350-401 ENCOR: Implementing Cisco Enterprise Network Core TechnologiesDemo

VXLAN encapsulates an Ethernet frame in VXLAN, UDP, and IP headers so that Layer 2 traffic can traverse a Layer 3 routed underlay, including across router boundaries. The VXLAN Network Identifier (VNI) is 24 bits and UDP—not TCP—is used as the transport protocol. RFC 7348: Virtual eXtensible Local Area Network (VXLAN)

The VXLAN header carries the 24-bit VXLAN Network Identifier (VNI), which identifies the virtual network for the encapsulated Layer 2 frame.

Received Signal Strength Indicator (RSSI) expresses the strength of a wireless signal at the receiver, commonly measured in dBm.

The classical Cisco three-tier hierarchical network design uses an access layer for endpoint connectivity, a distribution layer between access and core, and a core layer for backbone transport. Leaf and spine describe a separate data-center fabric topology.

A Cisco StackWise primary switch retains its role during normal stack operation; priority changes or the addition of a higher-priority member do not preempt it. Resetting the primary causes a new election, so the reset switch no longer serves as the stack primary.

SD-WAN creates a secure, transport-agnostic overlay across remote sites. It can use multiple underlay transports, including economical Internet broadband, while centrally applying security policy and dynamically selecting paths to improve application performance and reduce WAN costs.

MACsec provides Layer 2 (IEEE 802.1AE) protection by authenticating and encrypting Ethernet frames between MACsec-capable devices.

A roam between mobility-peer controllers whose wireless LAN dynamic interfaces are on the same VLAN/IP subnet is an inter-controller Layer 2 roam. Inter-subnet roaming applies when the controllers’ wireless LAN interfaces are in different IP subnets.

HSRP version 1 derives its default virtual MAC address as 0000.0C07.ACxx, where xx is the HSRP group number in hexadecimal. 0000.0c07.ac32 identifies group 50, while the duplicate-address message is sourced by 0000.0c07.ac28, identifying group 40. Therefore, two distinct HSRP groups are configured with the same virtual IP address, 10.10.1.1.

LISP includes the Egress Tunnel Router (ETR) role and the Proxy Egress Tunnel Router (PETR) role. An ETR decapsulates LISP-encapsulated traffic for an EID site, while a PETR provides proxy egress functionality for interworking with non-LISP networks.

FlexConnect local switching places wireless client traffic directly onto the VLAN mapped at the branch AP, allowing the branch’s local network and Internet connection to handle that traffic without centrally switching it through a controller. Cisco documentation states that traffic on a VLAN configured on the FlexConnect AP is switched locally.

The terminal monitor EXEC command enables logging messages to be displayed on a remote terminal session, such as Telnet, as the router generates them.

An extended TCP ACL matches the source host first and the destination host second. A port operator placed after the destination host applies to the destination port, so the required ACE permits TCP traffic from 209.165.201.25 to 209.165.200.225 with destination port 80.

TACACS+ encrypts packet contents with the shared secret configured on both the network device and the TACACS+ server. An invalid AUTHEN packet accompanied by a check-keys error indicates that the shared key does not match. Configuring the server key as cisco123 enables the router to validate the authentication response.

The Content-Type HTTP header field declares the media type of the associated message content, such as application/json or text/html.

Cisco Identity Services Engine (ISE) provides identity-based access control for SD-Access, including dynamic mapping of users and devices to scalable groups and policy implementation/enforcement. Cisco SD-Access Wireless Design and Deployment Guide

An external antenna is used indoors when it provides the coverage required by the wireless design. External antennas can operate on applicable 2.4 GHz and 5 GHz bands and are not specific to Mobility Express.

A GRE tunnel requires both a tunnel source and a tunnel destination. Tunnel0 already has destination 192.168.10.2, while Loopback0 is an operational interface with IP address 192.168.10.1; configuring it as the tunnel source completes the required GRE endpoint configuration.

A LISP Ingress Tunnel Router (ITR) obtains the EID-to-RLOC mapping needed to encapsulate traffic for a LISP destination. If its map cache lacks the mapping, it sends a Map-Request and uses the resulting Map-Reply to populate the cache.

range(6) generates the integers 0, 1, 2, 3, 4, and 5. The loop prints each integer in sequence.

A rendezvous point is required for PIM sparse mode, not PIM dense mode. By default, a receiver’s last-hop router switches to a shortest-path tree toward the source, so the RP is needed only to initiate new sessions between sources and receivers rather than to carry the ongoing multicast flow. Cisco: Implementing Multicast Service Reflection