CCNP Enterprise ENCC.
Describing various architecture models for cloud connectivity.
- Describe internet-based connectivity to cloud providers (AWS, Azure, and Google Cloud)
- Implement Native IPsec internet-based connectivity to cloud providers.
- Implement Cisco SD-WAN internet connectivity.
- Describe private connectivity to cloud providers (AWS, Azure, and Google Cloud).
- Configure private connectivity to cloud providers via MPLS provider.
- Configure private connectivity to cloud providers via Colocation provider.
- Configure private connectivity to cloud providers via SDCI regional cross-connect.
- Describe connectivity to SaaS cloud providers (AWS, Azure, and Google Cloud).
- Configure Direct internet access models into SaaS.
- Configure Indirect access models via a Cloud Security Provider.
- Configure SaaS connectivity via a centralized internet gateway.
- Configure Dedicated connectivity to a SaaS provider.
Design connectivity models for cloud connectivity.
- Design the connectivity model to provide high availability, resiliency, SLAs, and reliability.
- Design the connectivity model considering bandwidth, QoS, and routing requirements.
- Design the connectivity model considering dedicated vs shared and multi-homing requirements.
- Design the connectivity model to meet regulatory compliance (NIST, FEDRAMP, ISO) requirements.
- Describe cloud-native security policies for east/west traffic within the cloud provider, backhaul internet traffic and inbound connectivity to the internet.
IPsec Cloud Connectivity
- Configure IPsec internet-based secure cloud connectivity between an on-premises router to a native AWS, Azure, and Google Cloud endpoint.
- Configure IPsec internet-based secure cloud connectivity between an on-premises Cisco IOS XE router and an AWS, Azure, or Google cloud-hosted Cisco IOS XE router.
- Configure routing on Cisco IOS XE to integrate with cloud networks using BGP and OSPF, including redistribution and static routing.
SD-WAN Cloud Connectivity
- Configure Cisco SD-WAN internet-based secure cloud connectivity for AWS, Azure, and Google Cloud.
- Configure Cisco SD-WAN OnRamp to a SaaS cloud provider.
- Configure Cisco SD-WAN policies (north/south and east/west) for security, routing and application.
Operation and troubleshooting of cloud connectivity.
- Diagnose IPsec internet-based secure cloud connectivity between an on-premises Cisco IOS XE router to a native AWS, Azure, and Google Cloud endpoint.
- Diagnose routing issues on Cisco IOS XE to integrate with cloud networks using BGP and OSPF, including redistribution and static routing.
- Diagnose Cisco SD-WAN internet-based secure cloud connectivity for AWS, Azure, and Google Cloud.
- Diagnose Cisco SD-WAN policy issues.