Course Outline:
Module 1: Industrial Networking Concepts and Components
- IT/OT convergence and the Converged Plantwide Ethernet (CPwE) reference architecture
- Cisco Design Zone and Cisco Validated Designs for industrial networks
- Contrasting enterprise and industrial environments and design goals
- IACS network design requirements: industrial characteristics, interconnectivity and interoperability, real-time determinism and performance, availability, security, manageability, and scalability
- OSI and TCP/IP models and key protocols by layer
Module 2: Industrial Switching, VLANs, and Trunking
- Cisco Industrial Ethernet switch portfolio (IE2000, IE3000, IE3400, IE3400H), Catalyst 9300 core, and Rockwell Automation Stratix switches
- VLAN creation and assignment using the CLI and the Cisco IE3400 WebUI
- 802.1Q trunk configuration and verification
- Smartports macros: built-in and custom macros for rapid, consistent port configuration
- Network discovery with CDP and LLDP
Module 3: Network Resiliency and Availability
- Redundancy fundamentals and topology recommendations
- EtherChannel link aggregation with LACP and PAgP, including load balancing
- Resilient Ethernet Protocol (REP): administrative VLAN, edge and segment ports, and topology verification
- Advanced REP features: VLAN load balancing and SNMP MIB monitoring
Module 4: Layer 2 Services: Storm Control, QoS, and Layer 2 NAT
- Storm control for broadcast, multicast, and unicast suppression
- Quality of Service: classification, marking, queuing, and policing for industrial traffic
- Layer 2 NAT for legacy device integration and migration
Module 5: Layer 3 Connectivity and Routing
- Switch Virtual Interfaces (SVIs) and inter-VLAN routing
- IP routing and static routes
- VRF-based isolation
- Verifying Layer 3 connectivity and the MAC address table
Module 6: Industrial Protocols: EtherNet/IP and PROFINET
- Common Industrial Protocol (CIP) and the EtherNet/IP producer-consumer model
- Configuring and troubleshooting EtherNet/IP on Cisco IE and Stratix switches
- PROFINET real-time Ethernet fundamentals
- Configuring and troubleshooting PROFINET on Cisco Industrial Ethernet devices
- Enabling industrial protocols on the Cisco IE3400
Module 7: Industrial Network Security
- Common threats in industrial environments
- Port security and DHCP snooping
- Access control lists for inbound and outbound traffic
- Authentication, Authorization, and Accounting (AAA) and secure management with SSH
- VLAN segmentation
Module 8: Industrial Wireless
- Wireless challenges in industrial RF environments: EMI, signal obstruction, and reliability
- Cisco industrial wireless solutions: industrial-grade access points, mesh, and redundancy
- Wireless security for industrial access
Module 9: Industrial Routing and Edge Compute with IR1835 and Cisco IOx
- IR1835 industrial router initial setup, SSH access, and WebUI
- VLAN, SVI, and VRF configuration on the IR1835
- Cisco IOx application hosting and Virtual Port Group interfaces
- Deploying Cisco Edge Intelligence and Cisco Secure Equipment Access, including IKEv2/IPsec VPN
Module 10: Troubleshooting and Observability
- Structured troubleshooting methodology and Cisco IOS show and debug tools
- Layer 1, 2, and 3 troubleshooting
- SPAN sessions and packet capture with Wireshark
- Device health diagnostics: CPU, memory, power, and temperature
- Troubleshooting REP segment failures
- Monitoring and troubleshooting Cisco IOx applications
Lab Outline:
Part 1: Industrial Switch Configuration and Troubleshooting
- Lab 1: Connect to the Remote Lab Environment
- Lab 2: Configure 802.1Q Trunks
- Lab 3: Configure and Apply Smartports Macros
- Lab 4: Configure and Apply Custom Smartports Macros
- Lab 5: Configure and Apply an EtherChannel
- Lab 6: Configure REP (Resilient Ethernet Protocol)
- Lab 7: Configure REP Features
- Lab 8: Configure and Verify Storm Control
- Lab 9: Configure QoS Settings
- Lab 10: Use Cisco IOS Software Troubleshooting Tools
- Lab 11: Verify Layer 3 Device Connectivity
- Lab 12: Verify Interswitch Connectivity
- Lab 13: Troubleshoot a Broken REP Segment
- Lab 14: Perform a Packet Capture
- Lab 15: Configure CIP on Industrial Switches
- Lab 16: Configure Port Security Mechanisms
- Lab 17: Configure Access Control List
Part 2: Advanced Switch Configuration
- Lab 18: Get Started with the Cisco IE3400 WebUI
- Lab 19: Configure VLANs on the Cisco IE3400 Switch
- Lab 20: Configure a Cisco Switch and Assign VLANs Using Basic CLI Commands
- Lab 21: Explore Network Discovery and Datalink Layer Information
- Lab 22: Configure and Test Layer 3 Interfaces and Routing
- Lab 23: Explore Device Health
- Lab 24: Implement Layer 2 NAT
- Lab 25: Enable Industrial Protocols on the IE3400 Switch
Part 3: Advanced Router Configuration
- Lab 26: Initial Device Setup and Advanced IR1835 Configuration
- Lab 27: Deploy Applications Using Cisco IOx
- Lab 28: Monitor and Troubleshoot Cisco IOx Applications