CCNP Enterprise Concentration Exam

CCNP ENARSI (300-410) Training in Kenya

Master advanced enterprise routing and services with CCNP ENARSI. Deep dive into BGP, OSPF, EIGRP, VPN technologies (GRE, IPsec, DMVPN), infrastructure security, and Python automation. The concentration exam for CCNP Enterprise certification.

CCNP ENARSI Exam Details

Exam Price

$400 USD
(Paid directly to Pearson VUE)

Duration

120 minutes
(2 hours)

Questions

90-110 questions
(Includes PBQs)

Passing Score

~800-825
(Scale: 300-1000)

Languages

English, Japanese

Question Types

Multiple choice, drag-and-drop, performance-based questions (PBQs), testlet scenarios

Get the official CCNP ENARSI (300-410) exam topics directly from Cisco:

Download CCNP ENARSI Exam Topics PDF

CCNP ENARSI Course Outline

Our 4-week intensive program covers all CCNP ENARSI domains with hands-on labs on real Cisco equipment. Master advanced routing, VPN technologies, and infrastructure services demanded by Kenya's top employers.

  • Advanced OSPF configuration and troubleshooting
    • Multi-area OSPF design and optimization
    • OSPF stub areas, totally stubby, NSSA
    • OSPF route summarization and filtering
    • OSPF authentication and security
    • OSPF virtual links and special area types
  • Advanced EIGRP configuration and troubleshooting
    • EIGRP named mode configuration
    • EIGRP stub routing and route summarization
    • EIGRP authentication and load balancing
    • EIGRP named ACLs and route maps
  • BGP fundamentals and advanced configuration
    • eBGP and iBGP neighbor relationships
    • BGP path selection and attributes
    • BGP route filtering and prefix lists
    • BGP route maps and policy-based routing
    • BGP confederations and route reflectors
    • BGP community attributes and manipulation
  • Hands-on lab: Configure multi-area OSPF, EIGRP named mode, and BGP with route maps on real Cisco routers

  • GRE tunnel configuration and troubleshooting
    • GRE tunnel setup and verification
    • GRE over IPsec for secure transport
    • GRE multipoint and hub-and-spoke topologies
    • Troubleshooting GRE tunnel issues
  • IPsec VPN fundamentals and configuration
    • IPsec framework: ISAKMP, IKEv1, IKEv2
    • Site-to-site IPsec VPN configuration
    • IPsec transform sets and crypto maps
    • IPsec troubleshooting and debugging
  • DMVPN (Dynamic Multipoint VPN) architecture
    • DMVPN phases 1, 2, and 3
    • NHRP (Next Hop Resolution Protocol) configuration
    • DMVPN hub and spoke configuration
    • DMVPN troubleshooting and optimization
  • FlexVPN framework and configuration
    • FlexVPN architecture and benefits
    • FlexVPN IKEv2 configuration
    • FlexVPN spoke-to-spoke communication
    • FlexVPN integration with routing protocols
  • Hands-on lab: Configure GRE, IPsec site-to-site, DMVPN hub-and-spoke, and FlexVPN on Cisco routers

  • Advanced ACL configuration and optimization
    • Extended ACLs and named ACLs
    • Time-based ACLs
    • ACL optimization and best practices
    • IPv6 ACL configuration
  • NAT (Network Address Translation) advanced configuration
    • Static NAT, dynamic NAT, PAT
    • NAT with routing protocols
    • NAT troubleshooting and verification
    • IPv6 NAT (NAT64, NAT-PT)
  • Multicast routing configuration
    • PIM sparse mode and dense mode
    • PIM sparse-dense mode
    • Rendezvous Point (RP) configuration
    • Source-Specific Multicast (SSM)
    • Multicast troubleshooting
  • Infrastructure security best practices
    • Control plane policing (CoPP)
    • Management plane protection (MPP)
    • Device hardening and secure management
    • AAA with TACACS+ and RADIUS
  • Hands-on lab: Configure advanced ACLs, NAT, PIM multicast, and infrastructure security features

  • Python for network automation
    • Python basics for network engineers
    • Reading and writing Python scripts
    • Using Python libraries (Netmiko, NAPALM)
    • Automating device configuration backup
    • Automating show command output parsing
  • REST APIs and network automation
    • RESTCONF and NETCONF fundamentals
    • Using Postman for API testing
    • Python requests library for API calls
    • Automating routing protocol configuration via APIs
  • Route maps and policy-based routing automation
    • Advanced route map configuration
    • Policy-based routing (PBR)
    • Automating route map deployment with Python
    • Troubleshooting route maps and PBR
  • Network automation best practices
    • Configuration management with Ansible
    • Version control for network configs (Git)
    • Network automation workflows
    • Testing and validation automation
  • Capstone project: Build Python automation scripts for BGP, OSPF, and VPN deployment
  • ENARSI exam preparation: practice questions, exam strategies, time management
  • Hands-on lab: Write Python scripts to automate routing configuration, use RESTCONF APIs, parse routing tables

Your Pathway to Senior Network Engineer

CCNP ENARSI is the most popular concentration exam for CCNP Enterprise. Combined with ENCOR, you'll unlock elite networking roles at Kenya's top organizations:

CCNP ENCOR

Complete the core exam first.

Prerequisite
CCNP ENARSI

Master advanced routing and VPNs.

Current Course
Senior Network Engineer

Lead enterprise network design.

First Role
CCIE Enterprise

Pursue the highest Cisco certification.

Ultimate Goal

Why Choose Sama Tech for CCNP ENARSI Training?

98% Pass Rate

Our proven methodology and expert guidance ensure you pass the CCNP ENARSI exam on your first attempt.

Real Cisco Equipment

Practice on actual Cisco routers with advanced routing, VPN, and automation capabilities.

Python Automation

Hands-on Python labs for automating routing protocols and VPN deployment.

Bundle & Save 15%

Take ENCOR + ENARSI together and save 15% on your CCNP Enterprise certification journey.


Enroll in CCNP ENARSI Training

4 Weeks • Advanced Level

KES 35,000

Bundle with ENCOR & Save 15%


  • Complete CCNP ENARSI (300-410) Exam Preparation
  • 40+ Hours of Hands-On Labs on Real Cisco Equipment
  • GNS3 & EVE-NG Virtual Lab Environment Access
  • Expert Instruction by CCNP Guru Certified Trainers
  • Advanced BGP, OSPF, EIGRP Configuration
  • VPN Technologies: GRE, IPsec, DMVPN, FlexVPN
  • Python Automation for Network Engineers
  • Flexible Schedules (Evening & Weekend)
  • Bundle Discount: ENCOR + ENARSI = KES 68,000 (Save KES 12,000)

M-Pesa installments available 7-day money-back guarantee

CCNP ENARSI FAQs

Common questions about the CCNP ENARSI (300-410) course at Sama Tech Institute Kenya.

While Cisco doesn't require you to pass ENCOR before taking ENARSI, we strongly recommend completing ENCOR first. Here's why:
  • Foundation knowledge: ENCOR covers core enterprise networking concepts that ENARSI builds upon. Without this foundation, ENARSI topics will be much more difficult.
  • Logical progression: ENCOR teaches you the "what" and "why" of enterprise networking, while ENARSI teaches you the advanced "how."
  • Better exam performance: Students who complete ENCOR first have a 98% pass rate on ENARSI, compared to 75% for those who skip ENCOR.
  • Bundle discount: When you take both courses together, you save 15% (KES 12,000 savings).
Our recommendation: Take ENCOR first (6 weeks), then immediately follow with ENARSI (4 weeks). You'll earn your CCNP Enterprise certification in just 10 weeks!

CCNP Enterprise requires one core exam (ENCOR) plus one concentration exam. You can choose from several concentration exams:
  • ENARSI (300-410): Advanced routing and services. Focuses on BGP, OSPF, EIGRP, VPNs, and automation. Most popular choice for network engineers.
  • SD-WAN (300-415): Software-defined WAN implementation. Focuses on Cisco SD-WAN architecture and deployment.
  • ENSLDWI (300-420): Enterprise network design. Focuses on designing enterprise networks.
  • ENWLSD (300-425): Enterprise wireless design. Focuses on designing wireless networks.
  • ENWLSI (300-430): Enterprise wireless implementation. Focuses on implementing wireless networks.
  • SPAUTO (300-435): Service provider automation. Focuses on automation for service providers.
Why ENARSI is the best choice:
  • Most relevant to Kenyan job market (Safaricom, banks, ISPs all need advanced routing skills)
  • Highest salary potential (KES 200,000 - 450,000 for senior roles)
  • Best foundation for CCIE Enterprise
  • Most comprehensive coverage of enterprise networking

ENARSI includes a significant automation component (approximately 15-20% of the exam). You should be comfortable with:
  • Python basics: Variables, data types, lists, dictionaries, functions, loops
  • Reading code: Understanding what Python scripts do
  • Network automation libraries: Netmiko, NAPALM basics
  • APIs: RESTCONF, NETCONF concepts
  • Data formats: JSON, XML, YAML parsing
  • Practical automation: Writing scripts to automate routing configuration
In our course, we include dedicated Python labs specifically designed for network engineers. You'll learn to:
  • Automate BGP, OSPF, and EIGRP configuration using Python
  • Parse routing tables and extract specific information
  • Use RESTCONF APIs to configure routing protocols
  • Write scripts to backup and verify configurations
No prior Python experience is required—we start from the basics and focus specifically on network automation use cases. If you want to dive deeper into Python, we also offer our Python Programming course which pairs perfectly with CCNP.

ENARSI covers comprehensive VPN technologies that are critical for enterprise networks in Kenya:
  • GRE (Generic Routing Encapsulation):
    • GRE tunnel configuration and verification
    • GRE over IPsec for secure transport
    • GRE multipoint and hub-and-spoke topologies
    • Troubleshooting GRE tunnel issues
  • IPsec VPN:
    • Site-to-site IPsec VPN configuration
    • IKEv1 and IKEv2
    • IPsec transform sets and crypto maps
    • IPsec troubleshooting and debugging
  • DMVPN (Dynamic Multipoint VPN):
    • DMVPN phases 1, 2, and 3
    • NHRP (Next Hop Resolution Protocol)
    • DMVPN hub and spoke configuration
    • DMVPN troubleshooting and optimization
  • FlexVPN:
    • FlexVPN architecture and benefits
    • FlexVPN IKEv2 configuration
    • FlexVPN spoke-to-spoke communication
    • FlexVPN integration with routing protocols
These VPN technologies are essential for Kenyan organizations with multiple branches (banks, retail chains, government agencies). You'll get hands-on experience configuring all of these on real Cisco routers.

The bundle discount is simple and straightforward:
  • Individual course prices:
    • CCNP ENCOR: KES 45,000
    • CCNP ENARSI: KES 35,000
    • Total if purchased separately: KES 80,000
  • Bundle price: KES 68,000 (You save KES 12,000 - that's 15% off!)
How to get the bundle discount:
  • Enroll in both courses at the same time, OR
  • Enroll in ENCOR first, then enroll in ENARSI within 30 days
What's included in the bundle:
  • All course materials and lab access for both courses
  • 10 weeks of comprehensive training (6 weeks ENCOR + 4 weeks ENARSI)
  • Priority instructor support
  • Free access to our Hands-On Labs Bundle (worth KES 15,000)
  • Career support: resume review, LinkedIn optimization, mock interviews
The bundle is the most cost-effective way to earn your CCNP Enterprise certification. Contact us on WhatsApp to enroll in the bundle!

CCNP ENARSI (combined with ENCOR) qualifies you for senior networking roles in Kenya:
  • Senior Network Engineer: Design and implement enterprise networks with advanced routing. Salary: KES 200,000 - 350,000.
  • Routing & Switching Specialist: Focus on advanced routing protocols and optimization. Salary: KES 180,000 - 320,000.
  • VPN & Security Engineer: Specialize in VPN technologies and secure connectivity. Salary: KES 190,000 - 340,000.
  • Network Automation Engineer: Combine routing expertise with Python automation. Salary: KES 220,000 - 380,000.
  • ISP Network Engineer: Work for internet service providers on BGP and advanced routing. Salary: KES 200,000 - 360,000.
  • Network Consultant: Advise enterprises on advanced routing solutions. Salary: KES 250,000 - 450,000.
Top employers hiring CCNP ENARSI-certified engineers in Kenya:
  • ISPs: Safaricom, Airtel Kenya, Liquid Intelligent Technologies, Wananchi Group, Jamii Telecom
  • Banking: Equity Bank, KCB, NCBA, Co-op Bank (all have complex multi-site networks)
  • Government: ICT Authority, Kenya Revenue Authority, National Government Constituencies Development Fund
  • Multinationals: Microsoft, Google, Cisco Partner Companies
  • Consulting: Dimension Data, EY, PwC, Deloitte (network consulting practices)
ENARSI is particularly valuable because it demonstrates expertise in the most critical skills for enterprise networks: advanced routing and VPN technologies.

Ready to Master Advanced Routing?

Join Kenya's elite network engineers working at Safaricom, top ISPs, and multinational corporations. Master BGP, OSPF, VPNs, and Python automation with expert instruction.

Bundle with ENCOR & save 15% M-Pesa installments 98% pass rate