ENARSI 2.0 VPN Technologies (20%)¶
VPN Technologies is worth a fifth of the exam and mixes two verbs. MPLS and MPLS L3VPN (2.1 and 2.2) are describe objectives: expect conceptual questions, label tables to read and VRF configurations with one wrong value. DMVPN (2.3) is configure and verify: expect a full single-hub DMVPN sim or exhibits where you must find the broken line in a tunnel, NHRP, IPsec or routing configuration.
| Objective | Verb | Page |
|---|---|---|
| 2.1 MPLS operations: LSR, LDP, label switching, LSP, LIB and LFIB, PHP | Describe | MPLS Operations |
| 2.2 MPLS Layer 3 VPN: VRF, RD, RT, VPNv4, MP-BGP, two-label stack, PE-CE routing | Describe | MPLS Layer 3 VPN |
| 2.3.a to 2.3.c GRE/mGRE, NHRP (registration, resolution), IPsec protection | Configure, verify | DMVPN Building Blocks |
| 2.3.d, 2.3.e Dynamic neighbors, spoke-to-spoke, phases 1 to 3 with split horizon, next hop and summarization | Configure, verify | DMVPN Phases and Routing |
Time budget: week 19 of the study plan. Spend the first two days on MPLS and L3VPN (read both pages, build the LDP core and the two-customer L3VPN lab), and the rest of the week on DMVPN. Build the DMVPN lab once from scratch, then walk it through phases 1, 2 and 3 and break it on purpose. The DMVPN lab is the one to repeat until you can type it without notes.
Related practice:
- Simulations: Sim 09: DMVPN phase 3 with IPsec and Sim 10: MPLS LDP and Layer 3 VPN
- Diagrams: N21 MPLS LSP, N22 MPLS L3VPN, N23 DMVPN phases, N24 NHRP message flow
- Question bank: ENARSI Question Bank, Part 1, section 2.0 (questions 37 to 55)
When you finish, take the VPN Technologies practice questions. Aim for 80% or better before moving on to 3.0 Infrastructure Security.
Unlock the full question banks and cram sheets
A free account opens every question bank, the timed practice exams, the printable cram sheets, all the simulations and the lab files. Without one you see a 5-question sample of each.
No card needed. Study tips by email are optional and off unless you tick the box. Your address is never sold or shared. Privacy policy ยท Terms
Signed in as . Your account
You're on the free account, so lessons after the first module, question banks, exams and cram sheets show a sample. See Track Pass and All-Access
Also from NetManager Systems: NetManager, network monitoring for multi-vendor networks. Try the NetManager, NetDiag, PCAP Analyzer and OpsDash demos: every new account gets a free 7-day read-only login to each.