Cisco ENARSI 300-410 study plan

Configure and verify EIGRP named mode with multiple address families, stub routing, and summarization on a three-router lab

Compare EIGRP and OSPF path selection by tracing feasible successor and successor selection with show commands

Tune EIGRP metrics and timers to force a specific path, then document which command changed the outcome

Explain and test EIGRP query scope using stub and summary boundaries to limit SIA risk

Configure OSPFv2 and OSPFv3 multi-area topologies including virtual links, totally stubby, and NSSA areas

Differentiate LSA types 1 through 7 by capturing and labeling each in a single topology

Implement OSPF route filtering with distribute-list, area range, and summary-address and state where each applies

Configure and verify policy-based routing and VRF-lite route leaking between two VRFs

Configure BGP eBGP and iBGP peering including route reflectors and confederations

Manipulate path selection using weight, local preference, AS-path prepending, MED, and origin code in a defined order

Implement prefix lists, route maps, and maximum-prefix to control BGP advertisements and protect sessions

Verify BGP convergence and troubleshoot a stuck Active neighbor using debug and show output

Configure bidirectional redistribution between OSPF, EIGRP, and BGP while preventing loops with tags, route maps, and administrative distance

Configure DMVPN Phase 3 with mGRE, NHRP, and IPsec protection, and verify spoke-to-spoke direct tunnel formation

Implement first-hop redundancy with HSRP, VRRP, and GLBP and tune priority and preemption

Troubleshoot a redistribution loop and document the tagging strategy that resolved it

Configure site-to-site IPsec IKEv2 with pre-shared key and certificate authentication and compare the two

Build a FlexVPN or GET VPN scenario and explain when each design is preferred over classic DMVPN

Configure MPLS Layer 3 VPN concepts including VRF, RD, and route targets on a provider edge simulation

Verify tunnel state and troubleshoot Phase 1 and Phase 2 mismatches using show crypto ikev2 and debug output

Configure AAA with TACACS+ and RADIUS including command authorization and fallback

Implement infrastructure ACLs, CoPP, and uRPF to protect the control plane and verify with show policy-map control-plane

Configure zone-based firewall with class and policy maps and verify stateful inspection

Harden device access with SSHv2, VTY ACLs, privilege levels, and login block-for

Configure SNMPv3, syslog, NTP with authentication, and verify each collector receives data

Implement DHCP relay, DHCP snooping, and IPv6 first-hop security including RA guard

Configure NetFlow export and interpret top-talker output for a simulated incident

Troubleshoot a device clock drift caused by NTP authentication failure

Configure EEM applets to react to a syslog pattern and take an automated action

Build and apply configuration templates using NETCONF or RESTCONF and compare with CLI-based automation

Implement IP SLA tracking with object tracking to influence static route failover

Complete a timed mixed-domain troubleshooting drill and record weak areas for review