CCIE Enterprise Infrastructure Lab v1.1
Build deep, hands-on expertise across the full CCIE Enterprise Infrastructure blueprint, from switched campus fundamentals and core routing through SD-Access, SD-WAN, transport technologies, infrastructure security, and automation and programmability. Rent remote access to a pre-built topology and work through requirements at your own pace, in one-hour increments, 24 hours a day. Designed for CCNP-level engineers and CCIE candidates who want realistic, exam-aligned practice without sitting through a formal course.
Book Lab HoursCourse Highlights
Switched Campus & Core Routing
Practice Layer 2 campus technologies, spanning tree, EtherChannel, VRF-Lite, and routing with EIGRP, OSPF, BGP, and multicast.
Software-Defined Infrastructure
Work with Cisco SD-Access architecture, fabric deployment and segmentation, plus SD-WAN controllers, transports, OMP, templates, and policies.
Transport Technologies
Configure and troubleshoot GRE tunnels, MPLS, MPLS L3VPN, DMVPN Phase 3, NHRP, and IPsec/IKEv2.
Infrastructure Security
Practice device and Layer 2 security, IPv6 protections, AAA, control plane policing, QoS, network services, and operational tools.
Automation & Programmability
Work with JSON, XML, YAML, Jinja, EEM, Guest Shell, Python modules, controller APIs, and model-driven telemetry.
Exam-Aligned Practice
Follow a syllabus structured directly against the five domains of the official CCIE Enterprise Infrastructure v1.1 lab exam blueprint.
Hands-On Practice Across the CCIE Enterprise Infrastructure Blueprint
Build practical experience across the technologies and skills covered by the CCIE Enterprise Infrastructure v1.1 lab exam. Move from switched campus and routing fundamentals into software-defined networking, transport, infrastructure security, and automation.
Access a pre-built remote topology and work through lab requirements at your own pace. Sessions are booked in one-hour increments and are available 24 hours a day, so practice can fit around your work and study schedule.
- Blueprint-Aligned Syllabus: Content is structured around all five domains of the CCIE Enterprise Infrastructure v1.1 exam blueprint.
- Flexible Remote Access: Book lab time in one-hour increments and practice whenever it suits you.
- Practice at Your Own Pace: Designed for CCNP-level engineers and CCIE candidates who want hands-on exam-aligned practice without a formal course schedule.
Illustrative diagram of the technology domains covered by the lab.
Technologies Covered
- ✓VLANs, trunking, CDP/LLDP, UDLD, EtherChannel, and spanning tree
- ✓Static and policy-based routing, VRF-Lite, route leaking, filtering, and redistribution
- ✓EIGRP, OSPFv2/OSPFv3, BGP, and multicast with PIM sparse mode
- ✓Cisco SD-Access: LISP, BGP control planes, VXLAN, TrustSec, and segmentation
- ✓Cisco SD-WAN: controllers, OMP, templates, transport, and policy
- ✓GRE tunnels, MPLS, L3VPN, MP-BGP VPNv4/VPNv6, DMVPN, NHRP, and IPsec/IKEv2
- ✓AAA, control plane policing, VACL/PACL, DHCP snooping, IP Source Guard, and IPv6 security
- ✓QoS with MQC, FHRPs, DHCP, time synchronization, NAT, IP SLA, and Flexible NetFlow
- ✓SPAN/RSPAN/ERSPAN, SNMP, logging, and network troubleshooting tools
- ✓JSON, XML, YAML, Jinja, EEM, Guest Shell, Python, APIs, and gRPC telemetry
Modules & Syllabus
Structured directly against the five domains of the official CCIE Enterprise Infrastructure (v1.1) exam blueprint.
- Switched campus fundamentals, including switch administration, Layer 2 protocols (CDP, LLDP, UDLD), VLAN technologies, trunking, and native VLAN handling.
- EtherChannel design, including LACP and static bundling, Layer 2/Layer 3 EtherChannel, load balancing, and misconfiguration guard.
- Spanning Tree Protocol, including PVST+, Rapid PVST+, MST, timer and priority tuning, PortFast, BPDU guard/filter, and loop/root guard.
- Routing concepts, including administrative distance, static and policy-based routing, VRF-Lite, VRF-aware routing, route leaking, route filtering, and redistribution across BGP, EIGRP, OSPF, and static.
- EIGRP adjacencies, best path selection, named mode, and optimization, convergence, and scalability tuning.
- OSPFv2 and OSPFv3 adjacencies, network and area types, path preference, and optimization, convergence, and scalability.
- BGP peer relationships, path selection, routing policies, AS path manipulation, and convergence and scalability including route reflectors and aggregation.
- Multicast design, including Layer 2 multicast, reverse path forwarding, and PIM sparse mode, RP mechanisms, SSM, and multicast boundary/filtering.
- Cisco SD-Access underlay design, including manual and LAN automation/PnP provisioning, device discovery, and extended nodes.
- SD-Access overlay architecture, including LISP and BGP control planes, VXLAN data plane, Cisco TrustSec policy plane, and native multicast.
- Fabric design and deployment, including single-site, multisite, and fabric-in-a-box topologies, host onboarding, and authentication templates.
- Fabric border handoff, including SDA, SD-WAN, and IP transits, fusion router peering, and Layer 2 border handoff.
- Macro and micro segmentation using virtual networks, SGTs, and SGACLs.
- Cisco SD-WAN controller architecture, including management, orchestration, and control plane components.
- SD-WAN underlay and transport configuration, including system and transport settings and greenfield, brownfield, and hybrid deployment models.
- Overlay Management Protocol (OMP), configuration templates, and centralized and localized SD-WAN policies.
- Static point-to-point GRE tunnel configuration and troubleshooting.
- MPLS operations, including label stack, LSR/LSP concepts, and LDP.
- MPLS L3VPN, including PE-CE routing with BGP and basic MP-BGP VPNv4/VPNv6.
- DMVPN Phase 3 dual-hub design and troubleshooting, including NHRP and IPsec/IKEv2.
- Device security on Cisco IOS XE, including control plane policing and AAA.
- Switch and router security features, including VACL/PACL, storm control, DHCP snooping, IP Source Guard, Dynamic ARP Inspection, and port security.
- IPv6 infrastructure security, including RA Guard, DHCP Guard, binding table, device tracking, and ND inspection.
- System management, including device management protocols, SNMP, and logging.
- Quality of Service design, including classification, marking, policing, shaping, congestion management, and end-to-end Layer 3 QoS using MQC.
- Network services, including First-Hop Redundancy Protocols, time synchronization, DHCP, and IPv4 NAT.
- Network optimization, including IP SLA, object tracking, and Flexible NetFlow.
- Network operations, including traffic capture (SPAN, RSPAN, ERSPAN) and troubleshooting tools.
- Data encoding formats, including JSON, XML, YAML, and Jinja.
- Automation and scripting, including EEM applets and Guest Shell with CLI and EEM Python modules.
- Programmability against vManage and Cisco DNA Center (Catalyst Center) APIs using HTTP requests.
- Deploying and verifying model-driven telemetry using gRPC subscriptions.
Start Your Lab Experience
Lab Hours Booking
Reserve remote access to a pre-built Enterprise Infrastructure topology and work through lab requirements at your own pace.
- Remote access to a pre-built lab topology
- Book lab time in one-hour increments
- Available 24 hours a day
- Work through requirements at your own pace
- Designed for CCNP-level engineers and CCIE candidates