CCIE R&Sv4 Blueprint

I N D E X
01 – Ethernet Bridging and Switching
02 – Frame-Relay
03 – HDLC/PPP
04 – IP Routing
05 – RIP
06 – EIGRP
07 – OSPF
08 – Redistribution
09 – BGP
10 – MPLS
11 – IPv6
12 – Multicast
13 – QOS
14 – System Management
15 – IP Services
16 – Security


ETHERNET BRIDGING & SWITCHING
•Ethernet Technologies
■Speed and duplex
■Ethernet, Fast Ethernet, and Gigabit Ethernet
■PPPoE (PPP over Ethernet)
•Switchports
■Dynamic
◦Desirable
◦Auto
■Access
■Trunk
◦Encapsulation
◦Mode
■Allowed List
■Tunnel
◦802.1q Tunnel
•VTP
■Domains
■Modes
◦Server
◦Client
◦Transparent
■Authentication
■Pruning
◦Prune Eligible List
■Extended VLANs
•Layer 3 Routing
■Router-on-a-Stick
■Native Routed Ports
■SVIs
•EtherChannel
■Dynamic
◦PAgP
◦LACP
■Static
■Layer 3 & Layer 2
■Load Balancing
•Spanning-Tree Protocol
■Root Election
■Path Selection
◦Port Cost
◦Port Priority
■Advanced Spanning-Tree Features
◦Portfast
◦Uplinkfast
◦Backbonefast
◦BPDU Guard
◦BPDU Filter
◦Loopguard
◦UDLD
■Disabling STP
•Multiple Spanning-Tree Protocol (MSTP)
■Root Election
■Path Selection
•Rapid Spanning-Tree Protocol (RSTP)
•Advanced Catalyst Features
■Flex Links
■Private VLANs
■SPAN
■RSPAN
■Optimizing System Resources (SDM)
■Link state Tracking
■Macros
■CAM Maintenance
◦Static Entries
◦Aging
◦Logging
◦MAC address notification traps
◦Unicast MAC address filtering
•Bridging
■Transparent
■CRB
■IRB
■Fall-Back Bridging
◦Aging Time
◦Discarding Static or Dynamic MAC Address
◦Adjusting STP Parameters
•3560 Security
■Port Security
◦Violation modes
◦MAC Addresses
◦Aging Time
◦Aging Type
◦Errdisable Recovery/Detect
■802.1x Authentication
■Storm Control
■DHCP Snooping
◦Option-82 Data-Inspection
■IP Source-Guard
■DAI (Dynamic ARP Inspection)
■VACLs
◦IP Acl
◦MAC Acls & Ethertypes
■Port Protection
◦Switchport Protect
◦Switchport Block
.

FRAME-RELAY
•NBMA Overview
■Times
■Keepalives
•Interface Types
■Physical
■Multipoint Subinterface
■Point-to-Point Subinterface
■Back-to-Back
■FRF.16.1 (Multilink Frame Relay)
•Address Resolution (iARP)
■Static
◦Self Mapping
■Dynamic (iARP)
◦Disabling Requests
◦Disabling Per DLCI
•DCHP to new router
•Broadcast Replication
•LMI
■Adjusting the timers
•Full Mesh
•Partial Mesh (Hub-and-Spoke)
•End-to-End Keepalives
•Bridging over Frame Relay
.

PPP
•PPP advantages over HDLC
•PPP Features
■Auto neighbor IP
■LCP & IPCP
•Authentication
■PAP
■CHAP
◦CHAP Hostname
◦CHAP Password
◦Same hostname
■Putting a “?” in Password
•Peer Neighbor Route
•Reliable Link (RFC 1663)
•Link Quality Monitoring
•Multilink PPP (MLP)
■MLP Interleaving and Queuing
■Multiclass MLP
■MRRU Negotiation
•PPP over Frame Relay (PPPoFR)
•PPP Half-Bridging
.

IP ROUTING
•Routing Decisions
■Longest Match
■Distance
■Inner Protocol
■Metric
•Default Routing
•Switching Paths
■Process switching
■Fast Switching
■Netflow switching
■CEF switching
•Layer 2 Resolution
•OER (Cisco Optimized Edge Routing)
■PFR (Performance Routing)
•ODR (On Demand Routing)
•Secondary Ip addresses
•Floating Static Routes
•Backup Interface
•GRE Tunneling (L3 VPN)
•PBR (Policy Routing)
■Policy route local traffic through Loopback
•/31 Mask
•IP-Unnumbered
.

RIP
•RIP Operation
■no validate-update source
•Metric & Timers
•RIP Vesion 1 & 2
•Updates Types
■Broadcast
■Multicast
■Unicast
•Network Statement
•Passive Int
•Split-Horizon, RIP Triggered
•Summarization
■Auto Summary
■Int Summary
•Filtering
■Distribute-List
■Offset List
■Distance
•Default Routing
•Authentication
■MD5
■Text
.

EIGRP
•EIGRP Operation
•Metric, Timers and K-values
•Variance & Load-sharing
•Convergence Timers
•Routing Updates
•Packet Types (Theory)
•DUAL Finite State Machine (Theory)
•Passive Interface
•Split-Horizon
•Default Network
•Authentication
■MD5
■Key Rotation
•Summarization
■Auto-Summary
■Interface
■Default Route (summary command with 0.0.0.0)
■Floating Summary
•Filtering
■Distribute-List
■Offset List
■Distance
•Stub Routing
•Bandwidth Percent
.

OSPF
•OSPF Overview
•Hello Protocol
•Network Types
■Broadcast
■Non-Broadcast
■Point-to-Multipoint
■Point-to-Multipoint Non-Broadcast
■Point-to-Point
■Mismatch
•DR and BDR
•OSPF Finite State Machine
•Router Types
•LSA (Link State Advertisement)
•Stub Areas
■Stub
■Stub No-Summary
■NSSA No-Summary
■NSSA No-Redistrib
■NSSA No-Advertise
■GRE over Stub
•Filtering
■Distribute-List
■LSA 3 Filter
■LSA Overload Protection
■LSA Throttling
■Forwarding Address Suppression in Translated Type-5 LSAs
•Summarization
■Inter-area
■External
•Stub Router Advertisement
•Passive-Interface
•Originating routes
•Path Selection
■Auto-Cost
■Cost
■Bandwidth
■Neighbor Cost
■Incremental SPF
•Authentication
■Area
■Interface
■MD5
■Clear Text
■Null
■Virtual-Link
•Default Routing
■Always
■Conditional
•OSPF Demand Circuit
.

REDISTRIBUTION
•Redistribution Overview
■Connected interfaces
■Single Router
■Mutual Routers
•Connected / Static
•RIP
■Metric
•EIGRP
■Metric
■External EIGRP routes
•OSPF
■Route-Types
■Match command

•BGP
■Bgp Redistribute internal
.

BGP
•The BGP Process
•Establishing Peerings
■TCP Transport
■Update Source
◦BGP States
◦BGP Open Message
•Authentication
•EBGP sessions
■Multihop
■BGP Backdoor
■Distance
■Maximum-Paths
■Dmzlink-bw
•Next-Hop Processing
■Next-Hop Self
■Route-Map
•iBGP sessions
■Route Reflection
■Confederation
•iBGP Synchronization
■Redistribution into IGP
■BGP over GRE
•Bestpath Selection Process
■Weight
■Local Preference
■AS-Path Prepending
■MED
•Communities
■No-Export
■No-Advertise
■Local-AS
■Numbered
■New Format
■Community-list
•Default Originate
•Originating Prefixes
■Network Statement
■Redistribution
■Aggregation
◦Summary-Only
◦Suppress-Map
◦Neighbor Unsuppress-Map
•Filtering
■Filtering Specifics
■Filtering Aggregate
•Conditional Advertisement
•Conditional Route Injection
•Clearing BGP Sessions
•ORF (Outbound Route Filtering)
•Local AS
•Remove Private AS
•Route-maps
•Dampening
•Peer Groups
•Peering Templates
•Regular Expressions
•Fast External Fallover
•Fast Peering session deactivation
•Support for Next-Hop Address Tracking
•Max Prefix
•BGP Policy Accounting
.

MPLS (Multi-Protocol Label Switching)
•MPLS Overview
•Router Types
■CE (Customer Edge)
■PE (Provider Edge)
■P (Provider)
•LDP (Label Distribution Protocol)
•MPBGP
■Address Families
■Originating Prefixes
◦Network Statement
◦Redistribution
•Layer 3 VPNs
■RD (Route-Target)
■RT (Route Disinguisher)
■VRF (virtual routing and forwarding)
■Import and Export Maps
•VRF-Lite (Multi-VRF Customer Edge)
.

IPv6
•Addressing
■Global Unicast
■Link Local
■Site Local
■Unicast Local
■EUI-64
•DHCP for IPv6
•IPv6 on 3560
•IPv6 over Ethernet
■ICMP ND
■Static to Next-Hop
■Static to Interface
•IPv6 over Frame Relay
■Layer 3 Resolution
■Static to Next-Hop
■Static to Interface
•IPv6 Routing Overview
•RIPng
■Enabling
■Default Routing
■Summarization
■Offset List
■Distribute-List
■Redistribution
•EIGRP v6
■Enabling
■Default Routing
■Summarization
■Distribute-List
■Redistribution
•OSPFv3
■Enabling
■Network Types
■OSPFv3 over NBMA
■Summarization
◦Internal
◦External
■Authentication
◦Per interface
◦Per area
■Default Routing
■Redistribution
•MPBGP
■Address Families
■Originating Prefixes
◦Network Statement
◦Aggregation
•Tunneling
■IPv6IP
■GRE
■Automatic 6to4
■ISATAP
•IPv6 Multicast
•IPv6 on 3560
•Access-List Filtering
•Static IPv6 DNS Entries
.

MULTICAST
•Multicast Operation
•Addressing
■Reserved Addresses
■Well-Known addresses
■multicast MAC’s
■SSM addresses
•IGMP
■Join
■Static
■Access-Group
■3560 Profile
■IGMP Snooping
■Helper
■Timers
■Max Groups
•PIM
■Modes
◦Sparse
◦Dense
■Sparse-Dense
■Shortest Path switchover (SPT/RPT)
◦IP PIM SPT-Threshold
•Reverse Path Forwarding
■Static M-route
•RP Assignments
■Static
◦Override
■Auto-RP
◦Sparse-Dense
◦Auto-RP Listener
◦Default Static RP
■BSR
◦Specific Groups
◦Priority
◦BSR Border
■Anycast RP with MSDP
•Bi-directional PIM
•NBMA Mode
•Multicast over GRE
•Multicast BGP
•Stub Multicast IP Routing
•Filtering
■Static RP
◦Filtering Specific Groups
■Auto-RP filtering
◦RP group filtering
◦MA filtering RP’s
■BSR
◦Specific Groups
■PIM-Neighbor filtering
■Client filtering
■Multicast Bopundary
■Multicast Route-Limit
•Scoping
■TTL Scoping
■Administrative Scoping
•Additional Multicast features
■Multicast Rate Limiting
■Multicast Helper
■SDR Listener support
■Load splitting multicast traffic
■Multicast Heartbeat
•SSM (Source specific multicast)
•MSDP (Multicast Source Distribution Protocol)
■Interdomain Multicast Routing
•PGM (Pragmatic General multicast)
•MRM (Multicast Routing Monitor)
•MVR (Multicast VLAN Registration) on the 3550
•IGMP Profile filtering on 3550/3550
•DVMRP
.

QOS
•Qos Overview
•MQC
•Diffserv & Intserv Models
•Classification & Marking
■Access-Lists
■IP Precedence
■DSCP
■NBAR
■Packet Length
■FR-DE
■Interface
■NOT statement
•Congestion Management
■Custom Queue (CQ)
■Priority Queue (PQ)
■Weighted Fair Queue (WFQ)
■MQC Bandwidth (CBWFQ)
■MQC Priority (LLQ)
•Congestion Avoidance
■Legacy WRED
■MQC WRED
■IP Precedence
■DSCP
•Shaping
■Legacy GTS
■Legacy FRTS
■MQC Shape
■MQC FRTS
■Adaptive
•Policing
■Legacy CAR
■MQC Police
■COPP (Control Plane Policing)
•Unconditional Packet Discard
•RSVP
•Nested MQC Policies
•Switching Voice VLANs
•Cisco AutoQoS
•3550 QoS
■Classification
◦Per-Port Per-VLAN
◦Mutation Maps
■Congestion Management
◦WRR
◦Expedite Queue
■Policing and Shaping
•3560 QoS
■Classification
◦Per-Vlan Classification
■Congestion Management
◦Shaped Round Robin (SRR)
◦Weighted Tail Drop (WTD)
■Priority Queue
■Policing and Shaping
◦Aggregate policer
•Compression
■TCP Header
■Predictor
■RTP Header-compression
■Frame-Relay RTP compression
•Link Efficiency mechanisms
■FRF.12
.

SYSTEM MANAGEMENT


•SNMP
■Polling
■Trapping
■Communities
■Controlling Access
•RMON
■Delta
■Absolute
•Logging
■Syslog
■Timestamps
■3560 Flash Logging
■Config Change Notification and Logging (Archive)
•Remote-access via Telnet
■Establishing Terminal Session Limits
■Displaying Line Connection Information
■Chunk-size
■Assign IP address to service provided on a TCP port
■Busy-message
■Vacant-message
■Telnet message on successful connection
■Refuse-message
■IP telnet quiet
■Saving Local Settings Between Sessions
■Defining Escape character and other key sequences
■Setting terminal screen length and width
■Enable session locking
■Login Enhancements
◦block-for
◦quite-mode
◦delay
■Hiding Telnet Addresses
•NTP
■Master
■Server
■Peer
■Authentication
■Timezones
•Banners & Menus
■Configuring Banners using tokens
•HTTP Server
•TFTP Server
•CDP
•Crash Dump
•Warm Reboot
•IOS Parser
•EEM (Embedded Resource Manager)
•System Resources
■Memory
■CPU
•Various other
■Autoinstall
■Aliases
■Service Nagle
■Interface Commands
◦Hold-Queue
◦Load-interval
.

IP SERVICES
•Scheduler allocate
•TCP
■Performance Parameters
◦TCP Selective Acknowledgment
◦TCP Time-stamp
◦TCP Window Scaling
◦TCP ECN
■TCP Synwait-time
■Window Scaling
■Explicit Congestion Notification
■Keepalive Packet Service
•MTU
■IP MTU
■TCP MSS
■PMTU Discovery
•NAT
■Inside Source
■Outside Source
■Overload
■Static Nat
◦Extendable
◦Port Redirection
■NAT Timeouts
■TCP Load Balancing
■On a Stick
■Stateful Nat
•Broadcast Services
■IP Helper
■Changing Broadcast address
•DHCP
■Server
◦Exclusions
◦Domain
◦Gateway
◦Multiple Gateways
◦Lease Time
■Client
■IPCP Client
■IP Helper, DHCP Relay and Option 82
◦Disabling on router
◦Disabling on switch
■IP Source Guard
■Multiple Default Gateway
•DNS
■Static Entries
■Record Types: MX, A PTR etc
■Proxy
•IP Accounting
■Output Packets
■Access-List Violations
■Precedence
•First Hop Redundancy
■HSRP
■VRRP
■GLBP
■Track
•IP SLA/RTR
•NetFlow
•RITE (Router IP Traffic-Export)
•EEM (Cisco IOS Embedded Event Manager)
•SCP (Switch-module Configuration Protocol)
•TCP/UDP Small Services
•Local Area Mobility
•Web Caching Content Protocol (WCCP)
■Inbound/Outbound
■Excluding Traffic from Redirection
■Only allowing certain Content Engines
■Setting a Password for a router and cache engine
■Enabling on 3550
•NHRP
■Configuring NHRP authentication
•IRDP
•Mobile IP
■Local Area Mobility
•DRP Server Agent
•IP Event Dampening
.

SECURITY
•Standard Access-Lists
•Extended Access-Lists
■Advanced Ext-ACL
◦as a prefix-list
■Scott Morris’s Binary Voodoo
■Options
■ACL Logging
•Rate-limit Access-lists
•Time Based Access-Lists
•Dynamic Access-Lists
•Reflexive Access-Lists
•CBAC
•Zone Based Firewall
•IPS (Intrusion Prevention System)
•Security Compliance RFC’s
■RFC 1918
■RFC 3330 (more for SP Track)
■RFC 2827
•TCP Intercept
•IP Source Tracking
•IP Traffic Export
•Disabling Services
■Source Routing
■Proxy ARP
■IP Options
■CDP
■IP Unreachable
•Local Authentication
•Local Authorization
•AAA (know basics)
■Modes
■Defaults
■RADIUS/TACACS
■Max-attempts
■Quiet Period
■Host mode
■Guest VLAN
•URPF