Cisco CCNP Enterprise ENARSI 300-410 Course

Lesson 1 • ENARSI Exam Blueprint and Structure

Covers exam domains, weightings, and question formats. Provides a roadmap for study priorities throughout the course.

Lesson 2 • IP Addressing and Subnetting Refresher

Reinforces IPv4 and IPv6 addressing, VLSM, and summarization. These skills underpin every routing protocol covered later.

Lesson 3 • Cisco IOS-XE CLI and Verification Tools

Introduces IOS-XE navigation, configuration modes, and key show commands. Efficient CLI use accelerates troubleshooting in all later chapters.

Lesson 1 • EIGRP Named Mode Configuration

Configures EIGRP using the named-mode hierarchy for IPv4 and IPv6. Named mode simplifies multi-AF management and is exam-critical.

Lesson 2 • EIGRP Authentication and Security

Implements MD5 and SHA-256 authentication to protect EIGRP neighbor sessions. Secures the routing plane against unauthorized updates.

Lesson 3 • EIGRP Troubleshooting Methodology

Diagnoses neighbor failures, stuck-in-active routes, and suboptimal paths using structured commands. Builds systematic troubleshooting habits applied throughout the course.

Lesson 4 • EIGRP Fundamentals and Neighbor Relationships

Reviews DUAL algorithm, feasible successors, and neighbor formation. Establishes the conceptual base for advanced EIGRP tuning.

Lesson 1 • OSPF Authentication and Virtual Links

Secures OSPF with MD5 and SHA authentication and extends area 0 connectivity via virtual links. Addresses non-contiguous backbone scenarios.

Lesson 2 • OSPF Multi-Area Design and LSA Types

Explains area types, LSA categories, and their roles in the LSDB. Multi-area design reduces flooding and supports scalable enterprise networks.

Lesson 3 • OSPF Route Filtering and Summarization

Controls inter-area and external route advertisements using summarization and filtering at ABRs and ASBRs. Reduces routing table size and improves stability.

Lesson 4 • OSPF Troubleshooting and Performance Tuning

Resolves adjacency failures, suboptimal routing, and SPF instability using targeted commands. Tuning timers and costs improves convergence in large deployments.

Lesson 1 • BGP Fundamentals and Session Establishment

Reviews BGP path-vector operation, session states, and neighbor configuration. Provides the foundation for all advanced BGP policy and troubleshooting topics.

Lesson 2 • BGP Scalability with Route Reflectors

Configures iBGP route reflectors to eliminate full-mesh requirements in large networks. Route reflectors are the standard iBGP scalability solution in enterprise and SP environments.

Lesson 3 • BGP Troubleshooting and Convergence

Diagnoses session failures, missing prefixes, and suboptimal path selection using structured commands. Builds confidence in resolving real-world BGP issues.

Lesson 4 • BGP Route Filtering and Policy Tools

Applies prefix lists, route maps, and AS-path filters to control BGP advertisements. Policy tools shape inbound and outbound traffic at enterprise edges.

Lesson 1 • Controlling Redistribution with Route Maps

Uses route maps and prefix lists to filter and tag redistributed routes. Selective redistribution prevents feedback loops in complex topologies.

Lesson 2 • Redistribution Fundamentals and Seed Metrics

Explains mutual redistribution mechanics, seed metrics, and administrative distance. Correct metric assignment prevents black holes and routing instability.

Lesson 3 • Policy-Based Routing for Traffic Engineering

Configures PBR to override destination-based forwarding for specific traffic flows. PBR enables application-aware routing independent of the routing table.

Lesson 4 • IP SLA and Reliable Static Routing

Uses IP SLA probes to track reachability and drive floating static route failover. Combines IP SLA with object tracking for automated path switching.

Lesson 1 • DMVPN Troubleshooting Techniques

Diagnoses NHRP registration failures, tunnel flaps, and IPsec negotiation errors. Structured troubleshooting restores connectivity in production DMVPN networks.

Lesson 2 • IPsec Tunnel Protection on DMVPN

Applies IPsec tunnel protection profiles to encrypt DMVPN traffic. Integrates IKEv2 and IPsec profiles for a complete secure overlay solution.

Lesson 3 • DMVPN Phase 1 Hub-and-Spoke Design

Builds DMVPN Phase 1 using mGRE and NHRP for hub-and-spoke connectivity. Establishes the baseline DMVPN architecture before adding spoke-to-spoke capability.

Lesson 4 • DMVPN Phase 2 and Phase 3 Spoke-to-Spoke

Extends DMVPN to enable direct spoke-to-spoke tunnels using Phase 2 and Phase 3 NHRP shortcuts. Phase 3 reduces hub load and improves scalability.

Lesson 1 • uRPF and Data Plane Filtering

Applies Unicast Reverse Path Forwarding and ACLs to block spoofed and unauthorized traffic. Data-plane filtering complements control-plane protections for defense in depth.

Lesson 2 • Routing Protocol Authentication Review

Consolidates authentication configuration across EIGRP, OSPF, and BGP in a security context. Ensures the routing plane is protected from unauthorized peer injection.

Lesson 3 • Management Plane Security

Secures SSH, SNMP, NTP, and AAA to restrict management access to authorized administrators. Management plane hardening is a foundational enterprise security requirement.

Lesson 4 • IPv6 First-Hop Security Features

Deploys RA Guard, DHCPv6 Guard, and IPv6 Source Guard to protect IPv6 segments. First-hop security prevents rogue device attacks on IPv6 LANs.

Lesson 1 • SNMP Versions and MIB Management

Configures SNMPv2c and SNMPv3 for device monitoring and trap generation. SNMP is the primary protocol for network management system integration.

Lesson 2 • Syslog, NTP, and SPAN Configuration

Configures centralized syslog, NTP hierarchy, and SPAN for traffic capture. These services provide the operational visibility required in enterprise environments.

Lesson 3 • QoS Models and MQC Framework

Explains DiffServ, IntServ, and the Modular QoS CLI framework. MQC is the standard Cisco QoS configuration model used in all subsequent QoS sections.

Lesson 4 • Queuing, Shaping, and Policing

Configures CBWFQ, LLQ, traffic shaping, and policing to manage bandwidth and delay. These mechanisms ensure voice and critical application performance.