CCNP ENARSI 300-410
Course Description
300-410 ENARSI (Implementing Cisco Enterprise Advanced Routing and Services) is the routing-focused concentration exam for CCNP Enterprise. This course covers the topics of the current version of the exam, ENARSI v1.1. We cover EIGRP, OSPF, and BGP in detail, plus route summarization, filtering, redistribution, and policy-based routing. You’ll also learn VRF-lite, MPLS Layer 3 VPNs, DMVPN, infrastructure security, and services like DHCP, SNMP, syslog, and IP SLA. Many ENARSI topics are about troubleshooting, so we don’t stop at the configuration: we also show you how to find and fix problems with neighbor adjacencies, route advertisement, and redistribution.
Course Highlights
In this course you will learn:
- Route summarization, route filtering with distribute-lists, prefix-lists, and route-maps, redistribution, and policy-based routing.
- EIGRP, from the basics to named mode, stub routing, unequal cost load balancing, and stuck in active.
- OSPF areas, LSA types, network types, virtual links, and OSPFv3.
- BGP neighbors, path selection, communities, filtering, route reflectors, and MP-BGP.
- How to troubleshoot neighbor adjacencies, route advertisement, and redistribution for EIGRP, OSPF, and BGP.
- VRF-lite, MPLS, and MPLS Layer 3 VPNs.
- DMVPN phase 1, 2, and 3 with EIGRP, OSPF, and BGP, protected with IPsec.
- Infrastructure security: AAA, access-lists, uRPF, CoPP, and IPv6 first hop security.
- Infrastructure services: device management, SNMP, syslog, DHCP, IP SLA, and NetFlow.
Presented to you by instructor Rene Molenaar, CCIE #41726
Course at a glance
- 200 lessons in 7 units, plus a practice exam.
- Exam: 300-410 ENARSI v1.1 (Implementing Cisco Enterprise Advanced Routing and Services), a concentration exam for CCNP Enterprise.
- Format: self-paced lessons with Cisco IOS configurations, troubleshooting scenarios, packet captures, and video.
- Last updated: October 2026.
About the 300-410 ENARSI exam
ENARSI tests your knowledge of advanced routing and the services that run on enterprise routers. It’s a 90-minute exam, and the current version is v1.1. Here are the facts from Cisco:
| Exam code and name | 300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and Services |
| Version | v1.1 |
| Duration | 90 minutes |
| Price | US$300 (or Cisco Learning Credits) |
| Languages | English and Japanese |
| Question types | Performance-based, multiple choice, and drag-and-drop |
| Results | Pass or fail, typically online within 48 hours |
| Earns | Cisco Certified Specialist – Enterprise Advanced Infrastructure Implementation |
| Counts toward | CCNP Enterprise, as the concentration exam |
| Recertification | Certifications are valid for 3 years. Passing ENARSI can be used to recertify. |
ENARSI v1.1 exam topics and weights
| Domain | Weight |
|---|---|
| 1.0 Layer 3 Technologies | 35% |
| 2.0 VPN Technologies | 20% |
| 3.0 Infrastructure Security | 20% |
| 4.0 Infrastructure Services | 25% |
How ENARSI fits in: to earn CCNP Enterprise, you need two exams: the 350-401 ENCOR core exam and one concentration exam. ENARSI is the routing-focused concentration exam and a common choice for network engineers who work with routers and WANs.
Requirements
- CCNA-level knowledge of IP addressing, subnetting, and routing.
- Experience with the Cisco IOS command line.
- ENCOR-level knowledge of OSPF, EIGRP, and BGP helps, but we explain every topic from the start.
Course Schedule
What is the CCNP ENARSI exam?
ENARSI is the 300-410 exam, “Implementing Cisco Enterprise Advanced Routing and Services”. It’s one of the concentration exams for CCNP Enterprise. Where the ENCOR core exam covers a broad range of enterprise topics, ENARSI goes deeper into routing: EIGRP, OSPF, BGP, redistribution, route filtering, and policy-based routing.
Routing is only part of the exam. ENARSI also covers VPN technologies like MPLS Layer 3 VPNs and DMVPN, infrastructure security like AAA, access-lists, uRPF, and CoPP, and services like SNMP, syslog, DHCP, IP SLA, and NetFlow. Many exam topics start with the word “troubleshoot”, so you need to know more than the configuration. You need to know what the show commands tell you and why something doesn’t work.
Who takes ENARSI? Network engineers who work on enterprise routers and WANs, and anyone who wants the CCNP Enterprise certification. Passing ENARSI on its own earns you the Cisco Certified Specialist – Enterprise Advanced Infrastructure Implementation certification. Together with ENCOR, it earns you CCNP Enterprise.
ENARSI Learning Roadmap
This roadmap follows the ENARSI exam domains. Layer 3 Technologies is the largest domain, so we split it into routing concepts, EIGRP, OSPF, and BGP. Each topic has a short explanation and links to the key lessons; the course schedule above has the complete list.
Layer 3 Technologies (35%): Routing Concepts and Redistribution
Before we look at the routing protocols themselves, we cover the tools you use with all of them. Summarization makes your routing tables smaller, and distribute-lists, prefix-lists, and route-maps let you filter and change routes. When you run more than one routing protocol, redistribution exchanges routes between them, but metrics and administrative distance can cause sub-optimal routing and routing loops. With policy-based routing, you forward traffic based on more than just the destination address, and BFD detects a failed neighbor in milliseconds.
Layer 3 Technologies (35%): EIGRP
EIGRP is Cisco’s advanced distance vector protocol. We start with neighbor adjacencies, the topology table, and a basic configuration, then move on to named mode, wide metrics, and authentication. In the advanced lessons, you’ll learn how DUAL selects successors and feasible successors, how unequal cost load balancing works with the variance command, and how stub routing limits queries. We finish with troubleshooting neighbor adjacencies and stuck in active routes.
Layer 3 Technologies (35%): OSPF
OSPF is a link-state protocol: routers flood LSAs so that every router in an area has the same LSDB. You’ll learn the different LSA types, OSPF path selection, and how stub and NSSA areas reduce the number of LSAs. OSPF network types decide whether there is a DR election and which next hop you see, which matters on DMVPN. We also cover virtual links, authentication, troubleshooting neighbor adjacencies, and OSPFv3 for IPv6 and IPv4.
Layer 3 Technologies (35%): BGP
BGP exchanges routes between autonomous systems, and you configure every neighbor yourself. We start with eBGP and iBGP, how to advertise networks, and how to read the BGP table. Then we look at the attributes BGP uses to select the best path, and how to filter routes with AS path filters and communities. Route reflectors and confederations solve the iBGP full-mesh problem, and MP-BGP carries IPv6 and VPN routes. When a neighbor doesn’t come up, you’ll learn how to troubleshoot it.
VPN Technologies (20%): VRF and MPLS
A VRF gives you multiple routing tables on a single router, which keeps the routes of different customers or departments apart. VRF-lite does this without MPLS, and route leaking shares routes between VRFs when you need to. Service providers use MPLS with LDP to switch packets based on labels, and MPLS Layer 3 VPNs use MP-BGP to carry customer routes between PE routers; we show you the full configuration step by step. We also cover the PE-CE routing protocols and how to run IPv6 over an IPv4 MPLS core with 6PE and 6VPE.
VPN Technologies (20%): DMVPN
DMVPN builds hub-and-spoke VPNs with multipoint GRE and NHRP, so you don’t have to configure a tunnel between every pair of routers. There are three phases (phase 1, phase 2, and phase 3), and each one handles spoke-to-spoke traffic differently. For each phase, we show you how to run EIGRP, OSPF, and BGP over the tunnels, since every routing protocol has its own requirements. A dual hub dual cloud design adds redundancy. IPsec isn’t required for DMVPN, but we run DMVPN over IPsec to encrypt the traffic.
Infrastructure Security (20%)
This domain is about protecting the router itself and the traffic that goes through it. AAA controls who can log in with authentication and which commands they can run with command authorization. Extended access-lists filter IPv4 traffic, IPv6 access-lists do the same for IPv6, and uRPF drops packets with spoofed source addresses. CoPP and Management Plane Protection protect the control and management plane, and IPv6 first hop security features like RA guard and DHCPv6 guard stop rogue devices on the LAN.
Infrastructure Services (25%)
The last domain covers the services you use to manage and monitor your routers. You’ll learn how to secure device access with SSH, and how to use SNMPv3 and syslog to monitor your network. DHCP is a common source of problems, so we cover the server, relay agent, and DHCPv6, and how to troubleshoot them. With IP SLA, NetFlow, and conditional debugging, you can measure performance and find problems without overloading the router.
Frequently Asked Questions
It depends on your background. ENCOR covers more topics, but ENARSI goes deeper into routing protocols like EIGRP, OSPF, and BGP, and many of its topics are about troubleshooting. If you work with routers every day, ENARSI will feel familiar; if you don’t, plan extra time for redistribution, BGP, and DMVPN. Start with our IP routing lessons.
ENCOR is the core exam that every CCNP Enterprise candidate takes, and it covers a broad range of topics, from switching and routing to SD-Access, security, and automation and AI. ENARSI is a concentration exam that goes much deeper into routing and services, like OSPF, EIGRP, BGP, redistribution, DMVPN, and troubleshooting. To earn CCNP Enterprise, you pass ENCOR plus one concentration exam, such as ENARSI.
Most people pick ENARSI, because it builds directly on the routing topics in ENCOR and covers skills you use on almost every enterprise network. If your job is focused on something else, like SD-WAN, a concentration that matches it makes more sense, for example the SD-WAN exam that pairs with our Cisco SD-WAN course. Passing ENARSI on its own also earns you a Cisco Certified Specialist certification.
You need both exams for CCNP Enterprise, but Cisco doesn’t set a required order. Passing ENARSI on its own already earns you the Cisco Certified Specialist – Enterprise Advanced Infrastructure Implementation certification.
As a rule of thumb, plan on about 150 to 200 hours, depending on your background knowledge and experience. ENARSI covers fewer topics than ENCOR, and you’ve already studied OSPF, EIGRP, and BGP, but it goes much deeper: redistribution, BGP, DMVPN, and troubleshooting take practice, not just reading. If you don’t work with routers every day, plan extra lab time for those topics.
Expect lots of troubleshooting. Many questions give you a topology and show command output and ask you to find why something doesn’t work, and the exam can also include performance-based questions where you work on the CLI. Time management matters, so get comfortable reading show commands quickly. Practice with troubleshooting BGP neighbor adjacencies.
You don’t strictly need one, but it makes a big difference. ENARSI is about troubleshooting, and the best way to learn that is to break things in a lab and fix them yourself. An emulator with Cisco IOS images is enough for almost every topic, including redistribution, DMVPN, and MPLS.
The 300-410 ENARSI exam costs US$300, or you can pay with Cisco Learning Credits. It takes 90 minutes, which is 30 minutes shorter than the ENCOR core exam.