CCNP and CCIE Data Center Core DCCOR 350-601 Official Cert Guide

Cover
Title Page
Copyright Page
About the Authors
Dedications
Contents
Introduction
Part I: Networking
Chapter 1 Implementing Routing in the Data Center
“Do I Know This Already?” Quiz
Foundation Topics
OSPF
OSPF Link-State Advertisements
OSPF Areas
Designated Routers and Backup Designated Routers
OSPF Authentication
OSPF Configurations and Verifications
Border Gateway Protocol
BGP Peering
BGP Path Selection
Step 1: Comparing Pairs of Paths
Step 2: Determining the Order of Comparisons
Step 3: Determining the Best-Path Change Suppression
Multiprotocol BGP
BGP Configurations and Verifications
Bidirectional Forwarding Detection
Rapid Detection of Failures
BFD Configurations and Verifications
Multicast
Internet Group Management Protocol
Switch IGMP Snooping
Multicast Listener Discovery
Multicast Distribution Trees
Protocol Independent Multicast
PIM Rendezvous Points
PIM Designated Routers/Forwarders
Multicast Forwarding
Multicast Configurations and Verifications
Hot Standby Router Protocol
Virtual Router Redundancy Protocol
VRRP Operation
VRRP Groups
VRRP Router Priority and Preemption
VRRP Authentication
VRRP Tracking
IPv6 First Hop Redundancy
HSRP/VRRP Configurations and Verifications
Exam Preparation Tasks
Review All Key Topics
Memory Tables
Define Key Terms
References
Chapter 2 Implementing Data Center Switching Protocols
“Do I Know This Already?” Quiz
Foundation Topics
Spanning Tree Protocols
STP Topology
STP Port Types
STP Extensions
STP Bridge Assurance
BPDU Guard
BPDU Filter
Loop Guard
Root Guard
Unidirectional Link Detection
Rapid PVST+
Rapid PVST+ Ports
Spanning Tree Configurations and Verifications
Port Channels
Port Channel Load Balance
Virtual Port Channel
vPC Traffic Flows
vPC Dual-Control Plane
vPC Primary and Secondary Roles
vPC Configuration Consistency
vPC Duplicate Frames Prevention Mechanism
vPC HSRP Gateway Considerations
vPC ARP Synchronization
vPC Peer Gateway
Port Channel Configurations and Verifications
Exam Preparation Tasks
Review All Key Topics
Memory Tables
Define Key Terms
References
Chapter 3 Implementing Data Center Overlay Protocols
“Do I Know This Already?” Quiz
Foundation Topics
Overlay Transport Virtualization (OTV)
OTV Terminology
OTV Control Plane Function
Multicast-Enabled Transport Infrastructure
Unicast-Only Transport Infrastructure (Adjacency-Server Mode)
OTV Data Plane Function
Unicast Traffic over OTV
Multicast Traffic over OTV
Broadcast Traffic over OTV
Failure Isolation
STP Isolation
Unknown Unicast Handling
ARP Optimization
Broadcast Policy Control
Multihoming OTV
FHRP Isolation
OTV Configurations and Verifications
Virtual Extensible LAN (VXLAN) Overview
VXLAN Encapsulation and Packet Format
VXLAN Tunnel Endpoint
Virtual Network Identifier
VXLAN Control Plane
VXLAN Flood and Learn Multicast-Based Control Plane
VXLAN MPBGP EVPN Control Plane
VXLAN Gateways
VXLAN High Availability
VXLAN Tenant Routed Multicast
VXLAN Configurations and Verifications
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
References
Chapter 4 Describe Cisco Application Centric Infrastructure
“Do I Know This Already?” Quiz
Foundation Topics
Cisco Application Centric Infrastructure (ACI) Overview
Cisco Application Policy Infrastructure Controller
Cisco Nexus 9000 Series Spine and Leaf Switches for Cisco ACI
Cisco ACI Initial Setup, Fabric Discovery, Access Policy, and VMM Domains
Cisco ACI Initial Setup
Cisco ACI Fabric Discovery
Startup with Cisco ACI Fabric Discovery and Configuration
Fabric Upgrade
ACI Policy Model
Tenants
Virtual Routing and Forwarding Objects
Bridge Domains and Subnets
Endpoint Groups
Application Profiles
Microsegmentation
Attachable Entity Profile
Cisco ACI Fabric Policies
Cisco ACI Virtual Machine Manager Domains
Cisco ACI integration with Microsoft SCVMM
Cisco ACI Integration with VMware vCenter
Integrating VMware Overlays with the Cisco ACI
Cisco ACI Virtual Edge
Cisco ACI Fabric: Tenants and Packet Flow
Cisco ACI Tenants
Virtual Routing and Forwarding
Bridge Domain and Subnets
Application Profile
Endpoint Group
Microsegmentations
ACI Contract
Taboo Contracts
vzAny Rule
Filters and Subjects
Management Tenant
In-Band Management Access
Out-of-Band Management Access
ACI VXLAN
ACI Intersubnet Tenant Traffic
Policy Identification and Enforcement
ACI Fabric Traffic Storm Control
ACI Fabric Traffic Load Balance
ACI Fabric Loop Detection
ACI Design Best Practices
ACI LAB Configurations Example
Building ACI Fabric
Creating Tenant
Creating Contract and Filter
Deploying a Three-Tier Application
Integrating with vCenter
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
References
Chapter 5 Cisco Cloud Services and Deployment Models
“Do I Know This Already?” Quiz
Foundation Topics
What Is Cloud Computing?
Cloud Service Models
Software as a Service
Platform as a Service
Infrastructure as a Service
Cloud Deployment Models
Private Cloud
Public Cloud
Hybrid Cloud
Community Cloud
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
References
Chapter 6 Data Center Network Management and Monitoring
“Do I Know This Already?” Quiz
Foundation Topics
Cisco Nexus NX-OS Software Installation, Updates, and Their Impacts
PowerOn Auto Provisioning (POAP)
Data Center Infrastructure Software Lifecycle Management
Nexus Software Maintenance Upgrade
Programmable Logical Devices Upgrade
Graceful Insertion and Removal
Nexus Nondisruptive In-Service Software Upgrade
Nexus Disruptive and Nondisruptive Upgrade/Downgrade Procedure
Nexus Configuration Management
NX-OS Configuration Save and Backup
Nexus Config Rollback and Checkpoint
Network Infrastructure Monitoring
NX-OS System Message Logging
Network Time Management
Network Time Protocol
Precision Time Protocol
NX-OS Simple Network Management Protocol
Nexus Smart Call Home
Nexus NetFlow
Switched Port Analyzer
Streaming Telemetry
Network Assurance Concept
Exam Preparation Tasks
Review All Key Topics
Memory Tables
Define Key Terms
References
Part II: Storage
Chapter 7 Implement Fibre Channel
“Do I Know This Already?” Quiz
Foundation Topics
Fibre Channel Basics
Fibre Channel Topologies
Fibre Channel Port Types
E Port
F Port
NP Ports
TE Port
TF Port
TNP Port
Fx Port
Auto Mode
Fibre Channel Addressing
Flow Control
Switched Fabric Initialization
Principal Switch Selection
Domain ID Distribution
FCID Allocation
Fabric Reconfiguration
Device Registration: FLOGI, PLOGI, PRLI
FLOGI and FCNS Databases
CFS
CFS Features
CFS Fabric Lock
CFSoIP and CFSoFC
CFS Merge
CFS Regions
VSAN
VSAN Features
VSAN Attributes
VSAN Advantages
Dynamic Port VSAN Membership (DPVM)
VSAN Trunking
SAN Port Channels
Types of SAN Port Channels
Port Channel Load Balancing
Port Channel Modes
Zoning
Zoning Features
Zone Enforcement
Full and Active Zone Set
Autozone
Zone Merge
Smart Zoning
Enhanced Zoning
Device Alias
Device Alias Features
Device Alias Modes
Device Alias Distribution
Zone Aliases (FC Aliases) Versus Device Aliases
NPIV and NPV
Exam Preparation Tasks
Review All Key Topics
Memory Tables
Define Key Terms
References
Chapter 8 Implement FCoE Unified Fabric
“Do I Know This Already?” Quiz
Foundation Topics
FCoE Overview
Ethernet Enhancements
Priority-Based Flow Control (PFC)
Enhanced Transmission Selection (ETS)
Data Center Bridging Exchange (DCBX)
FCoE Frame Format
Virtual Fibre Channel (VFC)
FCoE Elements and Port Types
FCoE Addressing and Forwarding
FCoE Initialization Protocol (FIP)
Benefits of FCoE
FCoE Topology Options
FCoE Single-Hop Topology
FCoE Direct-Attached Topology
FCoE FEX Topology
FCoE Remote-Attached Topology
FCoE Multi-Hop Topology
FCoE Implementations
FCoE Configuration on Cisco Nexus 7000 Series Switches
Miscellaneous FCoE Configuration
FCoE Configuration on Cisco Nexus 5000 Series Switches
FCoE over FEX
FCoE NPV
FCoE Verification
Exam Preparation Tasks
Review All Key Topics
Memory Tables
Define Key Terms
References
Chapter 9 Describe NFS and NAS Concepts
“Do I Know This Already?” Quiz
Foundation Topics
Describe NFS Concepts
Describe NAS Concepts
NAS Benefits
Cisco NSS3000 Series Network Storage System
Exam Preparation Tasks
Review All Key Topics
Memory Tables and Lists
Define Key Terms
References
Chapter 10 Describe Software Management and Infrastructure Monitoring
“Do I Know This Already?” Quiz
Foundation Topics
Cisco MDS NX-OS Setup Utility
Cisco MDS NX-OS Software Upgrade and Downgrade
Nondisruptive Upgrade on a Cisco MDS Fabric Switch
Disruptive Upgrade on a Cisco MDS Fabric Switch
Nondisruptive Downgrade on a Cisco MDS Fabric Switch
Disruptive Downgrade on a Cisco MDS Fabric Switch
EPLD Upgrade on Cisco MDS 9000 Series Switches
Infrastructure Monitoring
System Messages
Call Home
Embedded Event Manager
RMON
SPAN
SPAN Configuration Example
Remote SPAN
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
References
Part III: Compute
Chapter 11 Cisco Unified Computing Systems Overview
“Do I Know This Already?” Quiz
Foundation Topics
Cisco UCS Architecture
Cisco UCS Components and Connectivity
Cisco UCS 5108 Blade Server Chassis
UCS Blade Servers
Cisco UCS Rack Servers
Cisco UCS Storage Servers
Cisco UCS Mini
Cisco UCS Fabric Infrastructure
Cisco UCS 6454 Fabric Interconnect
Cisco UCS 6300 Series Fabric Interconnects
Fabric Interconnect and Fabric Extender Connectivity
Cisco UCS Virtualization Infrastructure
Cisco UCS Initial Setup and Management
Fabric Interconnect Connectivity and Configurations
Uplink Connectivity
Downlink Connectivity
Fabric Interconnect Port Modes
Fabric Failover for Ethernet: High-Availability vNIC
Ethernet Switching Mode
UCS Device Discovery
Chassis /FEX Discovery
Rack Server Discovery Policy
Initial Server Setup for Standalone UCS C-Series
Network Management
UCS Virtual LAN
Named VLANs
Private VLANs
UCS Identity Pools
Universally Unique Identifier Suffix Pools
MAC Pools
IP Pools
Server Pools
Service Profiles
UCS Server Policies
UCS Service Profile Templates
Quality of Service
QoS System Classes
QoS System Classes Configurations
Configuring Quality of Service Policies
UCS Storage
UCS SAN Connectivity
UCS SAN Configuration
Virtual Storage-Area Networks
Named VSANs Configurations
Zones and Zone Sets
World Wide Name Pool
SAN Connectivity Policies
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
References
Chapter 12 Cisco Unified Computing Infrastructure Monitoring
“Do I Know This Already?” Quiz
Foundation Topics
Cisco UCS System Monitoring
Data Management Engine
Application Gateway
Northbound Interfaces
Cisco UCS Monitoring Events and Logs
Cisco UCS Monitoring Policies
Cisco UCS Simple Network Management Protocol
Cisco UCS Call Home and Smart Call Home
Cisco UCS Manager Database Health and Hardware Monitoring
Cisco UCS NetFlow Monitoring
Traffic Monitoring
Traffic Monitoring Across Ethernet
Traffic Monitoring Across Fibre Channel
Cisco Intersight
Intersight Management as a Service
Intersight as a Telemetry Data Collection
Cisco Intersight Supported Software
Cisco Intersight Licensing
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
References
Chapter 13 Cisco Unified Compute Software and Configuration Management
“Do I Know This Already?” Quiz
Foundation Topics
Cisco UCS Configuration Management
Creating and Running a Backup Operation
Backup Policies
Backup Policy Configuration
Import Backups
Enable the Import Operation
System Restore
Restoring the Configuration for a Fabric Interconnect
UCS Firmware and Software Updates
Firmware Version Terminology
Firmware Upgrades Through Auto Install
Direct Upgrade After Auto Install Procedure
Install Infrastructure Firmware Procedure
Upgrading the Server Firmware with Auto Install
Standalone Cisco UCS C-Series Server Firmware Upgrade Using the Host Upgrade Utility (HUU)
Downloading and Preparing the ISO for an Upgrade
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
References
Chapter 14 Cisco HyperFlex Overview
“Do I Know This Already?” Quiz
Foundation Topics
Cisco HyperFlex Solution and Benefits
HyperFlex Benefits
Intelligent End-to-End Automation
Unified Management for All Workloads
Independent Resource Scaling
Superior Virtual Machine Density with Lower and Consistent Latency
HyperFlex as an Edge, Hybrid, and All-Flash Nodes
HyperFlex as an Edge Device
HyperFlex Hyperconverged Multicloud Platform (Hybrid or All-Flash)
HyperFlex All NVMe
Cisco HyperFlex Data Platform
HX Storage Cluster Physical Components
HX Data Platform High Availability
HX Data Platform Cluster Tolerated Failures
HX Data Platform Ready Clones
HX Data Platform Native Snapshots
HX Cluster Interfaces
HX Self-Encrypting Drives
Configuring a Local Encryption Key
Managing HX Disks in the Cluster
Managing HX Datastores
Expand Cisco HX System Clusters
Enabling HX Logical Availability Zones
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
References
Part IV: Automation
Chapter 15 Automation and Scripting Tools
“Do I Know This Already?” Quiz
Foundation Topics
EEM Overview
Policies
Event Statements
Action Statements
Configuring EEM
Verifying the EEM Configuration
Scheduler
Configuring Scheduler
Verifying Scheduler Configuration
Bash Shell for Cisco NX-OS
Managing Feature RPMs
Managing Patch RPMs
Guest Shell for Cisco NX-OS
Accessing the Guest Shell
Resources Used for the Guest Shell
Capabilities in the Guest Shell
Managing the Guest Shell
XML
Example
XML Syntax
JSON
Rest API
Authentication
Response
NX-API
NX-API Request and Response Elements
NX-API Developer Sandbox
Exam Preparation Tasks
Review All Key Topics
Memory Tables
Define Key Terms
References
Chapter 16 Evaluate Automation and Orchestration Technologies
“Do I Know This Already?” Quiz
Foundation Topics
Ansible
Ansible Components
Important Ansible Concepts
Ansible CLI Tools
Cisco NX-OS and Ansible Example
Puppet
Puppet Workflow
Puppet and NX-OS Environment Integration
Puppet Master Installation
Puppet Agent Installation
Resource Types
Sample Manifest: OSPF
Puppet and Cisco UCS Manager Integration
Python
Python Package for Cisco
Using the CLI Command APIs
Python in Interactive Mode
Python in Noninteractive Mode
UCS Manager Python SDK
Convert to UCS Python
PowerOn Auto Provisioning (POAP)
Limitations of POAP
Network Requirements for POAP
POAP Configuration Script
POAP Process
Power-Up Phase
USB Discovery Phase
DHCP Discovery Phase
Script Execution Phase
Post-Installation Reload Phase
Configuring a Switch Using POAP
Cisco DCNM
Feature Details and Benefits
Cisco DCNM Web User Interface
Cisco UCS Director
Automation and Orchestration with Cisco UCS Director
Features and Benefits
Cisco UCS Director System Setup
PowerShell
Installing the Cisco UCS Director PowerShell Agent
Executing PowerShell Agent Commands
Exam Preparation Tasks
Review All Key Topics
Memory Tables
Define Key Terms
References
Part V: Security
Chapter 17 Network Security
“Do I Know This Already?” Quiz
Foundation Topics
Authentication, Authorization, and Accounting
AAA Service Configuration Options
Authentication and Authorization User Login Process
AAA NX-OS Configurations
Role-Based Access Control
NX-OS User Roles and Rules
NX-OS RBAC Configurations
Nexus First-Hop Security
Nexus Dynamic ARP Inspection
NX-OS DAI Configurations
NX-OS DHCP Snooping
DHCP Snooping Trusted and Untrusted Sources
DHCP Snooping Packet Validation
DHCP Snooping Option 82 Data Insertion
NX-OS DHCP Snooping Configuration
Port Security
Nexus Port Secure MAC Address Maximum and Dynamic Address Aging
Port Security Violations and Actions
Nexus Port Types and Port Security
NX-OS Port Security Configuration
Nexus Control Plane Policing
Control Plane Packet
Classification for CoPP
Rate-Controlling Mechanisms
Modular QoS Command-Line Interface
NX-OS CoPP Configuration
Cisco ACI Contracts
Cisco ACI Contract Configuration Parameters
Create, Modify, or Remove Regular Contracts
Apply or Remove VRF Contracts
Inter-Tenant Contracts
Inter-Private Network Contracts Communication
Single Contract Bidirectional Reverse Filter
Single Contract Unidirectional with Multiple Filters
Multiple Contracts Unidirectional Single Filter
ACI Microsegmentation
Example: ACI Microsegmentation with VMs from a Single Application EPG
Example: ACI Microsegmentation with VMs in Different Application EPGs
ACI Microsegmentation Configurations
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
References
Chapter 18 Compute Security
“Do I Know This Already?” Quiz
Foundation Topics
Securing UCS Management Using Authentication, Authorization, and Accounting
User RADIUS and TACACS+ Attributes
Two-Factor Authentication
UCS Web Session Refresh and Session Timeout Period
UCS LDAP Providers and Groups
LDAP Group Mapping
RADIUS and TACACS+ Authentication Configurations
UCS Remote Users Role Policy
Multiple Authentication Services Configuration
Keychains Authentication
NX-OS Keychain Configurations
Key Selection
Exam Preparation Tasks
Review All Key Topics
Define Key Terms
References
Chapter 19 Storage Security
“Do I Know This Already?” Quiz
Foundation Topics
Authentication, Authorization, and Accounting
Authentication
Authorization
Accounting
Server Groups
AAA Service Configuration Options
AAA Server Monitoring
Remote AAA Services
RADIUS
TACACS+
LDAP
Local AAA Services
AAA Authentication and Authorization Process
AAA Server Distribution
Merging RADIUS and TACACS+ Configurations
User Accounts and RBAC
User Roles
Rules
User Role Policies
RBAC Sample Configuration
Port Security
Port Security Configuration
Method 1: Manual Database Configuration
Method 2: Auto-Learning Without CFS Distribution
Method 3: Auto-Learning with CFS Distribution
Verification of Port Security
Fabric Binding
Fabric Binding Configuration
Port Security Versus Fabric Binding
Exam Preparation Tasks
Review All Key Topics
Memory Tables and Lists
Define Key Terms
References
Chapter 20 Final Preparation
Getting Ready
Tools for Final Preparation
Pearson Test Prep Practice Test Software and Questions on the Website
Accessing the Pearson Test Prep Software Online
Accessing the Pearson Test Prep Software Offline
Customizing Your Exams
Updating Your Exams
Premium Edition
Chapter-Ending Review Tools
Learn the Question Types Using the Cisco Certification Exam Tutorial
Suggested Plan for Final Review/Study
Summary
Appendix A: Answers to the “Do I Know This Already?” Quizzes
Appendix B: CCNP and CCIE Data Center Core DCCOR 350-601 Official Cert Guide Exam Updates
Glossary
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
Index
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z
Appendix C: Memory Tables
Appendix D: Memory Tables Answer Key
Appendix E: Study Planner