CCIE Enterprise Infrastructure v1.1 New Version Updates

2.1.a Design a Cisco SD Access solution

2.1.a i Underlay network (IS-IS, manual/PnP)

2.1.a ii Overlay fabric design (LISP,

VXLAN, Cisco TrustSec)

2.1.a iii Fabric domains (single-site and

multi-site using SD-WAN transit)

2.1.b Cisco SD Access deployment

2.1.b i Cisco DNA Center device

discovery and device management

2.1.b ii Add fabric node devices to an

existing fabric

2.1.b iii Host onboarding (wired

endpoints only)

2.1.b iv Fabric border handoff

2.1.c Segmentation

2.1.c i Macro-level segmentation

using VNs

2.1.c ii Micro-level segmentation using

SGTs (using Cisco ISE)

2.1.d Assurance

2.1.d i Network and client health (360)

2.1.d ii Monitoring and troubleshooting

2.2 Cisco SD-WAN

2.2.a Design a Cisco SD-WAN solution

2.2.a i Orchestration plane (vBond,

NAT)

2.2.a ii Management plane (vManage)

2.2.a iii Control plane (vSmart, OMP)

2.2.a iv Data plane (vEdge, cEdge)

2.2.b WAN edge deployment

2.2.b i Onboarding new edge routers

2.2.b ii Orchestration with zero-touch

provisioning/Plug-And-Play

2.2.b iii OMP

2.2.b iv TLOC

2.2.c Configuration templates

2.2.d Localized policies

2.2.e Centralized policies

2.1.a Underlay

2.1.a i Manual

2.1.a ii LAN automation/PnP

2.1.a iii Device discovery and device

management

2.1.a iv Extended nodes / policy extended nodes

2.1.b Overlay

2.1.b i LISP, BGP control planes

2.1.b ii VXLAN data plane

2.1.b iii Cisco TrustSec policy plane

2.1.b iv L2 flooding

2.1.b v Native multicast

2.1.c Fabric design

2.1.c i Single-site campus

2.1.c ii Multisite

2.1.c iii Fabric in a box

2.1.d Fabric deployment

2.1.d i Host onboarding

2.1.d ii Authentication templates

2.1.d iii Port configuration

2.1.d iv Multisite remote border

2.1.d v Border priority

2.1.d vi Adding devices to fabric

2.1.e Fabric border handoff

2.1.e i SDA, SDWAN, IP transits

2.1.e ii Peer device (Fusion router)

2.1.e iii Layer 2 border handoff

2.1.f Segmentation

2.1.f i Macro segmentation using virtual networks

2.1.f ii Micro-level segmentation using SGTs and SGACLs

2.2 Cisco SD-WAN

2.2.a Controller architecture

2.2.a i Management plane (vManage)

2.2.a ii Orchestration plane (vBond)

2.2.a iii Control plane (vSmart)

2.2.b SD-WAN underlay

2.2.b i WAN Cloud Edge Deployment

(AWS, Azure, Google Cloud)

2.2.b ii WAN Edge Deployment

(hardware)

2.2.b iii Greenfield, Brownfield, and

Hybrid deployments

2.2.b iv System Configuration (system IP, site ID, org name, vBond address)

2.2.b v Transport configuration

(underlay and tunnel interfaces, allowed services, TLOC extension)

2.2.c Overlay Management Protocol (OMP)

2.2.c i OMP attributes

2.2.c ii IPsec key management

2.2.c iii Route aggregation

2.2.c iv Redistribution

2.2.c v Additional features (BGP AS path propagation, SDA integration)

2.2.d Configuration templates

2.2.d i CLI templates

2.2.d ii Feature templates

2.2.d iii Device templates

2.2.e Centralized policies

2.2.e i Data policies

2.2.e ii Application-aware routing policies

2.2.e iii Control policies

2.2.f Localized policies

2.2.f i Access lists

2.2.f ii Route policies

3.1.a Operations

3.1.a i Label stack, LSR, LSP

3.1.a ii LDP

3.1.a iii MPLS ping, MPLS traceroute

3.1.b L3VPN

3.1.b i PE-CE routing

3.1.b ii MP-BGP VPNv4/VPNv6

3.1.b iii Extranet (route leaking)

3.2 DMVPN

3.2.a Troubleshoot DMVPN Phase 3 with dualhub

3.2.a i NHRP

3.2.a ii IPsec/IKEv2 using pre-shared key

3.2.a iii Per-Tunnel QoS

3.2.b Identify use-cases for FlexVPN

3.2.b i Site-to-site, Server, Client, Spoke-to-Spoke

3.2.b ii IPsec/IKEv2 using pre-shared key

3.2.b iii MPLS over FlexVPN

3.2 MPLS

3.2.a Operations

3.2.a i Label stack, LSR, LSP

3.2.a ii LDP

3.2.a iii MPLS ping, MPLS traceroute

3.2.b L3VPN

3.2.b i PE-CE routing using BGP

3.2.b ii Basic MP-BGP VPNv4/VPNv6

3.3 DMVPN

3.3.a Troubleshoot DMVPN Phase 3 with dual hub

3.3.a i NHRP

3.3.a ii IPsec/IKEv2 using preshared key

5.1.a JSON

5.1.b XML

5.2 Automation and scripting

5.2.a EEM applets

5.2.b Guest shell

5.2.b i Linux environment

5.2.b ii CLI Python module

5.2.b iii EEMP Python module

5.3 Programmability

5.3.a Interaction with vManage API

5.3.a i Python requests library and Postman

5.3.a ii Monitoring endpoints

5.3.a iii Configuration endpoints

5.3.b Interaction with Cisco DNA Center API

5.3.b i HTTP request (GET, PUT, POST) via Python requests library and Postman

5.3.c Interaction with Cisco IOS XE API

5.1.a JSON

5.1.b XML

5.1.c YAML

5.1.d Jinja

5.2 Automation and scripting

5.2.a EEM applets

5.2.b Guest shell

5.2.b i Linux environment

5.2.b ii CLI Python module

5.2.b iii EEMP Python module

5.3 Programmability

5.3.a Interaction with vManage API

5.3.a i Python requests library and Postman

5.3.a ii Monitoring endpoints

5.3.a iii Configuration endpoints

5.3.b Interaction with Cisco DNA Center API using HTTP requests (GET, PUT, POST) via Python requests library and Postman

5.3.c Deploy and verify model-driven telemetry