Cisco SPCOR 350-501 flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

Three-tier hierarchy

Access, distribution, and core layers. Access connects hosts, distribution enforces policy and summarizes, core forwards fast without policy. Collapsed core merges distribution and core.

Spine-leaf fabric

Every leaf connects to every spine, giving one-hop paths between leaves. ECMP across spines scales east-west traffic; no Spanning Tree runs inside the fabric.

SD-Access control plane

LISP map-server/resolver node resolves endpoint identifiers to RLOCs. Fabric edge registers EIDs; VXLAN carries data; IS-IS provides underlay reachability.

SD-WAN controller roles

vManage manages devices and templates, vSmart distributes OMP routes and policies, vBond handles orchestration and NAT traversal, and vEdge/cEdge forwards data.

TLOC

System IP, color, and encapsulation tuple identifying a WAN transport. Colors like mpls, biz-internet, and lte drive path selection and policy.

Anycast gateway

Identical SVI IP and MAC configured on all fabric edge nodes for a virtual network, letting roaming hosts keep their default gateway unchanged.

OSPF stuck in EXSTART

MTU mismatch between neighbors prevents database description packet exchange. Both routers must agree on interface MTU or use ip ospf mtu-ignore.

OSPF LSA types

Type 1 router, 2 network, 3 summary, 4 ASBR summary, 5 external, and 7 NSSA external. ABRs generate type 3; ASBRs generate type 5.

BGP best path order

Weight, local preference, locally originated, AS-path length, origin, MED, eBGP over iBGP, lowest IGP metric, oldest route, lowest router ID, lowest neighbor address.

Route reflector

A router that reflects iBGP routes to clients and non-clients, removing the full-mesh requirement. Originator ID and cluster ID prevent loops.

EIGRP feasible successor

A backup route whose reported distance is less than the current feasible distance of the successor. It can be used immediately without DUAL computation.

HSRP versus VRRP

HSRP is Cisco proprietary with virtual MAC 0000.0c9f.fxxx and groups 0-4095. VRRP is IEEE standard with 0000.5e00.01xx and master/backup election.

SLAAC

IPv6 hosts build addresses from router advertisements plus EUI-64 or stable privacy. NDP replaces ARP for neighbor resolution and duplicate address detection.

MPLS label format

A 32-bit shim header: 20-bit label, 3-bit EXP for QoS, 1-bit bottom-of-stack flag, and 8-bit TTL. Labels 0 and 3 are reserved.

Penultimate hop popping

The second-to-last router removes the label and forwards unlabeled. The egress advertises implicit null (label 3) to request this behavior.

MP-BGP VPNv4

Carries a 96-bit prefix formed from an 8-byte route distinguisher plus the IPv4 prefix. Route targets are extended communities controlling VRF import and export.

Route distinguisher versus target

The RD makes overlapping customer prefixes unique inside MP-BGP. The route target decides which VRFs import or export the route.

RSVP-TE

A traffic engineering signaling protocol that reserves bandwidth along explicit or CSPF-computed paths and supports fast reroute for node and link protection.

Segment routing SID

A prefix SID equals the loopback index plus the SRGB base. Adjacency SIDs build explicit paths. SR-MPLS removes the need for LDP.

PIM-SM versus SSM

PIM-SM builds shared (*,G) trees via a rendezvous point, then source trees. PIM-SSM builds (S,G) trees directly using IGMPv3 source filters.

MSDP

Multicast Source Discovery Protocol connects rendezvous points across PIM-SM domains by sharing active source information over TCP port 639.

MQC components

Class-map matches traffic, policy-map applies actions, and service-policy attaches to an interface. Actions include marking, policing, shaping, queuing, and dropping.

SD-WAN application-aware routing

SLA classes define latency, jitter, and loss thresholds. BFD probes measure paths and the best path per application is chosen dynamically.

DMVPN

mGRE tunnels plus NHRP for tunnel endpoint resolution plus IPsec protection. Spokes register with the hub, enabling direct spoke-to-spoke tunnels.

IPsec building blocks

IKEv2 negotiates SAs. ESP provides encryption and integrity; AH provides integrity only. Tunnel mode protects the whole original packet.

DHCP snooping

Builds a trusted binding table of MAC, IP, port, and VLAN. Untrusted ports cannot offer DHCP; dynamic ARP inspection reuses the table.

NETCONF operations

RFC 6241 runs over SSH 830 and provides get-config, edit-config, copy-config, and commit against running, startup, and candidate datastores.

RESTCONF

RFC 8040 exposes YANG data over HTTP with GET, PUT, PATCH, POST, and DELETE. Paths begin with /restconf/data and payloads use JSON or XML.

gNMI telemetry

Protobuf over gRPC for get, set, and subscribe operations. Supports streaming model-driven telemetry with periodic, on-change, and event subscriptions.

SNMPv3 security

Adds authentication with MD5 or SHA and privacy with DES or AES. Users belong to groups with views defining accessible OIDs.

Ansible for network automation

Agentless YAML playbooks executed over SSH or NETCONF. Modules such as ios_config and ios_command are idempotent and driven by inventory files.

vManage REST API

Token-authenticated HTTPS API under /dataservice/. Used to automate templates, policies, device inventory, and monitoring on Cisco SD-WAN.