<h1> 【重磅】思科发布全新<a href="http://www.togogo.net/" data-ke-src="http://www.togogo.net/" target="_blank"><span style="color:#000000;">CCIE</span></a>体系，再见了路由交换！</h1><p style="text-align:center;"><img src="http://115.29.210.249/tggPic/content/2019-06/1560480488208.png" data-ke-src="http://115.29.210.249/tggPic/content/2019-06/1560480488208.png" width="640" height="956" title="CCIE" alt="CCIE"></p><p> 思科厂商发布了最新CCIE认证体系重磅消息，<span style="color:#FF9900;">R&S CCIE退出历史舞台，替代CCIE R&S的是：CCIE Enterprise Infrastructure（企业基础架构）</span>。</p><span> 新的认证将于2020年2月24日发布，当前认证截止日期是2020年2月23日！现有的认证仍有效，但如果在2月24日后获得认证，将获得新的认证和相关的证书，所以在学思科认证的小伙伴们，抓紧时间学习考试，新的一波认证来袭后，考题也随之更新。</span><br><ul><li> RS退出历史舞台，RS方向改为Enterprise方向，现有的RS认证在新认证发布后自动升级为企业基础设施认证</li><li> Design方向改为DevNet方向，CCDA改为DevNet Associate，CCDP改为了DevNet Professional</li></ul><p style="text-align:center;"><img src="http://115.29.210.249/tggPic/content/2019-06/1560480603165.png" data-ke-src="http://115.29.210.249/tggPic/content/2019-06/1560480603165.png" width="640" height="313" title="思科" alt="思科"></p><ul><li> Enterprise Infrastructure(原R&S)和 Enterprise Wireless(原Wireless)考相同的IE笔试</li><li> NP笔试和IE笔试是同一门，拿下NP/IE笔试可以选择直接考取LAB成为CCIE或者是参考一门可选考试成为CCNP，考试更为灵活</li></ul><p style="text-align:center;"><img src="http://115.29.210.249/tggPic/content/2019-06/1560480630376.png" data-ke-src="http://115.29.210.249/tggPic/content/2019-06/1560480630376.png" alt=""></p><ul><li> LAB考试模块由TS+DIAG+Configuration三大模块变更为设计+部署，操作和优化两大模块</li></ul><p style="text-align:center;"><img src="http://115.29.210.249/tggPic/content/2019-06/1560480648843.png" data-ke-src="http://115.29.210.249/tggPic/content/2019-06/1560480648843.png" alt=""></p><p style="text-align:center;"><img src="http://115.29.210.249/tggPic/content/2019-06/1560480719953.png" data-ke-src="http://115.29.210.249/tggPic/content/2019-06/1560480719953.png" alt=""></p><ul><li> 重认证形式变更为需修满120学分才可激活，和考NP认证类似，只需修一门核心考试和一门可选考试即可</li><li> 下一代CCIE有效期仍为3年，但超过3年只需选择重修笔试即可激活，无需再考LAB激活</li><li> 十年荣誉CCIE变更为二十年荣誉CCIE</li></ul><p> 在LAB考试中，各个考试内容的框架下图所示：</p><p style="text-align:center;"><img src="http://115.29.210.249/tggPic/content/2019-06/1560480729595.png" data-ke-src="http://115.29.210.249/tggPic/content/2019-06/1560480729595.png" alt=""></p><p> 附考试大纲：</p><table cellspacing="0" cellpadding="0" style="margin:0px 0px 10px;padding:0px;width:677px;color:#333333;font-family:-apple-system-font, BlinkMacSystemFont, "font-size:17px;text-align:justify;"><tbody><tr><td width="567" valign="top" style="border:1px solid windowtext;"><p><strong>1. Network Infrastructure (30%)</strong></p><p>1.1 Switched campus</p><p>1.1.a Switch administration</p><p>1.1.a i Managing MAC address table</p><p>1.1.a ii Errdisable recovery</p><p>1.1.a iii L2 MTU</p><p>1.1.b Layer 2 protocols</p><p>1.1.b i CDP, LLDP</p><p>1.1.b ii UDLD</p><p>1.1.c VLAN technologies</p><p>1.1.c i Access ports</p><p>1.1.c ii Trunk ports (802.1q)</p><p>1.1.c iii Native VLAN</p><p>1.1.c iv Manual pruning</p><p>1.1.c v VLAN database</p><p>1.1.c vi Normal and extended VLANs</p><p>1.1.c vii Voice VLAN</p><p>1.1.c viii VTP</p><p>1.1.d EtherChannel</p><p>1.1.d i LACP, manual</p><p>1.1.d ii Layer 2, layer 3 </p><p>1.1.d iii Load balancing</p><p>1.1.d iv EtherChannel misconfiguration guard</p><p>1.1.e Spanning-Tree</p><p>1.1.e i PVST+, Rapid PVST+, MST</p><p>1.1.e ii Switch priority, port priority, path cost, STP timers</p><p>1.1.e iii PortFast, BPDU Guard, BPDU Filter</p><p>1.1.e iv Loop Guard, Root Guard</p><p>1.2 Routing Concepts</p><p>1.2.a Administrative distance</p><p>1.2.b VRF-lite</p><p>1.2.c Static routing</p><p>1.2.d Policy-based routing</p><p>1.2.e VRF aware routing with any routing protocol</p><p>1.2.f Filtering with any routing protocol</p><p>1.2.g Manual summarization with any routing protocol</p><p>1.2.h Redistribution between any pair of routing protocols</p><p>1.2.i Routing protocol authentication</p><p>1.2.j Bidirectional Forwarding Detection</p><p>1.3 EIGRP</p><p>1.3.a Adjacencies</p><p>1.3.b Best path selection</p><p>1.3.b i RD, FD, FC, successor, feasible successor</p><p>1.3.b ii Classic metric and wide metric</p><p>1.3.c Operations</p><p>1.3.c i General operations</p><p>1.3.c ii Topology table</p><p>1.3.c iii Packet types</p><p>1.3.c iv Stuck In Active</p><p>1.3.c v Graceful shutdown</p><p>1.3.d EIGRP load-balancing</p><p>1.3.d i Equal-cost</p><p>1.3.d ii Unequal-cost</p><p>1.3.d iii Add-path</p><p>1.3.e EIGRP named mode</p><p>1.3.f Optimization, convergence and scalability</p><p>1.3.f i Fast convergence requirements</p><p>1.3.f ii Query propagation boundar</p><p>1.4 OSPF (v2 and v3)</p><p>1.4.a Adjacencies</p><p>1.4.b Network types, area types</p><p>1.4.c Path preference</p><p>1.4.d Operations</p><p>1.4.d i General operations</p><p>1.4.d ii Graceful shutdown</p><p>1.4.d iii GTSM (Generic TTL Security Mechanism)</p><p>1.4.e Optimization, convergence and scalability</p><p>1.4.e i Metrics</p><p>1.4.e ii LSA throttling, SPF tuning, fast hello</p><p>1.4.e iii LSA propagation control (area types)</p><p>1.4.e iv Stub router</p><p>1.4.e v Loop-free alternate</p><p>1.4.e vi Prefix suppression</p><p>1.5 BGP</p><p>1.5.a IBGP and EBGP peer relationships</p><p>1.5.a i Peer-group/update-group, template</p><p>1.5.a ii Active, passive</p><p>1.5.a iii Timers</p><p>1.5.a iv Dynamic neighbors</p><p>1.5.a v 4 Bytes AS number</p><p>1.5.a vi Private AS</p><p>1.5.b Path selection</p><p>1.5.b i Attributes</p><p>1.5.b ii Best path selection algorithm</p><p>1.5.b iii Load-balancing</p><p>1.5.c Routing policies</p><p>1.5.c i Attribute manipulation</p><p>1.5.c ii Conditional advertisement</p><p>1.5.c iii Outbound Route Filtering</p><p>1.5.c iv Standard and extended communities</p><p>1.5.c v Multi-homing</p><p>1.5.d AS path manipulations</p><p>1.5.d i Local AS, allowas- in, remove private as</p><p>1.5.d ii Prepend</p><p>1.5.d iii Regexp</p><p>1.5.e Convergence and scalability</p><p>1.5.e i Route reflector</p><p>1.5.e ii Aggregation, AS set</p><p>1.5.f Other BGP features</p><p>1.5.f i Multipath, add-path</p><p>1.5.f ii Soft reconfiguration, route refresh </p><p>1.6 Multicast</p><p>1.6.a Layer 2 multicast</p><p>1.6.a i IGMPv2, IGMPv3</p><p>1.6.a ii IGMP Snooping, PIM Snooping</p><p>1.6.a iii IGMP Querier</p><p>1.6.a iv IGMP Filter</p><p>1.6.a v MLD</p><p>1.6.b Reverse path forwarding check</p><p>1.6.c PIM</p><p>1.6.c i Sparse Mode</p><p>1.6.c ii Static RP, BSR, AutoRP</p><p>1.6.c iii Group to RP Mapping</p><p>1.6.c iv Bidirectional PIM</p><p>1.6.c v Source-Specific Multicast</p><p>1.6.c vi Multicast boundary, RP announcement filter</p><p>1.6.c vii PIMv6 Anycast RP</p><p>1.6.c viii IPv4 Anycast RP using MSDP</p><p>1.6.c ix Multicast multipath</p><p><br></p><p><strong>2. Software Defined Infrastructure (25%)</strong></p><p>2.1 Cisco SD Access</p><p>2.1.a Design a Cisco SD Access solution</p><p>2.1.a i Underlay network (ISIS, manual/PnP)</p><p>2.1.a ii Overlay fabric design (LISP, VXLAN, Cisco TrustSec)</p><p>2.1.a iii Fabric domains (single-site and multi-site)</p><p>2.1.b Cisco SD Access deployment</p><p>2.1.b i Cisco DNA Center device discovery and device management</p><p>2.1.b ii Add edge node devices to an existing fabric</p><p>2.1.b iii Host onboarding (wired endpoints only)</p><p>2.1.b iv Fabric border handoff</p><p>2.1.c Segmentation</p><p>2.1.c i Macro-level segmentation using VNs</p><p>2.1.c ii Micro-level segmentation using SGTs (using Cisco ISE)</p><p>2.1.d Assurance</p><p>2.1.d i Network and client health (360)</p><p>2.1.d ii Monitoring and troubleshooting</p><p>2.2 Cisco SD-WAN</p><p>2.2.a Design a Cisco SD-WAN solution</p><p>2.2.a i Orchestration plane (vBond, NAT)</p><p>2.2.a ii Management plane (vManage) </p><p>2.2.a iii Control plane (vSmart, OMP)</p><p>2.2.a iv Data plane (vEdge/cEdge)</p><p>2.2.b WAN edge deployment</p><p>2.2.b i Onboarding new edge routers</p><p>2.2.b ii Orchestration with zero-touch provisioning/Plug-And-Play</p><p>2.2.b iii OMP</p><p>2.2.b iv TLOC</p><p>2.2.c Configuration templates</p><p>2.2.d Localized policies (only QoS)</p><p>2.2.e Centralized policies</p><p>2.2.e i Application Aware Routing</p><p>2.2.e ii Topologies</p><p><br></p><p><strong>3. Transport Technologies and Solutions (15%)</strong></p><p>3.1 MPLS</p><p>3.1.a Operations</p><p>3.1.a i Label stack, LSR, LSP</p><p>3.1.a ii LDP</p><p>3.1.a iii MPLS ping, MPLS traceroute</p><p>3.1.b L3VPN</p><p>3.1.b i PE-CE routing</p><p>3.1.b ii MP-BGP VPNv4 -v6</p><p>3.1.b iii Extranet (route leaking)</p><p>3.2 DMVPN</p><p>3.2.a Troubleshoot DMVPN phase 3 with dual-hub</p><p>3.2.a i NHRP</p><p>3.2.a ii IPsec/IKEv2 using preshared key</p><p>3.2.a iii Per-Tunnel QoS</p><p>3.2.b Identify use-cases for FlexVPN</p><p>3.2.b i Site-to-site, Server, Client, Spoke-to-Spoke</p><p>3.2.b ii IPsec/IKEv2 using preshared key</p><p>3.2.b iii MPLS over FlexVPN</p><p><br></p><p><strong>4. Infrastructure Security and Services (15%)</strong></p><p>4.1 Device Security on Cisco IOS XE</p><p>4.1.a Control plane policing and protection</p><p>4.1.b AAA</p><p>4.2 Network Security</p><p>4.2.a Switch security features</p><p>4.2.a i VACL, PACL</p><p>4.2.a ii Storm control</p><p>4.2.a iii DHCP snooping, DHCP option 82</p><p>4.2.a iv IP Source Guard</p><p>4.2.a v Dynamic ARP inspection</p><p>4.2.a vi Port-security</p><p>4.2.a vii Private VLAN</p><p>4.2.b Router security features</p><p>4.2.b i IPv6 Traffic filters</p><p>4.2.b ii IPv4 Access Control Lists</p><p>4.2.b iii Unicast Reverse Path Forwarding</p><p>4.2.c IPv6 First Hop Security features</p><p>4.2.c i RA guard</p><p>4.2.c ii DHCP guard</p><p>4.2.c iii Binding table</p><p>4.2.c iv Device tracking</p><p>4.2.c v ND inspection/snooping</p><p>4.2.c vi Source guard</p><p>4.2.d IEEE 802.1X Port-Based Authentication</p><p>4.2.d i Device roles, port states</p><p>4.2.d ii Authentication process</p><p>4.2.d iii Host modes</p><p>4.3 System Management</p><p>4.3.a Device management</p><p>4.3.a i Console and VTY</p><p>4.3.a ii SSH, SCP</p><p>4.3.a iii RESTCONF, NETCONF</p><p>4.3.b SNMP</p><p>4.3.b i v2c</p><p>4.3.b ii v3</p><p>4.3.c Logging</p><p>4.3.c i Local logging, syslog, debugs, conditional debugs</p><p>4.3.c ii Timestamps</p><p>4.4 Quality of Service</p><p>4.4.a End to end L3 QoS using MQC</p><p>4.4.a i DiffServ</p><p>4.4.a ii CoS and DSCP Mapping</p><p>4.4.a iii Classification</p><p>4.4.a iv Network Based Application Recognition (NBAR)</p><p>4.4.a v Marking using IP Precedence, DSCP, CoS</p><p>4.4.a vi Policing, shaping</p><p>4.4.a vii Congestion management and avoidance</p><p>4.4.a viii HQoS, Sub-rate Ethernet Link</p><p>4.5 Network Services</p><p>4.5.a First-Hop Redundancy protocols</p><p>4.5.a i HSRP, GLBP, VRRP</p><p>4.5.a ii Redundancy using IPv6 RS/RA</p><p>4.5.b Network Time Protocol</p><p>4.5.b i Master, client</p><p>4.5.b ii Authentication</p><p>4.5.c DHCP on Cisco IOS</p><p>4.5.c i Client, server, relay</p><p>4.5.c ii Options</p><p>4.5.c iii SLAAC/DHCPv6 interaction</p><p>4.5.c iv Stateful, stateless DHCPv6</p><p>4.5.c v DHCPv6 prefix delegation</p><p>4.5.d IPv4 Network Address Translation</p><p>4.5.d i Static NAT, PAT</p><p>4.5.d ii Dynamic NAT, PAT</p><p>4.5.d iii Policy-based NAT, PAT</p><p>4.5.d iv VRF aware NAT, PAT</p><p>4.5.d v VASI</p><p>4.6 Network optimization</p><p>4.6.a IP SLA</p><p>4.6.a i ICMP probes</p><p>4.6.a ii UDP probes</p><p>4.6.a iii TCP probes</p><p>4.6.b Tracking object</p><p>4.6.c Flexible netflow</p><p>4.7 Network operations</p><p>4.7.a Traffic capture</p><p>4.7.a i SPAN</p><p>4.7.a ii RSPAN</p><p>4.7.a iii ERSPAN</p><p>4.7.a iv Embedded packet capture</p><p>4.7.b Cisco IOS-XE Troubleshooting tools</p><p>4.7.b i Packet-tracer</p><p>4.7.b ii Conditional debugger (debug platform condition)</p><p><br></p><p><strong>5. Infrastructure Automation and Programmability (15%)</strong></p><p>5.1 Data encoding formats</p><p>5.1.a JSON</p><p>5.1.b XML</p><p>5.2 Automation and scripting</p><p>5.2.a EEM applets</p><p>5.2.b Guest shell</p><p>5.2.b i Linux environment</p><p>5.2.b ii CLI Python module</p><p>5.2.b iii EEM Python module</p><p>5.3 Programmability</p><p>5.3.a Interaction with vManage API</p><p>5.3.a i Python requests library or Postman</p><p>5.3.a ii Monitoring endpoints</p><p>5.3.a iii Configuration endpoints</p><p>5.3.b Interaction with Cisco DNA Center API</p><p>5.3.b i HTTP request (GET, PUT, POST) via Python requests library or</p><p>Postman</p><p>5.3.c Interaction with Cisco IOS XE API</p><p>5.3.c i Via NETCONF/YANG using Python ncclient library</p><p>5.3.c ii Via RESTCONF/YANG using Python requests library or</p><p>Postman</p><p>5.3.d Deploy and verify model-driven telemetry</p><p>5.3.d i Configure on-change subscription using gRPC</p></td></tr></tbody></table>
