There are no formal prerequisites for CCIE certification. Other professional certifications or training courses are not required. Instead, candidates must first pass a written qualification exam and then the corresponding hands-on lab exam. You are expected to have an in-depth understanding of the topics in the exam blueprints and strongly encouraged to have three to five years of job experience before attempting certification. You can review the exam preparation materials included on this page for more information.

Step One: CCIE Service Provider Written Exam

You must pass the two-hour, written qualification exam which covers networking concepts and some equipment commands before you are eligible to schedule the lab exam.

Step Two: CCIE Service Provider Lab Exam

The eight-hour lab exam tests your ability to configure actual equipment and troubleshoot the network in a timed test situation. You must make an initial attempt of the CCIE lab exam within 18 months of passing the CCIE written exam. If you do not pass the lab exam within three years of passing the written exam, you must retake the written exam before being allowed to attempt the lab exam again.

1. Implement, Optimize and Troubleshoot Core IP Technologies

1.1. Packet over SONET

1.1.1. Cisco HDLC encapsulation
1.1.2. PPP encapsulation
1.1.3. Frame Relay encapsulation
1.1.4. Maximum transmission unit (MTU)
1.1.5. Cyclic redundancy check (CRC)
1.1.6. Keepalive timer
1.1.7. Frame Relay DLCI on point to point sub-interface
1.1.8. SONET Controller
1.1.9. POS channel

1.2. GE/10GE in the Core

1.2.1. MAC accounting
1.2.2. Speed
1.2.3. Duplex mode
1.2.4. Carrier Delay
1.2.5. MTU
1.2.6. Flow control
1.2.7. 802.1Q VLAN sub-interface

1.3. IGP routing

1.3.1. IS-IS Multi topology
1.3.2. IS-IS Multi instance
1.3.2. IS-IS System Type
1.3.3. IS-IS Metric Type
1.3.4. IS-IS Area
1.3.5. IS-IS Designated Intermediate Systems
1.3.6. IS-IS Interface Circuit Type
1.3.7. IS-IS Interface Metric
1.3.8. IS-IS Retransmission Throttle Interval
1.3.9. IS-IS LSP Interval and Lifetime
1.3.10. IS-IS Point-to-point Adjacency over Broadcast Media
1.3.11. IS-IS route leaking
1.3.12. OSPF multi instance
1.3.13. OSPF Multi Areas
1.3.14. OSPF router ID
1.3.15. OSPF over different physical network
1.3.16. OSPF neighbor
1.3.17. OSPF interface cost
1.3.18. OPSF designated router
1.3.19. OSPFv3 support for IPv6
1.3.20. EIGRP multi instance
1.3.21. EIGRP Autonomous System Configuration
1.3.22. EIGRP Cost Metrics
1.3.23. EIGRP Equal and Unequal Cost Load Balancing
1.3.24. EIGRP support for IPv6
1.3.25. RIP v2
1.3.26. RIP support for IPv6
1.3.27. Redistribution between OSPF,IS-IS and EIGRP
1.3.28. Redistribution of Directly connected routes
1.3.29. Redistribution of Static routes
1.3.30. Route summary
1.3.31. IOS-XR routing policy language (RPL)
1.3.32. Routing policy using route-map

1.4. MPLS and LDP

1.4.1. IP CEF
1.4.2. LDP router ID
1.4.3. LDP interface
1.4.4. LDP neighbor auto discovery
1.4.5. MPLS MTU
1.4.6. MPLS LDP Static label
1.4.7. MPLS LDP—Local Label Allocation Filtering
1.4.8. MPLS LDP-IGP synchronization
1.4.9. MPLS LDP Inbound/outbound Label Binding Filtering

1.5. MPLS Traffic Engineering

1.5.1. IS-IS support for MPLS TE
1.5.2. OSPF support for MPLS TE
1.5.3. RSVP for MPLS TE
1.5.4. MPLS TE tunnel setup
1.5.5. MPLS TE Tunnel bandwidth
1.5.6. MPLS TE Automatic Bandwidth
1.5.7. MPLS TE Static route
1.5.8. MPLS TE Auto route
1.5.9. MPLS TE Policy route
1.5.10. MPLS TE Forwarding adjacency
1.5.11. MPLS TE Metric
1.5.12. MPLS TE LSP attributes
1.5.13. MPLS TE Class-based Tunnel selection
1.5.14. MPLS TE Policy-based Tunnel selection
1.5.15. MPLS Pseudowire Tunnel Selection
1.5.16. Point to multi point ( P2MP) MPLS TE
1.5.17. Inter-Domain MPLS TE
1.5.18. Inter-Area MPLS TE

1.6. BGP

1.6.1. IBGP IPv4/IPv6 Peering
1.6.2. EBGP IPv4/IPv6 Peering
1.6.3. EBGP IPv4/IPv6 multi hop peering
1.6.4. BGP IPv4/IPv6 routes advertising
1.6.5. EBGP IPv4/IPv6 peering using local-AS
1.6.6. EBGP IPv4/IPv6 peering using AS-override
1.6.7. BGP IPv4/IPv6 using private AS number
1.6.8. Dual AS configuration for Network AS migration
1.6.9. BGP Next-Hop
1.6.10. BGP Weight
1.6.11. BGP Local Preference
1.6.12. BGP MED
1.6.13. BGP Origin
1.6.14. BGP Communites
1.6.15. BGP Confederation
1.6.16. BGP Router reflector
1.6.17. BGP Cluster list
1.6.18. BGP Peer Groups
1.6.19. BGP Synchronization
1.6.20. BGP Aggregation
1.6.21. BGP Conditional Advertising
1.6.22. BGP Routing policy
1.6.23. Redistributing IGP, static and connected route into BGP
1.6.24. BGP Multi-path Load Sharing
1.6.25. BGP Link Bandwidth

1.7. Multicast

1.7.1. IPv4/IPv6 Multicast addressing
1.7.2. IPv4/IPv6 Multicast routing
1.7.3. PIM Sparse Mode for IPv4/IPv6
1.7.4. IGMP V2/V3
1.7.5. IPV6 Multicast Listener Discover (MLD)
1.7.6. PIM Source Specific Multicast (SSM) for IPv4/IPv6
1.7.7. Multicast Rate-limiting
1.7.8. PIM Bidirectional (BiDir)
1.7.9. PIM Static RP
1.7.10. PIM Bootstrap Router (BSR)
1.7.11. PIM Auto RP
1.7.12. PIM Anycast RP
1.7.13. Multicast Administrative Boundaries
1.7.14. MSDP
1.7.15. MP-BGP peer for Multicast
1.7.16. MP-BGP Multicast route advertising

1.8. High Availability

1.8.1. NSF/SSO for IGP routing
1.8.2. NSF/SSO for BGP routing
1.8.3. NSF/SSO for LDP, TE, Multicast
1.8.4. HSRP, VRRP, GLBP
1.8.5. Graceful Restart
1.8.6. Control Plane Policing (CPP)
1.8.7. Bidirectional forwarding detection (BFD)
1.8.8. IP event dampening
1.8.9. IGP Fast Re-route
1.8.10. MPLS TE Fast Re-route (FRR)
1.8.11. Link Protection using MPLS-TE
1.8.12. Node Production using MPLS-TE
1.8.13. Embedded event management (EEM)

1.9. Convergence

1.9.1. IS-IS fast convergence
1.9.2. IS-IS to utilize the Overload Bit
1.9.3. OSPF fast convergence
1.9.4. BGP fast convergence
1.9.5. BGP Route Dampening
1.9.6. BGP Fast Peering Session Deactivation
1.9.7. BGP Prefix Independent Convergence (PIC)
1.9.8. BGP next hop tracking
1.9.9. BGP address tracking filter
1.9.10. BGP path MTU discovery
1.9.11. IP fast reroute (IPFRR)
1.9.12. Multicast-only Fast Re-Route (MoFRR)
1.9.13. MPLS LDP convergence

1.10. SP QoS

1.10.1. Marking using DSCP, IP precedence and CoS
1.10.2. Priority Queuing
1.10.3. Custom Queuing
1.10.4. Weighted Fair Queuing
1.10.5. WRED
1.10.6. Policing
1.10.7. Class-based Weighted Faire Queuing (CB-WFQ)
1.10.8. Low-Latency Queuing (LLQ)
1.10.9. Random-Detect using MQC
1.10.10. NBAR for QoS
1.10.11. MPLS EXP
1.10.12. Differentiated Services Traffic Engineering (DS-TE)
1.10.13. Maximum Allocation Model (MAM)
1.10.14. Russian Dolls Model (RDM)
1.10.15. Class-Based Tunnel Selection: CBTS
1.10.16. Policy-based Tunnel Selection: PBTS

1.11. Security in core

1.11.1. Standard Access-lists
1.11.2. Extended Access-lists
1.11.3. Routing Protocol Authentication for RIP V2
1.11.4. Routing Protocol Authentication for EIGRP
1.11.5. Routing Protocol Authentication for OSPF
1.11.6. Routing Protocol Authentication for IS-IS
1.11.7. Routing Protocol Authentication for BGP
1.11.8. BGP TTL Security Check
1.11.9. Infrastructure ACL
1.11.10. Anti Fragment Attacks
1.11.11. Filtering RFC 1918 Routes
1.11.12. uRPF for Anti-Spoofinng
1.11.13. Selective packet discard (SPD)
1.11.14. LDP authentication
1.11.15. Remote triggered black hole (RTBH)
1.11.16. NTP
1.11.17. Attack mitigation
1.11.18. SNMP Management
1.11.19. IP packet Accounting
1.11.20. Syslog

2. Implement, Optimize and Troubleshoot Edge/Access Technologies

2.1. FE/GE and Ethernet Trunk

2.1.1. Ethernet channel
2.1.2. Virtual Trunking Protocol (VTP)
2.1.3. Spanning Tree Protocol (STP)
2.1.4. 802.1Q VLAN
2.1.5. 802.1QinQ
2.1.6. 802.1ad Provider Bridges (PB)
2.1.7. 802.1ah Provider Backbone Bridge (PBB)
2.1.8. Connectivity Fault Management (CFM)

2.2. Frame-Relay connection

2.2.1. Frame-Relay DLCI
2.2.2. Frame-Relay map
2.2.3. Frame-Relay switching
2.2.4. Frame-Relay multilink
2.2.5. Frame-Relay LMI-Type
2.2.6. PPP over Frame-Relay

2.3. PPP connections

2.3.1. PPP encapsulation
2.3.2. PPP multilink
2.3.3. PPP Multi chassis multilink
2.3.4. PPPoE client
2.3.5. PPPoE server
2.3.6. PPP authentication

3. Implement, Optimize and Troubleshoot Layer 3 VPN

3.1. Intra AS L3 MPLS VPN

3.1.1. MP-IBGP VPNv4/VPNv6 peering
3.1.2. MP-IBGP peering using loopback interface
3.1.3. VPNv4/VPNv6 Route Reflector
3.1.4. VRF definition
3.1.5. Route Distinguisher
3.1.6. Route Target
3.1.7. Route Target import/export
3.1.8. Intra AS MPLS VPNV4/VPNV6 load balancing
3.1.9. SOO Community
3.1.10. PE-CE – RIP V2
3.1.11. PE-CE – IS-IS
3.1.12. PE-CE – OSPF
3.1.13. PE-CE – EBGP
3.1.14. PE-CE – Static Routes
3.1.15. Redistributing dynamic PE-CE routes into VPNv4/VPNv6
3.1.16. Redistributing static PE-CE routes into VPNv4/VPNv6
3.1.17. Redistributing VPN4/VPNv6 routes into PE-CE routing table
3.1.18. Intra-AS MPLS VPN multipath
3.1.19. Intra-AS MPLS VPN path selection

3.2. Inter AS L3 MPLS VPN

3.2.1. MP-EBGP VPNv4/VPNv6 peering using direct interface
3.2.2. MP-EBGP VPNv4/VPNv6 peer using multi-hop interface
3.2.3. MP-EBGP VPNv4/VPNv6 peer between RRs
3.2.4. VPNV4/VPNv6 next-hop unchanged
3.2.5. VPNV4/VPNv6 next-hop self
3.2.6. Multi VRF between ASPEs
3.2.7. Inter-AS MPLS VPNV4/VPNv6 multipath
3.2.8. Route target rewrite
3.2.9. Inter-AS MPLS VPN path selection

3.3. Carrier supporting carrier

3.3.1. MPLS LDP in customer carrier site
3.3.2. EBGPv4 + label between CSC-PE and CSC-CE
3.3.3. IGP + LDP between CSC-PE and CSC-CE
3.3.4. MPLS VPNv4 between customer carrier sites PEs
3.3.5. CSC VPN load balancing
3.3.6. VRF definition in customer carrier site
3.3.7. Customer carrier site PE-CE routing

3.4. VPN Extranet and internet access

3.4.1. MP-BGP VPNv4/VPNv6 Extra-Net
3.4.2. MP-BGP VPNv4/VPNv6 internet access

3.5. VRF service

3.5.1. Multiple VRF
3.5.2. Multiple VRF routing
3.5.3. VRF Selection based on Source IP Address

3.6. Multicast VPN

3.6.1. Default MDT
3.6.2. Data MDT
3.6.3. MP-BGP mdt peering
3.6.4. Multicast routing in VPN site
3.6.5. PM-SM in VPN site
3.6.6. RP in VPN site
3.6.7. Multicast VPN extranet

3.7. GRE L3 VPN

3.7.1. MPLS VPN—L3VPN over GRE

4. Implement, Optimize and Troubleshoot  Layer 2 VPN

4.1. AToM

4.1.1. Psuedowire class
4.1.2. Ethernet over MPLS (EoMPLS)
4.1.3. Ethernet VLAN over MPLS
4.1.4. Frame Relay over MPLS (FRoMPLS)
4.1.5. HDLC over MPLS (HDLCoMPLS)
4.1.6. PPP over MPLS (PPPoMPLS)
4.1.7. PWE3 control using LDP
4.1.8. Psuedowire redundancy
4.1.9. AToM interworking
4.1.10. AToM local switching
4.1.11. AToM intra-as support
4.1.12. AToM inter-as support
4.1.13. Traffic Engineering with AToM

4.2. VPLS and Carrier Ethernet

4.2.1. VPLS
4.2.2. H-VPLS
4.2.3. VFI definition
4.2.4. VPLS BGP auto discovery
4.2.5. VLAN attached circuit
4.2.6. QinQ attached circuit
4.2.7. 802.1ad attached circuit
4.2.8. 802.1ah attached circuit
4.2.9. VPLS/H-VPLS redundancy

4.3. L2TPV3 for L2VPN

4.3.1. L2TPv3
4.3.2. L2TPv3 VPN local switching
4.3.3. L2TPv3 VPN interworking

4.4. GRE L2VPN

4.4.1. L2VPN over GRE

5. Implement, Optimize and Troubleshoot Managed Services Traversing the Core

5.1. Managed Voice/Video services traversing the core

5.1.1. Traverse Voice/video packet
5.1.2. Traverse call signal packet

5.2. Managed Security services traversing the core

5.2.1. Traverse IKE packet
5.2.2. Traverse ESP, AH packet
5.2.3. Traverse SSL packet

5.3. Service Level Agreements for managed services

5.3.1. IP SLA sender
5.3.2. IP SLA responder
5.3.3. IP SLA for MPLS VPN
5.3.4. Netflow
5.3.5. Netflow for MPLS
5.3.6. Netflow for Multicast

1. Implement, Optimize and Troubleshoot Core IP Technologies

1.1. Packet over SONET

1.1.01. Cisco HDLC encapsulation
1.1.02. PPP encapsulation
1.1.03. Frame Relay encapsulation
1.1.04. Maximum transmission unit (MTU)
1.1.05. Cyclic redundancy check (CRC)
1.1.06. Keepalive timer
1.1.07. Frame Relay DLCI on point to point sub-interface
1.1.08. SONET Controller
1.1.09. POS channel
1.1.10. Channelized SONET
1.1.11. SONET APS

1.2. IP over DWDM

1.2.1. Optical channel payload unit (OPU)
1.2.2. Optical channel data unit (ODU)
1.2.3. Optical channel transport unit (OTU)
1.2.4. Optical channel (OCh)
1.2.5. Shared Risk Link Group (SRLG)
1.2.6. Virtual Transponder (VTXP)
1.2.7. FEC-FRR Triggering
1.2.8. Optical Parameters- Rx-los-threshold, Wavelength and Transmit-power
1.2.9. G.709 Parameters

1.3. GE/10GE in the Core

1.3.1. Gigabit Ethernet standards
1.3.2. 10 Gigabit Ethernet standards
1.3.3. Duplex mode
1.3.4. MTU
1.3.5. Flow control
1.3.6. Link Aggregation Control Protocol (LACP)
1.3.7. 802.1Q VLAN sub-interface

1.4. SP high end product

1.4.01. IOS-XR structure
1.4.02. Install IOS-XR software
1.4.03. Upgrade and manage IOS-XR software
1.4.04. Secure domain router (SDR)
1.4.05. CRS-1/3 structure
1.4.06. CRS-1/3 Multi chassis
1.4.07. Redundant Route Processors
1.4.08. RP switchover
1.4.09. MSC Architecture
1.4.10. Switch Fabric Architecture

1.5. IGP routing

1.5.01. Network Service Access Point (NSAP)
1.5.02. IS-IS Packet data unit (PDU)
1.5.03. IS-IS hello
1.5.04. IS-IS Link-state packets
1.5.05. IS-IS Sequence Number Packets
1.5.06. IS-IS area type
1.5.07. IS-IS level
1.5.08. IS-IS circuit type
1.5.09. IS-IS Type Length Values (TLV)
1.5.10. IS-IS Pseudo node
1.5.11. IS-IS Designated Intermediate Systems
1.5.12. IS-IS SPF
1.5.13. IS-IS LSP attached bit
1.5.14. IS-IS LSP overload bit
1.5.15. IS-IS Multi topology
1.5.16. IS-IS Metric
1.5.17. IS-IS support for IPv6
1.5.18. OSPF multi instance
1.5.19. OSPF router-ID
1.5.20. OSPF router type
1.5.21. OSPF area
1.5.22. OSPF hello
1.5.23. OSPF LSA
1.5.24. OSPF media type
1.5.25. OSPF Designated Routers
1.5.26. OSPF interface cost
1.5.27. OSPF interface type
1.5.28. OSPFv3 support for IPv6
1.5.29. EIGRP Diffusing Update Algorithm (DUAL)
1.5.30. EIGRP Composite Metrics
1.5.31. EIGRP Hello
1.5.32. EIGRP neighbor
1.5.33. EIGRP Unequal Cost Load Sharing
1.5.34. RIP v2
1.3.35. RIP support for IPv6
1.5.36. Redistribution between OSPF,IS-IS and EIGRP
1.5.37. Redistribution of Directly connected routes
1.5.38. Redistribution of Static routes
1.5.39. Route summary
1.5.40. IOS-XR routing policy language (RPL)
1.5.41. Routing policy using route-map

1.6. MPLS and LDP

1.6.01. MPLS network component (P, PE, CE)
1.6.02. MPLS label format
1.6.03. MPLS label encapsulation
1.6.04. MPLS label stack
1.6.05. MPLS label operation
1.6.06. Forwarding Equivalence Class
1.6.07. Label Distribution Protocol (LDP)
1.6.08. Label advisement model
1.6.09. MPLS LDP—Local Label Allocation Filtering
1.6.10. MPLS LDP-IGP synchronization
1.6.11. MPLS LDP Inbound/outbound Label Binding Filtering
1.6.12. Label Merging
1.6.13. MPLS over ATM
1.6.14. P2MP MPLS
1.6.15. Multicast LDP(mLDP)

1.7. MPLS Traffic Engineering

1.7.01. TE Path calculation Constrained-Based Shortest Path First (CSPF)
1.7.02. TE link information distribution
1.7.03. RSVP support for TE path setup
1.7.04. IS-IS support for TE
1.7.05. OSPF support for TE
1.7.06. Forwarding Traffic down Tunnel
1.7.07. MPLS-TE Automatic Bandwidth
1.7.08. MPLS-TE Static route
1.7.09. MPLS-TE Auto route
1.7.10. MPLS-TE Policy route
1.7.11. MPLS-TE Forwarding adjacency
1.7.12. MPLS-TE path metric
1.7.13. MPLS-TE LSP attributes
1.7.14. MPLS-TE Class-based Tunnel selection
1.7.15. Pseudowire Tunnel Selection
1.7.16. Point to multi point ( P2MP) MPLS TE
1.7.17. Shared Risk Link Group (SRLG)
1.7.18. Inter-Domain MPLS TE
1.7.19. Inter-Area MPLS TE

1.8. BGP

1.8.01. BGP messages
1.8.02. BGP neighbor
1.8.03. BGP update
1.8.04. BGP attributes
1.8.05. BGP synchronization
1.8.06. BGP routes aggregation
1.8.07. BGP route reflector
1.8.08. BGP confederation
1.8.09. BGP Communites
1.8.10. BGP Cluster list
1.8.11. BGP Peer Groups
1.8.12. IBGP IPv4/IPv6 Peering
1.8.13. EBGP IPv4/IPv6 Peering
1.8.14. EBGP IPv4/IPv6 multi hop peering
1.8.15. BGP IPv4/IPv6 routes advertising
1.8.16. EBGP IPv4/IPv6 peering using local-AS
1.8.17. EBGP IPv4/IPv6 peering using AS-override
1.8.18. BGP IPv4/IPv6 using private AS number
1.8.19. Dual AS configuration for Network AS migration
1.8.20. BGP Routing policy
1.8.21. Redistributing IGP, static and connected route into BGP
1.8.22. BGP Multi-path Load Sharing
1.8.23. BGP Link Bandwidth

1.9. Multicast

1.9.01.1 IPv4/IPv6 Multicast addressing
1.9.01.2 Multicast distribution tree
1.9.01.3 Multicast forwarding
1.9.01.4 Multicast Reverse Path Forwarding (RPF)
1.9.01.5 Multicast Administrative Boundaries
1.9.01.6 PIM sparse mode for IPv4/IPv6
1.9.02. IPv4/IPv6 Multicast routing
1.9.03. PIM Sparse Mode for IPv4/IPv6
1.9.04. IGMP V2/V3
1.9.05. IPV6 Multicast Listener Discover (MLD)
1.9.06. PIM Source Specific Multicast (SSM) for IPv4/IPv6
1.9.07. Multicast Rate-limiting
1.9.08. PIM Bidirectional (BiDir)
1.9.09. PIM Static RP
1.9.10. PIM Bootstrap Router (BSR)
1.9.11. PIM Auto RP
1.9.12. PIM Anycast RP
1.9.13. Multicast Administrative Boundaries
1.9.14. MSDP
1.9.15. MP-BGP peer for Multicast
1.9.16. MP-BGP Multicast route advertising
1.9.17. Label switch multicast

1.10. High Availability

1.10.01. NSF/SSO for IGP routing
1.10.02. NSF/SSO for BGP routing
1.10.03. NSF/SSO for LDP, TE, Multicast
1.10.04. HSRP, VRRP, GLBP
1.10.05. Graceful Restart
1.10.06. Control Plane Policing (CPP)
1.10.07. Bidirectional forwarding detection (BFD)
1.10.08. IP event dampening
1.10.09. IGP Fast Re-route
1.10.10. MPLS TE Fast Re-route (FRR)
1.10.11. Link Protection using MPLS-TE
1.10.12. Node Production using MPLS-TE
1.10.13. Embedded event management (EEM)
1.10.13. Hold-off Timer to Prevent Fast Reroute from Being Triggered (SONET)

1.11. Convergence

1.11.01. IS-IS fast convergence
1.11.02. IS-IS to utilize the Overload Bit
1.11.03. OSPF fast convergence
1.11.04. BGP fast convergence
1.11.05. BGP Route Dampening
1.11.06. BGP Fast Peering Session Deactivation
1.11.07. BGP Prefix Independent Convergence (PIC)
1.11.08. BGP next hop tracking
1.11.09. BGP address tracking filter
1.11.10. BGP path MTU discovery
1.11.11. IP fast reroute (IPFRR)
1.11.12. Multicast-only Fast Re-Route (MoFRR)
1.11.13. MPLS LDP convergence

1.12. SP QoS

1.12.01. Marking using DSCP, IP precedence and CoS
1.12.02. Priority Queuing
1.12.03. Custom Queuing
1.12.04. Weighted Fair Queuing
1.12.05. WRED
1.12.06. Policing
1.12.07. Class-based Weighted Faire Queuing (CB-WFQ)
1.12.08. Low-Latency Queuing (LLQ)
1.12.09. Random-Detect using MQC
1.12.10. NBAR for QoS
1.12.11. MPLS EXP
1.12.12. Differentiated Services Traffic Engineering (DS-TE)
1.12.13. Maximum Allocation Model (MAM)
1.12.14. Russian Dolls Model (RDM)
1.12.15. Class-Based Tunnel Selection: CBTS
1.12.16. Policy-based Tunnel Selection: PBTS

1.13. Security in core

1.13.01. Standard Access-lists
1.13.02. Extended Access-lists
1.13.03. Routing Protocol Authentication for RIP V2
1.13.04. Routing Protocol Authentication for EIGRP
1.13.05. Routing Protocol Authentication for OSPF
1.13.06. Routing Protocol Authentication for IS-IS
1.13.07. Routing Protocol Authentication for BGP
1.13.08. BGP TTL Security Check
1.13.09. Infrastructure ACL
1.13.10. Anti Fragment Attacks
1.13.11. Filtering RFC 1918 Routes
1.13.12. uRPF for Anti-Spoofinng
1.13.13. Selective packet discard (SPD)
1.13.14. LDP authentication
1.13.15. Remote triggered black hole (RTBH)
1.13.16. NTP
1.13.17. Attack mitigation
1.13.18. SNMP Management
1.13.19. IP packet Accounting
1.13.20. Syslog

2. Implement, Optimize and Troubleshoot Edge/Access Technologies

2.1. FE/GE and Ethernet Trunk connections

2.1.01. Ethernet Wire Service (EWS)
2.1.02. Ethernet Relay Service (ERS)
2.1.03. Ethernet Multipoint Service (EMS)
2.1.04. Ethernet Flow Point (EFP)
2.1.05. Ethernet Virtual Circuit (EVC)
2.1.06. 802.1Q standard
2.1.07. 802.1QinQ
2.1.08. 802.1ad Provider Bridges (PB)
2.1.09. 802.1ah Provider Backbone Bridge (PBB)
2.1.10. Spanning Tree Protocol (STP)
2.1.11. Resilient Ethernet Protocol (REP)
2.1.12. Virtual Trunking Protocol (VTP)
2.1.13. Flexible Service Mapping/Forwarding
2.1.14. Ethernet Connectivity Fault Management (CFM)
2.1.15. Ethernet channel

2.2. PPP connections

2.2.1. LCP
2.2.2. NCP
2.2.3. PPP encapsulation
2.2.4. PPP multilink
2.2.5. PPP Multi chassis multilink
2.2.6. PPPoE client
2.2.7. PPPoE server
2.2.8. PPP authentication

2.3. SONET/SDH connections

2.3.1. SONET/SDH frame
2.3.2. Automatic protection switching (APS), Timing
2.3.3. Channelized SDH, channelized interface,

2.4. Frame-relay connections

2.4.1. Frame Relay PVC, SVC, DLCI
2.4.2. Congestion-Control Mechanisms, FECN, BECN
2.4.3. Discard Eligibility (DE) bit
2.4.4. Frame Relay Fragmentation (FRF.12)
2.4.5. Frame Relay FRF.9 Payload Compression
2.4.6. Frame Relay Multilink (MLFR-FRF.16)
2.4.7. Frame Relay Switching
2.4.8. Frame-Relay LMI-Type
2.4.9. PPP over Frame-Relay

2.5. ATM connections

2.5.1. ATM cell
2.5.2. Virtual Path Identifier (VPI), Virtual Channel Identifier (VCI)
2.5.3. Payload Type (PT), Cell Loss Priority (CLP)
2.5.4. ATM adaptation layer (AAL)
2.5.5. ATM addressing
2.5.6. ATM PVC/SVC
2.5.7. ATM Cell Loss Priority (CLP) Setting
2.5.8. IP over ATM ( RFC1483)

2.6. T1/T3 and E1/E3 services.

2.6.1. Multiplexing
2.6.2. Framing
2.6.3. Timing
2.6.4. Chanel group

3. Describe, Implement, Optimize and Troubleshoot Remote Access Technologies

3.1. IP over DSL to the customer

3.1.1. PPPoA
3.1.2. PPPoE over ATM
3.1.3. L2TP between LAC and LNS
3.1.4. RA (PPPoA,PPPoE over ATM) to VRF and MPLS VPN
3.1.5. PPP authentication (Radius, TACACS)
3.1.6. DHCP and options 82

3.2. IP over wire line to the customer

3.2.1. PPP
3.2.2. PPPoE
3.2.3. L2TP between LAC and LNS
3.2.4. PPPoE to VRF and MPLS VPN
3.2.5. PPP authentication (Radius, TACACS)
3.2.6. DHCP and options 82
3.2.7. Broadband network gateway (BNG)

3.3. IP over Cable to the customer

3.3.1. DOCSIS 3.0
3.3.2. PPPoE
3.3.3. L2TP between LAC and LNS

4. Implement, Optimize and Troubleshoot Layer 3 VPN

4.1. Intra AS L3 MPLS VPN

4.1.01. MP-IBGP VPNv4/VPNv6 peering
4.1.02. MP-IBGP peering using loopback interface
4.1.03. VPNv4/VPNv6 Route Reflector
4.1.04. VRF definition
4.1.05. Route Distinguisher
4.1.06. Route Target
4.1.07. Route Target import/export
4.1.08. Intra AS MPLS VPNV4/VPNV6 load balancing
4.1.09. SOO Community
4.1.10. PE-CE – RIP V2
4.1.11. PE-CE – IS-IS
4.1.12. PE-CE – OSPF
4.1.13. PE-CE – EBGP
4.1.14. PE-CE – Static Routes
4.1.15. Redistributing dynamic PE-CE routes into VPNv4/VPNv6
4.1.16. Redistributing static PE-CE routes into VPNv4/VPNv6
4.1.17. Redistributing VPN4/VPNv6 routes into PE-CE routing table
4.1.18. Intra-AS MPLS VPN multipath
4.1.19. Intra-AS MPLS VPN path selection

4.2. Inter AS L3 MPLS VPN

4.2.1. MP-EBGP VPNv4/VPNv6 peering using direct interface
4.2.2. MP-EBGP VPNv4/VPNv6 peer using multi-hop interface
4.2.3. MP-EBGP VPNv4/VPNv6 peer between RRs
4.2.4. VPNV4/VPNv6 next-hop unchanged
4.2.5. VPNV4/VPNv6 next-hop self
4.2.6. Multi VRF between ASPEs
4.2.7. Inter-AS MPLS VPNV4/VPNv6 multipath
4.2.8. Route target rewrite
4.2.9. Inter-AS MPLS VPN path selection

4.3. Carrier supporting carrier

4.3.1. MPLS LDP in customer carrier site
4.3.2. EBGPv4 + label between CSC-PE and CSC-CE
4.3.3. IGP + LDP between CSC-PE and CSC-CE
4.3.4. MPLS VPNv4 between customer carrier sites PEs
4.3.5. CSC VPN load balancing
4.3.6. VRF definition in customer carrier site
4.3.7. Customer carrier site PE-CE routing

4.4. VPN Extranet and internet access

4.4.1. MP-BGP VPNv4/VPNv6 Extra-Net
4.4.2. MP-BGP VPNv4/VPNv6 internet access

4.5. VRF service

4.5.1. Multiple VRF
4.5.2. Multiple VRF routing
4.5.3. VRF Selection based on Source IP Address

4.6. Multicast VPN

4.6.1. Default MDT
4.6.2. Data MDT
4.6.3. MP-BGP mdt peering
4.6.4. Multicast routing in VPN site
4.6.5. PM-SM in VPN site
4.6.6. RP in VPN site
4.6.7. Multicast VPN extranet

4.7. GRE L3 VPN

4.7.1. MPLS VPN—L3VPN over GRE

5. Implement, Optimize and Troubleshoot  Layer 2 VPN

5.1. Atom

5.1.01. Psuedowire-class
5.1.02. EoMPLS –Ethernet over MPLS
5.1.03. FRoMPLS –Frame Relay over MPLS
5.1.04. HDLCoMPLS-HDLC over MPLS
5.1.05. PPPoMPLS-PPP over MPLS
5.1.06. AAL5oMPLS-ATM AAL5 over MPLS
5.1.07. L2TPv3
5.1.08. FR/PPP/HDLC/Ethernet interworking over MPLS
5.1.09. FR/PPP/HDLC/Ethernet interworking over L2TPv3
5.1.10. L2VPN local switching

5.2. VPLS and Carrier Ethernet

5.2.1. VPLS
5.2.2. H-VPLS
5.2.3. VFI definition
5.2.4. VPLS BGP auto discovery
5.2.5. VLAN attached circuit
5.2.6. QinQ attached circuit
5.2.7. 802.1ad attached circuit
5.2.8. 802.1ah attached circuit
5.2.9. VPLS/H-VPLS redundancy

5.3. L2TPV3 for L2VPN

5.3.1. L2TPv3
5.3.2. L2TPv3 VPN local switching
5.3.3. L2TPv3 VPN interworking

5.4. GRE L2VPN

5.4.1. L2VPN over GRE

6. Implement, Optimize and Troubleshoot Managed Services Traversing the Core

6.1. Managed Voice/Video services traversing the core

6.1.1. Traverse Voice/video packet
6.1.2. Traverse call signal packet

6.2. Managed Security services traversing the core

6.2.1. Traverse IKE packet
6.2.2. Traverse ESP, AH packet
6.2.3. Traverse SSL packet

6.3. Service Level Agreements for managed services

6.3.1. IP SLA sender
6.3.2. IP SLA responder
6.3.3. IP SLA for MPLS VPN
6.3.4. Netflow
6.3.5. Netflow for MPLS
6.3.6. Netflow for Multicast

7. Describe Service Provider Network implementing principle

7.1 Given a Service Provider network design change or new service, identify the success criteria

7.2 Given a Service Provider network design change or new service, identify appropriate routing protocol

7.3 Given a Service Provider network design change or new service, identify appropriate tunneling protocol

7.4 Given a Service Provider network design change or new service, identify improving convergence method

7.5 Given a Service Provider network design change or new service, identify improving stability method

7.6 Given a Service Provider network design change or new service, identify improving reliability method

7.7 Given a Service Provider network design change or new service, identify improving management method

7.8 Given a Service Provider network design change or new service, identify improving QOS method

7.9 Given a Service Provider network design change or new service, identify improving security

1. Bridging and Switching
   1. VTP, VLAN, Trunk, Spanning tree
   2. Frame Relay, DLCI, FR multilink
   3. ATM PVC, SVC, FR/ATM interworking
   4. PPPoE
2. IGP Routing
   1. IS-IS, Level 1/2, Metric
   2. OSPF, LSA, Area
   3. Redistribution, Summarization, Filtering
   4. Policy routing
3. EGP Routing
   1. IBGP, EBGP
   2. BGP attributes
   3. Confederation, Route reflector
   4. Synchronization, Aggregation, Stability
   5. Redistribution, Filtering
   6. Multipath
4. SP Multicast
   1. PIM-SM, PIM-DM, SSM, PIM-BIDIR, IGMP
   2. Auto RP, Static RP, BSR, Anycast RP
   3. MP-BGP for multicast, MSDP
5. MPLS
   1. Label distribution, LDP/ TDP
   2. Label filtering, Label merging, Multipath
   3. MPLS COS
   4. MPLS Netflow
   5. MPLS over ATM
   6. MPLS Traffic Engineering
6. L3/L2 VPN
   1. MPLS VPN, MP-iBGP
   2. PE-CE routing, RIPv2, OSPF, EIGRP, Static, ISIS, EBGP
   3. BGP Extended Community
   4. Inter AS MPLS VPN
   5. Carrier Supporting Carrier
   6. VRF-Lite, VRF Select
   7. Multicast MPLS VPN
   8. GRE, multipoint GRE
   9. AToM, L2TPv3
   10. 802.QinQ
7. SP QoS and Security
   1. DSCP/EXP, TOS, NBAR
   2. Marking, Shaping, Policing
   3. CAR, FRTS
   4. WRQ, CBWFQ, LLQ, PQ, CQ
   5. RED, WRED
   6. LFI, cRTP
   7. RSVP
   8. ACL, RPF, Filtering
   9. Routing update security
   10. Common attacks
8. High Availability
   1. NSF, GLBP
   2. Fast reroute, Link/Node protection
   3. HSRP, VRRP
9. Management
   1. SNMP, SYSLOG, RMON
   2. Accounting
   3. Netflow
   4. NTP

1. Service Provider Network General
   1. SP Network Structure and Components
   2. Service Provisioning
   3. Organizations and Standards
   4. ISP design principle, RFC3439
2. Layer 2 technology
   1. ATM
   2. POS
   3. DPT/RPR
   4. PPP
   5. Frame Relay
   6. Ethernet
3. IP
   1. IPv4, IPv6
   2. Multi-protocol BGP
   3. ISIS
   4. OSPF
   5. RIP, EIGRP, Static
   6. Multicast Addressing
   7. IGMP, PIM-SM, SSM, Bir PIM
   8. Rendezvous Points
   9. Inter domain Multicast
   10. Multicast VPN
4. MPLS
   1. FEC, Label
   2. Frame mode and Cell mode
   3. Label distribution Protocol
   4. Traffic Engineering
   5. GMPLS
5. VPN
   1. Intra AS MPLS VPN
   2. Inter AS MPLS VPN
   3. Carrier Supporting Carrier
   4. AToM
   5. Metro Ethernet
   6. L2TPv3
   7. GRE
   8. 802.1QinQ
6. Security
   1. IP spoofing, Denial of Service (DoS), DDoS, Worm
   2. Data Plane Security
   3. Control Plane security
   4. Management Plane Security
   5. Intrusion/Anomaly detection
   6. Attack mitigation
   7. Best Common Practices (BCP)
7. Quality of Service
   1. Service level agreement
   2. Classification
   3. Marking
   4. Policing
   5. Shaping
   6. Queuing
   7. Congestion management
   8. MPLS VPN QOS
8. High Availability
   1. NSF/SSO
   2. Sonet APS, RPR, 802.1w
   3. Graceful Restart, VRRP, GLBP, IP Event Dampening
   4. Fast reroute, Link/Node protection
   5. Global Server Load Balancing
9. High End Product
   1. CRS-1
   2. GSR 12000
   3. IOS-XR

Core Knowledge Questions

The CCIE Service Provider lab exam begins with a brief Core Knowledge section, consisting of four questions requiring a short typed response, generally no more than four or five words.  Candidate have up to 30 minutes to complete the four questions and may move on to the rest of the exam if they finish early.  No access to the Cisco documentation is provided during this part of the exam and candidates may not return to the Core Knowledge questions once they have moved on.  Core Knowledge questions cover material from the list of exam topics and well-prepared candidates should be able to answer the questions without difficulty.  All candidates must pass the Core Knowledge section in order to achieve CCIE certification.

Costs

Lab exams cost US$1400 per attempt, not including travel and lodging expenses. Costs may vary due to exchange rates and local taxes (VAT, GST). You are responsible for any fees your financial institution charges to complete the payment transaction.

Lab Environment

The Cisco documentation CD is available in the lab room, but the exam assumes knowledge of the more common protocols and technologies. As of March 2006, the documentation can only be navigated using the index; the search function has been disabled. No outside reference materials are permitted in the lab room. You must report any suspected equipment issues to the proctor during the exam; adjustments cannot be made once the exam is over.

Lab Exam Grading

Each question on the lab has specific criterion. The labs are graded by proctors who ensure all the criterion are met and points are awarded accordingly. The proctors use automatic tools to gather information from the routers to perform some preliminary evaluations, but the final determination of a correct or incorrect configuration is done by a trained proctor.

Results

You can review your lab exam results online (login required), usually within 48 hours. Results are Pass/Fail and failing score reports indicate major topic areas where additional study and preparation may be useful.

Reevaluation of Lab Results

You may request a reevaluation of results for Routing and Switching, Security and Service Provider labs for up to 14 days following your exam date. Use the link next to your lab record called “Request for Reread”. Due to the equipment used, rereads are not available for the Voice and Storage Networking exams. Each reread costs US$250 plus any applicable local taxes. Payment is made online via credit card and your card will be charged upon receipt of the request. You may not cancel the reread request once the process has been initiated and refunds are only given when the results change from Fail to Pass.

A reread consists of a second proctor loading your configurations onto a rack to recreate the test and rescore the entire exam. This process may take up to three weeks after receipt of payment. Only one reread per lab attempt is permitted. The result of the reread is an updated score report with success rates for each major section. Be aware that scores may decrease. Exams receive a Pass mark only when the total exam score exceeds 80%. Before requesting a reread, consider that, historically, only 0.3% of exams have been changed from Fail to Pass.

CCIE® Service Provider

350-029 CCIE SP Exam

Exam Description

The written exam is a two-hour, multiple choice exam with 100 questions. The exam is closed book and no outside reference materials are allowed.  Candidates preparing for the CCIE SP Written exam should possess expert level knowledge as a Service Provider network engineer to implement, troubleshoot, and optimize Service Provider features and technologies including Packet over SONET, IP over DWDM, GE/10GE, BGP, IGP Routing, LDP, MPLS and MPLS TE, Multicast, HA, QoS, and Layer 2 and 3 VPNs.

Get your CCIE Service Provider 350-029 Written Exam dumps