Getting your CCIE Service Provider Certification - Session

#CLUS

#CLUS

Kashif Zeeshan Rafael CearaTechnical Leader Systems EngineerCCIE SP, Collab CCIE SP,W,DC

TECCCIE-3406

Straight from the Source:Getting your CCIE Service Provider Certification

© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public#CLUS

Session Abstract

• The main objective of this session is to give you an overview of how the CCIE exams are managed and to provide you good guidance on what you need to look at when preparing and taking the exams.

• The session is mainly focusing on exam centric approaches and strategies and is not aimed at covering any technical topics susceptible to appear in the exams.

• Though most of the content may be applicable to some other CCIE tracks, this session is primarily focusing on CCIE Service Provider.

TECCCIE-3406 3


Agenda

• Section 1 - Cisco Certification Program Overview

• Section 2 - CCIE Service Provider Certification Overview

• Section 3 - CCIE SP Exam Topics

• Section 4 – CCIE SP Exam Format

• Section 5 – CCIE SP Preparation and Guidelines

• Section 6 – CCIE SP Written Samples

• Section 7 - CCIE SP Practical Exam Preview

• Section 8 - CCIE SP Evolving Technologies

TECCCIE-3406 4


Agenda

• Section 9 - Troubleshooting Module Case Studies

• Section 10 - Diagnostic Module Case Studies

• Section 11 - Configuration Module Case Studies

• Section 12 - Exam Tips and Tricks

• Section 13 - Lab Demo – Surprise !!!

• Resources and Trainings

TECCCIE-3406 5

Questions? Use Cisco Webex Teams to chat with the speaker after the session

Find this session in the Cisco Live Mobile App

Click “Join the Discussion”

Install Webex Teams or go directly to the team space

Enter messages/questions in the team space

How

Webex Teams will be moderated by the speaker until June 16, 2019.

1

2

3

4


Cisco Webex Teams

cs.co/ciscolivebot#TECCCIE-3406

6

Cisco Certification Overview


Why Get Certified 69 percent of IT hiring managers say that certifications increase their confidence in an applicant’s knowledge of the future direction of IT.

• Benefit 1 - Knowledge• Benefit 2 - Skill• Benefit 3 - Credibility• Benefit 4 - Validation• Benefit 5 - Responsibility• Benefit 6 – Confidence• Benefit 7 - Value• Benefit 8 – Versatility• Benefit 9 – Opportunity• Benefit 10 - Hire ability• Benefit 11 - Advancement• Benefit 12 - Salary

TECCCIE-3406 8


Certifications drive key skills for innovation and scale

Of CEOs say theircompany is facing disruptive

change driven by digital technologies

90%

Of CEOs say theircompany doesn’t have the

skills to adapt

70%

Of technology execs/managers believe

technical certifications are a critical success factor

78%

TECCCIE-3406 9


Certified employees are valued assets

99%of organizations use

certifications to make hiring decisions

Increased performance of certified employees

+42%better selection of technology

solutions

+41%more efficient

operations

+59%higher quality of

service

TECCCIE-3406 10


Cisco certified employees are key strategic assets

Cisco certified staff…

* of those surveyed agree

“The time taken and monies spent comes back tenfold in productivity andknowledge.”

- Technical manager on the importance of certifications

…build credibility and trust 80%*

78%*…are more successful

…are more influential 77%*

Source: Value of Certifications Research Report, 2018

TECCCIE-3406 11


CCIE SP Journey

WHY

HOW

BE

TECCCIE-3406 12


CCIE Track Major Skills

R&S Configure and troubleshoot complex converged networks

SecurityConfigure complex, end-to-end secure networks, troubleshoot environments, and anticipate and respond to network attacks

Service Provider Configure and troubleshoot advanced technologies to support service provider networks

Collaboration Design, implement, integrate, and troubleshoot complex collaboration networks

WirelessPlan, design, implement, operate, and troubleshoot wireless network and mobility infrastructure

Data CenterConfigure and troubleshoot Cisco Data Center technologies including DC infrastructure, compute and virtualization.

Cisco CCIE Certifications

TECCCIE-3406TECCCIE-3406 13


Written

CCIE Tracks and Exams

Routing/Switching

Security

LAB

Written LAB

Service Provider

LABWritten

Written LAB

Wireless LABWritten

Data Center Written LAB

Collaboration

TECCCIE-3406 14


Fixed and Mobile Locations

Johannesburg

Nairobi

Bangalore

Lagos

Sydney

Tokyo

Beijing

Hong Kong

Dubai

Brussels

Cairo

London

MoscowWarsaw

Kiev

Bucharest

Istanbul

Amman

Milan

Riyadh

DohaNew Delhi

Karachi

Kuala Lumpur

Singapore

Jakarta

Ho Chi MinhBangkok

Dalian

Seoul

OsakaShanghai

Taipei

Wuhan

Chengdu

Guangzhou

VancouverToronto

San Jose

Dallas

Chicago

Las Vegas

San Diego

Mexico City

Orlando

Miami

Buenos Aires

São Paulo

Mobile Locations

Fixed Locations

https://learningnetwork.cisco.com/docs/DOC-3224

TECCCIE-3406 15

https://learningnetwork.cisco.com/docs/DOC-3224


Familiarize With Documentation Page

DO NOT Heavily Rely On Documentation

URL Filtering Deployed In The Lab

Cisco Documentation

TECCCIE-3406 16


Keynote: You make Possible - KEYGEN-1001Monday, June 10, 10:30 AM - 12:00 PMChuck Robbins, Chairman & CEO

The making of tomorrow's expert: CCIE - BRKCRT-3100Tuesday, June 11, 8:30 AM - 10 AM

We are ALWAYS exploring ways to enhance our exam portfolio.

Please attend the following sessions here at Cisco Live to learn more about our future together!

AND

Make sure to visit us at the certifications lounge in the World of Solutions this week.

Cisco Live – Certifications Updates

TECCCIE-3406 17


EVPN Deep Dive with IOS-XR Configuration examples for Service Provider Metro and Data Center –BRKSPG-3965Wednesday, June 12, 08:00 AM - 10:00 AM

Life Changing Magic of Automating Segment Routing and MPLS – BRKMPL-2210Thursday, June 13, 08:00 AM - 10:00 AM

Bringing Programmability to Service Provider Deployments with IOS-XR – DEVWKS-2936Wednesday, June 12, 04:00 PM - 04:45 PM

Advanced Cisco IOS Device Instrumentation – BRKNMS-3021Tuesday, June 11, 01:00 PM - 03:00 PM

If you want to grow yourself and prepare yourself for the future, these are sessions you might want to attend, here at Cisco Live!

Cisco Live – Sessions of interest

TECCCIE-3406 18

CCIE Service ProviderCertification Overview


CCIE Minimum Qualified Candidate (MQC) definition

• The minimally qualified Service Provider CCIE candidate can:

- abstract functional elements of a complex network environment,

- understand how infrastructure components interoperate,

- grasp subtle issues,

- perceive problem areas,

- and quickly resolve problems.

• The expert’s fluency makes them ideally suited for configuring and validating implementations, troubleshooting critical network issues, and participating in network design teams.

• The MQC is aware of industry standards and best practices and is able to translate business and functional requirements into specific device configurations.

TECCCIE-3406 20


CCIE SP (400-201) Certification Process

• Pearson Location

• 2 hours

• Multiple Choices

• 90-110 questions

• No documentation

• Immediately scored

• Retake after 15 days

• Select Cisco Locations

• 8 hours lab

• Device-based content (TS + CFG)

• Web-based content (DIAG)

• Cisco Documentation

• Score within 48 hours

• Retake after 30 days

First attempt

within 18

months

PassPass

TECCCIE-3406 21


CCIE SP Lab Skills Assessment

A BProblem Solution

TSDIAG

TECCCIE-3406 22



Y ZDesign

RequirementImplementation

Decision

CFG

TECCCIE-3406 23



• Perceive problem areas• Analyze symptoms of networking

issues, identify and describe root cause

• Correlate information from multiple sources

• Discern appropriate solution • Apply troubleshooting

methodologies• Troubleshoot any topic on the

blueprint

• Abstract functional element of complex network environment

• Understand how infrastructure components interoperate

• Implement any topic on the blueprint

• Deploy appropriate solutions to network infrastructure’s challenges within constraints and verifyfunctionality

• Resolve networking problems• Use IOS-XE/XR troubleshooting

tools• Apply troubleshooting

methodologies• Troubleshoot any topic on the

blueprint• Implement and verify working

solution of networking issues

TS DIAG CFG

TECCCIE-3406 24

CCIE SP Exam Topics


Exam Topics (a.k.a Blueprint)

learningnetwork.cisco.comCertifications > Expert > Exam >Topics

TECCCIE-3406 26


CCIE SP Curriculum

• CLN Home > Certifications > CCIE Service Provider

• https://learningnetwork.cisco.com/community/certifications/ccie_service_provider

• Written Exam Topics: https://learningnetwork.cisco.com/community/certifications/ccie_service_provider/written_exam_v4/exam-topics

• Lab Exam Topics: https://learningnetwork.cisco.com/community/certifications/ccie_service_provider/lab_exam_v4/exam-topics

TECCCIE-3406 27

https://learningnetwork.cisco.com/welcome

https://learningnetwork.cisco.com/community/certifications

https://learningnetwork.cisco.com/community/certifications/ccie_service_provider

https://learningnetwork.cisco.com/community/certifications/ccie_service_provider/written_exam_v4/exam-topics

https://learningnetwork.cisco.com/community/certifications/ccie_service_provider/lab_exam_v4/exam-topics


CCIE SP v4.1 – Unified Exam Topics

Domains Written Lab

1. Core Routing 25% 30%

2. Architecture and Services 21% 22%

3. Access and Aggregation 18% 21%

4. High Availability and Fast Convergence 14% 15%

5. Security, Operation, and Management 12% 12%

6. Evolving Technologies 10% 0%


TECCCIE-3406 28



1.1 Interior Gateway Protocol (IGP)

1.2 Border Gateway Protocol (BGP)

1.3 Multiprotocol Label Switching (MPLS)

1.4 MPLS Traffic Engineering

1.5 Multicast

1.6 Quality of Service (QoS)

TasksDomain

1.0 Core Routing

CCIE SP 4.1 Unified Exam Topics

TECCCIE-3406 29


2.1 Service Provider Architecture concepts

2.2 Virtualization concepts

2.3 Carrier Ethernet

2.4 L3VPN

2.5 Overlay VPN

2.6 Internet Service

TasksDomain

2.0 Architecture and Services


TECCCIE-3406 30


3.1 Transport and encapsulation technologies

3.2 PE-CE connectivity

3.3 Quality of Service (QoS)

3.4 Multicast

TasksDomain

3.0 Access and Aggregation

CCIE SP Unified Exam Topics

TECCCIE-3406 31


4.1 System Level HA

4.2 Layer 1/2/3 failure detection techniques

4.3 Routing and Fast Convergence

TasksDomain

4.0 High Availability and Fast Convergence


TECCCIE-3406 32


5.1 Control plane security

5.2 Management plane security

5.3 Infrastructure security

5.4 Timing and Synchronization

5.5 Network Monitoring and Troubleshooting

5.6 Network configuration and change management

TasksDomain

5.0 Security, Operation and Management


TECCCIE-3406 33


4.1 Cloud

4.2 Network Programmability

4.3 Internet of Things (IoT)

TasksDomain

6.0 Evolving Technologies


TECCCIE-3406 34


Exam Topics Structure

Domains > Sub-domains > Tasks > Sub-tasks

Action verb + Technical topic

TECCCIE-3406 35

CCIE SP Exam Format


CCIE SP Lab Exam Format

Troubleshooting(2h)

Configuration(5h30)

Virtual devices

DIAG(30min)

No Device Virtual devices

Web-based delivery

Optional + 30min

Optional - 30min

Min Score Min ScoreMin Score

Cut Score

37

Timing structure Scoring logic

100% Virtual (VIRL based)

TECCCIE-3406 37


Lab Timing structure

• TS is maximum 150 mins

Independent Incidents

Console Access to devices

TS Topology specific scenarios

• DIAG is fixed to 30 mins

Independent Incidents

No Console Access to devices

TS Topology specific scenarios

Troubleshooting(2h)

Configuration(5h30)

DIAG(fixed 30min)

Optional + 30min

Optional - 30min

• CFG is 8h minus (TS + DIAG) == minimum 310 mins

Dependent Items

Console Access to devices

CFG Topology specific scenarios

TECCCIE-3406 38


Scoring Logic

• 2 required conditions to PASS:

• #1: MUST meet or exceed each module’s minScore

• #2: MUST meet or exceed the Lab’s TOTAL cutScore

Troubleshooting ConfigurationDIAG

Min Score Min ScoreMin Score

Cut Score

Min Score

Cut Score

TECCCIE-3406 39


Example#1: PASS+FAIL+PASS = FAIL

Module Total score Min score Cut score

TS 30 15 23

DIAG 10 4 7

CFG 60 25 45

100 75

Candidate 1 Score PASS/FAIL

TS 28 PASS

DIAG 2 FAIL

CFG 52 PASS

LAB 82 FAIL

#1: DIDN’t meet or exceed each module’s Min score#2: met or exceeded the Lab’s TOTAL Cut score

Strong in both TS and CFG but very weak in DIAG.

Min Score

Cut Score

TECCCIE-3406 40


Example#2: PASS+PASS+PASS = FAIL


TS 30 15 23

DIAG 10 4 7

CFG 60 25 45

100 75


TS 15 PASS

DIAG 5 PASS

CFG 27 PASS

LAB 47 FAIL

#1: met or exceed each module’s Min score#2: DIDN’T meet or exceed the Lab’s TOTAL Cut score

Passed all modules Min score, but total < Cut score!

Min Score

Cut Score

TECCCIE-3406 41


Example#3: PASS+PASS+PASS = PASS


TS 30 15 23

DIAG 10 4 7

CFG 60 25 45

100 75


TS 18 PASS

DIAG 5 PASS

CFG 52 PASS

LAB 75 PASS

#1: met or exceeded each module’s Min score#2: met or exceeded the Lab’s TOTAL Cut score

Compensated a weakness in TS with strength in CFG!

Min Score

Cut Score

TECCCIE-3406 42


• 120 min

• Option up to 30 min extra

• Time extracted from Configuration Module

• 11 Independent incidents

• Console access to the devices

• Topology specific for Troubleshooting scenario

Troubleshooting Module

Skills Tested• Quickly resolve network issues• Use of IOS, XE/XR

troubleshooting tools• Troubleshooting methodologies

application• Technology areas listed in the

blueprint• Fix and verify and solution for

the network issues

TECCCIE-3406 43


• 60 min

• Two scenarios / topologies / configuration set

• 10 Independent tickets

• No Console access to the devices

• Multiple source of information

Diagnostic Module

Skills Tested• Perceive network issues• Analyze network issues

symptoms, identify and describe the root cause

• Correlate information from multiple sources

• Identify appropriate solutions• Troubleshooting methodologies• Technology listed in the blueprint

TECCCIE-3406 44


• 300 min (5 hours)

• Optional time up to -30min

• if used in Troubleshoot module

• Items can be dependent to each other

• Console access to the devices

• Devices are loaded with working configuration

Configuration Module

Skills Tested• Abstract functional element of the

entire network environment• Understand how the

infrastructure components interoperate

• Implement technology areas listed in the blueprint

• Deploy appropriate solutions to the SP backbone being aware of the design constraints

• Verify functionality

TECCCIE-3406 45


Lab Exam Grading System

• Proctors grade all lab exams

• Automatic tools aid proctors with simple grading tasks

• Never solely responsible for the final exam grading

• Proctors verify each module configurations and solutions

• No Partial credit awarded on questions

• Points are awarded for working solutions only

• Some questions have multiple solutions

TECCCIE-3406 46


Proactive and Holistic Candidate Feedback

INPUT

• Cisco Business Units

• Cisco Technology groups

• Cisco Technical Support teams

• Cisco SME (internal & external)

• Customers

• Cisco Product Manager

• Cisco Marketing Manager

FEEDBACK

• Candidate Exam Comments

• Item Level Comments

• Candidate Satisfaction Surveys

• Customer Service Cases

• Exam Advisory Groups

• Cisco Learning Network

• Blogs

Create

or Refresh Exam

Content

Exam Live

TECCCIE-3406 47

CCIE SP Exam Preparation and Guidelines


CCIE Exam Preparation

LEARN

Read

Understand

Remember

PRACTICE

Basic Scenario

Increase Difficulty

PRACTICE

Explore

Observe

Invent

Troubleshoot

Verify

Anticipate

Validate

TECCCIE-3406 49


Get started…

• Make time!

• The first few hours are the most difficult

• Study on daily basis

• Be consistent and maintain the pace

• Create the study habit…

• And… Remember Newton’s First Law of motion…

“An object that is at rest will stay at rest unless an external force acts upon it”

TECCCIE-3406 50


CCIE SP Preparation Materials

• CCIE SP learning matrixhttps://learningcontent.cisco.com/cln_storage/text/cln/marketing/ccie-learning-matrix/CCIE_SP_v4.1_Agile_Learning_Matrix_v3.xlsx

• CCIE SP workbookhttps://learningnetworkstore.cisco.com/cisco-ccie-expert-training/level-for-service-provider-v4-1-lab-workbook-360-sp-04-wkb-core-020997

• CCIE SP webinar serieshttps://learningnetwork.cisco.com/community/learning_center/ccie-sp-training-videos

• CCIE SP boot camphttps://micronicstraining.com/event/ccie-service-provider-v4-boot-camp/

• CCIE SP study group https://learningnetwork.cisco.com/groups/ccie-sp-study-group

TECCCIE-3406 51

https://learningcontent.cisco.com/cln_storage/text/cln/marketing/ccie-learning-matrix/CCIE_SP_v4.1_Agile_Learning_Matrix_v3.xlsx

https://learningnetworkstore.cisco.com/cisco-ccie-expert-training/level-for-service-provider-v4-1-lab-workbook-360-sp-04-wkb-core-020997

https://learningnetwork.cisco.com/community/learning_center/ccie-sp-training-videos

https://micronicstraining.com/event/ccie-service-provider-v4-boot-camp/

https://learningnetwork.cisco.com/groups/ccie-sp-study-group


Lab Exam Guidelines

• General recommendations

• Timing

• Scoring

• Inter-dependency

• Prohibited solutions

• Devices

TECCCIE-3406 52


Lab Exam Guidelines

General recommendations

• Read all items before starting

• Verify initial configurations

• Required exhibits aren’t always sufficient

• Manage your time

• Pay attention to details

TECCCIE-3406 53


TS Exam Guidelines

• Solve the issue(s) that are reported in the stem, not the network design!

• Align to the existing scenario (use Diagrams as reference)

• Do not remove any preconfigured feature! (ex. ACL)

• Do not change routing protocol(s) boundaries, unless it is the issue!

• Do not use static routes to resolve connectivity, unless it is the issue!

• Use the validation test(s) to confirm resolution (necessary but not sufficient!)

• Do not add interfaces or features unless specified.

TECCCIE-3406 54


DIAG Exam Guidelines

• Play the role of a network support engineer and understand the situation, analyze the documentation, correlate information and discern between relevant vs non-relevant data point, make a choice between the options.

• Read the whole ticket stem and options before diving into the additional resources (email thread, console session, topology diagram, syslogs, …)

• Select as many options as requested.

• No partial scoring on item level.

• Answers can be changed until timer is expired, final answers are auto-submitted.

TECCCIE-3406 55


CFG Exam Guidelines

• Read all items and understand the overall scenario.

• The overall scenario targets full reachability between all sites, unless specified.

• Points are awarded per item if the solution meets all requirements.

• There are many valid solutions, grading is based on outcome.

• Do not use static route and redistributions unless explicitly requested to.

• Do not change IP addressing or routing protocols boundaries.

• Do not add interfaces unless specified.

• Plan for regression tests after completed substantial changes.

TECCCIE-3406 56


Exam Strategy: Manage your time!

Do not get stuck!

• Set time limit per item

• Use your watch or workstation’ clock

• Monitor the session’s count-down timer (TS & DIAG)

• STOP and move on to the next item

• Keep a note… and get back to it later…

• Use prohibited solution if needed…

• Troubleshoot before asking help to the proctor

TECCCIE-3406 57


Exam Strategy: Pay attention to the detail!

Do not assume!

• Read items multiple times > 3 - 7

• Consult diagrams! (authoritative reference)

• Think, anticipate and plan before doing

• Beware of typos!

• Use notepad + copy/paste to author config snippets

• Verify states, not configuration

• Re-read item when completed, check for anything missing

Read, Think, Anticipate, Do, Verify, Re-read, Re-verify!

TECCCIE-3406 58


Exam Strategy: Control your stress!

Build your confidence level!

• Relax!

• Scan read and cherry pick items!

• Take the low-hanging fruits! (Collect the ‘easy’ points first!)

• Use notepad to speed up configs!

• Rely on the documentation!

• Keep notes of overall progress (TS & CFG).

TECCCIE-3406 59


Overall Strategy for each Exam Module

TS: Don’t get stuck!

DIAG: Make your choice!

CFG: Anticipate, Do, Verify!

Practical Exam

TS DIAG CFG

TECCCIE-3406 60

CCIE SP Sample Written Items


CCIE SP: Written Exam: 400-201

• If Multiple Choice – Single Answer: Select only one option

• If Multiple Choice – Multiple Answer: Must select as many options as indicated

• If Drag and Drop (DnD): Select as many options as there are targets

• If there is an exhibit, use the information provided

• No “skip” questions functionality

• Closed Books


TECCCIE-3406TECCCIE-3406 62



Single-Choice Single-Answer

What is NETCONF?

It is a new recommendation which writes device specific CLI scripts while keeping flexibility in a vendor dependence environment.

It is a data modeling language, to help remove the time, cost, and manual steps involved in the network element configuration.

It is a Cisco proprietary solution to help remove the time, cost, and manual steps involved in the network element configuration.

It is a standard for installing, manipulating, and deleting configuration of the network devices.

TECCCIE-3406 63


What is NETCONF?

It is a new recommendation which writes device specific CLI scripts while keeping flexibility in a vendor dependence environment.

It is a data modeling language, to help remove the time, cost, and manual steps involved in the network element configuration.

It is a Cisco proprietary solution to help remove the time, cost, and manual steps involved in the network element configuration.

It is a standard for installing, manipulating, and deleting configuration of the network devices.

Single-Choice Single-Answer

TECCCIE-3406 64


Which three methods assign traffic to the MPLS TE tunnel? (Choose three.)

static route

BGP

autoroute

target LDP

policy based routing

RSVP

IGP

Multiple-Choice Multiple-Answer

TECCCIE-3406 65


Which three methods assign traffic to the MPLS TE tunnel? (Choose three.)

static route

BGP

autoroute

target LDP

policy based routing

RSVP

IGP

Multiple-Choice Multiple-Answer

TECCCIE-3406 66


ExhibitGig 0/0 Gig 0/0

20.20.20.0/30.1 .2

R1#interface Loopback 0

ip address 1.1.1.1 255.255.255.255

!

interface GigabitEthernet 0/0

ip addresss 20.20.20.1 255.255.255.252

!

router bgp 100

no synchronization

bgp log-neighbor-changes

neighbor 2.2.2.2 remote-as 100

no auto-summary

R1# sh bgp ipv4 unicast summary

...

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

2.2.2.2 4 100 7669 7844 67 0 0 never idle

R2# interface Loopback 0

ip address 2.2.2.2 255.255.255.255

!

interface GigabitEthernet 0/0

ip addresss 20.20.20.2 255.255.255.252

!

router bgp 100

no synchronization

bgp log-neighbor-changes

neighbor 1.1.1.1 remote-as 100

no auto-summary

R2R1

TECCCIE-3406 67


Exhibit

Refer to the exhibit. No IGP is running in the link between R1 and R2. Which two actions fix the BGP issue? (Choose two.)

apply update-source Loopback 0 command

enable BGP multihop

disable the auto-summary

enable synchronization

add a static route for the IP address of the Loopback interface of the BGP peer

advertise the IP address of the local Loopback interface via BGP

TECCCIE-3406 68


Exhibit

Refer to the exhibit. No IGP is running in the link between R1 and R2. Which two actions fix the BGP issue? (Choose two.)

apply update-source Loopback 0 command

enable BGP multihop

disable the auto-summary

enable synchronization

add a static route for the IP address of the Loopback interface of the BGP peer

advertise the IP address of the local Loopback interface via BGP

TECCCIE-3406 69


Drag and drop the OSPF features on the left onto the correct OSPF version on the

right. OSPFv2

Drag and Drop

OSPFv3

IPv6 support

network information process per-link basis

locally significant instance ID

network information process per-subnet basis

MD5 authentication

TECCCIE-3406 70


Drag and drop the OSPF features on the left onto the correct OSPF version on the right.

OSPFv2

Drag and Drop

OSPFv3

IPv6 support

network information process per-link basis

locally significant instance ID

network information process per-subnet basis

MD5 authentication

TECCCIE-3406 71


Place the BGP attributes in the correct order used for determining a route.

Originate Route

AS-Path

Weight

Local Preference

MED

1st

2nd

3rd

4th

5th

Weight

Local Preference

Originate Route

AS-Path

MED

Drag and Drop

TECCCIE-3406 72

CCIE SP Practical Exam Preview


Lab Exam Environment

• 100% Web-based

• No printed workbook

• Dual-monitor

• Qwerty keyboard

• Windows 7 (standardized)

• Custom PuTTY

• Color pens + Scratch paper

TECCCIE-3406 74


Lab Exam WebGUI

• Clickable map on all required devices icon (some may not be available)

TECCCIE-3406 75


Lab Exam WebGUI

• Open individual item, section or diagram in a separate popup

TECCCIE-3406 76


Lab Exam WebGUI

• Consult guidelines in separate popup

TECCCIE-3406 77


Lab Exam WebGUI

• Manage devices: (virtual only)

• status, connect to console, power-cycle, revert to initial config

TECCCIE-3406 78


Lab Exam WebGUI

• Consult system and console help

TECCCIE-3406 79


Lab Exam WebGUI

• Confirmation required when clicking “End Session”…

TECCCIE-3406 80


Countdown timer

• Warning message in modal window

TECCCIE-3406 81

CCIE SP Evolving Technologies


CCIE SP Automation and Network Programmability

Programmable Interface Agents

*

remote procedure call

IOX XRIOX XE

TECCCIE-3406 83



Network Engineers

Routers

Switches

Firewalls

Controllers

Access Services

#!/usr/bin/env python

#Python NetConf script

from lxml import etree

from ncclient import manager

if __name__ == "__main__":

---

---

- name: Retrieve facts from Switches

hosts: switches

connection: local

TECCCIE-3406 84



https://developer.cisco.com/docs/nso/

• Accelerate activation times and

services

• Increase agility and scale

• Simplify your network operations

• Promote open architectures

• Ensure trusted operations

Network Services Orchestrator

https://www.cisco.com/go/nso/

TECCCIE-3406 85

https://developer.cisco.com/docs/nso/

https://www.cisco.com/docs/nso/


CCIE SP Automation and Programmabilityhttps://developer.cisco.com/learning/tracks/iosxe-programmability

https://developer.cisco.com/learning/tracks/iosxr-programmability

TECCCIE-3406 86

https://developer.cisco.com/learning/tracks/iosxe-programmability

https://developer.cisco.com/learning/tracks/iosxr-programmability


Real Use Cases

Web/Cloud Providers

Mobility 2G, 3G,4G,5G

Packet Core Network

MobileXhaul/Backhaul

Network

P Routers

PEPEPE

PE

PE

PE

PE

PE

PE PE PE PE

PE

RR Clusters

Internal SP Cloud

Access Services

PEPE

PE

PE

PE

PE

Tier 1 ISPs

PE

PE

PE

PE

Tier 2,3 ISPs

Web/Cloud Providers

PE

Customers/ServicesColo

PE

PE PE PE PE

ISIS/OSPF/BGP/MPLS

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

TECCCIE-3406 87


Real Use Cases

POD1 POD2 POD3 POD4 POD5 PODN+1

Service ProvidersDark FiberOther Regions/DCs

eBGPeBGP

eBGPeBGP

eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGPeBGP eBGP eBGP eBGP

eBGP eBGP eBGP eBGP

TECCCIE-3406 88


Real Use Cases


Service ProvidersDark Fiber

Other Regions/DCs

eBGP eBGP eBGP eBGP

TECCCIE-3406 89


Real Use Cases

Web/Cloud Providers


Packet Core Network


Network

P Routers

PEPEPE

PE

PE

PE

PE

PE

PE PE PE PE

PE

RR Clusters

Internal SP Cloud

Access Services

PE

PE

PE

PE

PE

PE

Tier 1 ISPs

PE

PE

PE

PE

Tier 2,3 ISPs

Web/Cloud Providers

PE


PE

PE PE PE PE

ISIS/OSPF/BGP/MPLS

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGPeBGP

TECCCIE-3406 90



Internet /SP Backbone

eBGP eBGP eBGP eBGP

eBGP eBGP eBGP eBGPeBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP

eBGPeBGP

eBGPeBGP

eBGP

Automation with Cisco NSO

Real Use Cases

TECCCIE-3406 91



Service Providers

Dark FiberOther Regions/DCs

eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGPeBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGPeBGP eBGP eBGP eBGP

eBGP

eBGPeBGP

eBGP

eBGP eBGP

eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGP eBGPeBGP eBGP eBGP eBGPeBGP eBGP eBGP eBGPeBGP eBGP eBGP eBGP

eBGP

eBGP

eBGP


No Automation = Army of Networks Engineers

eBGPeBGPeBGP

Real Use Cases

TECCCIE-3406 92


Web/Cloud Providers


Packet Core Network


Network

P Routers

PEPEPE

PE

PE

PE

PE

PE

PE PE PE PE

PE

RR Clusters

Internal SP Cloud

Access Services

PEPE

PE

PE

PE

PE

Tier 1 ISPs

PE

PE

PE

PE

Tier 2,3 ISPs

Web/Cloud Providers

PE


PE

PE PE PE PE

ISIS/OSPF/BGP/MPLS

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGP

eBGPeBGP



Network

1

2

eBGP

MPLS-Traffic Engineer (TE)

Segment Routing (SR)

• Node ID• Segment ID• Segment Label Stack- Incoming Seg ID- Outgoing Seg ID- Interface/Dest IP

Real Use Cases

TECCCIE-3406 93

CCIE SP TS Case Study #1


Topology

TECCCIE-3406 95


Incident 1:

There is an issue in the BGP flowspec configured between PEx53 and ASBRx52. Your task is to fix this issue.

After you complete the task, the output of the show bgp ipv4 flowspec command must be as per this output:

Score: 1 points

RP/0/0/CPU0:ASBRx52# show bgp ipv4 flowspec... [omitted output]

Status codes: s suppressed, d damped, h history, * valid, > besti - internal, r RIB-failure, S stale, N Nexthop-discard

Origin codes: i - IGP, e - EGP, ? - incompleteNetwork Next Hop Metric LocPrf Weight Path

*>iDest:123.123.123.123/32,DPort:=80|=443/96

0.0.0.0 100 0 i

TECCCIE-3406 96


Solution: Add AF IPv4 flowspec

PEx53:

router bgp 65020

neighbor 192.168.0.52

address-family ipv4 flowspec

!

!

TECCCIE-3406 97


Verification

RP/0/0/CPU0:PEx53# show bgp ipv4 flowspec summary

... [omitted output]

Process RcvTblVer bRIB/RIB LabelVer ImportVer SendTblVer StandbyVer

Speaker 2 2 2 2 2 0

Neighbor Spk AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down St/PfxRcd

192.168.0.52 0 65020 47297 47585 2 0 0 00:00:32 0 <- vs.(NoNeg)

RP/0/0/CPU0:PEx53#show bgp ipv4 flowspec Dest:123.123.123.123/32,DPort:=80|=443


Advertised to peers (in unique update groups):

192.168.0.52

Path #1: Received by speaker 0

Advertised to peers (in unique update groups):

192.168.0.52

Local

0.0.0.0 from 0.0.0.0 (192.168.0.53)

Origin IGP, localpref 100, valid, redistributed, best, group-best

Received Path ID 0, Local Path ID 0, version 2

Extended community: FLOWSPEC Traffic-rate:65020,3125

TECCCIE-3406 98


Verification

RP/0/0/CPU0:PEx53#show flowspec summary

FlowSpec Manager Summary:

Tables: 1

Flows: 1

RP/0/0/CPU0:PEx53#show flowspec client

Client: bgp.1

State: Connected

Flows: 0

Client: policy.1

State: Connected

Flows: 1

RP/0/0/CPU0:PEx53#show flowspec ipv4

AFI: IPv4

Flow :Dest:123.123.123.123/32,DPort:=80|=443

Actions :Traffic-rate: 25000 bps (policy.1.FLOWSPEC.BAD-WEB)

TECCCIE-3406 99

CCIE SP TS Case Study #2


Topology

TECCCIE-3406 101


Incident: 2

PE54 cannot ping the IPv4 address of the Loopback 0 interface of PE12 (10.0.0.12). Your task is to fix this issue.

After you complete the task, this ping command should be successful.

Score: 2 points

PE54# ping 10.0.0.12 source loopback 0Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 10.0.0.12, timeout is 2 seconds:Packet sent with a source address of 192.168.0.54

!!!!!Success rate is 1000 percent (5/5)

TECCCIE-3406 102


Solution: On PEx53 (RR) remove next-hop-self

Before: PE54#show ip bgp


Network Next Hop Metric LocPrf Weight Path

*>i 10.0.0.11/32 192.168.0.53 0 100 0 65010 i

*>i 10.0.0.12/32 192.168.0.53 0 100 0 65010 I

The Next Hop should be the ASBRs – ASBR51 and ASBRx52

PEx53:router bgp 65020neighbor-group IBGPaddress-family ipv4 labeled-unicastno next-hop-self

!address-family vpnv4 unicastno next-hop-self

!address-family ipv6 unicastno next-hop-self

!address-family vpnv6 unicastno next-hop-self

TECCCIE-3406 103

Next-hop is the RR


Verification

PE54#show ip bgp



*>i 10.0.0.11/32 192.168.0.51 0 100 0 65010 i

*>i 10.0.0.12/32 192.168.0.51 0 100 0 65010 I

PE54#ping 10.0.0.12 source loopback 0

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.0.0.12, timeout is 2 seconds:

Packet sent with a source address of 192.168.0.54

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 10/16/28 ms

TECCCIE-3406 104

CCIE SP DIAG Case Study #1


Task Description: MPLS-TE

The traffic from 10.0.046 (CE41) to 10.0.0.44 (CE44) must go via P14. The MPLS TE tunnel 111 is configured on PE11 to PE15, but it’s not working as expected. Drag and drop the device and issue listed on the left onto the correspondent place on the right. Not all options are used.

Score: 1 point

device

issue

PE11

PE12

PE13

P14

P15

failed link P14-P16

no route to destination

path error

loose object in a path

wrong explicit-path

TECCCIE-3406 106


Topology

AS 4142

CE41

CE42

CE43

AS 45

CE45

CE46

AS 46

PE13

PE12 P14

CE44

PE16

RR25

P15PE11

RR17

AS 100

PE23

PE31AS 200

AS 300

PE21

PE24PE22

AS 44AS 43

Loopback0: 10.0.0.x/32, where x is the Router No.

XR interfaces begin with G0/0/0/x

The last octet of an IP address is the Router No. + mask /24

/0 /1

/4 /2

/0

/1

/2

/4

/3

/1

/0

/2

/1/0

/0

/1 /2/5

/3

/0

/2

/1

/0

/3

/1

/4g2

g3

g3

g2

10.1.1

g2 g3

g2

g5g4

g6 g2

g2

g2

g2g4 g3

g6 g2

g5

g2/3

10.3.41

g4g5

g3

g2

g3

g5

g3

g4

g6

10.2.41

10.2.42

10.1.9

g4

g3

g7

g5 10.1.8

10.1.3

10.1.6

10.1.7

10.1.11

172.16.3

172.16.1192.168.1

192.168.7

192.168.5

192.168.8

192.168.4

192.168.6

10.2.44

TECCCIE-3406 107


Resource: Email

From: NOC-global <[email protected]>Date: Mon, Jun 11, 2018 at 1:34 PMTo: Provisioning <[email protected]>Subject: Re; Core network down [SR12436343]

Here are the outputs. It does not look like an issue with routing or with labels. Traffic via T111 is not going through. Shall I shut down this interface or will you verify a cfg? Please let me know asap. Some customers are becoming edgy.

=========================================================From: Provisioning <[email protected]>Date: Mon, Jun 11, 2018 at 1:12 PMTo: NOC-global <[email protected]> Subject: Core network down [SR12436343]

HiDerek who configured TE tunnels is out of the office after his shift. I can have a look within an hour. Send us outputs from show mplstraffic-eng tunnels details, show route and show mpls forward.

Regards,Paul

TECCCIE-3406 108


Resource: Output

RP/0/0/CPU0:PE11#sh mpls traffic-eng tunnels detName: tunnel-te111 Destination: 10.1.6.15 Ifhandle:0xd0

Signalled-Name: PE11_t111Status:

Admin: up Oper: up Path: valid Signalling: connectedpath option 10, type dynamic (Basis for Setup, path weight 20)path option 5, type explicit divert2Last PCALC Error: Sun Jun 10 22:15:51 2018

Info: Path-option is skipped because it is held downLast Signalled Error : Sun Jun 10 22:15:51 2018

Info: [23] PathErr(23,769)-(system) at 10.1.3.13G-PID: 0x0800 (derived from egress interface properties)

[..]

RP/0/0/CPU0:PE11#sh explicit-paths n divert2Path divert2 status enabled

10: next-address strict 10.0.0.1320: next-address loose 10.0.0.1415: next-address strict 10.1.5.1230: next-address strict 10.1.3.1340: next-address strict 10.0.0.15

TECCCIE-3406 109


Resource: Output

RP/0/0/CPU0:PE11#sh route 10.1.6.15

Routing entry for 10.1.6.0/24

Known via "isis AS100", distance 115, metric 11, type level-2

Installed Jun 10 22:15:51.334 for 1w2d

Routing Descriptor Blocks

10.1.6.15, from 10.0.0.15, via tunnel-te111

Route metric is 11

No advertising protos.

P14#sh ip int brief

Interface IP-Address OK? Method Status Protocol

GigabitEthernet1 10.255.0.121 YES TFTP up up




GigabitEthernet5 10.1.8.14 YES TFTP administratively down down

GigabitEthernet6 unassigned YES unset administratively down down


Loopback0 10.0.0.14 YES TFTP up up

TECCCIE-3406 110


Resource: Output

RP/0/0/CPU0:P13#sh mpls traffic-eng tunnels detLSP Tunnel 10.0.0.11 111 [24] is signalled, Signaling State: upTunnel Name: PE11_t111 Tunnel Role: MidInLabel: GigabitEthernet0/0/0/1, 24007OutLabel: GigabitEthernet0/0/0/4, implicit-nullSignalling Info:Src 10.0.0.11 Dst 10.1.6.15, Tun ID 111, Tun Inst 24, Ext ID 10.0.0.11Router-IDs: upstream 10.0.0.11

local 10.0.0.13downstream 10.0.0.15

Bandwidth: 10000 kbps (CT0) Priority: 7 7 DSTE-class: 0Soft Preemption: NoneSRLGs: not collectedPath Info:Incoming Address: 10.1.1.13Incoming:Explicit Route:Strict, 10.1.1.13Strict, 10.1.6.15Strict, 10.0.0.15

Outgoing:Explicit Route:Strict, 10.1.6.15Strict, 10.0.0.15

[..]

TECCCIE-3406 111


Resource: Output

PE12#sh mpls traffic-eng tunnels det

P2P TUNNELS/LSPs:

P2MP TUNNELS:

P2MP SUB-LSPS:

P14#sh mpls traffic-eng tunnels det

P2P TUNNELS/LSPs:

P2MP TUNNELS:

P2MP SUB-LSPS:

TECCCIE-3406 112


Answer and Explanation

Answer:

Explanation:

The explicit path divert2 is going through PE13, PE12, PE14 and back to PE13.

device

issue

PE11

wrong explicit-path

TECCCIE-3406 113


Verification

RP/0/0/CPU0:PE11#sh mpls traffic-eng tunnels det

Tue Jan 16 22:15:53.024 UTC

Name: tunnel-te111 Destination: 10.1.6.15 Ifhandle:0xd0

Signalled-Name: PE11_t111

Status:

Admin: up Oper: up Path: valid Signalling: connected

path option 10, type dynamic (Basis for Setup, path weight 20)

path option 5, type explicit divert2

Last PCALC Error: Sut Jun 10 22:15:51 2018

Info: Path-option is skipped because it is held down

Last Signalled Error : Tue Jan 16 22:15:51 2018

[..]

RP/0/0/CPU0:PE11#sh explicit-paths n divert2

Path divert2 status enabled

10: next-address strict 10.0.0.13

20: next-address loose 10.0.0.14




TECCCIE-3406 114

CCIE SP CFG Case Study #1


Topology

TECCCIE-3406 116


Question

Configure Segment Routing on AS65020 devices as per the following requirements:

a) Segment Routing is the preferred label packet forwarding method

b) Labels are allocated by IS-IS for IPv4 and IPv6

c) SRGB holds up to 1000 labels and starts at 30000

d) The Prefix SID index must be the same as the last octet of the IPv4 address of the Loopback0 interface of the router

Score: 4 points

TECCCIE-3406 117


Solution

IOS-XR: ASBRx52, PEx53

router isis 192

segment-routing global-block 30000 30999

address-family ipv4 unicast

segment-routing mpls sr-prefer

!

interface Loopback0

address-family ipv4 unicast

prefix-sid index [52|53]

IOS-XE: ASBR51, PE54

segment-routing mpls

!

set-attributes

address-family ipv4

sr-label-preferred

exit-address-family

!

global-block 30000 30999

!

connected-prefix-sid-map

address-family ipv4

192.168.0.[51|54]/32 index [51|54] range 1

exit-address-family

!

router isis

segment-routing mpls

!

TECCCIE-3406 118


Verification: IOS-XR

RP/0/0/CPU0:PEx53#show mpls forwarding

Local Outgoing Prefix Outgoing Next Hop Bytes

Label Label or ID Interface Switched

------ ----------- ------------------ ------------ --------------- ------------

20051 Pop SR Pfx (idx 51) Gi0/0/0/0 192.168.13.51 3347

20052 Pop SR Pfx (idx 52) Gi0/0/0/1 192.168.23.52 596000

20053 Pop SR Pfx (idx 53) Gi0/0/0/3 192.168.34.54 6801

RP/0/0/CPU0:PEx53#show isis data ASBRx52.00-00 verbose

IS-IS 192 (Level-1) Link State Database

LSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OL

ASBRx52.00-00 0x00000eaf 0x92a2 821 0/0/0

<>

Router Cap: 192.168.0.52, D:0, S:0

Segment Routing: I:1 V:1, SRGB Base: 20000 Range: 3000

<>

Metric: 0 IP-Extended 192.168.0.52/32

Prefix-SID Index: 52, Algorithm:0, R:0 N:1 P:0 E:0 V:0 L:0

TECCCIE-3406 119


Verification: IOS-XE

PE54#show segment-routing attributes

ipv4

sr_label_preferred : Yes

explicit_null : No

PE54#sh segment-routing mpls gb

LABEL-MIN LABEL_MAX STATE DEFAULT

20000 22999 ENABLED No

PE54#sh segment-routing mpls connected-prefix-sid-map ipv4

PREFIX_SID_CONN_MAP ALGO_0

Prefix/masklen SID Type Range Flags SRGB

192.168.0.54/32 54 Indx 1 Y

PREFIX_SID_PROTOCOL_ADV_MAP ALGO_0

Prefix/masklen SID Type Range Flags SRGB Source

192.168.0.51/32 51 Indx 1 Y IS-IS Level 1 0000.0000.0051

192.168.0.52/32 52 Indx 1 Y IS-IS Level 1 0000.0000.0052

192.168.0.53/32 53 Indx 1 Y IS-IS Level 1 0000.0000.0053

192.168.0.54/32 54 Indx 1 Y IS-IS Level 1 0000.0000.0054

TECCCIE-3406 120

CCIE SP CFG Case Study #2


Topology – Fast Convergence

AS118 AS218

CE1 CE8

PE2

PE3

RR4

RR5

PE6

PE7

ISP1

Question: Configure ISP1 routers to ensure that IPv4 BGP prefix fast convergence is achieved for both link and node failures by leveraging diverse paths at the Core and Edge of the network. Note: Configuration of BGP diverse-path and multipath features is not allowed.

TECCCIE-3406 122


BGP PIC – Prefix Independent Convergence

• Speed up convergence by installing a backup/alternate path in RIB and FIB and make the convergence independent of the # BGP prefixes

• BGP PIC Modules:

• BGP PIC Core

• BGP PIC Edge

• Achieving Path Diversity:

• BGP Diverse Path – uses a Shadow Route Reflector

• BGP Add-Path – the “Holy Grail” – uses Path-ID, unique per prefix

TECCCIE-3406 123


CE1 CE8

PE2

PE3

RR4

RR5

PE6

PE7

*>8.8.8.8 PE6*i PE7

*>8.8.8.8 PE6*i PE7

*>8.8.8.8 PE6 via RR4* PE6 via RR5

*>8.8.8.8 PE6 via RR4* PE6 via RR5

*>8.8.8.8 CE8

*>8.8.8.8 CE8

*>8.8.8.8 PE2*i PE3

Before BGP PIC is Configured …

TECCCIE-3406 124

© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public#CLUS TECCCIE-3406 125

CE1 CE8

PE2

PE3

RR4

RR5

PE6

PE7

BGP Add-Path Configuration route-policy RPset path-selection backup 1 advertise install

!

router bgp 1addresss-family ipv4 unicastadditional-paths receivedadditional-paths sendadditional-paths selection route-policy RP

router bgp 1addresss-family ipv4 unicastbgp additional-paths send received bgp additional-paths installbgp additional-paths select all neighbor 4.4.4.4 advertise additional-paths all

router bgp 1

addresss-family ipv4 unicastbgp additional-paths send received bgp additional-paths install

bgp additional-paths select best 2neighbor 2.2.2.2 advertise additional-paths best 2


CE1 CE8

PE2

PE3

RR4

RR5

PE6

PE7

After BGP PIC is Configured …*>8.8.8.8 PE6*bia PE7

*>8.8.8.8 PE6*bia PE7

*>8.8.8.8 PE6*bi PE7

*>8.8.8.8 PE6*bi PE7

*>8.8.8.8 CE8

*>8.8.8.8 CE8

*>8.8.8.8 PE2*b PE3

TECCCIE-3406 126


Configuration – PE

IOS: PE2 and PE3router bgp 1address-family ipv4

bgp additional-paths send receive

bgp additional-paths select allbgp additional-paths install

neighbor 4.4.4.4 advertise additional-paths all

IOS-XE: PE6 and PE7 router bgp 1

address-family ipv4 unicastadditional-paths receive

additional-paths send

additional-paths selection route-policy PATH!

route-policy PATH

set path-selection backup 1 advertise installend-policy

TECCCIE-3406 127


Configuration – RR

IOS-XE: RR4 and RR5

router bgp 1

!

address-family ipv4

bgp additional-paths send receive

bgp additional-paths select best 2

bgp additional-paths install

!

neighbor 2.2.2.2 advertise additional-paths best 2




TECCCIE-3406 128


BGP Neighbour Add-Path Capability

PE2# sh ip bgp nei | b BGP neighbor is|For address family: IPv4 Unicast|Additional

Paths

BGP neighbor is 4.4.4.4, remote AS 1, internal link

For address family: IPv4 Unicast

Additional Paths send capability: advertised and received

Additional Paths receive capability: advertised and received

BGP neighbor is 5.5.5.5, remote AS 1, internal link

For address family: IPv4 Unicast

Additional Paths send capability: advertised and received

Additional Paths receive capability: advertised and received

TECCCIE-3406 129


Verification – RR BGP Table

RR4# sh bgp

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,

x best-external, a additional-path, c RIB-compressed,


*bia11.11.11.11/32 3.3.3.3 0 100 0 118 i

*>i 2.2.2.2 0 100 0 118 i

*>i 22.22.22.22/32 2.2.2.2 0 100 0 i

*>i 33.33.33.33/32 3.3.3.3 0 100 0 i

*>i 66.66.66.66/32 6.6.6.6 0 100 0 i

*>i 77.77.77.77/32 7.7.7.7 0 100 0 i

*bia88.88.88.88/32 7.7.7.7 0 100 0 218 i

*>i 6.6.6.6 0 100 0 218 i

TECCCIE-3406 130


Verification – RR BGP Table in Detail

RR4# sh ip bgp 11.11.11.11/32 BGP routing table entry for 11.11.11.11/32, version 2

Paths: (2 available, best #2, table default)Additional-path-install

Path advertised to update-groups:

1

Refresh Epoch 1

118, (Received from a RR-client)

3.3.3.3 (metric 11) from 3.3.3.3 (3.3.3.3)Origin IGP, metric 0, localpref 100, valid, internal, backup/repair, best2,

all

rx pathid: 0x0, tx pathid: 0x1

Path advertised to update-groups:

1 2 3

Refresh Epoch 1118, (Received from a RR-client)

2.2.2.2 (metric 11) from 2.2.2.2 (2.2.2.2)

Origin IGP, metric 0, localpref 100, valid, internal, bestrx pathid: 0x0, tx pathid: 0x0

TECCCIE-3406 131


Verification – PE BGP Table

PE2# sh ip bgp





*bia11.11.11.11/32 3.3.3.3 0 100 0 118 i

* i 3.3.3.3 0 100 0 118 i

*> 192.168.112.1 0 0 118 i

* ia88.88.88.88/32 7.7.7.7 0 100 0 218 i

*bi 7.7.7.7 0 100 0 218 i

*>i 6.6.6.6 0 100 0 218 i

* i 6.6.6.6 0 100 0 218 i

TECCCIE-3406 132


Verification – PE IP Route Repair-Paths

PE2# sh ip ro repair-paths | i 88.0.0.0 11.0.0.0 |88.88.88.88|RPR|11.11.11.11

B 11.11.11.11 [20/0] via 192.168.112.1, 05:11:07

[RPR][20/0] via 3.3.3.3, 05:11:07

B 88.88.88.88 [200/0] via 6.6.6.6, 00:50:39

[RPR][200/0] via 7.7.7.7, 00:50:39

TECCCIE-3406 133


Verification – PE IP CEF Table

PE2# sh ip cef 88.88.88.88 detail

88.88.88.88/32, epoch 0, flags rib only nolabel, rib defined all labels

recursive via 6.6.6.6

nexthop 192.168.24.4 Ethernet0/2 label 18


recursive via 7.7.7.7, repair



TECCCIE-3406 134


Verification – CE BGP Table

CE1# sh bgp





*> 11.11.11.11/32 0.0.0.0 0 32768 i

*> 22.22.22.22/32 192.168.112.2 0 0 1 i

*b 192.168.113.3 0 1 i

*> 33.33.33.33/32 192.168.112.2 0 1 i

*b 192.168.113.3 0 0 1 i

*> 66.66.66.66/32 192.168.112.2 0 1 i

*b 192.168.113.3 0 1 i

*> 77.77.77.77/32 192.168.112.2 0 1 i

*b 192.168.113.3 0 1 i

*> 88.88.88.88/32 192.168.112.2 0 1 218 i

*b 192.168.113.3 0 1 218 i

TECCCIE-3406 135


Verification – CE IP Route Repair-Paths

CE1# sh ip route repair-paths | i B|RPR

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

B 22.22.22.22 [20/0] via 192.168.112.2, 00:19:10

[RPR][20/0] via 192.168.113.3, 00:19:10

B 33.33.33.33 [20/0] via 192.168.113.3, 00:21:35

[RPR][20/0] via 192.168.112.2, 00:21:35

B 66.66.66.66 [20/0] via 192.168.112.2, 00:19:10

[RPR][20/0] via 192.168.113.3, 00:19:10

B 77.77.77.77 [20/0] via 192.168.112.2, 00:19:10

[RPR][20/0] via 192.168.113.3, 00:19:10

B 88.88.88.88 [20/0] via 192.168.112.2, 00:19:10

[RPR][20/0] via 192.168.113.3, 00:19:10

TECCCIE-3406 136

Tips and TricksPreparation Materials


CCIE Lab Exam Tips & Tricks

Before…

• Prepare for the exam!

• Build a learning plan

• Active Learning…

• Practice, practice, practice…

• Build and Practice your own exam strategy & tactics!

TECCCIE-3406 138



Strategy & Tactics Summary

• Don’t try to ACE it! < “Just” PASS it! < Cherry pick!

• Do not get stuck! < Manage your time! < Set a Timer < Move on!

• Do not assume! < Pay attention to the detail! < Verify!

• Build your confidence level! < Control your stress! < Cherry Pick < Relax!

• Make your choice! < Identify plausible options < Choose

• Anticipate, Do, Verify! < Read < Plan < Do (“be smart”) < Debug, Test, Verify!

TECCCIE-3406 139



Before…

• Familiarize yourself with the web delivery system and tools

• Cisco Learning Labs

• CCIE Lab Builder

• Ciscolive presentation

• WISP labs @CL

• Practice browsing Cisco Documentation

• Learn CLI shortcuts!

TECCCIE-3406 140



Before…

• Travel to the lab location if needed

• “Plan for the worst, hope for the best”

• Arrive on the day before your exam…

• Do a site-survey

• Measure commute time from hotel and know start time!

• Identify entrance location

• Have a good dinner & sleep enough!

• Do whatever you need to have a fit body condition for the next day

TECCCIE-3406 141


CCIE Lab Exam Tips & TricksDuring…

• Reduce stress, arrive early and prepare ID’s!

• Listen to proctor’s guidelines (empty pockets, etc)!

• If needed, use ear-plugs, medicine, food…

• Manage your time! Stick to your strategy!

• Read the whole module (don’t forget the guidelines!)

• Cherry pick items!

• Don’t get stuck at the beginning!

• Build your confidence!

TECCCIE-3406 142


CCIE Lab Exam Tips & TricksDuring…

• Don’t get intimated by big topologies!

• Triple read questions before asking help to the proctor!

• Save configurations often! Avoid last minute change!

• Plan for “regression tests” and overall validations at the end of each module!

• Use the scratch paper to track progress (item table) and notes

• Draw topologies if really needed (be careful with time!)

• Target 80 or 90%! Don’t shoot for 100% - unless you have time!!

TECCCIE-3406 143


CCIE Lab Exam Tips & TricksAfter…

• If you pass, well… you know what to do!

• If you failed:

• Release the anger! Try to switch from ‘Denial’ to ‘Curious’ quickly

• Start looking for your mistakes (especially typos, missing requirements!)

• Repeat the scenario in your home lab

• Back to lab practice with focus on the failed topics and verification methods

• Book for the next lab exam ASAP

• Only ask for a re-read if you have done all the above, and 100% sure CCIE Program team is wrong! Beware of very low turnover rate!!

TECCCIE-3406 144


Build a Study Plan that Works for YOU!

Plan your Study

CCIE SP Certification

Know what you do not know

Dedicate time per day

Learn how to browse

on Cisco Documentation

Practice for speedAsk ”What if”

Practice for troubleshooting

TECCCIE-3406 145


Practice Labs – Guidelines

• Practice lab exercises with high level of complexity

• Track your improvements

• Identify areas requiring extra study

• Adjust your study plan according to your findings

• Technical skill is not the only thing you need to work on

• Time management and exam-taking strategy is very important too

Newton’s first law:

An object that is at rest will stay at rest unless an external force acts upon it!

TECCCIE-3406 146


The Night Before the Big Day

• Have a good dinner, good night sleep

• Do whatever you enjoy

• Have a fit body and a mental condition for the BIG DAY

TECCCIE-3406 147


Big Day

• Reduce stress, arrive early , and prepare the IDs!

• Listen to the proctor’s guidelines

• Read the entire module before you start configuring it

• Ask for clarification if you didn’t understand the question

• Manage your time! Stick to your strategy!

• Do not get stuck

• Move to the next question and return later

• Plan for “regression tests” and overall validations at the end of each lab section!

• However, avoid last minute changes!

TECCCIE-3406 148

CCIE SP Automation Demo

Resources and training


How to prepare for CCIE SP

Books: Labs: Trainings: Study Groups:

• Ciscopress.com

• Safaribooks.com

• Cisco Modeling Labs (CML)

• Cisco VIRL

• Hypervisors for: ISRv/XRv

TECCCIE-3406 151


Resources and Training

Cisco Platinum Learning Library

More trainings coming soon!!!!

Implementing Cisco MPLS v3.0 Cisco IOS XR IPv6 Routing (XIPv6R) v3.0

BGP Bootcamp (BGP)Configuring BGP on Cisco Routers (BGP) v4.0

OSPF: Implement, Troubleshoot and Optimize OSPF Convergence and Scalability

Implementing Segment Routing on Cisco IOS XR (SEGRTE201)

Advanced Implementing and Troubleshooting MPLS VPN Networks (AMPLS)

Introduction to MPLS-VPN Bootcamp (MPLS-VPN)

IOS XR MPLS Traffic Engineering– TE Explicit TunnelsL2VPNs – VPWS / EoMPLS

NSO Essentials for Programmers and Network Architects (NSO201) v3.0

Quality of Services (QoS)

TECCCIE-3406 152


Resources and TrainingCiscopress Books

BGP Design and Implementation

IP Multicast MPLS Fundamentals MPLS and VPN Architectures

Troubleshooting BGP

Cisco IOS XR Fundamentals

Interconnecting Data Centers Using VPLS

TECCCIE-3406 153

How to prepare for CCIE SP Cert


Continue Your Education

• LTRCCIE-3401: CCIE SP Practice Lab

• WISP: Walk-in Self-Paced Labs

• LABCCIE-2019: mVPN

Lab based on VIRL platform with Cisco CSR1000v and Cisco IOS XRv

• Meeting the engineer

• Lunch & Learn

• CCIE SP workbook

TECCCIE-3406 155


Service Provider Cisco Education Offerings

Course Description Cisco Certification

Deploying Cisco Service Provider Network Routing (SPROUTE) & Advanced (SPADVROUTE)

Implementing Cisco Service Provider Next-Generation Core Network Services (SPCORE)

Edge Network Services (SPEDGE)

SPROUTE covers the implementation of routing protocols (OSPF, IS-IS, BGP), route manipulations, and HA routing features; SPADVROUTE covers advancedrouting topics in BGP, multicast services including PIM-SM, and IPv6;

SPCORE covers network services, including MPLS-LDP, MPLS traffic engineering, QoS mechanisms, and transport technologies;

SPEDGE covers network services, including MPLS Layer 3 VPNs, Layer 2 VPNs, and Carrier Ethernet services; all within SP IP NGN environments.

CCNP Service Provider®

Building Cisco Service Provider Next-Generation Networks, Part 1&2 (SPNGN1), (SPNGN2)

The two courses introduce networking technologies and solutions, including OSI and TCP/IP models, IPv4/v6, switching, routing, transport types, security, network management, and Cisco OS (IOS and IOS XR).

CCNA Service Provider®

Implementing Cisco Service Provider Mobility UMTSNetworks (SPUMTS);Implementing Cisco Service Provider Mobility CDMA Networks (SPCDMA);Implementing Cisco Service Provider Mobility LTE Networks (SPLTE)

The three courses (SPUMTS, SPCDMA, SPLTE) cover knowledge and skills required to understand products, technologies, and architectures that are found in Universal Mobile Telecommunications Systems (UMTS) and Code Division Multiple Access (CDMA) packet core networks, plus their migration to Long-Term Evolution (LTE) Evolved Packet Systems (EPS), including Evolved Packet Core (EPC) and Radio Access Networks (RANs).

Cisco Service Provider Mobility CDMA to LTE Specialist;Cisco Service Provider Mobility UMTS to LTE Specialist

Implementing and Maintaining Cisco Technologies Using IOS XR (IMTXR)

Service Provider/Enterprise engineers to implement, verification-test, and optimize core/edge technologies in a Cisco IOS XR environment.

Cisco IOS XR Specialist

For more details, please visit: http://learningnetwork.cisco.comQuestions? Visit the Learning@Cisco Booth

TECCCIE-3406 156

http://learningnetwork.cisco.com/


Network Programmability Cisco Education Offerings

Course Description Cisco Certification

Developing with Cisco Network Programmability (NPDEV)

Provides Application Developers with comprehensive curriculum to develop infrastructure programming skills;Addresses needs of software engineers who automate network infrastructure and/or utilize APIs and toolkits to interface with SDN controllers and individual devices

Cisco Network Programmability Developer (NPDEV) Specialist Certification

Designing and Implementing Cisco Network Programmability (NPDESI)

Provides network engineers with comprehensive soup-to-nuts curriculum to develop and validate automation and programming skills;Directly addresses the evolving role of network engineers towards more programmability, automation and orchestration

Cisco Network Programmability Design and Implementation (NPDESI) Specialist Certification

Programming for Network Engineers (PRNE) Learn the fundamentals of Python programming – within the context of performing functions relevant to network engineers. Use Network Programming to simplify or automate tasks

Recommended pre-requisite for NPDESI and NPDEV Specialist Certifications

Cisco Digital Network Architecture Implementation Essentials (DNAIE)

This training provides students with the guiding principles and core elements of Cisco’s Digital Network Architecture (DNA) architecture and its solution components including; APIC-EM, NFV, Analytics, Security and Fabric.

For more details, please visit: http://learningnetwork.cisco.comQuestions? Visit the Learning@Cisco Booth

TECCCIE-3406 157

http://learningnetwork.cisco.com/


Become a Cisco Subject Matter Expert

cisco.com/go/certsme SME= Subject Matter Expert

Use and sharpen technical expertise

Give back to community

Directly influence Cisco Career Certifications (Design, Author, Review)

Experience with assessment techniques

Join creativity with experience, knowledge and skills

Collaborate and network with other engineers

TECCCIE-3406 158

http://www.cisco.com/go/certsme

Q&A

Complete your online session evaluation

• Please complete your session survey after each session. Your feedback is very important.

• Complete a minimum of 4 session surveys and the Overall Conference survey (starting on Thursday) to receive your Cisco Live water bottle.

• All surveys can be taken in the Cisco Live Mobile App or by logging in to the Session Catalog on ciscolive.cisco.com/us.

Cisco Live sessions will be available for viewing on demand after the event at ciscolive.cisco.com.

© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public#CLUS TECCCIE-3406 160

http://ciscolive.cisco.com/us

https://ciscolive.cisco.com/


Continue your education

161Session ID

Related sessions

Walk-in labsDemos in the Cisco campus

Meet the engineer 1:1 meetings


Unlock the task Use Password Key = 8vwx7rqu

Go to Challenge 2 – Cisco Live Speaker Session TECCCIE-3406 162

Thank you

#CLUS

Extras

#CLUS

Documents

Getting your CCIE Service Provider Certification - Session