CCIE
Cisco Certified Internetwork ExpertROUTING & SWITCHING
Objective:
CCIE certification in Routing and Switching indicates expert level knowledge of networking across various LAN and WAN interfaces, and a variety of routers and switches. Experts in R&S solve complex connectivity problems and apply technology solutions to increase bandwidth, improve response times, maximize performance, improve security, and support global applications. Candidates should be able to install, configure, and maintain LAN, WAN, and dial access services. The written exam for Routing and Switching covers networking theory related to topics such as IP, IP routing, non-IP desktop protocols, bridging and switch-related technologies, and includes some equipment commands.
Other important information regarding the written exam:
Pre-requisite
Valid CCNA certification
- Administered by independent testing vendors at a cost of $300 USD.
- Costs may vary due to exchange rate and local taxes, including VAT and GST.
- Two-hour, computer-based exam contains 100 multiple-choice questions.
- Exam is closed book and no outside reference materials are allowed.
- Pass/Fail results are available immediately following the exam. The passing score is set by statistical analysis and is subject to periodic change.
- Candidates must wait 5 calendar days between attempts.
- Candidates must make an initial attempt of the CCIE lab exam within 18 months of passing the CCIE written exam.
- Once a candidate passes a particular written exam, he or she may not retake that same exam for at least 180 days. (Though rare, this may occur in certain recertification situations.)
I. General Networking Theory
A. OSI Models
B. General Routing Concepts
C. Standards
D. Protocol Mechanics
E. Commands
II. Bridging and LAN Switching
A. Transparent
B. LAN Switching
C. MLS
D. Data Link Layer
E. Ethernet
F. Catalyst IOS Configuration Commands
III. IP
A. Addressing
B. Services
C. Applications
D. Transport
E. IPv6
F. Network Management
IV. IP Routing
A. OSPF
B. BGP
C. EIGRP
D. IS-IS (To be removed from the exam as of January 1, 2006.)
E. Route filtering and Policy Routing
F. DDR
G. RIPv2
H. The use of 'show' and 'debug' commands
V. QoS
A. Traffic classification
B. Congestion management
C. Congestion avoidance
VI. WAN
A. ISDN (To be removed from the exam as of January 1, 2006.)
B. Frame Relay
C. ATM (To be removed from the exam as of January 1, 2006.)
D. Physical Layer
E. Leased Line Protocols
VII. IP Multicast
A. IGMP/CGMP
B. Addressing
C. Distribution Trees
D. PIM-SM Mechanics
E. Rendezvous Points
F. RPF
VIII. Security
A. Access Lists
B. LAN security
C. Device Security/Access
D. Spoofing
IX. Enterprise Wireless Mobility
A. Standards
B. Hardware
C. SWAN
D. RF Troubleshooting
E. VoWLAN
F. Products
CCIE
Cisco Certified Internetwork Expert
SECURITY
Objective:
CCIE certification in Security indicates expert level knowledge of IP and IP routing as well as specific security protocols and components. The written exam for Security covers topics such as security protocols, operating systems, application protocols, general networking, security technologies, and Cisco security applications.
Other important information regarding the written exam:
Pre-requisite
Valid CCNA certification
- Administered by independent testing vendors at a cost of $300 USD.
- Costs may vary due to exchange rate and local taxes, including VAT and GST.
- Two-hour, computer-based exam contains 100 multiple-choice questions.
- Exam is closed book and no outside reference materials are allowed.
- Pass/Fail results are available immediately following the exam. The passing score is set by statistical analysis and is subject to periodic change.
- Candidates must wait 5 calendar days between attempts.
- Candidates must make an initial attempt of the CCIE lab exam within 18 months of passing the CCIE written exam.
- Once a candidate passes a particular written exam, he or she may not retake that same exam for at least six months. (Though rare, this may occur in certain recertification situations.)
I. Security Protocols
A. Remote Authentication Dial In User Service (RADIUS)
B. Terminal Access Controller Access Control System Plus (TACACS+)
C. AES
D. EAP peap tkip tls
E. Data Encryption Standard (DES)
F. Triple DES (DES3)
G. IP Secure (IPSec)
H. Internet Key Exchange (IKE)
I. Certificate Enrollment Protocol (CEP)
J. Point to Point Tunneling Protocol (PPTP)
K. Layer 2 Tunneling Protocol (L2TP)
II. Application Protocols
A. Domain Name System (DNS)
B. Trivial File Transfer Protocol (TFTP)
C. File Transfer Protocol (FTP)
D. Hypertext Transfer Protocol (HTTP)
E. Secure Socket Layer (SSL)
F. Simple Mail Transfer Protocol (SMTP)
G. Network Time Protocol (NTP)
H. IOS SSH
I. Lightweight Directory Access Protocol (LDAP)
J. Active Directory
K. RDEP Remote Data Exchange Protocol
III. General Networking
A. Networking Basics
B. TCP/IP
C. Switching and Bridging (including: VLANs, Spanning Tree, etc.)
D. Routed Protocols
E. Routing Protocols (including: RIP, EIGRP, OSPF, BGP)
F. Point to Point Protocol (PPP)
G. IP Multicast
H. Integrated Services Digital Network (ISDN)
I. Async
J. Access Devices (for example: Cisco AS 5300 series)
K. Telephony best practices
L. Wireless best practices
IV. Security Technologies
A. Concepts - security best practices
B. Packet Filtering
C. PIX and IOS authentication proxies
D. Port Address Translation (PAT)
E. Network Address Translation (NAT)
F. Firewalls
G. Content Filters
H. Public Key Infrastructure (PKI)
I. Authentication Technologies
J. Authorization technologies
K. Virtual Private Networks (VPN)
L. Network IDS anomaly, signature, passive, inline
M. Host Intrusion Prevention
N. Cisco Threat Response
V. Cisco Security Applications
A. Cisco Secure NT
B. Cisco Secure PIX Firewall
C. VMS
D. Cisco Secure Intrusion Detection System (formerly NetRanger)
E. IOS® Firewall Feature Set
F. VPN 3000
G. Client side VPN
H. CAT Service Modules
I. IOS IDS (in line)
J. Cisco Secure ACS
K. Security Information Monitoring System (event correlation, basic forensics)
VI. Security General
A. Policies - Security Policy Best Practices
B. Standards Bodies - IETF
C. Vulnerability discussions
D. Attacks and Common Exploits - recon, priv escalation, penetration, cleanup, backdoor
VII. Cisco General
A. IOS Specifics
B. Routing and switching security features: IE mac address controls, port security, dhcp snoop
C. Security Policy best practices
CCIE
Cisco Certified Internetwork Expert
VOICE
Objective:
CCIE certification in Voice indicates expert level knowledge of VoIP solutions in the enterprise. Candidates should be able to install, configure and maintain Voice solutions over IP networks. The CCIE Voice track, however, does not certify an understanding of the infrastructure over which VoIP solutions are implemented. This contrasts with the CCIE Service Provider-IP Telephony track which certifies an individual as a core IP expert with a high degree of VoIP literacy.
Other important information regarding the written exam:
Pre-requisite
Valid CCNA certification
- Administered by independent testing vendors at a cost of $300 USD.
- Costs may vary due to exchange rate and local taxes, including VAT and GST.
- Two-hour, computer-based exam contains 100 multiple-choice questions.
- Exam is closed book and no outside reference materials are allowed.
- Pass/Fail results are available immediately following the exam. The passing score is set by statistical analysis and is subject to periodic change.
- Candidates must wait 5 calendar days between attempts.
- Candidates must make an initial attempt of the CCIE lab exam within 18 months of passing the CCIE written exam.
I. Campus Design
A. In line power CDP discovery
B. Port Numbers
C. VLANs
D. CDP Exchanges
II. QoS
A. WAN
B. Campus
C. Delay
D. Jitter
E. CoS
F. ToS
III. Architecture and Protocols
A. MGCP
B. SCCP
C. ISDN
D. QSIG
E. FXO caller ID
F. Analog FXS, FXO, E&M
G. FXO Answer/Disconnect Supervision
H. PRI NFAS
I. CAMA
J. DID
K. Standards: H.245, G.711, G.726, G.729, H.225
L. PCM
M. RTP
N. VAD
O. CRTP
P. Fax Relay
IV. SMDI
A. Com-port based
B. VG-248-based
C. General SMDI Knowledge
V. Security
A. AAA
B. Radius
C. NBAR
VI. Capacity Planning (Voice gateway/Network)
A. Erlang B, Erlang C
B. Device Weights
C. Load Balancing
D. Bandwidth Planning/Traffic Engineering
VII. Dial Plan
A. Dial-Peers
B. DNIS
C. ANI
D. Connection Trunk
E. Connection Plar
F. Gatekeeper
VIII. High Availability Considerations
A. SRST
B. HSRP
C. Call Manager clustering
D. PSTN Connectivity to remote sites
E. Gatekeeper Clustering
F. Alternative Gateways
IX. Video
A. Protocols
B. General Knowledge
X. Echo Theory
A. Tail circuit
B. Acoustic echo
C. Electical echo
D. Canceller coverage
E. Cancellation Location
F. Standards
XI. Fault Diagnosis
A. Basic Fault Diagnosis
B. IOS "show" commands
XII. SIP Proxy
A. Basic theory
XIII. Coexistence/Migration
A. Voicemail Integration
B. MWI
C. PBX
XIV. Unified Messaging
A. Active Directory Integration
B. Call Manager
C. AMIS
XV. Capacity Planning (Application Level)
A. Unity
B. Call Manager
C. Call Admition Control
D. Application Level Planning
E. Control Plane Bandwidth
XVI. Call Processing
A. Route Pattern
B. Dial Plan
XVII. Manageability Considerations
A. Route Pattern
B. Dial Plan
XVIII. 911/E911 considerations
A. Route Pattern
B. Dial Plan
