CCNP Enterprise flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

SD-Access control plane

Uses LISP to map endpoint IP addresses to fabric locators, enabling the fabric to route to endpoints without traditional flooding across the campus.

SD-Access data plane

Uses VXLAN encapsulation between fabric edge and border nodes to carry endpoint traffic over the IP underlay.

Cisco SD-WAN OMP

Overlay Management Protocol runs between vSmart controllers and WAN edges to distribute routes, policies, and TLOC information over the secure control plane.

Spine-leaf topology

Every leaf switch connects to every spine switch, and leaves do not connect to each other; traffic crosses one spine hop, giving predictable latency and east-west scaling.

CAPWAP control port

CAPWAP control traffic uses UDP port 5246 between access points and wireless LAN controllers; data encapsulation uses UDP port 5247.

QoS DSCP EF

Expedited Forwarding uses DSCP value 46 and is typically assigned to voice bearer traffic that requires low latency, low jitter, and minimal loss.

VXLAN VNI size

A VXLAN network identifier is 24 bits, allowing about 16 million Layer 2 segments; VXLAN encapsulates frames in UDP with destination port 4789 by default.

GRE tunnel characteristics

GRE encapsulates many payload types including multicast and broadcast, but it provides no encryption or authentication by itself; IPsec is added for confidentiality and integrity.

Type 1 hypervisor

A bare-metal hypervisor runs directly on host hardware, such as VMware ESXi, and guests run above it without requiring a host operating system.

VRF-lite

VRF-lite creates multiple routing tables on one device without MPLS; interfaces are assigned to VRFs and route leaking can connect selected prefixes.

DMVPN components

DMVPN combines multipoint GRE tunnels, NHRP for next-hop resolution, and IPsec for security, letting spokes build direct tunnels through a hub.

STP root bridge election

The root bridge is the switch with the lowest bridge ID, which combines the configured priority and the switch MAC address; lower priority wins before MAC comparison.

OSPF DR election

On a broadcast network, OSPF elects a designated router by highest interface priority, then highest router ID; priority zero means the router never becomes DR.

EIGRP feasible successor

A feasible successor is a backup route whose reported distance is lower than the feasible distance of the current successor, ensuring a loop-free path.

BGP local preference

Local preference is an iBGP attribute used to select the best exit path; higher values are preferred and it is not propagated to external BGP peers.

HSRP virtual MAC

HSRP version 1 uses virtual MAC 0000.0c07.acXX, where XX is the group number in hexadecimal; the active router answers ARP for the virtual IP.

DHCP relay command

The ip helper-address interface command forwards client DHCP broadcasts as unicast to a configured DHCP server, enabling centralized address assignment across subnets.

Syslog severity levels

Syslog uses levels 0 through 7, from emergency to debug; lower numbers are more severe, and level 4 is warnings while level 6 is informational.

SNMPv3 security levels

SNMPv3 supports noAuthNoPriv, authNoPriv, and authPriv; authPriv provides both authentication and encryption and is the most secure option.

NetFlow five-tuple

A NetFlow flow is commonly identified by source IP, destination IP, source port, destination port, and IP protocol, with additional fields in flexible records.

ERSPAN

Encapsulated Remote SPAN copies monitored traffic into a GRE tunnel for transport across a routed network to a remote capture destination.

Model-driven telemetry

Model-driven telemetry pushes structured data from network devices using YANG models, often over gRPC, instead of relying on repeated SNMP polling.

TACACS+ transport

TACACS+ uses TCP port 49 and encrypts the entire payload, separating authentication, authorization, and accounting functions.

RADIUS transport

RADIUS uses UDP ports 1812 for authentication and 1813 for accounting, and encrypts only the password field in access-request packets.

DHCP snooping trusted port

A trusted DHCP snooping port is allowed to receive DHCP server messages; untrusted ports can send client requests but server replies are dropped.

Dynamic ARP Inspection

DAI validates ARP packets against the DHCP snooping binding table and drops invalid bindings, helping prevent ARP spoofing and man-in-the-middle attacks.

IPsec ESP

Encapsulating Security Payload provides confidentiality, integrity, and authentication for IP packets; it can operate in transport mode or tunnel mode.

NETCONF transport

NETCONF uses XML-encoded RPCs over SSH, typically TCP port 830, and applies configuration changes to YANG-modeled data stores.

RESTCONF transport

RESTCONF exposes YANG-modeled data through HTTP methods such as GET, POST, PUT, PATCH, and DELETE, commonly secured with HTTPS.

Ansible playbook

An Ansible playbook is a YAML file defining ordered tasks that run against inventory hosts; Ansible is agentless and typically connects over SSH.

Terraform state file

Terraform stores mappings between declared resources and real infrastructure in a state file, which it uses to plan and apply changes.

Git commit

A Git commit records a snapshot of staged changes with a unique hash, author, timestamp, and message in the repository history.