CCNP Enterprise Design: 300-420 ENSLD v1.2 — Designing Cisco Enterprise Networks

CCNP 300-420 ENSLD course: designing enterprise networks, campuses, SD-Access, SD-WAN, OSPF, IS-IS, BGP, IPv6, and cloud connectivity
Curriculum: 80 lessons · 8 sections · 10 free
CCNP Enterprise Concentration · network architect level
AZ · RU · EN · Beginner-Friendly Path to Network Architect (HLD / LLD)
Individual
Per month 200 AZN
Group
Per month 150 AZN
Paying for the full course in a group
15% discount
Installments
50/50
Subscription
from 60 AZN a month
How do you design a resilient network for thousands of employees, dozens of branches, and dual data centers before buying a single switch? When should you choose OSPF, EIGRP, or service-provider grade IS-IS? How do you migrate a live enterprise to IPv6 (Dual Stack, 6RD, NAT64/DNS64), size PoE budgets and campus oversubscription, architect Cisco SD-Access and Catalyst SD-WAN fabrics, choose between DMVPN Phase 3 and tunnel-less GET VPN, align end-to-end QoS and Multicast (SSM / BIDIR-PIM / Anycast RP), and connect to AWS/Azure with Cloud OnRamp? Master enterprise network architecture step by step.

Enrollment for a new group is open — send a request to reserve your seat

Lessons are taught live in Azerbaijani and Russian.

Or study on your own in your personal account → with a subscription from 60 AZN a month

What you need to start

The curriculum is structured with progressive disclosure: CCNA-level networking fundamentals (OSI/TCP-IP, IPv4/IPv6 subnetting, VLANs, STP, and basic routing) are sufficient to begin. Unlike CLI-heavy troubleshooting exams, 300-420 ENSLD focuses 100% on architectural decision-making, engineering sizing math, trade-off matrices, and High-Level / Low-Level Design (HLD/LLD) documentation.

CCNA-level networking basics100% Architecture & Design focusSLA, PoE, QoS & HLD/LLD sizingHands-on Design Practicum per section

How you will learn

Every lesson starts with a concrete business requirement (SLA, budget, scale, security) and guides you through selecting the right topology and protocol. Concepts are illustrated with clear SVG diagrams, step-by-step protocol animations (IS-IS, BGP Confederations, GET VPN, SD-Access, SD-WAN OMP, NAT64, BIDIR-PIM, MDT gNMI), sizing formulas, and reference Cisco IOS XE design templates.

The golden rule (R1)

Every architectural concept—from hierarchical addressing and campus fabrics to BGP confederations, IS-IS levels, GET VPN encryption, and gNMI streaming telemetry—is explained from the ground up without unexplained jargon. Each of the 8 sections concludes with a comprehensive hands-on Architecture Design Practicum.

Full 8-section curriculum (80 lessons)

01

Network Design Fundamentals and IPv4/IPv6 Addressing Plan

lessons 1–10
  • network architect role and PPDIOO lifecycle
  • translating business requirements (SLA, RPO/RTO, CAPEX/OPEX) into technical design
  • hierarchy and modularity principles
  • hierarchical IPv4 addressing and route summarization
  • IPv6 address planning (/32, /48, /56, /64, /127)
  • IPv6 migration strategies (Dual Stack, Happy Eyeballs, 6to4/6RD/ISATAP/GRE tunnels, NAT64/DNS64/464XLAT/DS-Lite translation)
  • naming conventions, and HLD/LLD documentation
02

Enterprise Campus LAN Design

lessons 11–22
  • Two-Tier (Collapsed Core) vs. Three-Tier campus design
  • 20:1 and 4:1 oversubscription sizing
  • Layer 2 Access vs. Routed L3 Access
  • RSTP/MSTP scaling and loop-free topologies
  • access-layer security (STP Guard, Port Security, 802.1X, VACL, Private VLAN)
  • hardware chassis virtualization (StackWise, VSS, StackWise Virtual) vs. FHRP
  • SSO/NSF/NSR/BFD high availability
  • PoE/PoE+/UPOE budget math and Wake-on-LAN
  • Multi-Campus L3 and VRF-Lite design
  • and full Cisco SD-Access architecture (IS-IS underlay, LISP + VXLAN + TrustSec SGT overlay, fabric node roles, VNs, and Fabric Wireless)
03

Interior Gateway Protocol (IGP) Design: EIGRP, OSPF, and IS-IS

lessons 23–34
  • architectural comparison of EIGRP
  • OSPF, and IS-IS, scalable EIGRP design (hierarchy, Query bounding, Stub, summarization, Feasible Successors, UCMP variance, and 64-bit Wide Metrics)
  • multi-area OSPFv2 and OSPFv3 design (Area 0 scaling, ABR/ASBR placement, Stub, Totally Stubby, NSSA, Totally NSSA areas, network types, and avoiding Virtual Links)
  • IS-IS from scratch (Level 1, Level 2, Level 1-2 hierarchy, NET/NSAP addressing, TLVs, Wide Metrics, and comparison with OSPF)
  • loop-free mutual redistribution
  • and sub-50ms IGP fast convergence (BFD, SPF/LSA backoff timers, and LFA Fast Reroute)
04

BGP and Enterprise Internet Edge Design

lessons 35–44
  • public vs. private ASNs
  • PI vs. PA address blocks
  • ISP multihoming topologies (Single/Dual-homed, Single/Dual-multihomed, Default vs. Partial vs. Full BGP table)
  • scaling iBGP with Route Reflector clusters (Control Plane follows Data Plane rule) and BGP Confederations (Sub-AS)
  • outbound (Weight, Local Preference) and inbound (AS-PATH Prepend, MED, Communities) traffic engineering
  • BGP Multipath and Add-Path
  • transit AS prevention, MP-BGP Address Families
  • and modern Spine-Leaf eBGP design
05

Enterprise WAN and VPN Design

lessons 45–54
  • selecting WAN transports (MPLS L3VPN, L2VPN/VPLS, Metro Ethernet, DWDM, 4G LTE / 5G) by SLA and TCO
  • enterprise VPN comparison (Site-to-Site IPsec, GRE over IPsec, DMVPN, FlexVPN, GET VPN)
  • scalable Dual-Hub DMVPN Phase 3 design
  • tunnel-less Cisco GET VPN architecture (GDOI protocol, COOP Key Servers, header and DSCP preservation over MPLS)
  • CE–PE routing (eBGP, OSPF Sham-Link, EIGRP SoO) and Backdoor link design
  • WAN Edge HA, and MTU / TCP MSS Adjustment math
06

Cisco Catalyst SD-WAN Architecture Design

lessons 55–63
  • designing the 4 SD-WAN planes (vBond, vManage, vSmart, WAN Edge)
  • cloud vs. on-premises controller placement and HA
  • Zero-Touch Provisioning (ZTP / PnP) branch onboarding
  • OMP overlay topologies and TLOC colors (Public vs. Private colors, Full Mesh, Hub-and-Spoke, Regional Mesh, Multi-Region Fabric)
  • Service VPN segmentation and LAN-side routing
  • Dual WAN Edge HA with TLOC Extension
  • Application-Aware Routing (AAR) with BFD SLA policies
  • Direct Internet Access (DIA)
  • security, and brownfield MPLS migration
07

Network Services Design: QoS, Multicast, and Network Management

lessons 64–72
  • IntServ (RSVP) vs. DiffServ models
  • end-to-end QoS design per RFC 4594 (CoS/DSCP classification and marking, EF, AFxy, Trust Boundary)
  • engineering LLQ (33% rule)
  • CBWFQ, WRED, and Policing vs. Shaping
  • aligning with MPLS provider classes and Hierarchical QoS (HQoS)
  • IP Multicast design from scratch (SPT vs. Shared Trees and RPF check)
  • choosing between PIM-SM
  • Source-Specific Multicast (SSM)
  • and Bidirectional PIM (BIDIR-PIM)
  • Rendezvous Point design (Static, Auto-RP, BSR, Anycast RP with MSDP, and Service Reflection)
  • and In-Band vs. Out-of-Band (OOB) management networks
08

Automation, Telemetry, and Multicloud Network Design

lessons 73–80
  • selecting YANG data models (IETF, multi-vendor OpenConfig, and Cisco Native)
  • comparing NETCONF, RESTCONF
  • and gRPC/gNMI, designing Model-Driven Telemetry (Periodic vs. On-Change subscriptions, Dial-Out vs. Dial-In modes)
  • cloud service (IaaS/PaaS/SaaS) and Hybrid/Multicloud architectures
  • designing public cloud connectivity to AWS
  • Azure, and GCP (IPsec VPN, Direct Connect / ExpressRoute / Cloud Interconnect, MPLS Cloud Access)
  • Cisco SD-WAN Cloud OnRamp for SaaS and Multicloud
  • 300-420 ENSLD exam strategy
  • and the Enterprise Architecture Capstone Project

What you can do after the course

Create complete High-Level (HLD) and Low-Level (LLD) enterprise network architectures: design hierarchical IPv4/IPv6 addressing plans and zero-downtime IPv6 migrations (Dual Stack, 6RD, NAT64/DNS64), architect resilient campuses (Routed Access, StackWise Virtual, Cisco SD-Access, and Fabric Wireless), select and scale OSPF, EIGRP, IS-IS, and BGP (Route Reflectors and Confederations), design global WANs with Cisco Catalyst SD-WAN, DMVPN Phase 3, MPLS L3VPN, and GET VPN, engineer end-to-end QoS and Multicast (SSM, BIDIR-PIM, Anycast RP), design multicloud interconnects to AWS/Azure/GCP, and architect YANG / gNMI streaming telemetry.

Alignment with Cisco CCNP Enterprise (300-420 ENSLD) Certification

This course covers 100% of the official blueprint objectives for the 300-420 ENSLD (Designing Cisco Enterprise Networks) exam. Passing 300-420 ENSLD earns the Cisco Certified Specialist – Enterprise Design certification and, combined with the 350-401 ENCOR core exam, fulfills all requirements for the full CCNP Enterprise certification.

How do we teach?

Learning stages

01

Webinar

Students join the lesson live. At the end of each lesson, students are sent a video recording of the class.

02

Homework

Every assignment is based on the topic covered in the webinar. Homework helps you reinforce the material and understand it better.

03

Working with a mentor

The teacher stays in touch with the group both during the course and outside class. Any questions get answered right away.

04

Portfolio

During the course you'll complete several projects on different topics — they'll show employers what you can do.

Self-paced learning

The full curriculum in your personal account

80 topics with theory, examples and practice. 13 of them are free (marked in the program), the rest come with a subscription. Interactive lessons with slides and coding trainers: 79.

Section 1. Network Design Fundamentals and IPv4/IPv6 Addressing Plan10 topics
  1. The Network Architect's Role: Translating Business Requirements (SLA, Budget, Scale) into Technical Design
  2. Fundamental Network Design Principles: Hierarchy, Modularity, Resiliency, and Scalability
  3. Hierarchical IPv4 Addressing Design: Block Allocation for Campuses, Branches, and Data Centers with Growth Headroom
  4. Route Summarization Architecture: Shrinking RIB/FIB Tables and Control-Plane CPU Load
  5. IPv6 Address Space Planning from Scratch: Address Types and /32, /48, /56, and /64 Prefix Allocation
  6. Smooth IPv4-to-IPv6 Migration Strategies — Part 1: Dual-Stack Architecture and the Happy Eyeballs Algorithm
  7. IPv6 Migration Strategies — Part 2: Tunneling IPv6 over IPv4 (Manual, GRE/IPsec, 6to4, 6RD, ISATAP)
  8. IPv6 Migration Strategies — Part 3: Protocol Translation with NAT64, DNS64, 464XLAT, and DS-Lite
  9. Design Standardization: Naming Conventions for Nodes, VLANs, VRFs, and HLD/LLD Architecture Documentation
  10. Design Practicum #1: Developing an IPv4/IPv6 Addressing Plan and Migration Strategy for an Enterprise Holding
Section 2. Enterprise Campus LAN Design12 topics
  1. Two-Tier (Collapsed Core) vs. Three-Tier Campus Design and Oversubscription Sizing
  2. Access Layer Models: Traditional L2 Access vs. Routed L3 Access
  3. Scaling Spanning Tree (RSTP and MSTP): L2 Domain Diameter and Loop-Free Topologies
  4. Access-Layer Security Design: STP Protection, Port Security, 802.1X, and VACL Filtering
  5. Hardware Chassis Virtualization (StackWise, VSS, StackWise Virtual) vs. Traditional FHRP Pairs
  6. Control-Plane High Availability: SSO, NSF, NSR, Graceful Restart, and BFD
  7. Engineering Power-over-Ethernet (PoE / PoE+ / UPOE 802.3af/at/bt) Budgets and Wake-on-LAN (WoL) Design
  8. Multi-Campus L3 Network Design: Load Sharing, Filtering, Summarization, and VRF-Lite Isolation
  9. Cisco SD-Access Campus Architecture — Part 1: Underlay and Overlay (LISP + VXLAN + SGT)
  10. Cisco SD-Access Architecture — Part 2: Fabric Node Roles, Virtual Networks (VNs), and Scaling
  11. Enterprise Wireless Design: Traditional Over-the-Top WLC vs. SD-Access Fabric-Enabled Wireless
  12. Design Practicum #2: Selecting and Sizing a Campus Architecture (Tier 3 Routed Access vs. SD-Access Fabric)
Section 3. Interior Gateway Protocol (IGP) Design: EIGRP, OSPF, and IS-IS12 topics
  1. Comparing IGPs Through an Architect's Lens: EIGRP vs. OSPF vs. IS-IS — Selection Criteria
  2. Scalable EIGRP Network Design: Hierarchy, Stub Areas, Summarization, and SIA Prevention
  3. EIGRP Resiliency and Load Sharing: Designing Feasible Successors, UCMP (variance), and Wide Metrics
  4. Multi-Area OSPFv2 and OSPFv3 Design: Area 0 Backbone, Area Sizing, and ABR/ASBR Placement
  5. Selecting OSPF Special Area Types in Design: Normal, Stub, Totally Stubby, NSSA, and Totally NSSA
  6. OSPF Topologies Across WAN Media: Network Type Selection, DR/BDR Placement, and Virtual Link Pitfalls
  7. IS-IS from Scratch for Beginners: Why Service Providers, Data Centers, and Cisco SD-Access Choose IS-IS
  8. IS-IS Hierarchy Architecture: Level 1, Level 2, and Level 1-2 Routers, NET/NSAP Addressing, and Wide Metrics
  9. OSPF vs. IS-IS Architectural Comparison: Link-Based vs. Node-Based Area Boundaries and Scalability
  10. Designing Route Filtering, Summarization, and Loop-Free Mutual Redistribution
  11. Accelerating IGP Convergence: SPF/LSA Exponential Backoff Timers, BFD Integration, and LFA Fast Reroute (FRR)
  12. Design Practicum #3: Architecting a Scalable OSPF, IS-IS, and EIGRP Routing Core
Section 4. BGP and Enterprise Internet Edge Design10 topics
  1. The Role of BGP in Enterprise Architecture: Public vs. Private ASNs and PI vs. PA Address Blocks
  2. ISP Multihoming Topologies: Choosing Between Default Route, Partial Table, and Full Internet Routing Table
  3. Scaling iBGP — Part 1: Route Reflector (RR) Cluster Design and Topological Placement
  4. Scaling iBGP — Part 2: BGP Confederations Architecture and Comparison with Route Reflectors
  5. BGP Traffic Engineering Architecture: Deterministic Outbound and Inbound Path Control Design
  6. BGP Load-Sharing Design: eBGP Multipath, iBGP Multipath, and eiBGP
  7. BGP Filtering and Security Design: Preventing Transit AS Exposure and Route Leaks
  8. Multiprotocol BGP (MP-BGP Address Families) Architecture: A Unified Control Plane for IPv4, IPv6, VPNv4, and EVPN
  9. Modern BGP Design in Large Campuses and Data Center Fabrics (Spine-Leaf eBGP Design)
  10. Design Practicum #4: Architecting BGP with Dual ISPs, Route Reflectors, and Confederations
Section 5. Enterprise WAN and VPN Design10 topics
  1. WAN Transport Technologies for Architects: MPLS L3VPN, L2VPN, Metro Ethernet, DWDM, and 4G/5G
  2. WAN Circuit Selection Criteria: Bandwidth, Latency, SLA, Topology, and Total Cost of Ownership (TCO)
  3. Comparing Enterprise VPN Architectures: Site-to-Site IPsec, GRE over IPsec, DMVPN, FlexVPN, and GET VPN
  4. Scalable DMVPN Design: Phase 1/2/3 Comparison and Resilient Dual-Hub Cloud Topologies
  5. Cisco GET VPN (Group Encrypted Transport VPN) Architecture: Tunnel-Less Encryption over Private MPLS
  6. Integrating with Provider MPLS L3VPN: CE–PE Routing Protocol Selection and Backdoor Link Design
  7. WAN Edge High-Availability Design: Redundancy Topologies (Active/Active vs. Active/Standby), BFD, and IP SLA
  8. Engineering MTU, Fragmentation, and TCP MSS Adjustment in Tunneled WAN Networks
  9. Designing 4G LTE and 5G Cellular Primary and Backup Links in the Enterprise WAN
  10. Design Practicum #5: Selecting and Sizing a Hybrid WAN Architecture (MPLS + DMVPN Phase 3 + GET VPN + 5G)
Section 6. Cisco Catalyst SD-WAN Architecture Design9 topics
  1. Cisco Catalyst SD-WAN Architecture: 4 Planes, vBond/vManage/vSmart Controllers, and WAN Edge
  2. SD-WAN Controller Deployment Design: Cisco Cloud vs. On-Premises Data Center and High Availability
  3. SD-WAN Branch Onboarding Design: Zero-Touch Provisioning (ZTP) and Cisco Plug-and-Play (PnP)
  4. OMP Protocol, TLOC Locators, and Application-Aware Routing Policies in Cisco SD-WAN
  5. SD-WAN Segmentation (Service VPNs) and Branch LAN-Side Design (VRRP, OSPF, BGP, EIGRP)
  6. SD-WAN Branch High-Availability Design: Dual WAN Edge Routers and TLOC Extension
  7. Intelligent Traffic Engineering in SD-WAN: Designing Application-Aware Routing (AAR) and BFD SLA Policies
  8. Security, Direct Internet Access (DIA), QoS, and Multicast in Cisco SD-WAN Architecture
  9. Design Practicum #6: Designing a Migration from Traditional MPLS/DMVPN to Cisco Catalyst SD-WAN
Section 7. Network Services Design: QoS, Multicast, and Network Management9 topics
  1. Quality of Service Architectural Models: Why DiffServ Prevailed Over IntServ (RSVP) in Enterprise Networks
  2. End-to-End QoS Architecture and Marking: IntServ vs DiffServ, L2 CoS (802.1p), L3 DSCP (CS, EF, AFxy), and Trust Boundary
  3. MQC Queuing, Congestion Avoidance, and Traffic Conditioning: CBWFQ, LLQ Strict Priority, WRED, Policing, and Shaping
  4. Aligning Enterprise QoS with Service Provider Classes and Designing Hierarchical QoS (HQoS)
  5. PIM Multicast Routing (Dense, Sparse, SSM): Reverse Path Forwarding (RPF) Check, (*,G)/(S,G) Trees, and RP Discovery
  6. Selecting a Multicast Deployment Model: PIM Sparse Mode, Source-Specific Multicast (SSM), and BIDIR-PIM
  7. Rendezvous Point (RP) and Inter-Domain Multicast Design: Static, Auto-RP, BSR, Anycast RP, and MSDP
  8. Infrastructure Management Network Design: In-Band vs. Out-of-Band (OOB) and Control/Management Plane Protection
  9. Design Practicum #7: Architecting End-to-End QoS Policies, Multicast Deployment, and OOB Management
Section 8. Automation, Telemetry, and Multicloud Network Design8 topics
  1. YANG Data Modeling Language (RFC 6020 / 7950): Module Syntax (container, list, leaf), pyang Tree, and IETF, OpenConfig, and Native Models
  2. Comparing Programmatic Management Protocols in Design: NETCONF vs. RESTCONF vs. gRPC / gNMI
  3. Model-Driven Telemetry (MDT / YANG-Push): Periodic and On-Change Subscriptions, kvGPB/JSON, gRPC, and Dial-Out vs. Dial-In
  4. WAN and Cloud Deployment Models: On-Premises, IaaS/PaaS/SaaS, MPLS, and Hybrid Interconnects
  5. Designing Public Cloud Connectivity: Internet IPsec vs. Direct Connect / ExpressRoute and MPLS Cloud Access
  6. Designing SD-WAN Cloud Integration: Cisco Cloud OnRamp for SaaS and IaaS / Multicloud Architecture
  7. 300-420 ENSLD Exam Strategy and Master Reference of Cisco Enterprise Design Patterns
  8. Capstone Project: Full Architectural Design of a Global Enterprise Network (HLD + LLD)

Group and individual classes include a teacher, homework review and a certificate. The subscription gives you materials, exercises and progress tracking at your own pace, without teacher feedback.

CCNP Design (300-420 ENSLD): designing Cisco enterprise networks: how to enroll

Fill in the form and we will tell you the start date of the next group, the schedule and payment terms. Or come to a free trial lesson first.

WhatsApp