JNCIE-SP study materials
JNCIE-SP study resources

JNCIE-SP study plan

JNCIE-SP · Give each week a clear focus.

8 weeks · About 7 hours per week

Week 1

BGP and Service Provider Routing (iBGP, eBGP, route reflection, confederations, BGP attributes, policy, scaling, dampening, graceful restart) & System and Platform Configuration (Junos OS, user accounts, logging, NTP, SNMP, chassis/interface configuration, software upgrades)

  • Build a three-router Junos lab (two PE, one RR) and verify iBGP full-mesh versus route reflection convergence with show bgp summary and show route receive-protocol bgp

  • Configure and compare a BGP confederation against route reflection in the same lab, documenting cluster-id and confederation-id behavior in traceroute output

  • Manipulate and verify each major BGP attribute (local-preference, MED, AS-path prepend, origin, next-hop) with explicit policy statements and confirm selection order using show route detail

  • Configure BGP route damping and graceful restart, then trigger a session flap and record damped-path timers and GR helper state

  • Harden the base platform: user classes, login classes, syslog to a remote host, NTP authentication, and a commit-confirmed configuration rollback test

Your checkpoint

A written lab report containing BGP table output for the mesh, RR, and confederation cases plus a one-page attribute-selection decision table you wrote from observed output

Week 2

BGP and Service Provider Routing (iBGP, eBGP, route reflection, confederations, BGP attributes, policy, scaling, dampening, graceful restart) & Interior Gateway Protocols and Routing Policy (OSPF, IS-IS, route redistribution, routing policy, route filtering, BGP-IGP interaction)

  • Scale the BGP lab to at least four peers per router and apply prefix-lists, route-filters, and as-path regex policy to enforce a documented peering policy

  • Configure BGP-IGP interaction: next-hop resolution, IGP shortcuts, and a labeled-unicast session, and verify recursive next-hop behavior with show route resolution

  • Tune OSPF (areas, virtual link, stub and NSSA) and IS-IS (levels, wide metrics, LSP flooding) across the lab and confirm adjacency and database synchronization

  • Redistribute between OSPF, IS-IS, and BGP with route tags and a policy chain, verifying loop prevention with show route protocol output

  • Diagnose a deliberately broken adjacency (MTU mismatch and area mismatch) using traceoptions and log output

Your checkpoint

A routing policy matrix spreadsheet listing every policy term, match condition, action, and the verification command that proves it works

Week 3

MPLS and Label Distribution (LDP, RSVP-TE, MPLS forwarding, label stacking, traffic engineering, RSVP LSP configuration and tuning)

  • Configure LDP across the core and verify label bindings, LIB/LFIB entries, and PHP behavior with show ldp database and show route table inet.3

  • Build an RSVP-TE signaled LSP with bandwidth reservation, verify CSPF path selection, and force a secondary path with admin-groups

  • Configure and test FRR for an LSP, then compare make-before-break behavior against a hard tear-down

  • Tune LSP parameters: auto-bandwidth, priority and preemption, and load balancing across parallel LSPs

  • Explain and verify label stacking by pushing a service label over a transport label and reading the resulting stack in show route detail

Your checkpoint

A topology diagram annotated with every label value, LSP name, reserved bandwidth, and the exact show command output proving each label operation

Week 4

Layer 3 VPNs (VRF configuration, MP-BGP, route targets, VRF route leaking, hub-and-spoke, extranet, inter-AS options, carrier-of-carriers)

  • Configure a full Layer 3 VPN with MP-BGP VPNv4, VRFs, and route targets, verifying the VPN label and route-target community end to end

  • Build a hub-and-spoke topology with per-VRF route targets and confirm spoke-to-spoke traffic is forced through the hub

  • Implement VRF route leaking with a shared route-target import/export policy and verify with show route table .inet.0

  • Configure an extranet VPN where two VRFs share a single customer route and confirm export/import target symmetry

  • Compare inter-AS option B and option C in the lab and document the label operations each requires at the ASBR

Your checkpoint

A VRF design sheet covering each VPN (full mesh, hub-and-spoke, extranet, inter-AS) with route-target values, import/export policy, and verified show command output

Week 5

Layer 3 VPNs (VRF configuration, MP-BGP, route targets, VRF route leaking, hub-and-spoke, extranet, inter-AS options, carrier-of-carriers) & Layer 2 VPNs and EVPN (VPLS, L2VPN, EVPN-MPLS, EVPN-VXLAN, multihoming, MAC learning and mobility)

  • Configure carrier-of-carriers where the customer manages its own internal label space over an inter-AS link and verify label exchange

  • Build a VPLS instance with BGP multihoming and verify designated-forwarder election and MAC learning

  • Configure an EVPN-MPLS fabric with Type 2 and Type 3 routes and confirm MAC mobility and aliasing behavior

  • Extend the EVPN fabric to EVPN-VXLAN and verify the data-plane encapsulation change with show evpn instance extensive

  • Test a multihoming failover event and record convergence time and MAC flush behavior

Your checkpoint

A Layer 2 design document with EVPN route-type tables, multihoming role assignments, and measured failover convergence numbers

Week 6

Multicast (IGMP, PIM-SM, PIM-SSM, MSDP, multicast VPNs, mLDP, PIM over MPLS)

  • Configure IGMP and PIM-SM with a static RP and verify shared-tree to shortest-path-tree switchover using show pim join extensive

  • Configure PIM-SSM and confirm source-specific joins with no RP dependency

  • Build an MSDP peering between two PIM domains and verify source discovery

  • Configure a multicast VPN (draft-rosen) with provider tunnels and verify the MDT and data MDT switchover

  • Configure mLDP point-to-multipoint LSPs and compare in-band signaling against RSVP-TE P2MP

Your checkpoint

A multicast verification runbook listing each tree type, the join state expected, and the exact command to confirm it

Week 7

High Availability, Security, and Troubleshooting (BFD, NSR/NSB, GRES, graceful restart, CoS, firewall filters, class of service, verification and fault isolation) & System and Platform Configuration (Junos OS, user accounts, logging, NTP, SNMP, chassis/interface configuration, software upgrades)

  • Configure BFD for OSPF, IS-IS, BGP, and RSVP and measure failure detection time with and without BFD

  • Enable NSR, NSB, and GRES, then perform a routing-engine switchover and record session and forwarding impact

  • Build a CoS configuration with classifiers, schedulers, and rewrite rules, and verify queue behavior with show interfaces queue

  • Write firewall filters for control-plane protection and verify counters increment under a generated traffic load

  • Perform a Junos software upgrade with a validated alternate boot set and document the rollback procedure

Your checkpoint

A failure-injection log recording each test, the detection time, the recovery time, and the configuration that produced it

Week 8

BGP and Service Provider Routing (iBGP, eBGP, route reflection, confederations, BGP attributes, policy, scaling, dampening, graceful restart) & Layer 3 VPNs (VRF configuration, MP-BGP, route targets, VRF route leaking, hub-and-spoke, extranet, inter-AS options, carrier-of-carriers) & High Availability, Security, and Troubleshooting (BFD, NSR/NSB, GRES, graceful restart, CoS, firewall filters, class of service, verification and fault isolation)

  • Run a full timed mock lab integrating BGP, MPLS, L3VPN, and multicast under a two-hour limit

  • Isolate and repair five pre-injected faults using only show, monitor, and traceoptions output

  • Re-verify the weakest three domains identified by mock scoring and close each gap with a targeted configuration drill

  • Write a one-page troubleshooting checklist mapping common symptoms to first-check commands across all eight domains

Your checkpoint

A scored mock lab result sheet with per-domain scores, root causes of each injected fault, and a remediation list for any domain below 70 percent

Milestones

Week 2: Can configure iBGP with route reflection, apply a multi-term export policy, and prove correct attribute selection without notes in under 30 minutes

Week 4: Can build a working L3VPN from empty configuration to verified end-to-end customer ping in under 25 minutes

Week 6: Can explain and verify PIM-SM, SSM, and mVPN tree state from command output alone, scoring at least 80 percent on a self-written quiz

Week 8: Scores at least 70 percent per domain on the timed mock lab and can diagnose an injected fault within 10 minutes