CCIE Lab Certification (Service Provider)

Interior Gateway Protocol

• IS-IS
• OSPFv2 and OSPFv3
• Optimize IGP scale and performance

Border Gateway Protocol

• IBGP, EBGP, and MP-BGP
• BGP route policy enforcement
• BGP path attribute
• BGP scale and performance
• BGP labeled unicast and linked state

Multicast

• Design PIM (PIM-SM, PIM-SSM, and BIDIR-PIM)
• Design RP (Auto-RP, BSR, static, anycast RP, and MSDP)
• Design IGMP and MLD
• MLDP
• Tree-SID

Multiprotocol Label Switching

• MPLS forwarding and control plane mechanisms
• LDP
• LDP scale and performance

MPLS traffic engineering

• IS-IS and OSPF extensions
• RSVP-TE
• MPLS TE policy enforcement
• MPLS LSP attributes
• Optimize MPLS TE scale and performance

Segment routing

• IS-IS segment routing control plane for IPv4 and IPv6
• OSPFv2 and OSPFv3 segment routing control plane
• BGP SR
• SR (SRGB and max label depth)
• SR-TE
• LDP and SR interworking, segment routing mapping server
• PCE and PCEP technology
• Flexible algorithm
• SRv6 locator
• SRv6 micro-segment (uSID)
• SRv6 encapsulation functions
• SRv6 interworking gateway

Mobile infrastructure architecture

• Design 5G vRAN and ORAN transport
• Design 5G converged packet transport architecture
• Design clocking and synchronization
• Design multi-access edge computing (MEC)
• Design transport network slicing
• Design telco hybrid and multi-cloud

Optical architecture

• Design routed optical network (RON)

Large-scale MPLS architecture

• Unified MPLS
• Multi-domain segment routing with SR-PCE
• SLA based on IGP/TE metrics and disjoint paths

Carrier Ethernet

• E-Line, E-LAN, and E-TREE
• VPWS, VPLS, and H-VPLS
• EVPN (single-homed and multi-homed)
• • EVPN-VPWS
  • EVPN ELAN
  • EVPN-IRB
• L2VPN service auto steering into segment routing policy

L3VPN

• L3VPN
• PE-CE routing protocols (OSPF and BGP)
• Loop prevention techniques in multi-homed environments
• Inter-AS L3VPN
• Shared services, for example: extranet and internet access
• L3VPN service auto steering into segment routing policy

Internet service

• IPv4 translation mechanism, such as: NAT44, CGNAT
• IPv4 translation mechanism, such as: NAT64, MAP-T
• Internet peering route and transit policy enforcement

Multicast VPN

• NG mVPN (profile 0, 3, 6, 7, 11, 12, 13, 14, 27, 28, and 29)

Quality of service for core, distribution, and access

• Classification and marking
• Congestion management and scheduling
• Congestion avoidance
• MPLS QoS models (pipe, short pipe, and uniform)
• MPLS TE QoS (MAM, RDM and PBTS)

BNG connectivity

• Design cloud-native BNG
• Design control and user plane separation

Layer 2 connectivity

• IEEE 802.1ad (Q-in-Q) and ITU G.8032
• Spanning Tree Access Gateway (MST-AG and PVST-AG)
• Design and operate MC-LAG

High availability

• SSO/NSF, NSR, and GR

Routing/fast convergence

• IGP convergence
• LDP convergence
• BGP Prefix Independent Convergence (BGP-PIC)
• BFD
• LFA-FRR (LFA, remote LFA, and TI-LFA)
• MPLS TE FRR

Control plane security

• Control plane protection techniques (LPTS and CoPP)
• Routing protocol and LDP authentication and security
• BGP prefix-based and attribute-based filtering
• BGP-RPKI (origin AS validation)

Management plane security

• Implement and troubleshoot device management (MPP, SSH, and VTY)
• Implement and troubleshoot logging and SNMP security
• Implement and troubleshoot AAA

Infrastructure security

• ACL compression and object groups
• uRPF
• RTBH and router hardening
• BGP Flowspec
• TLS and mTLS certificates using gRPC and gNMI
• Design MACsec

Network assurance

• Syslog and logging functions
• SNMP traps and RMON
• NetFlow and IPFIX
• Segment routing performance monitoring
• IP performance monitoring (TWAMP)
• Y.1731 performance monitoring and Y.1564

Network automation

• Design, deploy, and optimize NSO service packages (Yang models, template-based, Python-based, fastmap, reactive fastmap, CLI NEDs, NETCONF NEDs, and NSO northbound integration using RESTCONF)
• Design and deploy model-driven telemetry templates on XR devices (Yang models, gRPC, gNMI, GPB, and device configuration and collection architecture)
• Deploy and optimize Ansible playbook and Python scripts that interact with NSO, IOS XE, and IOS XR devices
• IOS XR application hosting using native and container-based applications
• Secure ZTP