CCIE Enterprise Infrastructure v1.0

Complete Lab Workbook

18 hands-on labs aligned to the official Cisco CCIE EI v1.0 exam blueprint · IPv4/IPv6 dual-stack · 20-router topology

Disclaimer: Independent study resource. Not affiliated with or endorsed by Cisco Systems, Inc. All configurations are original works for educational purposes only.
18
Labs
5
Domains
20
Routers
100%
Blueprint

Study Progress

Completed: 0 of 18 labs (0%)
Blueprint Coverage
DomainWeightCoverageLabs
1. Network Infrastructure
Switching, EIGRP, OSPF, BGP, Multicast		30%
Labs 01–05
3. Transport Technologies
MPLS L3VPN, DMVPN Phase 3, FlexVPN		15%
Labs 06–08
4. Infrastructure Security & Services
Security, QoS, FHRP, DHCP, NAT, IP SLA		15%
Labs 09–13
2. Software Defined Infrastructure
SD-Access (DNA Center), SD-WAN (vManage)		25%
Labs 14–15
5. Infrastructure Automation
EEM, Guest Shell, NETCONF/RESTCONF, API		15%
Labs 16–18
Master Topology — 20-Router Design
MPLS CORE + PE EDGE DMVPN WEST DMVPN EAST CUSTOMER EDGE + BORDER CORE-1 10.255.1.1 CORE-2 10.255.1.2 CORE-3 10.255.1.3 CORE-4 10.255.1.4 EDGE-1 10.255.2.1 EDGE-2 10.255.2.2 EDGE-3 10.255.2.3 EDGE-4 10.255.2.4 HUB-WC-1 172.16.10.254 HUB-WC-2 172.16.10.253 HUB-EC-1 172.16.20.254 HUB-EC-2 172.16.20.253 SPK-WC-1 .10.1 SPK-WC-2 .10.2 SPK-WC-3 .10.3 SPK-EC-1 .20.1 SPK-EC-2 .20.2 SPK-EC-3 .20.3 BORDER-1 10.255.3.1 BORDER-2 10.255.3.2 CE-CORP-1 10.255.6.1 CE-CORP-2 10.255.6.2 P Router (CORE) PE Router (EDGE) DMVPN Hub DMVPN Spoke Border (ASBR) Customer Edge (CE) AS 65000 — OSPF Area 0 — LDP
🌐

Domain 1 — Network Infrastructure

30% of exam
LAB 01 · §1.1
Switched Campus — STP, EtherChannel & VLANs
MST/Rapid PVST+, EtherChannel LACP, VTP v3, PortFast/BPDUGuard, Loop Guard, Root Guard, private VLANs, voice VLAN, trunk negotiation.
§1.1Intermediate⏱ 45 minOpen Lab →
LAB 02 · §1.3
EIGRP Named Mode & Advanced Features
Named mode, wide metrics, stub routing with leak-map, unequal-cost load balancing, IP FRR (fast reroute), BFD integration, add-path.
§1.3Advanced⏱ 50 minOpen Lab →
LAB 03 · §1.4
OSPF Multi-Area — OSPFv2 & OSPFv3
Multi-area OSPF (stub, NSSA, totally-stub), LSA filtering, prefix suppression, SPF/LSA throttling, GTSM, graceful shutdown, BFD, loop-free alternate.
§1.4Advanced⏱ 60 minOpen Lab →
LAB 04 · §1.5
BGP Policies, Communities & Path Control
Route reflectors, communities (standard/extended), conditional advertisement, ORF, AS-path prepend, regexp filtering, remove-private-AS, add-path, multi-homing.
§1.5Expert⏱ 75 minOpen Lab →
LAB 05 · §1.6
Multicast — PIM-SM, Anycast RP & MSDP
PIM Sparse Mode, BSR + AutoRP, Anycast RP using MSDP, Bidirectional PIM, SSM, IGMPv3, IGMP snooping, multicast boundary, PIMv6 Anycast RP.
§1.6Expert⏱ 60 minOpen Lab →
🔗

Domain 3 — Transport Technologies

15% of exam
LAB 06 · §3.1
MPLS LDP & L3VPN (VPNv4/VPNv6)
LDP label distribution, MP-BGP VPNv4, PE-CE routing (OSPF, BGP, EIGRP), route leaking (extranet), MPLS ping/traceroute, label stack verification.
§3.1Expert⏱ 75 minOpen Lab →
LAB 07 · §3.2.a
DMVPN Phase 3 — Dual-Hub & Per-Tunnel QoS
DMVPN Phase 3, dual-hub NHS redundancy, NHRP redirect/shortcut, IKEv2 PSK encryption, spoke-to-spoke direct tunnels, per-tunnel QoS policy.
§3.2.aExpert⏱ 75 minOpen Lab →
LAB 08 · §3.2.b
FlexVPN — IKEv2 Site-to-Site & Spoke-to-Spoke
IKEv2 FlexVPN site-to-site, dynamic spoke-to-spoke tunnels, smart defaults, IKEv2 authorization, MPLS over FlexVPN, certificate vs PSK comparison.
§3.2.bExpert⏱ 60 minOpen Lab →
🔒

Domain 4 — Infrastructure Security & Services

15% of exam
LAB 09 · §4.2.a
Switch Security — 802.1X, DHCP Snooping & DAI
802.1X port-based auth (device roles, host modes), DHCP snooping + option 82, Dynamic ARP Inspection, IP Source Guard, VACL/PACL, storm control, private VLAN.
§4.2Advanced⏱ 55 minOpen Lab →
LAB 10 · §4.1 §4.2.b
Device Security — CoPP, AAA & uRPF
Control Plane Policing (CoPP), AAA with TACACS+, SSH hardening, privilege levels, uRPF, IPv6 RA Guard, DHCP Guard, ND Inspection, device tracking.
§4.1 §4.2.bAdvanced⏱ 60 minOpen Lab →
LAB 11 · §4.4
QoS — MQC, DiffServ & HQoS
End-to-end L3 QoS using MQC, DiffServ, DSCP/CoS marking, NBAR classification, CBWFQ, LLQ for voice, policing/shaping, HQoS on sub-rate links.
§4.4Advanced⏱ 55 minOpen Lab →
LAB 12 · §4.5
Network Services — FHRP, DHCP, NAT & NTP
HSRP/GLBP/VRRP, NTP v4 with authentication, DHCP server/relay/options, stateful DHCPv6 + prefix delegation, static/dynamic NAT/PAT, VRF-aware NAT.
§4.5Intermediate⏱ 60 minOpen Lab →
LAB 13 · §4.6 §4.7
Optimization & Operations — IP SLA, NetFlow & SPAN
IP SLA (ICMP/UDP/TCP probes), object tracking with static route failover, Flexible NetFlow v9, SPAN/RSPAN/ERSPAN, Embedded Packet Capture, conditional debug.
§4.6 §4.7Advanced⏱ 50 minOpen Lab →
☁️

Domain 2 — Software Defined Infrastructure

25% of exam
LAB 14 · §2.1
Cisco SD-Access — Design & Deployment
IS-IS underlay design, LISP control plane, VXLAN data plane, Cisco TrustSec (SGT), DNA Center workflows, fabric border handoff, micro/macro segmentation.
§2.1ConceptualExpert⏱ 90 minOpen Lab →
LAB 15 · §2.2
Cisco SD-WAN — vManage, OMP & Policies
vBond/vSmart/vManage architecture, OMP protocol, TLOC, ZTP onboarding, configuration templates, Application Aware Routing, centralized topology policies.
§2.2ConceptualExpert⏱ 90 minOpen Lab →
⚙️

Domain 5 — Infrastructure Automation & Programmability

15% of exam
LAB 16 · §5.2
EEM Applets & Guest Shell Python
EEM applets (syslog, CLI, timer, SNMP triggers), Guest Shell Linux environment, CLI Python module, EEM Python module, automated event response workflows.
§5.2Advanced⏱ 55 minOpen Lab →
LAB 17 · §5.3.c
NETCONF/YANG & RESTCONF — IOS XE API
NETCONF via ncclient (Python), RESTCONF via requests library, YANG data models, model-driven telemetry with gRPC on-change subscriptions, Postman collections.
§5.3.c §5.3.dExpert⏱ 60 minOpen Lab →
LAB 18 · §5.3.a §5.3.b
API Programmability — DNA Center & vManage
DNA Center API (GET/PUT/POST via Python requests + Postman), vManage API monitoring and configuration endpoints, JSON/XML encoding, HTTP response handling.
§5.1 §5.3.a §5.3.bExpert⏱ 60 minOpen Lab →
How to Use This Workbook

Study Guide

Recommended Order

  • Start with Labs 01–03 (L2/EIGRP/OSPF) for foundations
  • Progress through Labs 04–05 (BGP + Multicast)
  • Build the transport layer: Labs 06–08
  • Security and services: Labs 09–13
  • Study SDI conceptually: Labs 14–15
  • Finish with automation: Labs 16–18

Lab Environment

  • Cisco Modeling Labs (CML) — recommended
  • EVE-NG Pro — IOS XE 17.x images
  • GNS3 — with IOS XE qemu images
  • Minimum RAM: 16 GB for full topology
  • IOS XE version: 17.6+ required
  • Labs 14–15 need DNA Center / SD-WAN

Lab Structure

  • Initial configs — start here (IPs only)
  • Task sheet — CCIE-style exam tasks
  • Verification — exact show commands
  • Key concepts — theory and why
  • Troubleshooting — common mistakes
  • Solution — type SOLUTION to reveal

Research and direction by Ioannis (John) Konstas; compiled and finalized with AI assistance.