FastSysAdmin

CCNP Switching Practical Tasks List

This comprehensive list covers advanced CCNP-level switching concepts, ensuring hands-on expertise with Layer 2 & Layer 3 technologies, security, redundancy, and automation.

🟢 Section 1: Advanced VLAN & Trunking Configurations

  • Task 1.1 – Configure 802.1Q VLAN Trunking with allowed VLAN filtering
  • Task 1.2 – Implement VLAN Trunking Protocol (VTP) in Server, Client, and Transparent modes
  • Task 1.3 – Configure Manual VLAN Pruning on trunk links to optimize traffic
  • Task 1.4 – Implement Native VLAN tagging and troubleshoot mismatches
  • Task 1.5 – Set up Private VLANs (PVLANs) for security isolation
  • Task 1.6 – Configure and verify VLAN Mapping (Q-in-Q Tunneling)
  • Task 1.7 – Implement VLAN Access Control Lists (VACLs) for intra-VLAN traffic filtering
  • Task 1.8 – Configure and verify Voice VLANs with LLDP-MED
  • Task 1.9 – Troubleshoot VTP version mismatches and database inconsistencies
  • Task 1.10 – Configure and verify VLAN translation on trunk ports
  • Task 1.11 – Implement and troubleshoot VTP version 3. Understand its advantages and differences from v1 and v2.

🟢 Section 2: Advanced Spanning Tree Protocol (STP)

  • Task 2.1 – Configure Per VLAN Spanning Tree Plus (PVST+)
  • Task 2.2 – Implement Rapid Spanning Tree Protocol (RSTP) for faster convergence
  • Task 2.3 – Deploy Multiple Spanning Tree Protocol (MSTP) to map VLANs to instances
  • Task 2.4 – Set up Root Guard to prevent unauthorized root switch elections
  • Task 2.5 – Implement BPDU Guard, BPDU Filter, and Loop Guard
  • Task 2.6 – Test STP Convergence Timing under different scenarios
  • Task 2.7 – Troubleshoot STP Topology Changes and TCN events
  • Task 2.8 – Configure and verify UplinkFast and BackboneFast for faster convergence
  • Task 2.9 – Implement MSTP region boundaries and verify instance mapping
  • Task 2.10 – Configure and verify STP Port Roles (Root, Designated, Alternate, Backup)
  • Task 2.11 – Simulate and troubleshoot STP topology changes (TCN events)
  • Task 2.12 – Configure and verify STP timers (Hello, Forward Delay, Max Age)

🟢 Section 3: Link Aggregation & Redundancy

  • Task 3.1 – Configure LACP (Link Aggregation Control Protocol) for redundancy
  • Task 3.2 – Implement PAgP (Cisco Proprietary EtherChannel)
  • Task 3.3 – Verify EtherChannel Load Balancing across links
  • Task 3.4 – Troubleshoot EtherChannel formation issues
  • Task 3.5 – Implement Multi-Chassis EtherChannel (MEC) on VSS or vPC
  • Task 3.6 – Configure and verify Cross-Stack EtherChannel (CSE) for switch stacking
  • Task 3.7 – Implement Layer 3 EtherChannel for routed links
  • Task 3.8 – Configure and verify EtherChannel hashing algorithms for load balancing
  • Task 3.9 – Troubleshoot EtherChannel misconfigurations (e.g., mismatched port settings)
  • Task 3.10 – Configure and verify vPC (Virtual Port Channel) in a Nexus environment

🟢 Section 4: High Availability & Redundancy Protocols

  • Task 4.1 – Configure HSRP (Hot Standby Router Protocol) with load balancing
  • Task 4.2 – Implement VRRP (Virtual Router Redundancy Protocol) for failover
  • Task 4.3 – Deploy GLBP (Gateway Load Balancing Protocol) for gateway redundancy
  • Task 4.4 – Perform failover testing by simulating link failures
  • Task 4.5 – Optimize HSRP timers for faster failover
  • Task 4.6 – Configure and verify HSRP with Object Tracking for dynamic failover
  • Task 4.7 – Implement VRRP with preemption and priority settings
  • Task 4.8 – Configure and verify GLBP weighting for unequal load balancing
  • Task 4.9 – Simulate and troubleshoot HSRP/VRRP/GLBP failover scenarios
  • Task 4.10 – Configure and verify StackWise Virtual for switch stacking redundancy

🟢 Section 5: Layer 3 Switching & Advanced Inter-VLAN Routing

  • Task 5.1 – Configure SVIs (Switch Virtual Interfaces) for multiple VLANs
  • Task 5.2 – Enable IP Routing on Layer 3 Switches
  • Task 5.3 – Implement Routed Ports for pure Layer 3 connections
  • Task 5.4 – Configure OSPF and EIGRP on Layer 3 switches
  • Task 5.5 – Implement BGP between Layer 3 switches
  • Task 5.6 – Troubleshoot Inter-VLAN Routing Performance Issues
  • Task 5.7 – Configure and verify Policy-Based Routing (PBR) on Layer 3 switches
  • Task 5.8 – Implement Static NAT on a Layer 3 switch for outbound traffic
  • Task 5.9 – Configure and verify IPv6 Inter-VLAN routing
  • Task 5.10 – Implement and troubleshoot VRF-Lite for multi-tenancy
  • Task 5.11 – Configure and verify FHRP (First Hop Redundancy Protocol) with IPv6

🟢 Section 6: Security Hardening for Enterprise Networks

  • Task 6.1 – Implement 802.1X Port-Based Authentication with a RADIUS server
  • Task 6.2 – Configure Port Security with dynamic and sticky MAC addresses
  • Task 6.3 – Enable DHCP Snooping to prevent rogue DHCP servers
  • Task 6.4 – Deploy Dynamic ARP Inspection (DAI) for ARP Spoofing Protection
  • Task 6.5 – Implement IP Source Guard to prevent spoofing attacks
  • Task 6.6 – Secure Management Plane (SSH, ACLs, AAA Authentication)
  • Task 6.7 – Enable Cisco TrustSec for advanced identity-based security
  • Task 6.8 – Configure and verify MACsec (Media Access Control Security) for link encryption
  • Task 6.9 – Implement Control Plane Policing (CoPP) to protect the switch CPU
  • Task 6.10 – Configure and verify Storm Control for broadcast/multicast/unicast traffic
  • Task 6.11 – Enable and verify Cisco TrustSec with SGT (Security Group Tags)
  • Task 6.12 – Configure and verify VLAN ACLs (VACLs) for traffic filtering

🟢 Section 7: Quality of Service (QoS) for Traffic Optimization

  • Task 7.1 – Configure QoS Trust Boundaries for VoIP traffic
  • Task 7.2 – Implement DSCP-based QoS Marking for prioritized traffic
  • Task 7.3 – Set up Weighted Round Robin (WRR) Scheduling
  • Task 7.4 – Deploy Priority Queuing (LLQ) for Voice Traffic
  • Task 7.5 – Configure QoS Policies for Video & Critical Data
  • Task 7.6 – Configure and verify Hierarchical QoS (HQoS) for nested policies
  • Task 7.7 – Implement and verify Shaping and Policing for traffic control
  • Task 7.8 – Configure and verify QoS Pre-Classification for encrypted traffic
  • Task 7.9 – Troubleshoot QoS misconfigurations and verify end-to-end traffic prioritization
  • Task 7.10 – Configure and verify Auto-QoS for simplified QoS deployment

🟢 Section 8: Network Monitoring & Troubleshooting

  • Task 8.1 – Use SPAN (Port Mirroring) for network traffic analysis
  • Task 8.2 – Configure RSPAN (Remote SPAN) to monitor traffic remotely
  • Task 8.3 – Implement NetFlow for network traffic analysis
  • Task 8.4 – Enable SNMPv3 for secure network monitoring
  • Task 8.5 – Use show, debug, and traceroute commands for troubleshooting
  • Task 8.6 – Configure Syslog for centralized logging
  • Task 8.7 – Monitor network performance with Cisco DNA Center
  • Task 8.8 – Configure and verify ERSPAN (Encapsulated Remote SPAN) for remote traffic capture
  • Task 8.9 – Use Cisco IOS Embedded Packet Capture (EPC) for troubleshooting
  • Task 8.10 – Configure and verify Flexible NetFlow (FNF) for advanced traffic analysis
  • Task 8.11 – Implement and verify IP SLA for network performance monitoring
  • Task 8.12 – Use Cisco DNA Assurance for proactive network monitoring

🟢 Section 9: Network Automation & Programmability

  • Task 9.1 – Configure a switch using Ansible Playbooks
  • Task 9.2 – Automate VLAN assignments using Python & REST APIs
  • Task 9.3 – Use NETCONF/YANG for switch configuration management
  • Task 9.4 – Implement Cisco DNA Center for Software-Defined Networking (SDN)
  • Task 9.5 – Monitor switches using Python & SNMP scripts
  • Task 9.6 – Configure and verify Cisco IOS-XE APIs (RESTCONF, gRPC)
  • Task 9.7 – Automate switch configurations using Python and Paramiko
  • Task 9.8 – Implement and verify Cisco DNA Center Templates for switch provisioning
  • Task 9.9 – Use Postman to interact with Cisco switches via REST APIs
  • Task 9.10 – Configure and verify Zero Touch Provisioning (ZTP) for switches

🟢 Section 10: Troubleshooting & Optimization

  • Task 10.1 – Diagnose and resolve VLAN misconfigurations
  • Task 10.2 – Troubleshoot Layer 2 loops & STP failures
  • Task 10.3 – Identify EtherChannel inconsistencies
  • Task 10.4 – Optimize Layer 3 routing within a switched environment
  • Task 10.5 – Perform packet captures for deep analysis
  • Task 10.6 – Troubleshoot and resolve VTP synchronization issues
  • Task 10.7 – Diagnose and fix Layer 2 loops using STP and loop detection tools
  • Task 10.8 – Optimize Layer 3 switch performance with hardware offloading
  • Task 10.9 – Troubleshoot and resolve EtherChannel load-balancing inefficiencies
  • Task 10.10 – Perform advanced packet analysis using Wireshark and SPAN

🟢 Section 11: Advanced Switching Features

  • Task 11.1 – Configure and verify Cisco FabricPath for scalable Layer 2 networks
  • Task 11.2 – Implement and verify Cisco ACI (Application Centric Infrastructure)
  • Task 11.3 – Configure and verify Cisco SD-Access for policy-based networking
  • Task 11.4 – Implement and verify Cisco StackWise and StackWise Virtual
  • Task 11.5 – Configure and verify Cisco Catalyst Center for intent-based networking

🟢 Section 12: IPv6 in Switching Environments

  • Task 12.1 – Configure and verify IPv6 VLANs and SVIs
  • Task 12.2 – Implement and verify IPv6 EtherChannel
  • Task 12.3 – Configure and verify IPv6 First Hop Security (RA Guard, DHCP Guard)
  • Task 12.4 – Troubleshoot IPv6 Inter-VLAN routing issues
  • Task 12.5 – Configure and verify IPv6 QoS policies

🟢 Section 13: Advanced Security Features

  • Task 13.1 – Configure and verify Cisco ISE (Identity Services Engine) integration
  • Task 13.2 – Implement and verify Cisco TrustSec with SXP (SGT Exchange Protocol)
  • Task 13.3 – Configure and verify Cisco Stealthwatch integration for threat detection
  • Task 13.4 – Implement and verify Cisco Umbrella for DNS-layer security
  • Task 13.5 – Configure and verify Cisco Advanced Malware Protection (AMP)