cisco Learning & Certifications’ Data Center & Cloud team. He is responsible for designing, developing, and reviewing Data Center Official Learning Cisco courses, including lab infrastructures and exercises. He holds a master’s degree in computer systems and management from the Technical University-Sofia, Bulgaria. Iskren has more than 26 years of experience in designing, implementing, and supporting solutions based on the data center, security, storage, wide area networks, software-defined networks, cloud, hybrid, and multi-cloud technologies, including 11 years of teaching, and developing Cisco Data Center & Cloud and Microsoft Azure courses. The huge experience across technologies from multiple vendors such as Cisco Systems, VMware, Microsoft, and Barracuda, combined with the different perspectives gained from the different roles in his work and experience with customers from different industries, allow Iskren to have a unique view of the current data center technologies and the future trends. You can reach Iskren on LinkedIn: https://www.linkedin.com/in/iskrennikolov.Firas Ahmed, CCIE No. 14967, is a solution architect on the data center technologies team at Nile. He completed a master’s degree in systems and control engineering following a bachelor’s degree in computer engineering. Firas holds CCIE certificates in routing and switching, collaboration, wireless, security, and data center technologies in addition to industry-based certifications, including CISSP, PMP, VMware VCP6.5-DCV, ITIL, and GICSP. Firas has more than 18 years of experience in designing, developing, and supporting various data centers for enterprise and IoT customers. Firas has additional experience as a seasonal instructor in a number of community colleges in Toronto, where he taught various computer networking courses. You can reach Firas on Twitter: @dccor_firas.

• Introduction xxxvPart I NetworkingChapter 1 Implementing Routing in the Data Center 2“Do I Know This Already?” Quiz 2Foundation Topics 5Routing Protocols Support on Cisco Nexus Devices 5OSPF 6OSPF Link-State Advertisements 7OSPF Authentication 13OSPF Configurations and Verifications 13Border Gateway Protocol 24BGP Peering 25BGP Path Selection 26Multiprotocol BGP 29BGP Configurations and Verifications 30Bidirectional Forwarding Detection 37Rapid Detection of Failures 38BFD Configurations and Verifications 38Multicast 42Internet Group Management Protocol 43Switch IGMP Snooping 46Multicast Listener Discovery 46Multicast Distribution Trees 47Protocol Independent Multicast 49Multicast Forwarding 55Multicast Configurations and Verifications 56Hot Standby Router Protocol 69Virtual Router Redundancy Protocol 73VRRP Operation 73VRRP Groups 75VRRP Router Priority and Preemption 76VRRP Authentication 77VRRP Tracking 77IPv6 First Hop Redundancy 77HSRP/VRRP Configurations and Verifications 79Exam Preparation Tasks 87Chapter 2 Implementing Data Center Switching Protocols 90“Do I Know This Already?” Quiz 90Foundation Topics 93Spanning Tree Protocols 93STP Topology 93STP Port Types 94STP Extensions 94Unidirectional Link Detection 97Rapid PVST+ 98Spanning Tree Configurations and Verifications 102Port Channels 117Port Channel Load Balance 120Virtual Port Channel 122vPC Traffic Flows 125vPC Dual-Control Plane 126vPC Primary and Secondary Roles 127vPC Configuration Consistency 128vPC Duplicate Frames Prevention Mechanism 129vPC HSRP Gateway Considerations 131vPC ARP Synchronization 131vPC Peer Gateway 131Port Channel Configurations and Verifications 132Exam Preparation Tasks 146Chapter 3 Implementing Data Center Overlay Protocols 150“Do I Know This Already?” Quiz 150Foundation Topics 151Virtual Extensible LAN (VXLAN) Overview 151VXLAN Encapsulation and Packet Format 152VXLAN Tunnel Endpoint 152Virtual Network Identifier 153VXLAN Control Plane 154VXLAN Gateways 157VXLAN High Availability 157VXLAN Tenant Routed Multicast 159VXLAN Configurations and Verifications 159Exam Preparation Tasks 169Chapter 4 Describe Cisco Application Centric Infrastructure 172“Do I Know This Already?” Quiz 172Foundation Topics 174Cisco Application Centric Infrastructure (ACI) Overview 174Cisco Application Policy Infrastructure Controller 176Cisco Nexus 9000 Series Spine and Leaf Switches for Cisco ACI 179Cisco ACI Initial Setup, Fabric Discovery, Fabric Upgrade, and Fabric Access Policies 182Cisco ACI Initial Setup 182Cisco ACI Fabric Discovery 187Startup with Cisco ACI Fabric Discovery and Configuration 188Fabric Upgrade 189Cisco ACI Fabric Access Policies 190Cisco ACI Fabric Building Blocks, Policy Model, and VMM Domains 195ACI Policy Model 197Cisco ACI Tenants 198Taboo Contracts 209vzAny Rule 210Filters and Subjects 213Management Tenant 213In-Band Management Access 214ACI VXLAN 215ACI Intersubnet Tenant Traffic 217Policy Identification and Enforcement 218ACI Fabric Traffic Storm Control 219ACI Fabric Traffic Load Balance 219ACI Fabric Loop Detection 220ACI Design Best Practices 221ACI LAB Configurations Example 221Building ACI Fabric 224Creating Tenant 227Creating Contract and Filter 230Deploying a Three-Tier Application 233Integrating with vCenter 235Exam Preparation Tasks 238Chapter 5 Cisco Cloud Services and Deployment Models 240“Do I Know This Already?” Quiz 240Foundation Topics 242What Is Cloud Computing? 242Cloud Service Models 245Software as a Service 245Platform as a Service 246Infrastructure as a Service 246Cloud Deployment Models 248Private Cloud 248Public Cloud 248Hybrid Cloud 249Community Cloud 250Exam Preparation Tasks 250Chapter 6 Data Center Network Management and Monitoring 252“Do I Know This Already?” Quiz 252Foundation Topics 254Cisco Nexus NX-OS Software Installation, Updates, and Their Impacts 254PowerOn Auto Provisioning (POAP) 259Data Center Infrastructure Software Lifecycle Management 263Nexus Nondisruptive In-Service Software Upgrade 263Nexus Disruptive and Nondisruptive Upgrade/Downgrade Procedure 265Programmable Logical Devices Upgrade 269Nexus Configuration Management 271NX-OS Configuration Save and Backup 272Nexus Config Rollback and Checkpoint 272Network Time Management 274Network Time Protocol 275Precision Time Protocol 280Network Infrastructure Monitoring 284NX-OS System Message Logging 284NX-OS Simple Network Management Protocol 286Nexus Smart Call Home 292Nexus NetFlow 293Switched Port Analyzer 298Streaming Telemetry 306Network Assurance Concept 310Exam Preparation Tasks 312Chapter 7 Describe Cisco Nexus Dashboard 314“Do I Know This Already?” Quiz 314Foundation Topics 316Cisco Nexus Dashboard 316Cisco Nexus Dashboard Insights 318Cisco Nexus Dashboard Orchestrator 323Cisco Nexus Dashboard Fabric Controller 325Cisco Nexus Dashboard Data Broker 335Cisco Nexus Dashboard Platforms 337Cisco Nexus Dashboard Cluster Nodes 339Cisco Nexus Dashboard External Networks 341Cisco Nexus Dashboard GUI Overview 342One View Page 343Admin Console Page 343Exam Preparation Tasks 348Part II StorageChapter 8 Implement Fibre Channel 352“Do I Know This Already?” Quiz 353Foundation Topics 356Cisco MDS 9000 Series Hardware 356Cisco MDS 9700 Series Multilayer Directors 356Cisco MDS 9300 Series Multilayer Fabric Switches 360Cisco MDS 9200 Series Multiservice Switches 361Cisco MDS 9100 Series Multilayer Fabric Switches 362Fibre Channel Basics 365Fibre Channel Topologies 365Fibre Channel Port Types 368Fibre Channel Addressing 371Flow Control 372Switched Fabric Initialization 373Device Registration: FLOGI, PLOGI, PRLI 378FLOGI and FCNS Databases 378CFS 380CFS Features 381CFS Fabric Lock 382CFSoIP and CFSoFC 382CFS Merge 384CFS Regions 384VSAN 386VSAN Features 386VSAN Attributes 387VSAN Advantages 388Dynamic Port VSAN Membership (DPVM) 388VSAN Trunking 389SAN Port Channels 396Types of SAN Port Channels 396Port Channel Load Balancing 398Port Channel Modes 399Zoning 404Zoning Features 404Zone Enforcement 406Full and Active Zone Set 407Autozone 410Zone Merge 410Smart Zoning 411Enhanced Zoning 412Device Alias 418Device Alias Features 419Device Alias Modes 419Device Alias Distribution 420Zone Aliases (FC Aliases) Versus Device Aliases 421NPIV and NPV 424Exam Preparation Tasks 431Chapter 9 Implement FCoE Unified Fabric 434“Do I Know This Already?” Quiz 434Foundation Topics 436FCoE Overview 436Ethernet Enhancements 438FCoE Frame Format 442Virtual Fibre Channel (VFC) 444FCoE Elements and Port Types 445FCoE Addressing and Forwarding 447FCoE Initialization Protocol (FIP) 448Benefits of FCoE 451FCoE Topology Options 451FCoE Single-Hop Topology 451FCoE Multi-Hop Topology 454FCoE Implementations 455FCoE Configuration on Cisco Nexus 7000 Series Switches 456FCoE Configuration on Cisco Nexus 5000 Series Switches 458FCoE Configuration on Cisco Nexus 9000 Series Switches 459FCoE over FEX 461FCoE NPV 463FCoE Verification 466Exam Preparation Tasks 475Chapter 10 Describe NFS and NAS Concepts 478“Do I Know This Already?” Quiz 478Foundation Topics 479Describe NFS Concepts 479Describe NAS Concepts 481NAS Benefits 483Cisco UCS S-Series Storage Servers 483Exam Preparation Tasks 485Chapter 11 Describe Software Management and Infrastructure Monitoring 488“Do I Know This Already?” Quiz 488Foundation Topics 490Cisco MDS NX-OS Setup Utility 490Cisco MDS NX-OS Software Upgrade and Downgrade 498Nondisruptive Upgrade on a Cisco MDS Fabric Switch 500Disruptive Upgrade on a Cisco MDS Fabric Switch 505Nondisruptive Downgrade on a Cisco MDS Fabric Switch 508Disruptive Downgrade on a Cisco MDS Fabric Switch 513EPLD Upgrade on Cisco MDS 9000 Series Switches 515Infrastructure Monitoring 521System Messages 521Call Home 521Embedded Event Manager 522RMON 523SPAN 523Exam Preparation Tasks 528Part III ComputeChapter 12 Cisco Unified Computing Systems Overview 530“Do I Know This Already?” Quiz 530Foundation Topics 532Cisco UCS Architecture 532Cisco UCS Components and Connectivity 534Cisco UCS 5108 Blade Server Chassis 536UCS Blade Servers 536Cisco UCS Rack Servers 537Cisco UCS Storage Servers 537Cisco UCS Mini 539Cisco UCS Fabric Infrastructure 539Cisco UCS 6536 Fabric Interconnect 540Cisco UCS 6454 Fabric Interconnect 541Cisco UCS 6300 Series Fabric Interconnects 543Fabric Interconnect and Fabric Extender Connectivity 544Cisco UCS Virtualization Infrastructure 550Cisco UCS-X System 555Cisco UCS Initial Setup and Management 557Fabric Interconnect Connectivity and Configurations 565Fabric Interconnect Port Modes 567Fabric Failover for Ethernet: High-Availability vNIC 569Ethernet Switching Mode 570UCS Device Discovery 577Chassis/FEX Discovery 577Rack Server Discovery Policy 577Initial Server Setup for Standalone UCS C-Series 578Cisco UCS Network Management 584UCS Virtual LAN 584UCS Identity Pools 591Service Profiles 596UCS Server Policies 599UCS Service Profile Templates 602Quality of Service 608Cisco UCS Storage 611UCS SAN Connectivity 611UCS SAN Configuration 615Virtual Storage-Area Networks 616World Wide Name Pool 621SAN Connectivity Policies 624Exam Preparation Tasks 625Chapter 13 Cisco Unified Computing Infrastructure Monitoring 628“Do I Know This Already?” Quiz 628Foundation Topics 630Cisco UCS System Monitoring 630Data Management Engine 631Application Gateway 631Northbound Interfaces 631Cisco UCS Monitoring Events and Logs 632Cisco UCS Monitoring Policies 634Traffic Monitoring 640Cisco Intersight 647Intersight Management as a Service 648Intersight as a Telemetry Data Collection 650Cisco Intersight Supported Software 650Cisco Intersight Licensing 652Exam Preparation Tasks 656Chapter 14 Cisco Unified Compute Software and Configuration Management 658“Do I Know This Already?” Quiz 658Foundation Topics 660Cisco UCS Configuration Management 660Creating and Running a Backup Operation 661Backup Policies 666Backup Policy Configuration 666Import Backups 668Enable the Import Operation 669System Restore 670Restoring the Configuration for a Fabric Interconnect 671UCS Firmware and Software Updates 672Firmware Version Terminology 679Firmware Upgrades Through Auto Install 680Direct Upgrade After Auto Install Procedure 684Install Infrastructure Firmware Procedure 688Upgrading the Server Firmware with Auto Install 691Standalone Cisco UCS C-Series Server Firmware Upgrade Using the Host Upgrade Utility (HUU) 693Downloading and Preparing the ISO for an Upgrade 694Exam Preparation Tasks 700Chapter 15 Cisco HyperFlex Overview 702“Do I Know This Already?” Quiz 702Foundation Topics 704Cisco HyperFlex Solution and Benefits 704HyperFlex Benefits 707HyperFlex as an Edge, Hybrid, and All-Flash Nodes 712HyperFlex as an Edge Device 712HyperFlex Hyperconverged Multicloud Platform (Hybrid or All-Flash) 714HyperFlex All NVMe 715Cisco HyperFlex Data Platform 716Exam Preparation Tasks 728Part IV AutomationChapter 16 Automation and Scripting Tools 730“Do I Know This Already?” Quiz 730Foundation Topics 733EEM Overview 733Policies 733Event Statements 734Action Statements 734Configuring EEM 735Verifying the EEM Configuration 736Scheduler 736Configuring Scheduler 737Verifying Scheduler Configuration 739Bash Shell for Cisco NX-OS 740Managing Feature RPMs 742Managing Patch RPMs 742Guest Shell for Cisco NX-OS 743Accessing the Guest Shell 743Resources Used for the Guest Shell 744Capabilities in the Guest Shell 744Managing the Guest Shell 746XML 748Example 749XML Syntax 750JSON 751Rest API 752Authentication 753Response 754NX-API 755NX-API Request and Response Elements 757NX-API Developer Sandbox 759Exam Preparation Tasks 760Chapter 17 Evaluate Automation and Orchestration Technologies 762“Do I Know This Already?” Quiz 762Foundation Topics 764Ansible 764Ansible Components 765Important Ansible Concepts 766Ansible CLI Tools 767Cisco NX-OS and Ansible Example 767Python 768Python Package for Cisco 769Using the CLI Command APIs 771Python in Interactive Mode 772Python in Noninteractive Mode 773UCS Manager Python SDK 775Convert to UCS Python 777PowerOn Auto Provisioning (POAP) 777Limitations of POAP 778Network Requirements for POAP 778POAP Configuration Script 778POAP Process 779Configuring a Switch Using POAP 782HashiCorp Terraform 783Terraform Concept 784Terraform Components 784Terraform Commands 786PowerShell 789Exam Preparation Tasks 795Part V SecurityChapter 18 Network Security 798“Do I Know This Already?” Quiz 798Foundation Topics 801Authentication, Authorization, and Accounting 801AAA Service Configuration Options 802Authentication and Authorization User Login Process 803AAA NX-OS Configurations 804Role-Based Access Control 807NX-OS User Roles and Rules 809NX-OS RBAC Configurations 811Nexus First-Hop Security 815Nexus Dynamic ARP Inspection 816NX-OS DAI Configurations 819NX-OS DHCP Snooping 827Port Security 832Nexus Port Secure MAC Address Maximum and Dynamic Address Aging 833Port Security Violations and Actions 834Nexus Port Types and Port Security 835NX-OS Port Security Configuration 835Nexus Control Plane Policing 837Control Plane Packet 839Classification for CoPP 840NX-OS CoPP Configuration 844Cisco ACI Contracts 851Cisco ACI Contract Configuration Parameters 853Create, Modify, or Remove Regular Contracts 854Apply or Remove VRF Contracts 856Inter-Tenant Contracts 857Inter-Private Network Contracts Communication 858Single Contract Bidirectional Reverse Filter 859Single Contract Unidirectional with Multiple Filters 859Multiple Contracts Unidirectional Single Filter 860ACI Microsegmentation 860Example: ACI Microsegmentation with VMs from a Single Application EPG 862Example: ACI Microsegmentation with VMs in Different Application EPGs 863ACI Microsegmentation Configurations 864Keychain Authentication 868NX-OS Keychain Configurations 868Key Selection 871Exam Preparation Tasks 872Chapter 19 Compute Security 874“Do I Know This Already?” Quiz 874Foundation Topics 875Securing UCS Management Using Authentication, Authorization, and Accounting 875User RADIUS and TACACS+ Attributes 876Two-Factor Authentication 879UCS Web Session Refresh and Session Timeout Period 879UCS LDAP Providers and Groups 879RADIUS and TACACS+ Authentication Configurations 888UCS Remote Users Role Policy 892Multiple Authentication Services Configuration 894Exam Preparation Tasks 895Chapter 20 Storage Security 896“Do I Know This Already?” Quiz 896Foundation Topics 898Authentication, Authorization, and Accounting 898Authentication 899Authorization 899Accounting 900Server Groups 900AAA Service Configuration Options 900AAA Server Monitoring 900Remote AAA Services 901Local AAA Services 911AAA Authentication and Authorization Process 912AAA Server Distribution 913Merging RADIUS and TACACS+ Configurations 914User Accounts and RBAC 914User Roles 915Rules 915User Role Policies 917RBAC Sample Configuration 918Port Security 919Port Security Configuration 921Verification of Port Security 924Fabric Binding 926Fabric Binding Configuration 926Port Security Versus Fabric Binding 928Exam Preparation Tasks 929Chapter 21 Final Preparation 932Getting Ready 932Tools for Final Preparation 933Pearson Test Prep Practice Test Software and Questions on the Website 933How to Access the Pearson Test Prep (PTP) App 933Customizing Your Exams 934Updating Your Exams 935Chapter-Ending Review Tools 935Learn the Question Types Using the Cisco Certification Exam Tutorial 935Suggested Plan for Final Review/Study 940Summary 940Chapter 22 CCNP and CCIE Data Center Core DCCOR 350-601 Official Cert Guide Exam Updates 942The Purpose of This Chapter 942About Possible Exam Updates 943Impact on You and Your Study Plan 943News About the Next Exam Release 944Updated Technical Content 944Appendix A Answers to the “Do I Know This Already?” Quizzes 946Glossary 961Online ElementsAppendix B Memory TablesAppendix C Memory Tables Answer KeyAppendix D Study PlannerGlossary 9780138228088 TOC 11/7/2023