Skip to content
Log in Sign up My account

Diagram Library

Exam-style network diagrams for both CCNP Enterprise exams. ENCOR and ENARSI questions often start with "Refer to the exhibit" and a topology drawing, then ask which port blocks, which router wins an election, where a packet goes or which feature fixes a problem. These diagrams train you to read that kind of exhibit quickly.

How to use them

  • Look at each diagram and say out loud what it shows and what the likely question is before you read the explanation underneath.
  • Each diagram is tagged with its blueprint number so you can study it alongside the matching chapter.
  • All diagrams are Mermaid, so they render on this site and in Obsidian or any Markdown viewer that supports Mermaid.
Page Diagrams Focus
ENCOR diagrams 54 All six ENCOR 350-401 v1.2 domains
ENARSI diagrams 36 All four ENARSI 300-410 v1.1 domains

ENCOR 350-401

No. Diagram Blueprint
E01 Three-tier vs two-tier campus 1.1
E02 Layer 2 access vs routed access 1.1
E03 Spine-leaf fabric 1.1
E04 SSO with NSF 1.1
E05 Catalyst SD-WAN planes 1.2
E06 SD-WAN TLOCs and data plane tunnels 1.2
E07 OMP route and TLOC advertisement 1.2
E08 SD-Access fabric roles 1.3
E09 SD-Access endpoint registration and packet walk 1.3
E10 QoS trust boundary 1.4
E11 MQC classification and queuing on a WAN edge 1.4
E12 Type 1 vs type 2 hypervisors 2.1
E13 VRF-Lite path separation 2.2
E14 GRE over IPsec header stacks 2.2
E15 IKEv2 tunnel setup 2.2
E16 LISP registration and resolution 2.3
E17 VXLAN encapsulation 2.3
E18 DTP negotiation outcomes 3.1.a
E19 Native VLAN and allowed list mismatch 3.1.a
E20 EtherChannel negotiation outcomes 3.1.b
E21 RSTP port roles in a triangle 3.1.c
E22 MST regions 3.1.c
E23 EIGRP vs OSPF at a glance 3.2.a
E24 OSPF multi-area design and LSA flow 3.2.b
E25 OSPF neighbor state machine 3.2.b
E26 DR and BDR election on a broadcast segment 3.2.b
E27 OSPF adjacency checklist 3.2.b
E28 eBGP between directly connected neighbors 3.2.c
E29 BGP finite state machine 3.2.c
E30 Policy-based routing overview 3.2.d
E31 NTP stratum and PTP clock roles 3.3.a
E32 NAT address terms 3.3.b
E33 HSRP with interface tracking 3.3.c
E34 PIM sparse mode: shared tree and shortest-path tree 3.3.d
E35 IGMP join and leave 3.3.d
E36 Source-specific multicast 3.3.d
E37 MSDP between rendezvous points 3.3.d
E38 Multicast RPF check 3.3.d
E39 SNMP and syslog flows 4.1
E40 Flexible NetFlow building blocks 4.2
E41 SPAN, RSPAN and ERSPAN 4.3
E42 IP SLA tracking for default route failover 4.4
E43 Catalyst Center workflow 4.5
E44 NETCONF and RESTCONF stacks 4.6
E45 AAA with TACACS+ 5.1
E46 802.1X port authentication 5.4
E47 Control plane policing 5.2
E48 TrustSec SGT classification, propagation and enforcement 5.4
E49 MACsec hop-by-hop encryption 5.4
E50 REST API call flow with status codes 6.5
E51 REST API security controls 5.3
E52 EEM applet structure 6.6
E53 Agent-based vs agentless configuration management 6.7
E54 YANG data tree to JSON payload 6.2, 6.3

ENARSI 300-410

No. Diagram Blueprint
N01 Administrative distance decides between sources 1.1
N02 Two-point mutual redistribution feedback 1.3, 1.4
N03 Fixing redistribution feedback with tags 1.2, 1.3, 1.4
N04 Route-map processing logic 1.2
N05 Summarization points 1.5
N06 PBR next-hop decision 1.6
N07 VRF-Lite multi-tenant edge 1.7
N08 BFD with OSPF and BGP 1.8
N09 EIGRP successor and feasible successor 1.9
N10 EIGRP stub routers and query scope 1.9
N11 EIGRP unequal-cost load balancing with variance 1.9
N12 OSPF area types and the LSAs they accept 1.10
N13 OSPF virtual link 1.10
N14 OSPF path preference 1.10
N15 OSPF router types 1.10
N16 BGP best-path selection 1.11
N17 iBGP full mesh vs route reflector 1.11
N18 The next-hop-self problem 1.11
N19 Influencing traffic with local preference and AS-path prepend 1.11
N20 BGP inbound and outbound policy attachment points 1.11
N21 MPLS LSP with label push, swap and pop 2.1
N22 MPLS L3VPN with RD, RT and VPNv4 2.2
N23 DMVPN phases and traffic paths 2.3
N24 NHRP registration, resolution and redirect (Phase 3) 2.3
N25 AAA method list fallback 3.1
N26 uRPF strict vs loose 3.2
N27 Control plane policing classes 3.3
N28 IPv6 RA guard and DHCPv6 guard 3.4
N29 Time-based and extended ACL placement 3.2
N30 DHCP relay DORA 4.4
N31 DHCPv6 address assignment modes 4.4
N32 SNMPv3 security levels 4.2
N33 IP SLA, object tracking and static route failover 4.5
N34 NetFlow v5 vs v9 export 4.6
N35 Device management access 4.1
N36 Catalyst Center Assurance data flow 4.7