The following is a detailed CCIE SP lab exam outline. The aim is to help people preparing for the respective exam in organizing their study and eliminating “white spaces” in their knowledge. In general, the ouline tries to follows the official lab blueprint as much as possible and covers the following topics in-depth:

  • Bridging & Switching
  • IGP Core Routing
  • BGP
  • MPLS
  • SP Multicast
  • L2/L3 VPNs
  • QoS
  • Security
  • High Availability
  • Management

Some of the sections may look too much detailed, especially the Bridging & Switching (particularly ATM technology) and maybe QoS and High Availability sections. You will probably want to spend most of your time on IGP, BGP, MPLS, L2/L3 VPN sections (the core of the SP lab) and slightly less on SP Multicast section.


  • Bridging and Switching
    • Ethernet
      • VLANs & VTP
        • VTP Modes & Pruning
      • Trunks
        • DTP
        • ISL & 802.1q
        • Allowed VLANs
        • Native VLAN & Tag Native
      • SVIs & L3 Ports
      • STP
        • Root Bridge Election
        • Features (Portfast, UplinkFast etc)
        • Redundancy
        • RSTP & MSTP
      • Etherchannels
        • LACP & PaGP
        • Load-Balancing Methods
      • QinQ
        • MTU Issues
        • L2 Protocol Tunneling
    • Frame-Relay
      • Interface Types (DCE/DTE/NNI)
      • Subinterfaces, DLCIs & PVCs
      • LMI
      • Inverse-ARP & Static Mappings
      • FR Switching
      • Multilink Frame-Relay (FRF.16)
    • ATM
      • Subinterfaces & VC Mapping
      • PVC
      • SVC
        • NSAP Address
        • NSAP Prefix Learning and ESI
        • Signaling and Q.2931 (QSAAL) PVC
        • CLIP
      • ILMI
      • ATM VC Encapsulations
      • Inverse-ARP and Protocol Address Mapping
      • Frame-Relay Interworking (FRF.5 & FRF.8)
    • PPPoE
      • PPP IP Address Allocation (IPCP, DHCP)
  • IGP Core Routing
    • Intergrated IS-IS ***
      • Level-1/2 and Areas
      • Network Types
        • Point2Point
        • Broadcast
      • Mesh Groups
      • Route-Leaking
      • Metric-Style & Metric-Types
      • Redistribution & Filtering
      • Tuning Timers
        • Hello/Dead
        • LSA Generation/Throttling
        • PRC/SPF Throttling
    • OSPF
      • Area Types
      • Network Types
      • NSSA Area
      • Filtering (Inter-Area filters, Database, Dist-Lists)
      • Redistribution
      • Summarization (External/Inter-Area)
      • Virtual-Links
      • OSPF Timers
        • LSA Flooding & Pacing
        • SPF Throttle
    • Policy Based Routing
  • BGP
    • iBGP & eBGP
    • BGP Timers & Convergence Tuning
      • Advertisement interval (neighbor advertisement-interval)
      • VPNv4 Import Scan interval (bgp scan-time import)
      • General Scan interval (bgp scan-time)
      • BGP Next-Hop Trigger
      • Fast Fallover
      • Keepalive & Holdtime
    • BGP Scalability
      • Route-Reflectors & Clusters
      • Confederations
      • Synchronization
    • Redistribution & Filtering
    • Outbound Route Filtering
    • Route Aggregation & Attributes
    • Conditional Route Injection & Advertisement
    • Route Dampening
    • Communities, Coloring & Signaling
    • BGP Attributes & Best-Path Selection
    • Backdoors
    • BGP Multipath (iBGP/eBGP, DMZ Link BW)
  • SP Multicast
    • PIM-SM/DM
    • PIM-Bidir
    • PIM-SSM & IGMPv3/UDR
    • RPF failure and static mroutes
    • IGMP
      • Versions
      • Timers
      • Filtering
    • Static-RP/Auto-RP/BSR
    • MSDP and Inter-AS Multicast
    • MP-BGP Extension for Multicast
    • Anycast-RP
    • IGMP Snooping
    • Stub Multicast Routing
    • 3550
      • IGMP Profiles
      • MVR
  • MPLS
    • Label Distribution
      • LDP/TDP,
        • Directed Sessions
        • Authentication
      • BGP Send-Label
      • Advertising Labels
      • Label Filtering
        • LDP and ACLs
        • BGP and route-maps
    • Cell-Mode MPLS & Label Merging
      • ATM Control-VC
    • MPLS TE
      • IGP Configuration
      • RSVP Settings
      • Attributes & Affinity Bits
      • Holding & Setup Priority
      • Path Options
      • Explicit/Dynamic Route
      • Routint Options: PBR, Static route, Autoroute
      • Cisco Forwarding Adjacency over TE tunnel
      • Inter-Area TE
      • MPLS TE with L3/L2 VPN
        • PE-PE Tunnels
        • PE-P, P-P Tunnels & LSP recovery
      • Unequal-Cost Load-Balancing
  • L3/L2 VPN
    • L3 VPN
      • VRF & RD
        • Controlling Route Import/Export
        • VRF Lite
        • VRF Select & Route-Map VRF selection
      • MP-BGP
        • VPNv4 AF
        • Extended Communities
        • Route-Target
        • Filtering
        • RRs & Scalability Issues
          • ORF
          • Communities & Partitioning
          • BGP RR-Group & Partitioning
      • PE-CE Routing
        • OSPF
          • Super-Backbone and Extended Communities
          • Domain-ID
          • Sham-Links
          • VRF Lite Capability
          • Down Bit and VPN Tag
        • EIGRP
          • SoO Attribute
          • BGP Cost Community
        • RIP
          • Transparent Metric
        • eBGP
          • AS-Override
          • AllowAs-In
          • BGP SoO
        • Redistribution & Filtering
        • VRF Import/Export Maps
        • Importing from global table
      • VPN Topologies
        • Central Services
        • Extranet
        • Hub-and-Spoke (upstream, downstream VPNs)
      • Inter-AS VPN
        • Back-to-Back VRFs
        • Direct VPNv4 Exchange on ASBRs
        • ASBR Send-Label & VPNv4 Multihop
          • IPv4 BGP Route-Reflector for Label distribution
          • Redistribute into IGP + LDP
      • Carrier Supporting Carrier
        • IP only Customer Carrier
        • MPLS Enabled Customer Carrier
        • Hierarchical MPLS VPNs
        • Carrier Label Exchange
          • IGP+LDP
          • BGP+Send-Label
      • Multicast VPN
        • Default & Data MDT
        • PIM-SM/Bidir (ISM) in Core
        • SSM in Core (Ext.Comm/MDT SAFI)
        • Inter-AS mVPN
          • PIM-SM + MSDP
          • MDT SAFI + PIM SSM + PIM RPF Proxy
    • L2 VPN
      • Generic
        • ATM Cell Relay & AAL5 SDU Mode
        • ATM OAM Transparent/Emulation
        • HDLC Frame Tunneling
        • Frame-Relay DLCI-to-DLCI
        • Ethernet VLAN and Port Mode
        • PPP and IP address Assignment
      • AToM
        • PW Setup & MTU Issues
        • Inter-AS AToM
          • Back-to-Back
          • Label exchange
      • L2TPv3
        • Manual & Automatic Signaling
        • Authentication & Cookie
        • Sequencing & Keepalives
        • pMTU Discovery & DF-bit
      • L2 Interworking (IP/Ethernet, Local Termination)
      • Local Switching (with & w/o Interworking)
      • GRE/mGRE Tunnels
      • MPLS BGP VPN over mGRE
  • QoS
    • Classification & Marking
      • ACLs
      • DSCP bits, TOS & IP Precedence
      • NBAR & Protocol-Specific Matching
      • Policers (Single/Dual-Rate, Color-Aware/Blind)
      • FR DE bit/ATM CLP
      • QoS-Groups
      • MPLS EXP bits
      • Tunnel Modes:
        • Uniform
        • Short-Pipe
        • Pipe
    • Congestion Management
      • Tx-Ring Tuning
      • Legacy Queueing
        • WFQ/CQ/PQ
        • IP RTP Priority
      • CBWFQ
        • Priority (LLQ)
        • Bandwidth
        • Hierarchical (Queueing at Subinterfaces)
      • Frame-Relay/ATM Per-VC Queueing (Legacy & CBWFQ)
      • WRED for Congestion Avoidance (Legacy & MQC)
    • Traffic Flow Control
      • Rate-Limiting
        • CAR & Cascading
        • MQC Policer
          • Single-Rate
          • Dual-Rate
          • Actions
      • Shaping
        • Legacy GTS
        • FRTS
          • Legacy
          • MQC
        • Class-Based (MQC)
    • QPPB
    • DiffServ Aware TE
      • Interface Subpools
    • 3550 QoS Features
      • WRR Queue Tuning
      • Classification & Marking
        • Policy Maps
        • Mapping Tables
      • Per-Port/Per-VLAN Classification
      • Policing
  • Security
    • Application Level Filtering (NBAR)
    • L3 Security
      • Control Plane
        • Routing Updates Auth
        • Signaling Protocols Auth (LDP, L2TPv3, BGP)
        • Control Plane Policing
      • Filtering with ACLs & ACL Logging
      • RPF and Spoofing (Strict/Loose Mode)
      • CAR and Flooding
      • TCP Intercept and SYN-Flooding
    • L2 Security
      • Protecting STP (BPDU-Filter/Guard)
      • Port-Security
    • DDoS Mitigation
      • Sinkholes/Blackholes
      • RTBH Scenarios
    • Common Attacks
      • Worms & Viruses
      • Smurf/Fraggle/Generic Flooding
      • SYN-Flooding
      • Network Scanning
      • CAM-Table overflow, VLAN Hopping
  • High Availability
    • NSF & SOO
      • BGP Graceful Restart
      • OSPF LLS
      • EIGRP NSF awareness
      • LDP Graceful restart
    • LDP Session protection
    • Tuning IGP Convergence
      • Link Protection
      • Node Protection
      • L2 PW Protection
      • L3 VPN and FRR
  • Management
    • SNMP
    • Syslog
    • Remote Access (Telnet/SSH)
    • NTP
    • Netflow
      • MPLS-aware Netflow
      • Flexible Netflow
      • Export Configuration
    • IP Accounting
    • Other IP Services
About Petr Lapukhov, 4xCCIE/CCDE:

Petr Lapukhov's career in IT begain in 1988 with a focus on computer programming, and progressed into networking with his first exposure to Novell NetWare in 1991. Initially involved with Kazan State University's campus network support and UNIX system administration, he went through the path of becoming a networking consultant, taking part in many network deployment projects. Petr currently has over 12 years of experience working in the Cisco networking field, and is the only person in the world to have obtained four CCIEs in under two years, passing each on his first attempt. Petr is an exceptional case in that he has been working with all of the technologies covered in his four CCIE tracks (R&S, Security, SP, and Voice) on a daily basis for many years. When not actively teaching classes, developing self-paced products, studying for the CCDE Practical & the CCIE Storage Lab Exam, and completing his PhD in Applied Mathematics.

Find all posts by Petr Lapukhov, 4xCCIE/CCDE | Visit Website

You can leave a response, or trackback from your own site.

36 Responses to “CCIE SP Lab Exam Outline”

  1. Seba says:

    Nice list Petr :)
    After first, very brief review I would say that we should add “ISIS Timers & Convergence Tuning” section.



  2. maher says:

    Cool. Easy for studying and referencing! :)

  3. dan says:

    Great post.

    Is this list includes technologies which can’t be tested on the IOS in the lab?

  4. To: dan

    Yes, some of the mentioned technologies could not appear in the real lab due to the IOS version used (e.g. infamous MPLS FRR or MDT SAFI/RPF proxy vector). However, practicing such technologies would not hurt in any way and will only aid in better understanding the SP body of knowledge.

  5. Peter says:

    Maybe an idea to make a list of new technologies as opposed to R&S. I think a lot of people who finished R&S are considering going for the SP track but it looks like there are a lot of overlapping topics. How big is the advantage of already having R&S do you think?

  6. maher says:


    Is there going to be any update on Vol1/Vol2 or COD as per listed above?


  7. To maher:

    Actually, we’re planning to redo VOL1 and expand it with many of technologies mentioned; specifically more IGP/BGP, L2 VPN and Multicast tasks. I can’t tell the exact timeline yet, but we’ve got some part of it done already. Of course this stuff is 100% dynamips compatible :)

  8. maher says:

    Yeah!!!! Cool!!! Keep us updated! :)

  9. Tim Reynolds says:

    Nice post. Thank you for the info. Keep it up.

  10. Pierre-Louis says:

    Hello Petr,

    I passed my R&S exam one week ago and I would like to know if there is a big gap between R&S and SP ?

    In fact I want to go on and keep an eye on my certification progress for the three following years.

    I have to work, of course, but How many times do you think is necessary to be well prepared ?

    Thanks for your advices.

  11. Pierre-Louis says:

    Another question: Is there a Dynamips lab workbook for IE SP ?

  12. Alberto Fernandez says:

    Good question from Pierre-Louis .
    Im looking for any Dynamips Lab Workbook for IE SP oriented but i don´t found it.
    Thereis this product for Dynamips ?

    Thanks in advance,

  13. To: Alberto Fernandez

    Everyone that has access to IEWB-SP VOL2 should be able to access the “dynamips” version of the solutions/diagrams. Please check you members site account and contact me if you can’t see that under your subscription.

  14. To: Pierre-Louis

    There is a Dynamips edition of IEWB-SP-VOL2; if you just passed you R&S lab, you need to focus mainly on the following topics

    1) ISIS and BGP
    2) MPLS/LDP
    3) Layer 3 VPNs
    4) SP Multicast

    It could take probably a couple of months if you study a few hours a day. For me it took a month to prepare to the lab, but I spent 8+ hours a day on lab practicing (using Dynamips solely).

  15. Wael says:

    This is very useful Petr, thanks

  16. Vignesh says:

    Thanks for the detailed Blueprint Peter…IE always rocks..

  17. jonbov says:


    What about NAT?
    I see most IE SP LAB’s contains som sort of NAT for VPN internet access.


  18. d00h0vNy says:

    In general, the ouline < OUTLINE

  19. sailwinthu says:

    Excellent outline,
    I just want to amend ‘Frame Relay end-to-end Keepalive’

    Thanks petr

  20. forxaken says:

    Are all the topics in this blueprint supported in current IOS versions using in the lab.

  21. forxaken says:

    Thanks for you clarification and advice :)

  22. Amr Ahmed says:

    To Peter,

    I am CCNP and have been working in R&S for 4 years, but I feel boring to study CCIE R&S. I felt Interesting in SP field, and I started studing MPLS VPN, TE and BGP. Do you thinks it is ok to go directly to CCIE SP without CCIE R&S, I know that its more difficult without R&S but not impossible. Need your Advice :) thanks

    • To: Amr Ahmed
      There is nothing wrong with going for SP CCIE without obtaining the R&S. You will probably need more practice on IGP and Features, but this might add about 2-4 weeks to your preparation schedule (provided that you practice at least 2 hours a day).

  23. Amr Ahmed says:

    To Peter,

    Thank you for your Advice :) . But, can I be silly to ask for another favour ? ;) I need to know the Best Material for each part in CCIE SP. For example, I found MPLS Fundamentals is a verry nice book to bulid up all MPLS concepts in my mind. now I am going to study BGP, some of my friends recommended TC/IP book for BGP, do you see it the best one ?

    Thanks in Advance :)

  24. James Stewart says:

    Hi Petr

    Thank you for your valuable information on the SP exam. I have read some posts on groupstudy from various people commenting the Internetworkexpert SP workbooks do not cover all technologies that are tested in the lab. In all honesty, and from your experience, is it possible for a person like me to only use Internetworkexper SP lab workbooks and still pass the exam?

  25. Yadi says:

    any body can explain about this command:
    isis adjacency-filter match-all


    clns filter

    any example config?

  26. [...] Petr Lapukhov from internetworkexperts has done this for us by making a very detailed CCIE  SP blueprint for the CCIE SP LAB exam: “Thanks Petr for this remarkable work, please keep it [...]

  27. [...] CCIE SP Lab blueprint By Jeremy, on October 1st, 2010 Here is an extended blueprint originally written by Petr Lapukhov on INE blog that I’ve myself extended. I’m using this blueprint for preparing the SP [...]

  28. Pule Thanyane says:

    What do you guys think about SP v3? Do-able?

    Studying towards CCIE SP.

  29. Pok Gravitz says:

    Sweeeet! Please do count me in. Thanks!

  30. Joash Omoke says:

    Does anyone have the current list?

  31. Hey, if Cisco would do that, we could lose the way of making our living :)


Leave a Reply


CCIE Bloggers