CCNP SPVI 300-515: VPN Services & Labs

Understand the service border hierarchy, including customers who need internet access, peers who mutually interconnect for traffic exchange, and transit partners who pay for reachability across networks.

Establishes an internet exchange point, a shared city-wide infrastructure where multiple service providers exchange traffic, host web servers, and reduce latency and costs while improving bandwidth efficiency with bgp filtering.

Explore how internet number distribution allocates public IP addresses, autonomous system numbers, DNS root management, and protocol parameters through IANA, RIRs, LIRs, and end users.

Explore how IP address space and autonomous system numbers are allocated from regional registries to ISPs and end customers, including provider assigned and provider independent blocks, NAT translation.

Explore the five types of service providers, including CSPs, telecommunications providers, network service providers, ISPs, and application service providers, and learn how they transport data and provide bandwidth.

Learn how T1, E1, T3, and E3 lines define speeds and ds0/ds1 signals, and how regional carrier choices affect the deployment of these digital channels.

Explore lab setup options for Cisco CCNP Service Provider lab environments, comparing physical, virtual, and emulation tools like Cisco Packet Tracer, Boson NetSim, S3, and RAC rentals.

Explore Gns3 and janus three as virtual lab tools that replace physical devices for current iOS simulations. Identify supported devices, required images (ios, iou, rsa), and hardware needs for labs.

Install GNS3 on Windows by following official steps. Meet minimum hardware, enable virtualization, install the correct version and VM, and add supporting apps like Winpcap and Wireshark.

Explore IOS vs IOU differences for CCNP service provider labs, examining IOS image limitations, GNS3 virtualization options, and how IOU enables L2 and L3 switching.

Use the GNS3 setup wizard to add iOS images from your local machine. Configure RAM and slots, choose platforms, and reference the Cisco feature navigator.

Configure and add devices in GNS3 by updating templates and edit preferences to include iOS versions, cloud nodes, built-in switches, with no VM required.

Set up the IOS router topology with four devices connected by serial links and a LAN interface, then use loopback subnets to test routing with ping, route filtering, and ACLs.

Set up a gns3 topology by dragging routers, adding serial modules, starting devices, applying initial configs via console or putty, and saving the topology for reuse.

Connect a Gns3 topology to a Windows host via a loopback adapter or vmnet interfaces, and test reachability with ping while configuring IPs like 10.1.1.10, gateway 10.1.1.1, and firewall rules.

Learn to integrate Gns3 with vmware to simulate images such as IOU, ASC, RSA firewall, XR routers, and CSR ve. Use version-matched Gns3 vm files and the setup wizard.

Learn to use Gns3 with iou images and a license file on a Linux vm to simulate layer 2 and layer 3 devices for switching and routing.

Master GNS3 IOSv L2-L3 configuration by importing appliance and image files, integrating with the GNS3 VM, and dragging images to connect and simulate layer 2 and layer 3 devices.

Discover how to set up GNS3 with ASV RSA firewall simulations by importing the ASV appliance and ASV images from Cisco, then run them in the GNS3 VM.

learn to set up two asa images in gns3: a newer nine dot x version and a legacy 8.4 image, for labs like etherchannel, security context, and failover.

Learn to load old topologies in GNS3 by adjusting image settings, adding missing images, and aligning images with devices like 7200 and 3600 routers.

Learn to configure GNS3 to use SecureCRT as the default console, enable tabbed sessions, and tailor appearance with Consolas font, black background, and yellow text.

Build a gns3 topology with a vmware pc, mapping vmnet interfaces, configuring vlan 100, and assigning management and gateway IPs to enable reachability across the network.

Learn how to integrate the XRv image in GNS3 by downloading the appliance and XV image, meeting prerequisites, importing the appliance, and running it in a blank project.

Set up Eve-ng by downloading Eve image, importing it into VMware, allocating RAM, booting, and obtaining an IP address, then log in to add routers, switches, and images per documentation.

Explore how to simulate ccnp enterprise labs using ios, iou, and Cisco virtual images in gns3. Compare limitations and capabilities for routing and switching, including l3 routers and l2 switches.

Compare professional and free community editions of EVE-nG, download the pro image, request and apply a license in the portal to enable advanced labs.

Upload iou images and l3/l2 images into the EVE-nG lab to simulate routers and switches. Create labs, add nodes, and access consoles to verify images, license, and lan connectivity.

Upload sd-wan images to eve-ng by preparing vbond edge, vmanage, and vsmart files, then transfer them using winSCP or filezilla to the correct eve-ng path, ensuring exact folder names.

Upload pre-configured Viptela images to an EVE-NG lab, set correct folder names and permissions, then add vbond, vmanage, and vsmart devices and start the lab.

Upload ASAv 9.x images to EVE-NG in VMware Workstation using WinSCP or FileZilla, place and rename them under OBT/unit_lab_add_ons, then start ASA nodes for CLI access.

Upload Windows images to the eve-ng topology to run Windows client or server operating systems, using pre-configured images or ISO installations, accessible via vnc viewer for gui.

Learn how to run ASA 8.4 images in EVE-NG, handle labs incompatible with newer images, and use WinSCP to upload and manage older and newer images via CLI.

Connect a Windows Server as a certificate authority to authenticate Vmanage and Vsmart in the topology, configure three interfaces, assign IPs, and verify reachability between devices via ping.

Connect a Windows server to the internet by adding a management cloud network, obtain an IP from the 192.168.15.x subnet, and enable remote desktop for management.

Deploy CSR1000v in EVE-NG as a wan edge device, upload the CSR image, and add two devices to the topology connected to MPLS, internet, and VPN services for sd-wan labs.

Explain how Ethernet WAN extends LAN over fiber, enabling high-speed metro links from 10 Mbps to 10 Gbps, with VLANs and private VLANs to separate customer traffic.

Explore how Ethernet WAN uses VLANs and trunking to isolate each customer's traffic with dedicated VLANs and trunk links, noting that this approach is not scalable for thousands of customers.

Learn how q-in-q tunneling creates a layer two vpn for customers by double tagging ethernet frames with customer vlan and service border vlan, enabling seamless cross-site connectivity.

Verify basic tunneling configurations using QinQ between two customer-facing interfaces and a service core, enable dot1q tunnels and CDP visibility, then verify with show commands and ping.

Configure a QinQ tunneling lab between customer switches, enabling dot1q tunneling and trunking, VLAN 128, and CDP/STP protocols. Synchronize VDP configurations and verify root bridges for VLANs 10–40.

Learn how multiprotocol label switching enables VPN connectivity through labeled packets. Edge and provider routers swap labels, enabling a BGP-free core for scalable networks.

Explore layer 3 switching methods from process switching to fast switching and Cisco Express Forwarding, and learn how routing uses caches and the control, data, and management planes.

Identify how devices segment functions into management, control, and data planes, and examine how SDM design influences these planes, including underlay and overlay networks and Xen fabrics.

Learn how the data plane forwards traffic by using routing tables and MAC addresses to forward packets between interfaces, with examples from routers, switches, and NAT/VPN scenarios.

Understand how the control plane builds routing, MAC, and label tables to guide the data plane in forwarding packets using protocols like OSPF, STP, and LDP.

Explore the management plane by configuring and monitoring devices via cli with ssh or telnet, verify status with show commands, and collect snmp statistics.

Understand how Cisco Express Forwarding preloads routing information base into the forwarding information base, enabling the data plane to forward packets via a prebuilt fib table for faster, hardware-based switching.

Understand how Cisco Express Forwarding moves routing from control to data plane for fast switching, and how MPLS uses LDP to build FIB and LFIB for label forwarding.

Enable LDP to generate and exchange labels for MPLS and VPNs; routers form LDP neighbors, assign router IDs, and use UDP port 646 for multicast hello 224.0.0.2.

Configure the MPLS core by enabling OSPF as the IGP and then enabling LDP for label switching, using loopback router IDs for reliable LDP peering and verification.

Demonstrates verifying MPLS LDP bindings and forwarding, explains how each router assigns locally significant labels, uses implicit null for local routes, and shows label forwarding path including PHP.

Set up the IGP to build routing and FIB tables, then use LDP with LSRs to exchange labels, so forwarding follows OSPF best routes on MPLS interfaces.

Explain penultimate hop popping in MPLS to remove the label one hop before the destination, using implicit null for local networks, and show how explicit null disables PHP when needed.

Learn how to troubleshoot MPLS with LDP neighbor issues by verifying interfaces, MPLS IP enablement, and IGP reachability, and using show commands and trace to diagnose label forwarding problems.

Learn how VRF creates separate routing tables on a single router to isolate multiple customers' traffic for L3 VPNs, using per-customer routing instances on provider edge devices.

Understand how a route distinguisher provides local uniqueness for vrf routes by prepending a 64-bit value to a 32-bit address to form a 96-bit route within a router.

Explain how route target values in VRFs tag and segregate routes in MPLS L3 VPNs using BGP extended communities, export/import, and matching across PEs.

Configure route distinguisher and route target values in Vref to control vpn routing. Ensure import and export values match on opposite sides, and respect local significance of the route distinguisher.

Explore creating VRFs, assigning route distinguishers and route targets for per-customer routing, and moving interfaces from the global routing table into VRFs with IPv4 and IPv6 support.

Configure mpls l3 vpn by enabling igp inside the service border core, enabling ldp, and creating vrfs with route distinguishers and route targets, then establish vpnv4 peering and bgp redistribution.

Configure p2c routing with RIP version 2 inside the VRF to advertise customer routes into the VRF routing table, ensuring LAN networks are learned.

Explore multi-protocol BGP and VPNv4 peering to exchange IPv4 customer routes over MPLS, using address families and route targets to steer VPN traffic.

Configure vpnv4 peering between routers using loopback addresses, activate the vpnv4 address family, and enable send community and next-hop self for route targets.

Redistribute routes between bgp and ip inside a vrf on pe routers to carry routes across the mpls l3 vpn. Verify vpnv4 peering and end-to-end reachability for customer networks.

Verify end-to-end MPLS L3 VPN LSP by tracing a packet from 5.5.5.5 to 6.6.6.6, observing path selection, next hops, and label switching through BGP peering and VRF routing.

Review the mpls l3 vpn configuration steps, verify igp and ldp in the core, and confirm vrf and vref setups for vpnv4 peering.

Learn to deploy MPLS L3 VPN with EIGRP between PE and CE, cover prerequisites (ospf, ldp, vrf, vpnv4), vrf routing, and mutual redistribution between vrf and bgp, with reachability verification.

Configure an MPLS L3 VPN with static default routing under VRFs, using simple customer static routes and one-way redistribution of static (and connected) routes into BGP for end-to-end reachability.

Learn how to configure mpls l3 vpn using bgp on both sides with vrf and vpnv4, activate neighbors, and apply as override to avoid routing loops; redistribution is not required.

Configure MPLS L3 VPN with OSPF for PE-CE, using VRF-based OSPF processes, process IDs, and redistribution between OSPF and BGP, with adjacency verification and reachability checks.