
CCIE Enterprise Infrastructure
The CCIE Enterprise Infrastructure certification will help you to position yourself as a technical leader in the ever-changing landscape of networking technologies. The certification covers core technology areas and validates your end-to-end lifecycle skills in complex enterprise networks from planning and design to operating and optimizing. Among the industry’s most widely recognized and respected certifications, CCIE tells the world in no uncertain terms that you know what you’re talking about. In addition, completing a CCIE qualifying exam earns you a Cisco® Specialist certification, so you get recognized for your accomplishments along the way.

CCIE Enterprise Infrastructure
The CCIE Enterprise Infrastructure certification will help you to position yourself as a technical leader in the ever-changing landscape of networking technologies. The certification covers core technology areas and validates your end-to-end lifecycle skills in complex enterprise networks from planning and design to operating and optimizing. Among the industry’s most widely recognized and respected certifications, CCIE tells the world in no uncertain terms that you know what you’re talking about. In addition, completing a CCIE qualifying exam earns you a Cisco® Specialist certification, so you get recognized for your accomplishments along the way.
Course Introduction
Software, networking, and infrastructure grow more and more interconnected every day. Applications deliver exciting new experiences, and with intent-based networking, organizations can take advantage of automation to scale and secure their networking infrastructure. With CCIE Enterprise Infrastructure certification, your opportunities to help maximize that potential are boundless. Just ask hiring managers: 71% of them say that certifications increase their confidence in an applicant’s abilities.
The CCIE Enterprise Infrastructure certification will help you to position yourself as a technical leader in the ever-changing landscape of networking technologies. The certification covers core technology areas and validates your end-to-end lifecycle skills in complex enterprise networks from planning and design to operating and optimizing. Among the industry’s most widely recognized and respected certifications, CCIE tells the world in no uncertain terms that you know what you’re talking about. In addition, completing a CCIE qualifying exam earns you a Cisco® Specialist certification, so you get recognized for your accomplishments along the way.
This 90-hour, instructor led course is customized to provide candidates with extensive knowledge to accomplish their day to day jobs. The key to success is based on the program’s objectives as follows:
- Course contents are based on course outlines defined by Cisco.
- Dedicated Monitoring to evaluate and report candidates progress
- Extensive hands-on lab exercises
- Industry acclaimed, experienced and certified instructors
Course Highlights
- Project manager can be assigned to track candidates’ performance
- Curriculum based on course outlines defined by Cisco.
- This Instructor-led classroom course is designed with an aim to build theoretical knowledge supplemented by ample hands-on lab exercises
- Facility of Lab on cloud available (based on booking)
- Courseware includes reference material to maximize learning.
- Assignments and test to ensure concept absorption.
- Courseware includes reference material to maximize learning.
- Assignments and test to ensure concept absorption.
- Repeating of lectures allowed (based on seat availability)
Course Objectives
- Combine your technical expertise with design skills to position your organization for digital transformation
- Distinguish yourself as the best of the best from deploying to operating and optimizing complex technologies
- Add networking automation and network programmability skills to your areas of expertise
- Earn a Specialist certification for passing the qualifying exam
Course Topics
Network Infrastructure
Switched campus
- Switch administration
- Managing MAC address table
- Errdisable recovery
- L2 MTU
- Layer 2 protocols
- CDP, LLDP
- UDLD
- VLAN technologies
- Access ports
- Trunk ports (802.1Q)
- Native VLAN
- Manual VLAN pruning
- VLAN database
- Normal range and extended range VLANs
- Voice VLAN
- VTP
- EtherChannel
- LACP, static
- Layer 2, Layer 3
- Load balancing
- EtherChannel Misconfiguration Guard
- Spanning Tree Protocol
- PVST+, Rapid PVST+, MST
- Switch priority, port priority, path cost, STP timers
- PortFast, BPDU Guard, BPDU Filter
- Loop Guard, Root Guard
Routing Concepts
- Administrative distance
- VRF-lite
- Static routing
- Policy Based Routing
- VRF-aware routing with any routing protocol
- Route filtering with any routing protocol
- Manual summarization with any routing protocol
- Redistribution between any pair of routing protocols
- Routing protocol authentication
- Bidirectional Forwarding Detection
EIGRP
- Adjacencies
- Best path selection
- RD, FD, FC, successor, feasible successor
- Classic Metrics and Wide Metrics
- Operations
- General operations
- Topology table
- Packet types
- Stuck In Active
- Graceful shutdown
- EIGRP load balancing
- Equal-cost
- Unequal-cost
- Add-path
- EIGRP Named Mode
- Optimization, convergence and scalability
- Fast convergence requirements
- Query propagation boundaries
- IP FRR (single hop)
- Leak-map with summary routes
- EIGRP stub with leak map
OSPF (v2 and v3)
- Adjacencies
- Network types, area types
- Path preference
- Operations
- General operations
- Graceful shutdown
- GTSM (Generic TTL Security Mechanism)
- Optimization, convergence and scalability
- Metrics
- LSA throttling, SPF tuning, fast hello
- LSA propagation control (area types)
- Stub router
- Loop-free alternate
- Prefix suppression
BGP
- IBGP and EBGP peer relationships
- Peer-group/update-group, template
- Active, passive
- Timers
- Dynamic neighbors
- 4-byte AS numbers
- Private AS
- Path selection
- Attributes
- Best path selection algorithm
- Load balancing
- Routing policies
- Attribute manipulation
- Conditional advertisement
- Outbound Route Filtering
- Standard and extended communities
- Multi-homing
- AS path manipulations
- local-as, allowas-in, remove-private-as
- Prepend
- Regexp
- Convergence and scalability
- Route reflector
- Aggregation, as-set
- Other BGP features
- Multipath, add-path
- Soft reconfiguration, Route Refresh
Multicast
- Layer 2 multicast
- IGMPv2, IGMPv3
- IGMP Snooping, PIM Snooping
- IGMP Querier
- IGMP Filter
- MLD
- Reverse path forwarding check
- PIM
- Sparse Mode
- Static RP, BSR, AutoRP
- Group to RP Mapping
- Bidirectional PIM
- Source-Specific Multicast
- Multicast boundary, RP announcement filter
- PIMv6 Anycast RP
- IPv4 Anycast RP using MSDP
- Multicast multipath
Software Defined Infrastructure
Cisco SD Access
- Design a Cisco SD Access solution
- Underlay network (IS-IS, manual/PnP)
- Overlay fabric design (LISP, VXLAN, Cisco TrustSec)
- Fabric domains (single-site and multi-site using SD-WAN transit)
- Cisco SD Access deployment
- Cisco DNA Center device discovery and device management
- Add fabric node devices to an existing fabric
- Host onboarding (wired endpoints only)
- Fabric border handoff
- Segmentation
- Macro-level segmentation using VNs
- Micro-level segmentation using SGTs (using Cisco ISE)
- Assurance
- Network and client health (360)
- Monitoring and troubleshooting
Cisco SD-WAN
- Design a Cisco SD-WAN solution
- Orchestration plane (vBond, NAT)
- Management plane (vManage)
- Control plane (vSmart, OMP)
- Data plane (vEdge/cEdge)
- WAN edge deployment
- Onboarding new edge routers
- Orchestration with zero-touch provisioning/Plug-And-Play
- OMP
- TLOC
- Configuration templates
- Localized policies (only QoS)
- Centralized policies
- Application Aware Routing
- Topologies
Transport Technologies and Solutions
MPLS
- Operations
- Label stack, LSR, LSP
- LDP
- MPLS ping, MPLS traceroute
- L3VPN
- PE-CE routing
- MP-BGP VPNv4/VPNv6
- Extranet (route leaking)
DMVPN
- Troubleshoot DMVPN Phase 3 with dual-hub
- NHRP
- IPsec/IKEv2 using pre-shared key
- Per-Tunnel QoS
- Identify use-cases for FlexVPN
- Site-to-Site, Server, Client, Spoke-to-Spoke
- IPsec/IKEv2 using pre-shared key
- MPLS over FlexVPN
Infrastructure Security and Services
Device Security on Cisco IOS XE
- Control plane policing and protection
- AAA
Network Security
- Switch security features
- VACL, PACL
- Storm control
- DHCP Snooping, DHCP option 82
- IP Source Guard
- Dynamic ARP Inspection
- Port Security
- Private VLAN
- Router security features
- IPv6 Traffic Filters
- IPv4 Access Control Lists
- Unicast Reverse Path Forwarding
- IPv6 infrastructure security features
- RA Guard
- DHCP Guard
- Binding table
- Device tracking
- ND Inspection/Snooping
- Source Guard
- IEEE 802.1X Port-Based Authentication
- Device roles, port states
- Authentication process
- Host modes
System Management
- Device management
- Console and VTY
- SSH, SCP
- RESTCONF, NETCONF
- SNMP
- v2c
- v3
- Logging
- Local logging, syslog, debugs, conditional debugs
- Timestamps
Quality of Service
- End to end L3 QoS using MQC
- DiffServ
- CoS and DSCP Mapping
- Classification
- Network Based Application Recognition (NBAR)
- Marking using IP Precedence, DSCP, CoS
- Policing, shaping
- Congestion management and avoidance
- HQoS, Sub-rate Ethernet Link
Network Services
- First Hop Redundancy Protocols
- HSRP, GLBP, VRRP
- Redundancy using IPv6 RS/RA
- Network Time Protocol
- Master, client
- Authentication
- DHCP on Cisco IOS
- Client, server, relay
- Options
- SLAAC/DHCPv6 interaction
- Stateful, stateless DHCPv6
- DHCPv6 Prefix Delegation
- IPv4 Network Address Translation
- Static NAT, PAT
- Dynamic NAT, PAT
- Policy-based NAT, PAT
- VRF-aware NAT, PAT
- IOS-XE VRF-Aware Software Infrastructure (VASI) NAT
Network optimization
- IP SLA
- ICMP probes
- UDP probes
- TCP probes
- Tracking object
- Flexible NetFlow
Network operations
- Traffic capture
- SPAN
- RSPAN
- ERSPAN
- Embedded Packet Capture
- Cisco IOS-XE troubleshooting tools
- Packet Trace
- Conditional debugger (debug platform condition)
Infrastructure Automation and Programmability
Data encoding formats
- JSON
- XML
Automation and scripting
- EEM applets
- Guest shell
- Linux environment
- CLI Python module
- EEM Python module
Programmability
- Interaction with vManage API
- Python requests library and Postman
- Monitoring endpoints
- Configuration endpoints
- Interaction with Cisco DNA Center API
- HTTP request (GET, PUT, POST) via Python requests library and Postman
- Interaction with Cisco IOS XE API
- Via NETCONF/YANG using Python ncclient library
- Via RESTCONF/YANG using Python requests library and Postman
- Deploy and verify model-driven telemetry
- Configure on-change subscription using gRPC
Lab Topics
The Cisco CCIE Enterprise Infrastructure (v1.0) Practical Exam is an eight-hour, hands-on exam that requires a candidate to plan, design, deploy, operate, and optimize dual stack solutions (IPv4 and IPv6) for complex enterprise networks.
Candidates are expected to program and automate the network within their exam
Virtual Classroom
- Instructor led online training is an ideal vehicle for delivering training to individuals anywhere in the world at any time.
- This innovative approach presents live content with instructor delivering the training online.
- Candidates will be performing labs remotely on our labs on cloud in presence of an online instructor.
- Rstforum uses microsoft lync engine to deliver instructor led online training.
- Advances in computer network technology, improvements in bandwidth, interactions, chat and conferencing, and realtime audio and video offers unparalleled training opportunities.
- Instructor led online training can helps today’s busy professionals to perform their jobs and upgrade knowledge by integrating self-paced instructor led online training in their daily routines.
Miscellaneous
- Minimum batch size required for batch is 10 participants in the this course.
- The RST Forum reserves the right to cancel/postpone the class.
- Course schedule will be provided before commencement of the course.
- Certificate of participation will be awarded to participants with a minimum 90% attendance.
- All attendees are to observe the Copyright Law on intellectual properties such as software and courseware from respective vendors.
- The RST Forum reserves the right to include external participants in the program either for the entire course or individual courses.
- The RST Forum reserves the right to change/alter the sequence of courses. RST FORUM published Book would be given at 50% discounted rate to the forum students.