Hi all,
​
The day we have have hinting at has finally arrived, Cisco has revamped their entire cert program!
​
First things first, if you complete your CCNA by the cut off then you will be automatically upgraded.If you are a CCENT, that exam is ending so you need to be a CCNA before the cut off or you lose the cert.
​
Basically the short version is that there is now just one CCNA now for all tracks, it focuses on R&S fundamentals, security, wireless, and automation.
Cisco also seems to be trying to widen the gap between CCNA and CCNP.
The Fallen
​
The following certs are no more
​
CCENT - If you have this you will need to complete the CCNA by Feb to be upgraded.
Route & Switch - Yes the R&S track is no more, it is being rolled into the new Enterprise track.
Wireless - The wireless track is also being rolled into the new Enterprise track.
Industrial - This was more of a specialized one for IOT
Cloud - This was more of a advanced CCNAs but it was fairly obscure, you'll be given some credit in the new tracks.
Update: Cyber Ops lives after all, guess the US DoD designation saved it after all!
​
The One to Rule Them All
​
Cisco has moved the CCNA back to a common cert, this means there is only one CCNA now for all track.
​
Let's have look at what is on it!
1.0 Network Fundamentals / 20%
This isn't too different from what we have today except for there is a bit more wireless and controllers are explicitly added.
1.1 Explain the role and function of network components
1.2 Describe characteristics of network topology architectures
1.3 Compare physical interface and cabling types
1.3.a Single-mode fiber, multimode fiber, copper
1.3.b Connections (Ethernet shared media and point-to-point)
1.3.c Concepts of PoE
1.4 Identify interface and cable issues (collisions, errors, mismatch duplex, and/or speed)
1.5 Compare TCP to UDP
1.6 Configure and verify IPv4 addressing and subnetting
1.7 Describe the need for private IPv4 addressing
1.8 Configure and verify IPv6 addressing and prefix
1.9 Compare IPv6 address types
1.9.a Global unicast
1.9.b Unique local
1.9.c Link local
1.9.d Anycast
1.9.e Multicast
1.9.f Modified EUI 64
1.10 Verify IP parameters for Client OS (Windows, Mac OS, Linux)
1.11 Describe wireless principles
1.12 Explain virtualization fundamentals (virtual machines)
1.13 Describe switching concepts
2.0 Network Access / 20%
The biggest update here is that wireless configuration is now part of the mix.
2.1 Configure and verify VLANs (normal range) spanning multiple switches
2.2 Configure and verify interswitch connectivity
2.2.a Trunk ports
2.2.b 802.1Q
2.2.c Native VLAN
2.3 Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)
2.4 Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)
2.5 Describe the need for and basic operations of Rapid PVST+ Spanning Tree Protocol and identify basic operations
2.5.a Root port, root bridge (primary/secondary), and other port names
2.5.b Port states (forwarding/blocking)
2.5.c PortFast benefits
2.6 Compare Cisco Wireless Architectures and AP modes
2.7 Describe physical infrastructure connections of WLAN components (AP,WLC, access/trunk ports, and LAG)
2.8 Describe AP and WLC management access connections (Telnet, SSH, HTTP,HTTPS, console, and TACACS+/RADIUS)
2.9 Configure the components of a wireless LAN access for client connectivity using GUI only such as WLAN creation, security settings, QoS profiles, and advanced WLAN settings
3.0 IP Connectivity / 25%
The IP routing section has been trimmed this time round, both RIP, and EIGRP are gone, so OSPF is the sole routing protocol. This is kinda disappointing but it makes sense in the context of this being a general cert now.
​
3.1 Interpret the components of routing table
3.1.a Routing protocol code
3.1.b Prefix
3.1.c Network mask
3.1.d Next hop
3.1.e Administrative distance
3.1.f Metric
3.1.g Gateway of last resort
3.2 Determine how a router makes a forwarding decision by default
3.3 Configure and verify IPv4 and IPv6 static routing
3.3.a Default route
3.3.b Network route
3.3.c Host route
3.3.d Floating static
3.4 Configure and verify single area OSPFv2
3.5 Describe the purpose of first hop redundancy protocol
4.0 IP Services / 10%
Everything in services is more or less the same.
4.1 Configure and verify inside source NAT using static and pools
4.2 Configure and verify NTP operating in a client and server mode
4.3 Explain the role of DHCP and DNS within the network
4.4 Explain the function of SNMP in network operations
4.5 Describe the use of syslog features including facilities and levels
4.6 Configure and verify DHCP client and relay
4.7 Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, congestion, policing, shaping
4.8 Configure network devices for remote access using SSH
4.9 Describe the capabilities and function of TFTP/FTP in the network
5.0 Security Fundamentals / 15%
Security gets a bit more advanced this time around with new features such as DHCP Snooping, also some more wireless config.
​
5.1 Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)
5.2 Describe security program elements (user awareness, training, and physical access control)
5.3 Configure device access control using local passwords
5.4 Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)
5.5 Describe remote access and site-to-site VPNs
5.6 Configure and verify access control lists
5.7 Configure Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)
5.8 Differentiate authentication, authorization, and accounting concepts
5.9 Describe wireless security protocols (WPA, WPA2, and WPA3)
5.10 Configure WLAN using WPA2 PSK using the GUI
6.0 Automation and Programmability / 10%
This is been on its way for quite awhile, it merges in the previous topics and also adds a bit more automation basics.
6.1 Explain how automation impacts network management
6.2 Compare traditional networks with controller-based networking
6.3 Describe controller-based and software defined architectures (overlay, underlay, and fabric)
6.4 Compare traditional campus device management with Cisco DNA Center enabled device management
6.5 Describe characteristics of REST-based APIs (CRUD, HTTP verbs, and data encoding)
6.6 Recognize the capabilities of configuration management mechanisms Puppet, Chef, and Ansible
6.7 Interpret JSON encoded data
​
But is it easier or harder?
​
On one hand the exam appears to be a bit easier since most of the routing has been removed. On the other hand in though it has added in the former CCNA Wireless topics and also is going a bit deeper into security, we now have things like Dynamic ARP Inspection on the exam.
​
A subtle difference is that the topic weighting. Before you had more topics across topic domains, which made the domains denser. This meant while BGP was on the test, it shared the 10% of the exam with 7 other topics so it was possible you wouldn't really get a BGP question anyway. Now that the domains are cleaner, you are guaranteed an automation question etc.
​
Also there is no more splitting up the tests, the CCNA is just one exam now so all the pitfalls of doing the composite are valid here.
​
Additionally there have been rumors for awhile now that Cisco is going to drop the old limited sim system in favour of a VIRL type lab delivery. This would mean you would connect to IOS devices with the full command line. If true this will be a double edge sword since you'll get a full CLI experience, and Cisco can get a lot more creative for sims.
​
All in all my feeling is that new CCNA will be at least somewhat harder than before. Just because EIGRP isn't on the exam anymore doesn't mean that the test is too generic to matter anymore. It is actually moving a bit closer to Juniper's JNCIA which is more of a OS and fundamental exam then something where you learn BGP.
What about the other tracks?
​
Specializations are now done at the CCNP level, I like this change as I often advised people that they should be around a CCNP R&S level before trying something like the Data Center track. This just makes it official.
​
New Track!
​
In addition to all the other changes there is now a DevNet track that has Associate, Professional, and Specialist levels.
​
The DevNet Associate aligns with the CCNA and focuses on the programming and automation topics directly.
1.0 Software Development and Design / 15%
1.1 Compare data formats (XML, JSON, and YAML)
1.2 Describe parsing of common data format (XML, JSON, and YAML) to Python data structures
1.3 Describe the concepts of test-driven development
1.4 Compare software development methods (agile, lean, and waterfall)
1.5 Explain the benefits of organizing code into methods / functions, classes, and modules
1.6 Identify the advantages of common design patterns (MVC and Observer)
1.7 Explain the advantages of version control
1.8 Utilize common version control operations with Git
2.0 Understanding and Using APIs / 20%
2.1 Construct a REST API request to accomplish a task given API documentation
2.2 Describe common usage patterns related to webhooks
2.3 Identify the constraints when consuming APIs
2.4 Explain common HTTP response codes associated with REST APIs
2.5 Troubleshoot a problem given the HTTP response code, request and API documentation
2.6 Identify the parts of an HTTP response (response code, headers, body)
2.7 Utilize common API authentication mechanisms: basic, custom token, and API keys
2.8 Compare common API styles (REST, RPC, synchronous, and asynchronous)
2.9 Construct a Python script that calls a REST API using the requests library
3.0 Cisco Platforms and Development / 15%
3.1 Construct a Python script that uses a Cisco SDK given SDK documentation
3.2 Describe the capabilities of Cisco network management platforms and APIs (Meraki, Cisco DNA Center, ACI, Cisco SD-WAN, and NSO)
3.3 Describe the capabilities of Cisco compute management platforms and APIs (UCS Manager, UCS Director, and Intersight)
3.4 Describe the capabilities of Cisco collaboration platforms and APIs (Webex Teams, Webex devices, Cisco Unified Communication Manager including AXL and UDS interfaces, and Finesse)
3.5 Describe the capabilities of Cisco security platforms and APIs (Firepower, Umbrella, AMP, ISE, and ThreatGrid)
3.6 Describe the device level APIs and dynamic interfaces for IOS XE and NX-OS
3.7 Identify the appropriate DevNet resource for a given scenario (Sandbox, Code Exchange, support, forums, Learning Labs, and API documentation)
3.8 Apply concepts of model driven programmability (YANG, RESTCONF, and NETCONF) in a Cisco environment
3.9 Construct code to perform a specific operation based on a set of requirements and given API reference documentation such as these:
3.9.a Obtain a list of network devices by using Meraki, Cisco DNA Center, ACI, Cisco SD-WAN, or NSO
3.9.b Manage spaces, participants, and messages in Webex Teams
3.9.c Obtain a list of clients / hosts seen on a network using Meraki or Cisco DNA Center
4.0 Application Deployment and Security / 15%
​
4.1 Describe benefits of edge computing
4.2 Identify attributes of different application deployment models (private cloud, public cloud, hybrid cloud, and edge)
4.3 Identify the attributes of these application deployment types
4.3.a Virtual machines
4.3.b Bare metal
4.3.c Containers
4.4 Describe components for a CI/CD pipeline in application deployments
4.5 Construct a Python unit test
4.6 Interpret contents of a Dockerfile
4.7 Utilize Docker images in local developer environment
4.8 Identify application security issues related to secret protection, encryption (storage and transport), and data handling
4.9 Explain how firewall, DNS, load balancers, and reverse proxy in application deployment
4.10 Describe top OWASP threats (such as XSS, SQL injections, and CSRF)
4.11 Utilize Bash commands (file management, directory navigation, and environmental variables)
4.12 Identify the principles of DevOps practices
5.0 Infrastructure and Automation / 20%
5.1 Describe the value of model driven programmability for infrastructure automation
5.2 Compare controller-level to device-level management
5.3 Describe the use and roles of network simulation and test tools (such as VIRL and pyATS)
5.4 Describe the components and benefits of CI/CD pipeline in infrastructure automation
5.5 Describe principles of infrastructure as code
5.6 Describe the capabilities of automation tools such as Ansible, Puppet, Chef, and Cisco NSO
5.7 Identify the workflow being automated by a Python script that uses Cisco APIs including ACI, Meraki, Cisco DNA Center, or RESTCONF
5.8 Identify the workflow being automated by an Ansible playbook (management packages, user management related to services, basic service configuration, and start/stop)
5.9 Identify the workflow being automated by a bash script (such as file management, app install, user management, directory navigation)
5.10 Interpret the results of a RESTCONF or NETCONF query
5.11 Interpret basic YANG models
5.12 Interpret a unified diff
5.13 Describe the principles and benefits of a code review process
5.14 Interpret sequence diagram that includes API calls
6.0 Network Fundamentals / 15%
​
6.1 Describe the purpose and usage of MAC addresses and VLANs
6.2 Describe the purpose and usage of IP addresses, routes, subnet mask / prefix, and gateways
6.3 Describe the function of common networking components (such as switches, routers, firewalls, and load balancers)
6.4 Interpret a basic network topology diagram with elements such as switches, routers, firewalls, load balancers, and port values
6.5 Describe the function of management, data, and control planes in a network device
6.6 Describe the functionality of these IP Services: DHCP, DNS, NAT, SNMP, NTP
6.7 Recognize common protocol port values (such as, SSH, Telnet, HTTP, HTTPS, and NETCONF)
6.8 Identify cause of application connectivity issues (NAT problem, Transport Port blocked, proxy, and VPN)
6.9 Explain the impacts of network constraints on applications
Recertification
​
Recertification is largely the same, pretty much any exam now will recertify your CCNA. The new thing is that Cisco now allows you to use Continuing Education to renew your certs even at the CCNA level, this means if you go to events like Cisco Live or DevNet then they will help renew your cert, CCNA requires 30 credits to renew, more details as things get closer!
​
The Enterprise Track
​
Since the CCNA is a bit more abstract compared to the previous version, I figured it would be useful to include the CCNP update so you can see the bigger picture.
​
Cisco has merged R&S and Wireless together to better align with the DNA Center solution. It also finally includes SDWAN which is something I said should happen for a long time.
​
One interesting thing is that since the new CCNA only covers static and OSPF, this exam introduces the other routing protocols like EIGRP.
The ENCOR exam has the following in it:
1.0 Architecture / 15%
1.1 Explain the different design principles used in an enterprise network
1.1.a Enterprise network design such as Tier 2, Tier 3, and Fabric Capacity planning
1.1.b High availability techniques such as redundancy, FHRP, and SSO
1.2 Analyze design principles of a WLAN deployment
1.2.a Wireless deployment models (centralized, distributed, controller-less, controller based, cloud, remote branch)
1.2.b Location services in a WLAN design
1.3 Differentiate between on-premises and cloud infrastructure deployments
1.4 Explain the working principles of the Cisco SD-WAN solution
1.5 Explain the working principles of the Cisco SD-Access solution
1.6 Describe concepts of wired and wireless QoS
1.6.a QoS components
1.6.b QoS policy
1.7 Differentiate hardware and software switching mechanisms
2.0 Virtualization / 10%
2.1 Describe device virtualization technologies
2.2 Configure and verify data path virtualization technologies
2.3 Describe network virtualization concepts
3.0 Infrastructure / 30%
3.1 Layer 2
3.1.a Troubleshoot static and dynamic 802.1q trunking protocols
3.1.b Troubleshoot static and dynamic EtherChannels
3.1.c Configure and verify common Spanning Tree Protocols (RSTP and MST)
3.2 Layer 3
3.2.a Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. linked state, load balancing, path selection, path operations, metrics)
3.2.b Configure and verify simple OSPF environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point and broadcast network types, and passive interface)
3.2.c Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships)
3.3 Wireless
3.3.a Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference noise, band and channels, and wireless client devices capabilities
3.3.b Describe AP modes and antenna types
3.3.c Describe access point discovery and join process (discovery algorithms, WLC selection process)
3.3.d Describe the main principles and use cases for Layer 2 and Layer 3 roaming
3.3.e Troubleshoot WLAN configuration and wireless client connectivity issues
3.4 IP Services
3.4.a Describe Network Time Protocol (NTP)
3.4.b Configure and verify NAT/PAT
3.4.c Configure first hop redundancy protocols, such as HSRP and VRRP
3.4.d Describe multicast protocols, such as PIM and IGMP v2/v3
4.0 Network Assurance / 10%
4.1 Diagnose network problems using tools such as debugs, conditional debugs, trace route, ping, SNMP, and syslog
4.2 Configure and verify device monitoring using syslog for remote logging
4.3 Configure and verify NetFlow and Flexible NetFlow
4.4 Configure and verify SPAN/RSPAN/ERSPAN
4.5 Configure and verify IPSLA
4.6 Describe Cisco DNA Center workflows to apply network configuration, monitoring, and management
4.7 Configure and verify NETCONF and RESTCONF
5.0 Security / 20%
5.1 Configure and verify device access control
5.2 Configure and verify infrastructure security features
5.3 Describe REST API security
5.4 Configure and verify wireless security features
5.4.a EAP
5.4.b WebAuth
5.4.c PSK
5.5 Describe the components of network security design
5.5.a Threat defense
5.5.b Endpoint security
5.5.c Next-generation firewall
5.5.d TrustSec, MACsec
5.5.e Network access control with 802.1X, MAB, and WebAuth
6.0 Automation / 15%
6.1 Interpret basic Python components and scripts
6.2 Construct valid JSON encoded file
6.3 Describe the high-level principles and benefits of a data modeling language, such as YANG
6.4 Describe APIs for Cisco DNA Center and vManage
6.5 Interpret REST API response codes and results in payload using Cisco DNA Center and RESTCONF
6.6 Construct EEM applet to automate configuration, troubleshooting, or data collection
6.7 Compare agent vs. agentless orchestration tools, such as Chef, Puppet, Ansible, and SaltStack
The Concentrations
Concentration exams focus on emerging and industry-specific topics such as network design, SD-WAN, wireless, and automation.
​
Rather than post 6 exam topics, I'll you look it up but the idea is that you pick what interests you.
​
Implementing Cisco Enterprise Advanced Routing and Services (ENARSI 300-410)
Implementing Cisco SD-WAN Solutions (ENSDWI 300-415)
Designing Cisco Enterprise Networks (ENSLD 300-420)
Designing Cisco Enterprise Wireless Networks (ENWLSD 300-425)
Implementing Cisco Enterprise Wireless Networks (ENWLSI 300-430)
Automating and Programming Cisco Enterprise Solutions (ENAUTO 300-435)
​
But was that discord link again?
​
Not really what this post was about, but since you asked: https://discordapp.com/invite/Dq5DYT7