CCNP Enterprise Design ENSLD 300-420 Official Cert Guide

Anthony Bruno, CCIE No. 2738, is an enterprise architect with British Telecom (BT) with more than 30 years of experience in the internetworking field. Previously, he worked for International Network Services (INS) and Lucent Technologies, and he was a captain in the U.S. Air Force. He has consulted for many enterprise and service provider customers in the design, implementation, and optimization of large-scale networks. Anthony leads architecture and design teams in building next-generation networks for customers.Anthony completed a master of science degree in electrical engineering at the University of Missouri–Rolla in 1994 and a bachelor of science in electrical engineering at the University of Puerto Rico–Mayaguez in 1990. For the past 23 years, he has coauthored CCNP Enterprise Design ENSLD 300-420 Official Cert Guide: Designing Cisco Enterprise Networks and five editions of the CCDA Official Cert Guide for Cisco Press.Outside work, Anthony enjoys running marathons and Spartan obstacle races, and he has finished eight Ironman distance triathlons. He is also an avid genealogist and ancestry tree researcher. As an FAA certified remote pilot, Anthony also enjoys piloting his drone at home and when traveling.Steve Jordan, CCIE No. 11293, is a principal architect with J. Network Architects and has 26 years of experience in the field of internetworking. For the last 16 years, Steve has specialized in data center and network security architectures involving compute, network, security, storage, and virtualization. Over the years, Steve has consulted with many enterprise and service provider customers in both pre-sales and post-sales engineering and architecture roles, along with working at several Cisco Gold Partners. He has extensive experience in data center and security architecture design and has implemented solutions in many energy, financial, gaming, healthcare, hospitality, and telecommunications industries. Steve is a 20-Year triple CCIE in the tracks of Enterprise Infrastructure, Storage Networking, and Data Center. His other certifications include CCNA, CCNP Enterprise, VMware VCIX6-NV, and VCP6-NV.Steve lives in Houston, Texas, and when he is not working on technology, Steve can be found traveling to new places, enjoying sporting events, attending concerts, and trading stocks.For the past 17 years, Steve has also coauthored CCNP Enterprise Design ENSLD 300-420 Official Cert Guide: Designing Cisco Enterprise Networks and three editions of the CCDA Official Cert Guide.

• Introduction xxxiChapter 1 Internet Protocol Version 4 (IPv4) Design 2“Do I Know This Already?” Quiz 2Foundation Topics 4IPv4 Header 5ToS 7IPv4 Fragmentation 10IPv4 Addressing 11IPv4 Address Classes 12Class A Addresses 12Class B Addresses 13Class C Addresses 13Class D Addresses 13Class E Addresses 13IPv4 Address Types 13IPv4 Private Addresses 14NAT 14IPv4 Address Subnets 17Mask Nomenclature 17IP Address Subnet Design Example 18Determining the Network Portion of an IP Address 19Variable-Length Subnet Masking 19VLSM Address Assignment: Example 1 20Loopback Addresses 21IP Telephony Networks 22VLSM Address Assignment: Example 2 22IPv4 Addressing Design 24Goals of IPv4 Address Design 24Planning for Future Use of IPv4 Addresses 24Performing Route Summarization 24Planning for a Hierarchical IP Address Network 25Private and Public IP Address and NAT Guidelines 26Steps for Creating an IPv4 Address Plan 27Case Study: IP Address Subnet Allocation 28Address Assignment and Name Resolution 29Recommended Practices of IP Address Assignment 30BOOTP 30DHCP 30DNS 32ARP 34References and Recommended Readings 35Exam Preparation Tasks 37Chapter 2 Internet Protocol Version 6 (IPv6) Design 44“Do I Know This Already?” Quiz 44Foundation Topics 47Introduction to IPv6 47IPv6 Header 48IPv6 Address Representation 50IPv4-Mapped IPv6 Addresses 51IPv6 Prefix Representation 51IPv6 Address Scope Types and Address Allocations 52IPv6 Address Allocations 52IPv6 Unicast Addresses 53Global Unicast Addresses 53Link-Local Addresses 54Unique Local IPv6 Address 54Global Aggregatable IPv6 Address 55IPv4-Compatible IPv6 Addresses 55IPv4-Mapped IPv6 Addresses 55IPv6 Anycast Addresses 55IPv6 Multicast Addresses 56IPv6 Mechanisms 58ICMPv6 58IPv6 Neighbor Discovery Protocol 59IPv6 Name Resolution 60Path MTU Discovery 61IPv6 Address-Assignment Strategies 61Manual Configuration 61SLAAC of Link-Local Address 61SLAAC of Globally Unique IPv6 Address 62DHCPv6 63DHCPv6 Lite 63IPv6 Security 63IPv6 Routing Protocols 64RIPng 64EIGRP for IPv6 64OSPFv3 64IS-IS for IPv6 64BGP4 Multiprotocol Extensions (MP-BGP) for IPv6 65IPv6 Addressing Design 65Planning for Addressing with IPv6 65Route Summarization with IPv6 65IPv6 Private Addressing 66IPv6 for the Enterprise 66IPv6 Address Allocation 66Partly Linked IPv4 Address into IPv6 67Whole IPv4 Address Linked to IPv6 67IPv6 Addresses Allocated per Location and/or Type 67IPv4-to-IPv6 Migration Strategies and Deployment Models 68Dual-Stack Migration Strategy 68IPv6 over IPv4 Tunneling Strategy 69Manual Configured Tunnels and GRE Tunnels 69Automatic Tunnel Mechanisms 696to4 Tunnels 696RD Tunnels 70IPv6 ISATAP Tunnels 70IPv6/IPv4 Translation Strategy 71DNS64 71NAT64 71Stateless NAT64 71Stateful NAT64 71IPv6 Deployment Models 73Dual-Stack Model 73Hybrid Model 74Service Block Model 75IPv6 Deployment Model Comparison 76IPv6 Comparison with IPv4 76References and Recommended Readings 77Exam Preparation Tasks 80Chapter 3 Routing Protocol Characteristics, EIGRP, and IS-IS 90“Do I Know This Already?” Quiz 90Foundation Topics 92Routing Protocol Characteristics 92Static Versus Dynamic Route Assignment 93Interior Versus Exterior Routing Protocols 94Distance-Vector Routing Protocols 95EIGRP 96Link-State Routing Protocols 96Distance-Vector Routing Protocols Versus Link-State Protocols 96Hierarchical Versus Flat Routing Protocols 97Classless Versus Classful Routing Protocols 97IPv4 Versus IPv6 Routing Protocols 98Administrative Distance 99Routing Protocol Metrics and Loop Prevention 100Hop Count 100Bandwidth 101Cost 101Load 102Delay 103Reliability 103Maximum Transmission Unit 103Routing Loop-Prevention Schemes 104Split Horizon 104Poison Reverse 104Counting to Infinity 105Triggered Updates 105Summarization 105EIGRP 105EIGRP Components 106Protocol-Dependent Modules 106Neighbor Discovery and Recovery 106RTP 107DUAL 107EIGRP Timers 109EIGRP Metrics 109EIGRP Packet Types 110EIGRP Design 111EIGRP Scaling Techniques 111EIGRP Stub Routers 112EIGRP Variance Command 113EIGRP for IPv4 Summary 113EIGRP for IPv6 (EIGRPv6) Networks 114EIGRP for IPv6 Design 114EIGRP in the Data Center 115EIGRP for IPv6 Summary 115IS-IS 116IS-IS Metrics 116IS-IS Operation and Design 117IS-IS NET Addressing 117IS-IS DRs 117IS-IS Interface Types 117IS-IS Area Design 118IS-IS Authentication 119IS-IS for IPv6 120IS-IS Summary 121References and Recommended Readings 121Exam Preparation Tasks 122Chapter 4 OSPF, BGP, and Route Manipulation 132“Do I Know This Already?” Quiz 132Foundation Topics 134OSPFv2 134OSPFv2 Metric 135OSPFv2 Adjacencies and Hello Timers 135OSPF Message Types 136OSPFv2 Areas 137OSPF Area Design Considerations 137OSPF Router Types 138OSPF DRs 140LSA Types 140Autonomous System External Path Types 141OSPF Stub Area Types 142Stub Areas 142Totally Stubby Areas 142NSSAs 143Virtual Links 143OSPFv2 Router Authentication 143OSPFv2 Summary 144OSPFv3 144OSPFv3 Changes from OSPFv2 145OSPFv3 Areas and Router Types 145OSPFv3 LSAs 146OSPFv3 Summary 148BGP 148BGP Neighbors 149eBGP 149iBGP 150Route Reflectors 151Confederations 152BGP Administrative Distance 154BGP Attributes, Weight, and the BGP Decision Process 154BGP Path Attributes 154Next-Hop Attribute 154Local Preference Attribute 154Origin Attribute 155Autonomous System Path (AS_Path) Attribute 155MED Attribute 156Community Attribute 157Atomic Aggregate and Aggregator Attributes 157Weight Attribute 157BGP Decision Process 158eBGP Multihop 161BGP Multipath 161BGP Summary 161Route Manipulation 161PBR 162Route Summarization 162Route Redistribution 164Default Metric 167OSPF Redistribution 167Route Filtering 167Transit Traffic 168Bidirectional Forwarding Detection (BFD) 168Graceful Restart and Non-Stop Routing 169Virtual Routing and Forwarding (VRF) 169References and Recommended Readings 169Exam Preparation Tasks 170Chapter 5 IP Multicast and Network Management 180“Do I Know This Already?” Quiz 180Foundation Topics 182IP Multicast Review 182Multicast Addresses 182Layer 3 to Layer 2 Mapping 183IGMP 184IGMPv1 184IGMPv2 184IGMPv3 185CGMP 185IGMP Snooping 186Sparse Versus Dense Multicast 186Multicast Source and Shared Trees 187PIM 187PIM-SM 187PIM DR 188Auto-RP 188BIDIR-PIM 188PIM-SSM 189MSDP 189Summary of Multicast Protocols 189IPv6 Multicast Addresses 190Network Management Design 190SNMP 191SNMP Components 191Network Management Design Considerations 192In-Band Versus Out-of-Band Network Management 192Network Management Traffic Prioritization 192MIB 192SNMP Versions 194SNMPv1 194SNMPv2 194SNMPv3 195Other Network Management Technologies 196RMON 196RMON2 197NetFlow 197NetFlow Compared to RMON and SNMP 200CDP 201LLDP 202Syslog 202References and Recommended Readings 203Exam Preparation Tasks 205Chapter 6 Enterprise LAN Design and Technologies 214“Do I Know This Already?” Quiz 214Foundation Topics 216Hierarchical Network Models 216Benefits of the Hierarchical Model 216Hierarchical Network Design 217Core Layer 218Distribution Layer 218Access Layer 219Hierarchical Model Examples 221VSS 222Hub-and-Spoke Design 222Collapsed Core Design 223Building Triangles and Redundant Links 224Local Versus End-to-End VLAN Design Models 225LAN Media 225Ethernet Design Rules 226100 Mbps Fast Ethernet Design Rules 226Gigabit Ethernet Design Rules 2271000BASE-LX Long-Wavelength Gigabit Ethernet 2281000BASE-SX Short-Wavelength Gigabit Ethernet 2281000BASE-CX Gigabit Ethernet over Coaxial Cable 2281000BASE-T Gigabit Ethernet over UTP 22810 Gigabit Ethernet Design Rules 22910 Gigabit Ethernet Media Types 229EtherChannel 230Port Aggregation Considerations 231Comparison of Campus Media 231Power over Ethernet (PoE) 232Spanning Tree Protocol and Layer 2 Security Design Considerations 232Spanning Tree Protocol Metrics 233PVST+ 234Rapid PVST+ 234Alignment of Spanning Tree Protocol with FHRP 234MST 234Cisco Spanning Tree Protocol Toolkit 235PortFast 235UplinkFast 235BackboneFast 235Loop Guard 236Root Guard 236BPDU Guard 236BPDU Filter 236Unidirectional Link Detection (UDLD) Protocol 237Layer 2 Security 238References and Recommended Readings 239Exam Preparation Tasks 240Chapter 7 Advanced Enterprise Campus Design 250“Do I Know This Already?” Quiz 250Foundation Topics 251Campus LAN Design and Best Practices 252Network Requirements for Applications 252Best Practices for Hierarchical Layers 253Access Layer Best Practices 253Distribution Layer Best Practices 257Core Layer Best Practices 258Campus Layer Best Practices 258VTP Considerations 260High Availability Network Services 260Redundancy Models 260First-Hop Redundancy for LAN High Availability 261Server Redundancy 264Route Redundancy 264Link Media Redundancy 266Redundancy Models Summary 267Large-Building LANs 267Enterprise Campus LANs 268Small and Medium Campus Design Options 270Campus LAN QoS Considerations 270References and Recommended Readings 272Exam Preparation Tasks 272Chapter 8 WAN for the Enterprise 280“Do I Know This Already?” Quiz 280Foundation Topics 282WAN Overview 282WAN Defined 282WAN Edge Module 284Enterprise Edge Modules 284WAN Transport Technologies 285Layer 2 VPN 286MPLS Layer 3 VPN 286Metro Ethernet 287SONET/SDH 287Dense Wavelength-Division Multiplexing 289Dark Fiber 289Wireless: 4G/5G 289SD-WAN Customer Edge 291WAN Link Categories 292Ordering WAN Technology 293WAN Connectivity Options Summary 293Site-to-Site VPN Design 294VPN Benefits 294IPsec 296IPsec Direct Encapsulation 296DMVPN 297Service Provider VPNs: Layer 2 Versus Layer 3 298Virtual Private Wire Services 299VPWS Layer 2 VPN Considerations 299Virtual Private LAN Service 299VPLS Layer 2 VPN Considerations 300MPLS Layer 3 VPNs 300MPLS Layer 3 Design Overview 300MPLS Layer 3 VPN Considerations 301Generic Routing Encapsulation 301GETVPN 301Cloud-Based Services 301References and Recommended Readings 302Exam Preparation Tasks 303Chapter 9 WAN Availability and QoS 310“Do I Know This Already?” Quiz 310Foundation Topics 312WAN Design Methodologies 312Response Time 314Throughput 314Reliability 314Bandwidth Considerations 314Design for High Availability 315Defining Availability 315Deployment Models 316Redundancy Options 316Single-Homed Versus Multi-Homed WANs 317Single-Homed MPLS WANs 317Multi-Homed MPLS WANs 318Hybrid WANs: Layer 3 VPN with Internet Tunnels 318Internet Connectivity 319Internet for Remote Sites 320High Availability for the Internet Edge 321Backup Connectivity 321Failover 322QoS Strategies 322Best-Effort QoS 323DiffServ 323IntServ 324Designing End-to-End QoS Policies 324Classification and Marking 324Shaping 324Policing 325Queuing 325Congestion Management 325Priority Queuing 326Custom Queuing 326Weighted Fair Queuing 326Class-Based Weighted Fair Queuing 326Low-Latency Queuing 326Link Efficiency 327Window Size 327References and Recommended Readings 327Exam Preparation Tasks 328Chapter 10 SD-Access Design 334“Do I Know This Already?” Quiz 334Foundation Topics 336SD-Access Architecture 336SD-Access Fabric 337Underlay 337Overlay 338Control Plane 339Data Plane 340Automation 340Wireless 341Security and ISE 343SD-Access Fabric Design Considerations for Wired and Wireless Access 344Overlay Design 344Fabric Design 345Control Plane Design 345Border Design 346Segmentation 346Virtual Networks 347Scalability 348Very Small Site Design Considerations 349Small Site Design Considerations 349Medium Site Design Considerations 350Large Site Design Considerations 350Over-the-Top 351Fabric Wireless 351Multicast 352References and Recommended Readings 352Exam Preparation Tasks 353Chapter 11 SD-WAN Design 360“Do I Know This Already?” Quiz 360Foundation Topics 361SD-WAN Architecture 362Orchestration Plane 363Management Plane 363Control Plane 364Data Plane 364vEdge Color Attributes 364Overlay Management Protocol 364Onboarding and Provisioning 366Zero Touch Provisioning (ZTP) 366Onboarding a vEdge Router via Manual Configuration 367Onboarding Cisco IOS XE SD-WAN Routers 367SD-WAN Security 367SD-WAN Design Considerations 368Control Plane Design 368Scalability 369High Availability and Redundancy 369Site Redundancy 370Transport Redundancy 370Network/Headend Redundancy 370Controller Redundancy 371LAN Design 371vEdge DHCP Server 373Direct Internet Access (DIA) 373Security Design 373VPN Segmentation 373VPN Topology Design 374Access Control Lists (ACLs) 375SD-WAN Migration Strategy 375QoS in SD-WAN 376Bidirectional Forwarding Detection (BFD) 376Policies 376Application-Aware Routing 377vEdge Interface Queues 377Multicast over SD-WAN 378Cisco SD-WAN Cloud OnRamp 379Benefits of Cisco SD-WAN Cloud OnRamp 379Cisco SD-WAN Cloud OnRamp Solutions 379References and Recommended Readings 380Exam Preparation Tasks 381Chapter 12 Automation 390“Do I Know This Already?” Quiz 390Foundation Topics 392Introduction to Network APIs and Protocols 392Network APIs and Protocol Concepts 393Evolution of Programmability 393Data Encoding Formats 394JSON 394XML 395Data Models 395Model-Driven Programmability Stack 395REST 396YANG, NETCONF, and RESTCONF Explored 397YANG Concepts 397NETCONF Concepts 399RESTCONF Concepts 401NETCONF and RESTCONF Compared 402IETF, OpenConfig, and Cisco YANG Models 403IETF 403OpenConfig 404Cisco YANG Models 404Model-Driven Telemetry 404Streaming Telemetry Data 404Model-Driven Telemetry Concepts 405Subscription Explained 406Periodic Publication 406On-Change Publication 407Defining GRPC and GNMI 407Dial-In Approaches 408Dial-Out Approaches 408References and Recommended Readings 409Exam Preparation Tasks 409Chapter 13 Final Preparation 416Getting Ready 416Tools for Final Preparation 417Pearson Cert Practice Test Engine and Questions on the Website 417Accessing the Pearson Test Prep Software Online 417Accessing the Pearson Test Prep Software Offline 418Customizing Your Exams 418Updating Your Exams 419Premium Edition 420Chapter-Ending Review Tools 420Suggested Plan for Final Review/Study 420Summary 420Chapter 14 CCNP Enterprise Design ENSLD 300-420 Official Cert Guide Exam Updates 422The Purpose of This Chapter 422About Possible Exam Updates 422Impact on You and Your Study Plan 423News About the Next Exam Release 424Updated Technical Content 424Appendix A Answers to the “Do I Know This Already?” Quiz Questions Q&A Questions 426Appendix B OSI Model, TCP/IP Architecture, and Numeric Conversion 452Glossary 466Online ElementsAppendix C Memory TablesAppendix D Memory Tables Answer KeyAppendix E Study PlannerGlossary 9780138247263 TOC 12/6/2023