Troubleshooting and Maintaining Cisco IP Networks (TSHOOT 300-135) is a 120-minute qualifying exam with 15‒25 questions for the Cisco CCNP Routing and Switching certification. The TSHOOT 300-135 exam certifies that the successful candidate has the knowledge and skills necessary to:


  • Plan and perform regular maintenance on complex enterprise routed and switched networks
  • Use technology-based practices and a systematic ITIL-compliant approach to perform network troubleshooting

Course Syllabus

  • Network Principles

    – Use Cisco IOS troubleshooting tools
    – Debug, conditional debug
    – Ping and trace route with extended options
    – Apply troubleshooting methodologies
    – Diagnose the root cause of networking issues (analyze symptoms, identify and describe root cause)
    – Design and implement valid solutions

  • Layer 2 Technologies

    => Managing MAC address table
    – Troubleshoot Err-disable recovery
    – Troubleshoot Layer 2 protocols
    – CDP, LLDP
    – Troubleshoot VLANs
    – Access ports
    – VLAN database
    – Normal, extended VLAN, voice
    – Troubleshoot trunking
    – VTPv1, VTPv2, VTPv3, VTP pruning
    – dot1Q
    – Native VLAN
    – Manual pruning
    – Troubleshoot EtherChannels
    – LACP, PAgP, manual
    – EtherChannel misconfiguration guard
    – Troubleshoot spanning tree
    – PVST+, RPVST +, MST
    – PortFast, BPDUguard, BPDUfilter, Rootguard

  • Layer 3 Technologies

    – Troubleshoot IPv4 addressing and subnetting
    – ARP, DHCP relay and server, DHCP protocol operations
    – Troubleshoot static routing
    – Troubleshoot default routing
    – Troubleshoot administrative distance
    – Troubleshoot passive interfaces
    – Troubleshoot filtering with any protocol
    – Troubleshoot between any routing protocols or routing sources
    – Troubleshoot manual and autosummarization with any routing protocol
    – Troubleshoot loop prevention mechanisms
    – Route tagging, filtering, Split-horizon, Route poisoning
    – Troubleshoot EIGRP neighbor relationship and authentication
    – Troubleshoot loop free path selection, RD, FD, FC, successor, feasible successor
    – Troubleshoot EIGPR operations, Stuck in active, Troubleshoot EIGRP stubs
    – Troubleshoot EIGRP load balancing, Equal cost, Unequal cost
    – Troubleshoot OSPF neighbor relationship and authentication
    – Troubleshoot network types, area types, and router types
    – Point-to-point, multipoint, broadcast, nonbroadcast
    – LSA types, area type: backbone, normal, transit, stub, NSSA, totally stub
    – Internal router, backbone router, ABR, ASBR
    – Virtual link, path preference
    – Troubleshoot BGP peer relationships and authentication
    – Peer group, Active, passive, States and timers
    – Troubleshoot eBGP

  • Infrastructure Security

    – Troubleshoot IOS AAA using local database
    – Troubleshoot device access control
    – Lines (VTY, AUX, console), Management plane protection, Password encryption
    – IPv4 access control lists (standard, extended, time-based)
    – Troubleshoot Network Time Protocol(NTP)
    – NTP master, client, version 3, version 4, NTP authentication
    – DHCP client, IOS DHCP server, DHCP relay, DHCP options
    – Troubleshoot IPv4 Network Address Translation (NAT)
    – Static NAT, Dynamic NAT, PAT

  • VPN Technologies

    4.1 Configure and verify GRE

    4.2 Describe DMVPN (single hub)

    4.3 Describe Easy Virtual Networking (EVN)

  • Infrastructure Security

    2.1 Configure and verify switch security features

    • 2.1.a DHCP snooping
    • 2.1.b IP Source Guard
    • 2.1.c Dynamic ARP inspection
    • 2.1.d Port security
    • 2.1.e Private VLAN
    • 2.1.f Storm control

    2.2 Describe device security using Cisco IOS AAA with TACACS+ and RADIUS

    • 2.2.a AAA with TACACS+ and RADIUS
    • 2.2.b Local privilege authorization fallback