🔵Cisco

Navigating the Cisco IOS command-line interface — exec modes, configuration hierarchy, help system, show commands, and saving configuration.

Configuring Cisco IOS switches — VLANs, access and trunk ports, DTP, inter-VLAN routing concepts, and verifying the MAC address table.

Spanning Tree configuration on Cisco IOS — root bridge election, PortFast, BPDU Guard, and bundling links with EtherChannel using LACP and PAgP.

Configuring Cisco IOS routers — interface IP addressing, static routes, floating static routes, default routes, and verifying IPv4 routing.

Routing between VLANs on Cisco IOS — Router-on-a-Stick subinterfaces, Layer 3 switch SVIs, and routed ports.

Configuring OSPFv2 on Cisco IOS — router ospf, network statements, passive interfaces, neighbour verification, cost tuning, and multi-area OSPF.

Configuring IPv6 on Cisco IOS routers and switches — interface addressing, EUI-64, static routes, OSPFv3, and dual-stack operation.

Configuring standard and extended ACLs on Cisco IOS — numbered and named syntax, wildcard masks, interface application, VTY restriction, and troubleshooting.

Layer 2 security on Cisco IOS switches — port security, DHCP snooping, Dynamic ARP Inspection, and 802.1X port authentication.

Configuring HSRP, VRRP, and GLBP on Cisco IOS — virtual IP setup, priority and preemption, interface tracking, and verifying gateway redundancy.

Cisco wireless LAN architecture — WLC interfaces and WLANs, CAPWAP AP join process, FlexConnect, AP modes, and basic WLC configuration.

Implementing QoS on Cisco IOS using MQC — class-maps, policy-maps, DSCP marking, LLQ for voice, and applying service policies to interfaces.

How Cisco Smart Licensing works — CSSM, virtual accounts, token-based registration, compliance reporting, and Smart Licensing Using Policy (SLP).

Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) — architecture, platform options, management modes, and how FTD differs from ASA.

Cisco Firepower's layered policy model — Access Control Policy, IPS, malware and file inspection, SSL decryption, identity, and DNS policies — and how they stack.

Site-to-site and remote access VPN on Cisco FTD — IKEv2 IPsec tunnels configured via FMC, AnyConnect RA-VPN with RADIUS authentication, and NAT exemption.

Cisco Software-Defined Access — DNA Center as the controller, the SD-Access fabric (underlay, overlay, LISP, VXLAN), and Scalable Group Tags for policy.

Automating Cisco networks — NETCONF/YANG, REST APIs (DNA Center, Meraki), Ansible for IOS configuration, and Terraform for infrastructure provisioning.