AI systems are rapidly transforming how organizations operate, but they also introduce new and evolving security risks. This learning path focuses on how Cisco AI Defense enables organizations to secure AI systems across their entire lifecycle. You will develop an understanding of common AI vulnerabilities and how they impact modern environments, while exploring how Cisco AI Defense provides visibility into AI assets, validates models against adversarial risks, and enforces real-time protections through runtime guardrails. By the end, you will have a clear understanding of how Cisco AI Defense delivers visibility, validation, and runtime protection to help secure AI at scale.

The user of this learning path will learn the components of RoCE and why it is essential for clean, fast, and reliable AI/ML compute communication.

This Learning Path is designed to guide users through the many possible Cisco SD-WAN (Viptela) integrations with other vendors and technologies. After these videos, you will understand how to integrate Cisco SD-WAN with carrier-neutral facility providers, public cloud platforms, and some of the most popular security service edge (SSE) vendors.

In this learning path, we explore the software based orechestration and management of the Cisco Secure AI Factory data center. We explore Cisco Intersight, a SaaS-baased management platform, which allows a data center engineer to orchestrate and automate physical and virtual infrastructure. We also have a lab around the Cisco Nexus Dashboard Fabric Controller.

This learning path is a comprehensive, progression-driven curriculum designed to take network engineers from core Layer 2/3 fundamentals all the way to architect-level mastery of VXLAN EVPN — one of the most critical technologies underpinning modern data center and cloud networking. Spanning multiple structured modules, the path is carefully sequenced to build knowledge layer by layer, ensuring that each concept is grounded in what came before and every advanced topic is supported by a solid technical foundation. The journey begins with a deliberate refresher of networking fundamentals — Ethernet, VLANs, IP routing, and ARP — not as a review for its own sake, but to reframe those concepts through the lens of scalability challenges that VXLAN EVPN was built to solve. From there, learners explore the evolution of data center design, the mechanics of overlay networking, and the inner workings of VXLAN itself, before advancing into the EVPN control plane, distributed routing models, multi-tenancy, and high-availability designs. Throughout the path, the curriculum maintains a strong emphasis on real-world applicability and multi-vendor relevance, with content aligned to production deployments on Cisco NX-OS, Arista EOS, and Juniper Junos platforms. Learners will not only understand how VXLAN EVPN works in theory, but will develop the design intuition to architect, validate, and defend fabric deployments in complex, large-scale environments. Advanced modules extend the curriculum into automation and programmability, multi-site and inter-DC architectures, hybrid cloud integration, and emerging trends such as SRv6 and AI-driven network operations. This learning path is built for engineers at the CCNA level and above who are ready to move beyond traditional campus and enterprise networking into modern data center and cloud infrastructure. It is equally valuable for seasoned professionals seeking to formalize and deepen their VXLAN EVPN knowledge, close vendor-specific gaps, or transition into architecture and design roles. Whether you are preparing for a professional certification, building a lab curriculum, or enabling a team of engineers, this path provides the structure, depth, and practical grounding to make that outcome a reality. Look for part 2 of this series, where we dive into advanced VXLAN techniques such as flood and learn, MP-BGP EVPN, multi-tenancy, and troubleshooting.

This Learning Path is designed to Discover and Experience Cisco (Viptela) SD-WAN. The lab environment that supports this Learning Path is virtual and dedicated to each individual consumer.

Before a core network can provide advanced services and traffic engineering, it must first establish basic transport connectivity between its nodes. In this course, you will learn how interior routing protocols are used to establish dynamic routing within the core, how MPLS technology is used to enhance packet transport across the underlay, and how Segment Routing is changing the way we think about transport paths. In each module you will watch a brief video describing the underlying technology and then walk through a hands-on lab to dive deeper into the relevant protocols and configurations that make underlay routing work.

This learning path provides a comprehensive introduction to Cisco Catalyst Center, guiding network professionals through the platform's core features and advanced capabilities. Learners will start by understanding the hierarchical design model and how it supports scalable management and policy deployment. The course covers device discovery, inventory management, and provisioning workflows, enabling consistent network configuration and automation. It also addresses software image upgrades, lifecycle management, including End-of-Life (EoX) insights, and essential system administration tasks. A significant portion is dedicated to Software-Defined Access (SDA) fabric design, including control and border nodes, as well as implementing secure, policy-driven segmentation through micro-segmentation using Security Group Tags (SGTs). By the end, participants will be equipped to deploy, operate, and optimize Cisco Catalyst Center in modern enterprise environments.

Embark on a comprehensive exploration of the Cisco Catalyst SD-WAN Multi-Region Fabric architecture with this all-encompassing learning path that includes articles, videos, and hands-on lab experiences, offering a deep dive into the essential features of the latest Cisco SD-WAN architecture.

Cisco ACI is a policy-driven CLOS, or Spine-Leaf, switching fabric that utilizes Layer 3 ECMP routing in the underlay and VXLAN encapsulation in the overlay to transport Layer 2 and Layer 3 traffic both east-west within the fabric and north-south between the fabric and external networks. ACI consists of the Application Policy Infrastructure Controller (APIC), which provides centralized policy, automation, and fabric management capabilities. Leaf switches function as Top-of-Rack (ToR) switches that provide connectivity to servers, storage, and external networks, while spine switches provide high-speed Layer 3 ECMP connectivity between all leaf switches. An ACI fabric can be scaled horizontally by adding additional leaf switches, connecting them to the spine layer, and registering them with the fabric. Cisco ACI was architected to operate as a distributed "single logical system," similar to a modular chassis-based architecture, where APICs provide centralized policy and control functions, spine switches provide the high-speed fabric core, and leaf switches provide endpoint connectivity. This distributed architecture enables organizations to decouple these functions from the constraints of a physical chassis and deploy them anywhere within the data center environment. Cisco ACI further extends this architecture through remote leaf, multi-pod, and multi-site deployments. Remote leaf allows organizations to extend policy and connectivity to remote locations while maintaining centralized operational control. Multi-pod enables geographically separated pods to operate as a single fabric, while multi-site supports independent ACI fabrics interconnected across multiple data centers or cloud environments. With Cisco Nexus Dashboard and Nexus Dashboard Orchestrator (NDO) 4.x, organizations can centrally manage policy, orchestration, analytics, and day-two operations across multiple ACI fabrics and cloud-integrated environments from a unified operational platform. Nexus Dashboard 4.x enhances scalability, resiliency, automation, and operational visibility while integrating advanced analytics, AI-driven assurance, telemetry, and cloud-native application support. This enables consistent policy enforcement, simplified operations, and unified visibility across on-premises data centers, edge environments, and public cloud deployments.

This learning path explores the use of monitoring your Cisco SD-WAN fabric with SD-WAN Analytics and ThousandEyes, showcasing their unique methods of providing visibility into network and application performance. As a WAN engineer, monitoring and keeping an eye on the health of your network can be a constant challenge, but luckily network monitoring capabilities have come a long way. In today's complex network environments, having robust monitoring capabilities is essential for network engineers to understand and troubleshoot issues effectively. SD-WAN Analytics and ThousandEyes are powerful tools that provide varying levels of network visibility, each offering unique perspectives and usage scenarios. Understanding the capabilities of each helps network engineers identify the right tool for their specific needs, ensuring optimal network performance and reliability.

In this comprehensive course, you'll learn how to implement Segment Routing Traffic Engineering (SR-TE) in your network, with and without Flex-Algo. This approach utilizes SR-MPLS to optimize network performance, reduce operational complexity, and enhance scalability. Through a combination of videos, articles, and hands-on lab exercises, you'll gain a deep understanding of the Segment Routing architecture and its key components. You'll also learn how to configure and troubleshoot Segment Routing policies and topologies using real-world scenarios and best practices. This course is ideal for network engineers, administrators, and architects seeking to expand their knowledge and skills in networking, particularly in the field of Segment Routing. Basic knowledge of networking technologies is recommended.