Nokia NRS II study plan
Nokia NRS II · Give each week a clear focus.
8 weeks · About 7 hours per week
IP networks
Configure and verify IPv4/IPv6 addressing, subnetting, and VLSM on Nokia SR OS router interfaces using classic and model-driven CLI
Explain the SR OS router architecture (IOM, MDA, CPM, forwarding plane) and map each component to packet-forwarding decisions
Trace a packet through the SR OS datapath and identify where MTU, fragmentation, and ICMP handling occur
Build a lab topology of four SR OS routers and document interface, loopback, and addressing conventions
Your checkpoint
A one-page reference sheet with the lab addressing plan, router architecture diagram, and completed interface configuration snippets for all four routers
IP networks
Configure static routes, ECMP, and route preference values, then verify forwarding with traceroute and show commands
Describe how ARP, neighbor discovery, and proxy ARP behave on SR OS interfaces and troubleshoot a broken neighbor adjacency
Configure VRRP and verify master/backup election and failover timing
Compare IPv4 and IPv6 operational behavior on SR OS and note configuration differences
Your checkpoint
A troubleshooting log documenting three deliberately injected Layer 3 faults, the show/debug commands used, and the root cause for each
IP routing, switching and aggregation
Configure OSPFv2 and OSPFv3 areas, adjacencies, and metrics on the lab topology and verify the link-state database
Explain IS-IS levels, TLVs, and SPF behavior and configure a multi-level IS-IS domain on SR OS
Compare OSPF and IS-IS convergence behavior and design choices for aggregation layers
Configure route summarization and verify the summarized advertisements appear correctly
Your checkpoint
A comparison table of OSPF vs IS-IS on SR OS covering configuration commands, LSA/LSP types, area/level design, and summarization, backed by lab output
IP routing, switching and aggregation
Configure BGP peering, eBGP and iBGP sessions, and verify best-path selection using the BGP decision process
Configure and explain route reflectors, confederations, and peer groups in an aggregation design
Apply BGP route policy with prefix lists and AS-path filters and verify the effect with show router bgp routes
Explain MPLS LDP and RSVP-TE fundamentals and configure a basic LSP between PE routers
Your checkpoint
A lab report showing BGP path selection for at least four competing routes, with the winning path and the decision-process step that determined it
IP routing, switching and aggregation & IP network automation
Design a two-tier aggregation topology with redundancy and document the failure scenarios it must survive
Configure and verify LAG, MC-LAG, and redundant uplinks, then test failover
Compare SR OS CLI, MD-CLI, and NETCONF/YANG configuration workflows and convert one classic CLI config to MD-CLI
Describe the role of gRPC, telemetry, and streaming state in automated SR OS operations
Your checkpoint
A working redundant aggregation lab with a written failover test matrix (link, node, and LAG member failures) and observed results for each
IP network automation
Write a Python script using the SR OS YANG models over NETCONF to read and modify interface configuration
Configure and verify gRPC telemetry subscriptions and consume the streamed data
Explain model-driven configuration, commit/rollback semantics, and candidate configuration workflows
Apply infrastructure-as-code concepts (idempotency, version control, templating) to a router configuration change
Your checkpoint
A version-controlled Python automation script that provisions a lab interface and VLAN idempotently, plus captured telemetry output proving the change took effect
IP network security
Configure and verify control-plane protection mechanisms, including CPU protection policies, filter policies, and management access restrictions
Configure IPsec and MACsec fundamentals and verify encrypted transport between two routers
Explain AAA, TACACS+, and RADIUS integration on SR OS and configure authentication and accounting
Describe DDoS mitigation, uRPF, and anti-spoofing techniques and apply them to the lab edge
Your checkpoint
A hardening checklist applied to the lab with before/after configuration diffs and verification output for each security control
IP network automation & IP network security
Automate a security policy deployment (filter or ACL) using the same tooling built in week 6 and validate the result
Explain the security implications of automation interfaces (gRPC, NETCONF, SSH) and configure least-privilege access
Review the full blueprint and identify weak areas using practice questions and lab gaps
Re-run the week 5 failover matrix on the hardened, automated lab and confirm nothing regressed
Your checkpoint
A final integrated lab in which an automated script deploys a security filter and the failover matrix passes, with a written summary of remaining weak areas and a revision plan
Milestones
Week 2: Can configure and troubleshoot IPv4/IPv6 routing, VRRP, and neighbor discovery on SR OS from memory, verified by completing the week 2 troubleshooting log without consulting notes
Week 4: Can explain and demonstrate BGP best-path selection and configure a basic MPLS LSP, scoring at least 80% on a self-made 30-question quiz covering domains 1 and 2
Week 6: Has a working NETCONF/gRPC automation script under version control that idempotently changes lab configuration and streams telemetry as proof
Week 8: Integrated lab passes the full failover matrix after automated security deployment, and a timed 60-question mixed-domain practice set scores at least 80% overall with no domain below 70%