JNCIE-SP study plan
JNCIE-SP · Give each week a clear focus.
8 weeks · About 7 hours per week
BGP and Service Provider Routing (iBGP, eBGP, route reflection, confederations, BGP attributes, policy, scaling, dampening, graceful restart) & System and Platform Configuration (Junos OS, user accounts, logging, NTP, SNMP, chassis/interface configuration, software upgrades)
Build a three-router Junos lab (two PE, one RR) and verify iBGP full-mesh versus route reflection convergence with show bgp summary and show route receive-protocol bgp
Configure and compare a BGP confederation against route reflection in the same lab, documenting cluster-id and confederation-id behavior in traceroute output
Manipulate and verify each major BGP attribute (local-preference, MED, AS-path prepend, origin, next-hop) with explicit policy statements and confirm selection order using show route detail
Configure BGP route damping and graceful restart, then trigger a session flap and record damped-path timers and GR helper state
Harden the base platform: user classes, login classes, syslog to a remote host, NTP authentication, and a commit-confirmed configuration rollback test
Your checkpoint
A written lab report containing BGP table output for the mesh, RR, and confederation cases plus a one-page attribute-selection decision table you wrote from observed output
BGP and Service Provider Routing (iBGP, eBGP, route reflection, confederations, BGP attributes, policy, scaling, dampening, graceful restart) & Interior Gateway Protocols and Routing Policy (OSPF, IS-IS, route redistribution, routing policy, route filtering, BGP-IGP interaction)
Scale the BGP lab to at least four peers per router and apply prefix-lists, route-filters, and as-path regex policy to enforce a documented peering policy
Configure BGP-IGP interaction: next-hop resolution, IGP shortcuts, and a labeled-unicast session, and verify recursive next-hop behavior with show route resolution
Tune OSPF (areas, virtual link, stub and NSSA) and IS-IS (levels, wide metrics, LSP flooding) across the lab and confirm adjacency and database synchronization
Redistribute between OSPF, IS-IS, and BGP with route tags and a policy chain, verifying loop prevention with show route protocol output
Diagnose a deliberately broken adjacency (MTU mismatch and area mismatch) using traceoptions and log output
Your checkpoint
A routing policy matrix spreadsheet listing every policy term, match condition, action, and the verification command that proves it works
MPLS and Label Distribution (LDP, RSVP-TE, MPLS forwarding, label stacking, traffic engineering, RSVP LSP configuration and tuning)
Configure LDP across the core and verify label bindings, LIB/LFIB entries, and PHP behavior with show ldp database and show route table inet.3
Build an RSVP-TE signaled LSP with bandwidth reservation, verify CSPF path selection, and force a secondary path with admin-groups
Configure and test FRR for an LSP, then compare make-before-break behavior against a hard tear-down
Tune LSP parameters: auto-bandwidth, priority and preemption, and load balancing across parallel LSPs
Explain and verify label stacking by pushing a service label over a transport label and reading the resulting stack in show route detail
Your checkpoint
A topology diagram annotated with every label value, LSP name, reserved bandwidth, and the exact show command output proving each label operation
Layer 3 VPNs (VRF configuration, MP-BGP, route targets, VRF route leaking, hub-and-spoke, extranet, inter-AS options, carrier-of-carriers)
Configure a full Layer 3 VPN with MP-BGP VPNv4, VRFs, and route targets, verifying the VPN label and route-target community end to end
Build a hub-and-spoke topology with per-VRF route targets and confirm spoke-to-spoke traffic is forced through the hub
Implement VRF route leaking with a shared route-target import/export policy and verify with show route table .inet.0
Configure an extranet VPN where two VRFs share a single customer route and confirm export/import target symmetry
Compare inter-AS option B and option C in the lab and document the label operations each requires at the ASBR
Your checkpoint
A VRF design sheet covering each VPN (full mesh, hub-and-spoke, extranet, inter-AS) with route-target values, import/export policy, and verified show command output
Layer 3 VPNs (VRF configuration, MP-BGP, route targets, VRF route leaking, hub-and-spoke, extranet, inter-AS options, carrier-of-carriers) & Layer 2 VPNs and EVPN (VPLS, L2VPN, EVPN-MPLS, EVPN-VXLAN, multihoming, MAC learning and mobility)
Configure carrier-of-carriers where the customer manages its own internal label space over an inter-AS link and verify label exchange
Build a VPLS instance with BGP multihoming and verify designated-forwarder election and MAC learning
Configure an EVPN-MPLS fabric with Type 2 and Type 3 routes and confirm MAC mobility and aliasing behavior
Extend the EVPN fabric to EVPN-VXLAN and verify the data-plane encapsulation change with show evpn instance extensive
Test a multihoming failover event and record convergence time and MAC flush behavior
Your checkpoint
A Layer 2 design document with EVPN route-type tables, multihoming role assignments, and measured failover convergence numbers
Multicast (IGMP, PIM-SM, PIM-SSM, MSDP, multicast VPNs, mLDP, PIM over MPLS)
Configure IGMP and PIM-SM with a static RP and verify shared-tree to shortest-path-tree switchover using show pim join extensive
Configure PIM-SSM and confirm source-specific joins with no RP dependency
Build an MSDP peering between two PIM domains and verify source discovery
Configure a multicast VPN (draft-rosen) with provider tunnels and verify the MDT and data MDT switchover
Configure mLDP point-to-multipoint LSPs and compare in-band signaling against RSVP-TE P2MP
Your checkpoint
A multicast verification runbook listing each tree type, the join state expected, and the exact command to confirm it
High Availability, Security, and Troubleshooting (BFD, NSR/NSB, GRES, graceful restart, CoS, firewall filters, class of service, verification and fault isolation) & System and Platform Configuration (Junos OS, user accounts, logging, NTP, SNMP, chassis/interface configuration, software upgrades)
Configure BFD for OSPF, IS-IS, BGP, and RSVP and measure failure detection time with and without BFD
Enable NSR, NSB, and GRES, then perform a routing-engine switchover and record session and forwarding impact
Build a CoS configuration with classifiers, schedulers, and rewrite rules, and verify queue behavior with show interfaces queue
Write firewall filters for control-plane protection and verify counters increment under a generated traffic load
Perform a Junos software upgrade with a validated alternate boot set and document the rollback procedure
Your checkpoint
A failure-injection log recording each test, the detection time, the recovery time, and the configuration that produced it
BGP and Service Provider Routing (iBGP, eBGP, route reflection, confederations, BGP attributes, policy, scaling, dampening, graceful restart) & Layer 3 VPNs (VRF configuration, MP-BGP, route targets, VRF route leaking, hub-and-spoke, extranet, inter-AS options, carrier-of-carriers) & High Availability, Security, and Troubleshooting (BFD, NSR/NSB, GRES, graceful restart, CoS, firewall filters, class of service, verification and fault isolation)
Run a full timed mock lab integrating BGP, MPLS, L3VPN, and multicast under a two-hour limit
Isolate and repair five pre-injected faults using only show, monitor, and traceoptions output
Re-verify the weakest three domains identified by mock scoring and close each gap with a targeted configuration drill
Write a one-page troubleshooting checklist mapping common symptoms to first-check commands across all eight domains
Your checkpoint
A scored mock lab result sheet with per-domain scores, root causes of each injected fault, and a remediation list for any domain below 70 percent
Milestones
Week 2: Can configure iBGP with route reflection, apply a multi-term export policy, and prove correct attribute selection without notes in under 30 minutes
Week 4: Can build a working L3VPN from empty configuration to verified end-to-end customer ping in under 25 minutes
Week 6: Can explain and verify PIM-SM, SSM, and mVPN tree state from command output alone, scoring at least 80 percent on a self-written quiz
Week 8: Scores at least 70 percent per domain on the timed mock lab and can diagnose an injected fault within 10 minutes