Christmas Offer - Every Learner Must Check Out - Flat 88% OFF on All Access Pass
PyNet Labs- Network Automation Specialists

CCIE Enterprise Infrastructure
Training V1.1

Gain hands-on lab experience with our CCIE Enterprise Infrastructure Training as we will build our lab gradually by introducing topics one by one and will end up with a complex scenario that will prepare you for your CCIE Enterprise Lab attempt.
book form
CCIE Enterprise Lab


CCIE Enterprise Infrastructure Training




Starting from 13th July 2024
Weekend batch
(Saturday & Sunday)

9 AM to 12 PM Indian Time
11: 30 PM to 2: 30 AM Eastern Time
3:30 AM to 6:30 AM UTC/GMT00



CCIE Enterprise Infrastructure Training


Starting from 13th July 2024
Weekend batch
(Saturday & Sunday)


9 AM to 12 PM Indian Time
11: 30 PM to 2: 30 AM Eastern Time
3:30 AM to 6:30 AM UTC/GMT00




The expert level of the Enterprise track is known as CCIE Enterprise Infrastructure, and the CCIE Enterprise Infrastructure training by PyNet Labs will cover the latest version 1.1.

Our program is structured into five modules, ENCOR 350-401, ENARSI 300-410, Cisco SD-WAN, SD-Access, and Network Automation & Programmability. Each module in the CCIE Enterprise Infrastructure Training covers the necessary knowledge and hands-on skills required to excel in the challenging CCIE Enterprise Infrastructure exam.

Throughout the CCIE Enterprise Infrastructure training, we will take you from foundational concepts of ENCOR to advanced techniques of Automation. Within each training module, we will start building labs with 24*7 unlimited lab access and after all this, you will be working on the main labs that will help you to prepare for the actual lab exam of the CCIE Enterprise Infrastructure Blueprint.

Also, if you are familiar with the ENCOR & SDWAN concepts, then you can skip these modules and dive straight to other modules of CCIE Enterprise training.

What to expect in the CCIE Enterprise Infrastructure Training V1.1

Video Thumbnail

Infrastructure Training v1.1 Details

Arrow 1


Module 1 (30 Hours): Skippable, if you are familiar with CCNP ENCOR 350-401.

Switched Campus

  • Configuring and verifying basic layer 2 operations
  • Configuring and verifying layer 2 protocols: CDP, LLDP, UDLD
  • Configuring and verifying VLANs and Trunks, Voice VLAN
  • Configuring and verifying EtherChannel
  • Configuring and verifying STP, RSTP, MST, and related features

Routing Protocols

    Configuring IPv4 and IPv6 static routing
      • Configuring OSPF Adjacencies
      • Configure simple OSPFv2/v3 environments, including multiple normal areas, summarization, and filtering.
      • Configure and verify BGP between directly connected neighbors
      • Understanding best path selection algorithm and neighbor relationships
    Routing Concepts
      • Configuring Policy-Based Routing
      • Configuring VRF Lite
      • Configuring Routing Protocol Authentications


  • Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference, noise, bands, channels, and wireless
    client devices capabilities
  •  Describe AP modes and antenna types
  • Describe access point discovery and join process (discovery algorithms, WLC selection process)
  • Describe the main principles and use cases for Layer 2 and Layer 3 roaming
  • Troubleshoot WLAN configuration and wireless client connectivity issues using GUI only
  • Describe wireless segmentation with groups, profiles, and tags
  • Configure and verify wireless security features : 802.1X, WebAuth, PSK, EAPOL (4-way handshake)

IP Services and Security

  • Configuring Time Synchronization Protocols: NTP, PTP
  • Configure NAT/PAT
  • Configuring FHRP: HSRP, VRRP
  • Understanding multicast protocols, such as RPF check, PIM and IGMP v2/v3
  • Interpret wired and wireless QoS configurations
    o QoS components
    o QoS policy
  • Lines and local user authentication
  • Configuring Control Plane Policing and Protection
  • Configuring AAA
  • ACLs
  • Configuring wireless security features: 802.1X WebAuth PSK EAPOL (4-way handshake)
  • Understanding the components of network security design:
    o Threat defense
    o Endpoint security
    o Next-generation firewall
    o TrustSec and MACsec
    o Network access control with 802.1X, MAB, and WebAuth
  • Understanding network diagnosing tools like : debugs, conditional debugs, traceroute, ping, SNMP, and syslog
  • Configure and verify Flexible NetFlow
  • Configure and verify IPSLA


  • Understanding device virtualization technologies:
    o Hypervisor type 1 and 2
    o Virtual machine
    o Virtual switching
  • Configure static point-to-point GRE tunnels between two sites.
  • Configuring and verifying IPsec tunnelling.
  • Describing LISP and VXLAN.

Module 2 (30 Hours): Contains the content of CCNP ENARSI and additional topics that will help you understand the depth of networking technologies.

Routing Protocols:


  • Configuring EIGRP Adjacencies
  • Understanding EIGPR Best Path Selection, EIGRP Metric, Feasibility Condition
  • Configuring and verifying EIGRP Operations: Topology Table, Stuck-In-Active, Graceful Shutdown
  • Configuring EIGRP Named Mode
  • Configuring Leak-Map with Summary Routes
  • Configuring EIGRP stub with Leak-Map


  • Configuring OSPFv3 address family
  • Configuring OSPF Network Types and Area Types
  • Exploring OSPF Path Preference Decisions
  • Configuring and verifying OSPF Operations: Graceful shutdown, GTSM
  • Configuring and verifying OSPF optimization options: SPF Tuning, LSA Throttling, Stub router, Prefix


  • Configuring Peer Groups and templates, Active/Passive Connections, Timers, ynamic Neighbors
  • Verifying and Manipulating default Path Selection Criteria
  • Configuring Routing Policies: Attribute Manipulation, Conditional Advertisements, Route filtering,
    Communities, Multihoming
  • Configuring AS Path manipulations


  • Configuring and verifying Layer2 Multicast
  • Configuring and verifying Reverse Path Forwarding Check
  • Configuring PIM: Sparse Mode, Static RP, BSR, Auto-RP
  • Configuring Group-to-RP mapping
  • Configuring Source Specific Multicasting
  • Configuring Multicast Boundary, RP Announcements
  • Configuring PIMv6 anycast RP
  • Configuring Anycast RP using MSDP
  • Configuring Multicast Multipath

Routing Concepts

  • Configuring VRF Aware Routing, Route leaking between VRF
  • Configuring Route Filtering
  • Configuring Redistribution
  • Configuring BFD (Bidirectional Forwarding Detection)
  • Configuring L3 MTU

IP Services and Security:

  • Configuring Switch security features like VACL, PACL, Storm Control, DHCP Snooping, IP Source Guard,
    Dynamic ARP Inspection, Port Security
  • Configuring Router Security Features like IPv6 Traffic Filter, URPF
  • Configuring IPv6 Infra Security features like RA Guard, DHCP Guard, Binding Table, Device Tracking, ND
    Inspection/snooping, Source Guard
  • Quality of Service
    • Configuring DSCP
    • Configuring Classification and trust boundary
    • Configuring NBAR
    • Marking DSCP Values
    • Configuring Policing and Shaping
    • Configuring Congestion management and avoidance
    • Configuring HQoS
    • End to end layer3 QoS using MQC
  • Network Services

    • Configuring IPv6 RS/RA
    • Configuring DHCP: DHCP Configurations, DHCP Options, SLAAC/DHCPv6 Integration, Stateful,
      Stateless DHCPv6, DHCP Prefix Delegation
    • Configuring NAT: Static, Dynamic, Policy Based, VRF Aware, VRF Aware Software Infrastructure (VASI)
    • Tracking Objects and lists

Transport Technologies

  • Configuring and verifying the MPLS network with multiple LSRs
    o Troubleshooting using MPLS Ping and MPLS traceroute.
  • Configuring L3 VPN
    o Establishing L3VPN between PE and CE routers.
    o Configuring basic MPBGP for L3VPN
    o Verifying end-to-end connectivity between devices.
  •  Configuring DMVPN
    o Configuring NHRP for dynamic spoke-to-spoke communication
    o Implement IPsec/IKEv2 using the pre-shared key for secure communication
    o Troubleshooting DMVPN with dual hub

Module 3 (16 Hours): Skippable, if you are familiar with Cisco SD-WAN.

Cisco SD-WAN

  • Understanding SDWAN Architecture
  • Control plane and data plane operations
  • Deploying controller site
  • Deploying branch sites
  • Understanding Overlay Management Protocol (OMP) architecture
  • Configuring Templates
  • Configuring network segmentation using service VPN between branches
  • Implementing Direct Internet Access (DIA)
  • Configuring Centralized Policies: Data Policies, Application-Aware Routing Policies, Control Policies, hub and spoke
  • Localized Policies: Access Lists, Route Policies

Module 4 (16 Hours): Contains the content of SD-Access.

Cisco SD-Access

  • Configuring Underlay: Manual Configurations, LAN Automation, Device Discovery and Management, Extended Nodes/Policy Extended Nodes
  • Configuring Overlay: LISP, BGP Control Planes, VXLAN Data Plane, Cisco TrustSec Policy plane, L2 Flooding, Native Multicast
  • Fabric Designing and Deployment: Single Site/Multisite, Fabric in a box, Host onboarding, Authentication, Port Configuration, Multisite remote border, Border Priority, Adding devices.
  • Fabric Border Handoff: SDA, SDWAN, IP Transits, Peer Device, Layer 2 border handoff
  • Configuring Segmentation

Module 5 (8 Hours): Contains the content of Network Automation & Programmability.

  • Understanding the fundamentals

    • Fundamental Python programming

      ▪ Python data structure

      ▪ Using Python to read from and write to a file

      ▪ Python loops and conditional code

    • Configuring IOS Devices using NETMIKO
    • Configure and verify NETCONF and RESTCONF
    • Introduction to RESTAPIs
    • Introduction to HTTP Request/Response model
    • Understanding the HTTP status codes
    • Creating queries to interact with the device
  • Automation and Scripting

    • Creating EEM Applets
    • Introduction to Linux
    • CLI Python module
    • EEM Python Module
  • Programmability

    • Interaction with vManage API using requests library and Postman
    • Interaction with DNA Center using HTTP requests
    • Deploying and verifying model-driven telemetry

PyNet Labs Training Video Demo

The topology that will help you prepare all CCIE Enterprise Infrastructure v1.1 Topics

EVE Topology scaled 1

Devices used in the topology

Frequently Asked Questions

Yes, end-to-end Lab exam passing support will be provided during and after training completion till you get your CCIE Enterprise number.

Apart from Instructor-led online training, you will have 4-5 months of 24/7 lab access, study materials, ongoing training support and guidance from the instructor, study groups and peer support until you become certified.

If you miss any live session, we will make sure you have a recording available for the same, but in case you are about to miss the whole course due to shift change or any personal family reasons, you can inform our team and we will block your lab access at that time and activate it when you are back and help you sit in the ongoing batch at that time.

You will have access to our unlimited labs till the CCIE Enterprise training time period plus you will have 1-month complementary labs for practicing.

There will be No Restrictions in terms of number of hours. You will have unlimited 24*7 Lab access.

Yes, you can skip the ENCOR module and proceed with the remaining 4 modules of CCIE Enterprise

Yes, you can skip the SDWAN module and proceed with the remaining 4 modules of CCIE Enterprise Infrastructure training.

linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram