Advanced Enterprise Routing Lab
Go deep on enterprise routing across a realistic multi-site topology - static routing, EIGRP, OSPFv2/v3, BGP, MPLS L3VPN, DMVPN, multicast, and infrastructure security - all built and troubleshot on live devices spanning a datacenter, HQ, and branch sites. This course gives you hands-on practice equivalent to the Cisco ENARSI (300-410) exam and the advanced routing portion of the CCIE Enterprise Infrastructure lab blueprint. Designed for CCNP/CCIE Enterprise candidates and working network engineers who need real configuration and troubleshooting reps beyond slides and simulators.
The launch will be soonCourse Highlights
Multi-Site Topologies
Configure static routing, IP SLA, Enhanced Object Tracking, and Front-Door VRF (FVRF) for redundant enterprise connectivity.
EIGRP Classic & Named Mode
Deploy Named EIGRP, MD5/HMAC-SHA security, metric path manipulation, BFD, stub leak-maps, and SIA event troubleshooting.
OSPFv2 & OSPFv3 Engineering
Design multi-area OSPF networks, optimize ABR path selection, configure NSSA/Type 7 filters, IPsec auth, and fast hellos.
BGP Path Selection & Policy
Control routing decisions using Weight, Local Pref, MED, AS-path prepending, communities, route reflectors, and MP-BGP.
MPLS & Layer 3 VPNs
Build VRF-aware PE routers, MP-BGP VPNv4 address families, LDP label filtering, and PE-CE routing with sham-links and AS-override.
DMVPN, Multicast & Security
Implement DMVPN Phase 1–3 with IPsec/IKEv2, PIM-SM, SSM, Auto-RP, MSDP, CoPP, uRPF, and IPv6 First-Hop Security.
Real Configuration & Troubleshooting Reps
Designed for CCNP/CCIE Enterprise candidates and working network engineers who need real hands-on practice beyond slides and simulators.
Build, optimize, and troubleshoot complex enterprise routing protocols and services across a realistic multi-site topology spanning datacenter, HQ, and branch environments.
- Multi-Protocol Mastery: Master static routing, EIGRP, OSPFv2/v3, and BGP across realistic enterprise scenarios.
- Enterprise VPNs & MPLS: Deploy MPLS L3VPN architectures and DMVPN Phase 1-3 with robust IPsec encryption.
- Infrastructure Security & Resilience: Secure control plane traffic with CoPP, uRPF, AAA, and IPv6 First-Hop Security.
Technologies Covered
- ✓ Static Routing, IP SLA & FVRF
- ✓ EIGRP (Classic & Named Mode)
- ✓ OSPFv2 & OSPFv3 Multi-Area Deployment
- ✓ eBGP & iBGP Peering & Peer Groups
- ✓ BGP Path Selection & Policy Control
- ✓ MPLS & MPLS Layer 3 VPN (MP-BGP VPNv4)
- ✓ DMVPN (Phase 1, 2, 3 & Dual-Hub IPsec)
- ✓ Multicast Routing (PIM-SM, SSM, Auto-RP, MSDP)
- ✓ Control Plane Policing (CoPP) & uRPF
- ✓ IOS AAA & IPv6 First-Hop Security
Modules & Topics
- Configure a basic static route
- Configure a floating static route with Administrative Distance
- Use tracking and IP SLA with static routes for a multi-homed ISP design
- Apply Enhanced Object Tracking at a branch site
- Use a Front-Door VRF (FVRF) for DMVPN
- Deploy Named EIGRP at traditional branch sites
- Redistribute a default route into EIGRP using Named Mode address-families
- Configure EIGRP authentication (MD5 and HMAC-SHA)
- Perform path manipulation with EIGRP metrics and DUAL so the primary core route is preferred
- Configure BFD between EIGRP neighbors
- Configure EIGRP stub routers and a stub leak-map at the distribution layer
- Troubleshoot Stuck-in-Active (SIA) events and query propagation/boundaries
- Troubleshoot EIGRP neighbor adjacency and route advertisement failures
- Configure OSPFv2 backbone area 0 in the datacenter
- Configure OSPFv2 standard area 1 at HQ
- Configure dual ABRs from the datacenter for inter-area routing
- Manipulate OSPF path selection/cost so one ABR is preferred over the other
- Configure a totally stubby area for a remote site
- Inject dual default routes from two ASBRs into the datacenter's area 0
- Originate a default route from an ASBR at HQ and filter it from propagating to the DC (NSSA/Type 7)
- Suppress Type 2 LSA propagation on point-to-point segments
- Configure OSPF authentication (plain-text, MD5, HMAC-SHA)
- Redistribute EIGRP routes from a DMVPN hub into OSPF area 0 using route tags
- Perform mutual redistribution between OSPF and EIGRP with loop-prevention filtering
- Control external route preference between two ASBRs advertising the same default route (Type 5 metric/type)
- Tune OSPF fast hellos and BFD on critical links
- Enable OSPFv3 for the IPv6 address-family and form neighborships using link-local addressing
- Design a multi-area OSPFv3 deployment (area 0 in the DC, area 1 at HQ) with ABR and inter-area IPv6 summarization
- Configure an OSPFv3 stub/totally stubby area and originate an IPv6 default route from the ASBR
- Secure OSPFv3 adjacencies with IPsec AH/ESP and HMAC-SHA authentication
- Redistribute IPv6 EIGRP/BGP routes into OSPFv3, filter with IPv6 prefix-lists/route-maps, and tune cost/BFD for IPv6 path selection
- Configure eBGP and iBGP peering, including multihop sessions and peer groups
- Advertise networks via network statement, redistribution, and aggregation
- Configure 4-byte AS numbers and private AS removal
- Verify BGP neighbor states, timers, and message exchange
- Troubleshoot BGP neighbor adjacency and route advertisement failures
- Manipulate Weight, Local Preference, and MED attributes
- Configure AS-path prepending and AS-path access-list filtering
- Configure standard and extended BGP communities (no-export, no-advertise)
- Build inbound/outbound filtering with prefix-lists and route-maps
- Configure BGP route reflectors for iBGP scalability
- Configure IPv6 BGP filtering and Multi-Protocol BGP (MP-BGP)
- Enable MPLS on the core and verify LDP label bindings/LSPs
- Filter MPLS LDP labels between PE and P routers
- Configure VRF-aware PE routers and the MP-BGP VPNv4 address-family
- Configure PE-CE routing using EIGRP and OSPF (including sham-link/down-bit)
- Configure PE-CE routing using BGP, including AS-override and allow-as-in
- Verify end-to-end VPNv4 reachability and troubleshoot label switching
- Build a DMVPN Phase 1 hub-and-spoke design with mGRE/GRE and NHRP
- Migrate to DMVPN Phase 2 and enable spoke-to-spoke tunnels
- Migrate to DMVPN Phase 3 with summarized routing
- Run EIGRP, OSPF, and BGP as the routing protocol over DMVPN
- Build a dual-hub DMVPN design for redundancy
- Secure DMVPN tunnels with IPsec/IKEv2 pre-shared keys
- Configure IGMPv2/v3 and IGMP snooping on Layer 2/Layer 3 devices
- Verify Reverse Path Forwarding (RPF) checks for multicast traffic
- Configure PIM Sparse Mode with static RP and Auto-RP
- Configure a Bootstrap Router (BSR) for dynamic RP distribution
- Configure Source-Specific Multicast (SSM) and multicast boundaries
- Configure Anycast RP using MSDP for multi-RP redundancy
- Configure IOS AAA using TACACS+, RADIUS, and the local database
- Build standard, extended, time-based, and IPv6 access-lists
- Configure Unicast Reverse Path Forwarding (uRPF)
- Configure Control Plane Policing (CoPP) for Telnet/SSH/SNMP and routing protocol traffic
- Configure IPv6 First-Hop Security (RA Guard, DHCPv6 Guard, ND Inspection, Source Guard)
Start Your Lab Experience
Lab Hours Booking
Reserve access to a dedicated, pre-wired lab environment and use your purchased lab hours whenever it suits you.
- Direct access via browser and internet connection
- Dedicated datacenter, HQ, and branch topologies
- Full control over live routing devices & core protocols
- Zero hardware required on your side
- Schedule your lab session for any available date and time