Goal

. The goal of this learning matrix is to help you attain your goal to become certified by providing study resources tail
. It is intended to be used as a reference, and not to provide a complete list of all resources available. The matrix foc
. These widely available preparation resources can be in the form of specific chapters of books, Cisco Validated Desi
webinars, VoDs, SRNDs, white papers, case studies, design guides, Design TechNotes, reference guides, etc.

Disclaimer
. There is no guarantee that you will be able to pass the exam by only referring to material provided within this matr
. There are a lot of other resources (both internal and external) that cover the same exam topics. You are encourage
. This matrix should be considered a living document and taking into account the sheer amount of possible relevant
. We encourage you to participate and engage with us, so if you have any suggestions for further content or any com

How to make the best out of this learning matrix?

1.1. Evaluate yourself and determine which areas you need to improve in

1.2. Create a strategy

Determine which preparation resources YOU need based upon your self-evaluation. Several options might be provid

1.3. Get preparation resources tailored to your own needs

Buy or borrow books, schedule classes, find a study partner, etc. In short, arrange all YOU need to get ready for the

1.4. Are you ready?

Once you are comfortable you are mastering exam topics, register and take the exam.

1.5. Pass?
Did you pass? Great! Did you not? Do not despair, do a lessons learned review and update your self-evaluation.
providing study resources tailored to your own needs.
urces available. The matrix focusses primarely on Cisco and Cisco Press content.
of books, Cisco Validated Design documents (CVDs), Cisco Live 365 presentations, courses,
reference guides, etc.

erial provided within this matrix. But it will certainly improve your skills, which will serve as the foundation you need to build u
xam topics. You are encouraged to use any other resources at your own discretion during your exam preparation.
r amount of possible relevant content, the objective here is to refine and improve this compilation of resources over time, so p
for further content or any comments regards to the current content, please let us know.

everal options might be provided to prepare to each topic, you might not need all of them.

YOU need to get ready for the exam.

date your self-evaluation.

oundation you need to build upon.
xam preparation.
on of resources over time, so please refer to it frequently.
 CCIE Enterprise Infrastructure
Level Index Exam Topic

1 1 Network Infrastructure

2 1.1 Switched campus

3 1.1.a Switch administration
4 1.1.a i Managing MAC address table
4 1.1.a ii Errdisable recovery
4 1.1.a iii L2 MTU
3 1.1.b Layer 2 protocols
4 1.1.b i CDP, LLDP
4 1.1.b ii UDLD
3 1.1.c VLAN technologies
4 1.1.c i Access ports
4 1.1.c ii Trunk ports (802.1Q)
4 1.1.c iii Native VLAN
4 1.1.c iv Manual VLAN pruning
4 1.1.c v VLAN database
4 1.1.c vi Normal range and extended range VLANs
4 1.1.c vii Voice VLAN
4 1.1.c viii VTP
3 1.1.d EtherChannel
4 1.1.d i LACP, static
4 1.1.d ii Layer 2, Layer 3
4 1.1.d iii Load balancing
4 1.1.d iv EtherChannel Misconfiguration Guard
3 1.1.e Spanning Tree Protocol
4 1.1.e i PVST+, Rapid PVST+, MST
4 1.1.e ii Switch priority, port priority, path cost, STP timers
4 1.1.e iii PortFast, BPDU Guard, BPDU Filter
4 1.1.e iv Loop Guard, Root Guard

2 1.2 Routing Concepts

3 1.2.a Administrative distance
3 1.2.b VRF-lite
3 1.2.c Static routing
3 1.2.d Policy Based Routing
3 1.2.e VRF-aware routing with any routing protocol
3 1.2.f Route filtering with any routing protocol
3 1.2.g Manual summarization with any routing protocol
3 1.2.h Redistribution between any pair of routing protocols
3 1.2.i Routing protocol authentication
3 1.2.j Bidirectional Forwarding Detection
2 1.3 EIGRP

3 1.3.a Adjacencies
3 1.3.b Best path selection
4 1.3.b i RD, FD, FC, successor, feasible successor
4 1.3.b ii Classic Metrics and Wide Metrics
3 1.3.c Operations
4 1.3.c i General operations
4 1.3.c ii Topology table
4 1.3.c iii Packet types
4 1.3.c iv Stuck In Active
4 1.3.c v Graceful shutdown
3 1.3.d EIGRP load balancing
4 1.3.d i Equal-cost
4 1.3.d ii Unequal-cost
4 1.3.d iii Add-path
3 1.3.e EIGRP Named Mode
3 1.3.f Optimization, convergence and scalability
4 1.3.f i Fast convergence requirements
4 1.3.f ii Query propagation boundaries
4 1.3.f iii IP FRR (single hop)
4 1.3.f iv Leak-map with summary routes
4 1.3.f v EIGRP stub with leak map
2 1.4 OSPF (v2 and v3)
3 1.4.a Adjacencies
3 1.4.b Network types, area types
3 1.4.c Path preference
3 1.4.d Operations
4 1.4.d i General operations
4 1.4.d ii Graceful shutdown
4 1.4.d iii GTSM (Generic TTL Security Mechanism)
3 1.4.e Optimization, convergence and scalability
4 1.4.e i Metrics
4 1.4.e ii LSA throttling, SPF tuning, fast hello
4 1.4.e iii LSA propagation control (area types)
4 1.4.e iv Stub router
4 1.4.e v Loop-free alternate
4 1.4.e vi Prefix suppression
2 1.5 BGP
3 1.5.a IBGP and EBGP peer relationships
4 1.5.a i Peer-group/update-group, template
4 1.5.a ii Active, passive
4 1.5.a iii Timers
4 1.5.a iv Dynamic neighbors
4 1.5.a v 4-byte AS numbers
4 1.5.a vi Private AS
3 1.5.b Path selection
4 1.5.b i Attributes
4 1.5.b ii Best path selection algorithm
4 1.5.b iii Load balancing
3 1.5.c Routing policies
4 1.5.c i Attribute manipulation
4 1.5.c ii Conditional advertisement
4 1.5.c iii Outbound Route Filtering
4 1.5.c iv Standard and extended communities
4 1.5.c v Multi-homing
3 1.5.d AS path manipulations
4 1.5.d i local-as, allowas-in, remove-private-as
4 1.5.d ii Prepend
4 1.5.d iii Regexp
3 1.5.e Convergence and scalability
4 1.5.e i Route reflector
4 1.5.e ii Aggregation, as-set
3 1.5.f Other BGP features
4 1.5.f i Multipath, add-path
4 1.5.f ii Soft reconfiguration, Route Refresh
2 1.6 Multicast
3 1.6.a Layer 2 multicast
4 1.6.a i IGMPv2, IGMPv3
4 1.6.a ii IGMP Snooping, PIM Snooping
4 1.6.a iii IGMP Querier
4 1.6.a iv IGMP Filter
4 1.6.a v MLD
3 1.6.b Reverse path forwarding check
3 1.6.c PIM
4 1.6.c i Sparse Mode
4 1.6.c ii Static RP, BSR, AutoRP
4 1.6.c iii Group to RP Mapping
4 1.6.c iv Bidirectional PIM
4 1.6.c v Source-Specific Multicast
4 1.6.c vi Multicast boundary, RP announcement filter
4 1.6.c vii PIMv6 Anycast RP
4 1.6.c viii IPv4 Anycast RP using MSDP
4 1.6.c ix Multicast multipath
1 2 Software Defined Infrastructure (25%)
2 2.1 Cisco SD Access
3 2.1.a Design a Cisco SD Access solution
4 2.1.a i Underlay network (IS-IS, manual/PnP)
4 2.1.a ii Overlay fabric design (LISP, VXLAN, Cisco TrustSec)
4 2.1.a iii Fabric domains (single-site and multi-site using SD-WAN transit)
3 2.1.b Cisco SD Access deployment
4 2.1.b i Cisco DNA Center device discovery and device management
4 2.1.b ii Add fabric node devices to an existing fabric
4 2.1.b iii Host onboarding (wired endpoints only)
4 2.1.b iv Fabric border handoff

3 2.1.c Segmentation
4 2.1.c i Macro-level segmentation using VNs
4 2.1.c ii Micro-level segmentation using SGTs (using Cisco ISE)
3 2.1.d Assurance
4 2.1.d i Network and client health (360)
4 2.1.d ii Monitoring and troubleshooting

2 2.2 Cisco SD-WAN

3 2.2.a Design a Cisco SD-WAN solution
4 2.2.a i Orchestration plane (vBond, NAT)
4 2.2.a ii Management plane (vManage)
4 2.2.a iii Control plane (vSmart, OMP)
4 2.2.a iv Data plane (vEdge/cEdge)
3 2.2.b WAN edge deployment
4 2.2.b i Onboarding new edge routers
4 2.2.b ii Orchestration with zero-touch provisioning/Plug-And-Play
4 2.2.b iii OMP
4 2.2.b iv TLOC

3 2.2.c Configuration templates

3 2.2.d Localized policies (only QoS)
3 2.2.e Centralized policies
4 2.2.e i Application Aware Routing
4 2.2.e ii Topologies
1 3 Transport Technologies and Solutions
2 3.1 MPLS

3 3.1.a Operations
4 3.1.a i Label stack, LSR, LSP
4 3.1.a ii LDP
4 3.1.a iii MPLS ping, MPLS traceroute

3 3.1.b L3VPN
4 3.1.b i PE-CE routing
4 3.1.b ii MP-BGP VPNv4/VPNv6
4 3.1.b iii Extranet (route leaking)
2 3.2 DMVPN

3 3.2.a Troubleshoot DMVPN Phase 3 with dual-hub

4 3.2.a i NHRP
4 3.2.a ii IPsec/IKEv2 using pre-shared key
4 3.2.a iii Per-Tunnel QoS

3 3.2.b Identify use-cases for FlexVPN

4 3.2.b i Site-to-Site, Server, Client, Spoke-to-Spoke
4 3.2.b ii IPsec/IKEv2 using pre-shared key
4 3.2.b iii MPLS over FlexVPN
1 4 Infrastructure Security and Services
2 4.1 Device Security on Cisco IOS XE
3 4.1.a Control plane policing and protection

3 4.1.b AAA
2 4.2 Network Security
3 4.2.a Switch security features

4 4.2.a i VACL, PACL

4 4.2.a ii Storm control

4 4.2.a iii DHCP Snooping, DHCP option 82

4 4.2.a iv IP Source Guard

4 4.2.a v Dynamic ARP Inspection

4 4.2.a vi Port Security

4 4.2.a vii Private VLAN

3 4.2.b Router security features

4 4.2.b i IPv6 Traffic Filters
4 4.2.b ii IPv4 Access Control Lists
4 4.2.b iii Unicast Reverse Path Forwarding
3 4.2.c IPv6 infrastructure security features
4 4.2.c i RA Guard
4 4.2.c ii DHCP Guard
4 4.2.c iii Binding table
4 4.2.c iv Device tracking
4 4.2.c v ND Inspection/Snooping
4 4.2.c vi Source Guard

3 4.2.d IEEE 802.1X Port-Based Authentication

4 4.2.d i Device roles, port states
4 4.2.d ii Authentication process
4 4.2.d iii Host modes

2 4.3 System Management

3 4.3.a Device management
4 4.3.a i Console and VTY
4 4.3.a ii SSH, SCP
4 4.3.a iii RESTCONF, NETCONF
3 4.3.b SNMP
4 4.3.b i v2c
4 4.3.b ii v3
3 4.3.c Logging
4 4.3.c i Local logging, syslog, debugs, conditional debugs
4 4.3.c ii Timestamps
2 4.4 Quality of Service
3 4.4.a End to end L3 QoS using MQC

4 4.4.a i DiffServ
4 4.4.a ii CoS and DSCP Mapping
4 4.4.a iii Classification
4 4.4.a iv Network Based Application Recognition (NBAR)
4 4.4.a v Marking using IP Precedence, DSCP, CoS
4 4.4.a vi Policing, shaping
4 4.4.a vii Congestion management and avoidance
4 4.4.a viii HQoS, Sub-rate Ethernet Link
2 4.5 Network Services
3 4.5.a First Hop Redundancy Protocols
4 4.5.a i HSRP, GLBP, VRRP

4 4.5.a ii Redundancy using IPv6 RS/RA

3 4.5.b Network Time Protocol
4 4.5.b i Master, client
4 4.5.b ii Authentication
3 4.5.c DHCP on Cisco IOS
4 4.5.c i Client, server, relay
4 4.5.c ii Options
4 4.5.c iii SLAAC/DHCPv6 interaction
4 4.5.c iv Stateful, stateless DHCPv6
4 4.5.c v DHCPv6 Prefix Delegation
3 4.5.d IPv4 Network Address Translation
4 4.5.d i Static NAT, PAT
4 4.5.d ii Dynamic NAT, PAT
4 4.5.d iii Policy-based NAT, PAT
4 4.5.d iv VRF-aware NAT, PAT
4 4.5.d v IOS-XE VRF-Aware Software Infrastructure (VASI) NAT
2 4.6 Network optimization
3 4.6.a IP SLA
4 4.6.a i ICMP probes
4 4.6.a ii UDP probes
4 4.6.a iii TCP probes

3 4.6.b Tracking object

3 4.6.c Flexible NetFlow

2 4.7 Network operations
3 4.7.a Traffic capture
4 4.7.a i SPAN
4 4.7.a ii RSPAN
4 4.7.a iii ERSPAN

4 4.7.a iv Embedded Packet Capture

3 4.7.b Cisco IOS-XE troubleshooting tools
4 4.7.b i Packet Trace
4 4.7.b ii Conditional debugger (debug platform condition)
1 5 Infrastructure Automation and Programmability

2 5.1 Data encoding formats

3 5.1.a JSON
3 5.1.b XML
2 5.2 Automation and scripting

3 5.2.a EEM applets

3 5.2.b Guest shell
4 5.2.b i Linux environment
4 5.2.b ii CLI Python module
4 5.2.b iii EEM Python module

2 5.3 Programmability
3 5.3.a Interaction with vManage API
4 5.3.a i Python requests library and Postman
4 5.3.a ii Monitoring endpoints
4 5.3.a iii Configuration endpoints
3 5.3.b Interaction with Cisco DNA Center API
HTTP request (GET, PUT, POST) via Python requests library and
4 5.3.b i Postman
3 5.3.c Interaction with Cisco IOS XE API
4 5.3.c i Via NETCONF/YANG using Python ncclient library
4 5.3.c ii Via RESTCONF/YANG using Python requests library and Postman
3 5.3.d Deploy and verify model-driven telemetry
4 5.3.d i Configure on-change subscription using gRPC
Cisco docs IOS-XE 16

LAN Switching Configuration Guide

IP Routing IP Routing: Protocol-Independent Configuration Guide

BFD Configuration Guide
EIGRP Configuration Guide

OSPF Configuration Guide

BGP Configuration Guide

IGMP Configuration Guide

PIM Configuration Guide

Cisco DNA Assurance User Guide

Cisco DNA Assurance User Guide

vManage How-Tos
Should be available soon

Create a Device Configuration Template

Configure Policies
Configure Policies

MPLS Label Distribution Protocol Configuration Guide

 MPLS: Layer 3 VPNs Configuration Guide

Dynamic Multipoint VPN Configuration Guide

Chapter: Per-Tunnel QoS for DMVPN

FlexVPN and Internet Key Exchange Version 2 Configuration Guide

Control Plane Policing

Authentication Authorization and Accounting Configuration Guide

Access Control Lists

 IPv6 First-Hop Security Configuration Guide

Configuring IEEE 802.1X Port-Based Authentication

Performing Basic System Management

SNMP Configuration Guide

Configuring System Message Logs

Model-Driven Telemetry

QoS Modular QoS Command-Line Interface Configuration Guide

First Hop Redundancy Protocols Configuration Guide

Chapter: Network Time Protocol
 DHCP Configuration Guide

NAT Configuration Guide

Configure VRF-Aware Software Infrastructure (VASI) NAT on IOS-XE

IP SLAs Configuration Guide

IP Application Services Configuration Guide

Flexible NetFlow Configuration Guide

Configuring ERSPAN
Embedded Packet Capture Configuration Guide
Embedded Packet Capture for Cisco IOS and IOS-XE Configuration Example
Troubleshooting Guide
IOS-XE Datapath Packet Trace Feature

Embedded Event Manager Configuration Guide

Guest Shell
 Programmability Configuration Guide

Introducing the IOS XE REST API

NETCONF over SSHv2
IOS-15.2E Ciscolive

Catalyst 3750-X and 3560-X Software Configuration

Cisco Live - Campus
Guide
Cisco Live EIGRP
EIGRP Deployments in Modern Networks

Cisco Live - OSPF

CiscoLive BGP
CiscoLive Multicast
Cisco Live SDA

Cisco Live SDWAN

Cisco Live MPLS

 Cisco Live DMVPN

Cisco Live - FlexVPN

Cisco Live - Security

Chapter: Configuring Network

Security with ACLs
Chapter: Configuring Port-Based
Traffic Control
Chapter: Configuring DHCP Features
and IP Source Guard
Chapter: Configuring DHCP Features
and IP Source Guard
Chapter: Configuring Dynamic ARP
Inspection
Chapter: Configuring Port-Based
Traffic Control
Chapter: Configuring Private VLANs
Cisco Live - Security
Information about Network Security with ACLs
 Cisco Live - IPv6 Security
Configuring First Hop Security in IPv6

Cisco Live - 802.1x

Configuring IEEE 802.1x Port-Based Authentication

Cisco Live SNMP

Cisco Live - Model Driven Telemetry

Cisco Live QoS

 Cisco Live - NAT

Cisco Live - Flexible Workflow

Configuring SPAN and RSPAN

CIsco Live XE Troubleshooting

Cisco Live IOS XE Architecture for Programmability

Cisco Live - EEM

Cisco Live - XE Programmability
DevNet CVD

Design Zone for Campus Wired and Wireless LAN

Campus-LAN-WLAN-Design-Guide
 CVD : SD Access Design guide

CVD : SD Access Deployment Guide

CVD : SD Access Segmentation Design Guide

Develop with SDWAN Design Zone for Branch, WAN, and Internet Edge

Cisco SD-WAN Design Guide

Cisco SD-WAN Deployment Guide
Cisco DNA Center Programmability
https://developer.cisco.com/learning/labs/tags/Networking
SD-WAN

IOS-XE
Cisco Community Books - CLICK HERE

enterprise_networks

discussions-lan-switching-routing

discussions-wan-routing-switching
discussions-sd-wan
discussions-network-management
Dynamic address assignment in IPv6 using SLAAC and DHCP

Packet Trace on IOS-XE

Training - CLICK HERE
Relevant Books
Art of Network Architecture, The: Business-Driven Design
CCIE Routing and Switching v5.0 Official Cert Guide Vol 1 Premium Edition eBook/Practice Test, 5th Edition
CCIE Routing and Switching v5.0 Official Cert Guide, Volume 1, 5th Edition
CCIE Routing and Switching v5.0 Official Cert Guide, Volume 2, 5th Edition
Cisco CCIE Routing and Switching v5.0 Configuration and Troubleshooting Practice Labs Bundle
Cisco CCIE Routing and Switching v5.0 Configuration Practice Labs, 3rd Edition
Cisco CCIE Routing and Switching v5.0 Troubleshooting Practice Labs, 2nd Edition
Cisco LAN Switching (CCIE Professional Development series)
Deploying IPv6 Networks
Inside Cisco IOS Software Architecture (CCIE Professional Development Series)
Internet Routing Architectures, 2nd Edition
IP Routing on Cisco IOS, IOS XE, and IOS XR: An Essential Guide to Understanding and Implementing IP Routing Proto
MPLS and VPN Architectures
MPLS and VPN Architectures, Volume II
Network Security Technologies and Solutions (CCIE Professional Development Series)
Optimal Routing Design (paperback)
Programming and Automating Cisco Networks: A guide to network programmability and automation in the data cen
Routing TCP/IP, Volume 1, 2nd Edition
Routing TCP/IP, Volume II (CCIE Professional Development)
Relevant trainings
BGP Troubleshooting LiveLessons
Border Gateway Protocol (BGP) LiveLessons (Downloadable Video)
CCIE Routing and Switching v5.0 Exam Roundup LiveLessons--Networking Talks
CCNP Routing and Switching TSHOOT 300-135 Complete Video Course
Cisco LAN Switching Video Mentor Downloadable Version
End-to-End Quality of Service Network Design LiveLessons: QoS for Rich-Media and Cloud Networks
Fundamentals of IP Multicast (IP Multicast Survival School Series) LiveLessons
Intermediate System to Intermediate System (IS-IS) Routing Protocol LiveLessons
IP Multicast Fundamentals LiveLessons (Workshop)
IPv6 Design and Deployment LiveLessons
IPv6 Fundamentals LiveLessons: A Straightforward Approach to Understanding IPv6
Large-Scale Network Design LiveLessons: Best Practices for Designing Elegant, Scalable, and Programmable Network
MPLS Fundamentals LiveLessons
Network Programmability Fundamentals LiveLessons
Networking and IPv4 Addressing Fundamentals LiveLessons
Understanding the Shortest Path First (SPF) Algorithm LiveLessons (Networking Talks)
Network Evolution for the Cloud and Digital Era - SD-WAN Training Videos
Network Automation, Analytics, and Virtualization
Network Programmability
Python Programming Training Videos
Netacad programming Courses