CCIE
CCIE全称Cisco Certified Internetwork Expert—— Cisco认证互联网专家， 是美国Cisco公司于1993年开始推出的专家级认证考试。被公认为IT业最权威的认证,是全球网络互连领域中最高级别的认证证书。这个认证主要提供工程师在今日快速变动的网络环境中驾驭Cisco设备所需的专业知识。成为CCIE除了整个产业的认同之外，CCIE也是你不断持有最新网络知识的指标；你将会在你的专业领域中成为一位最具竞争力的人。
CCIE 认证是目前Cisco认证体系中最顶级的证书。要取得CCIE认证证书，需要取得以下课程考试：
1、CCIE资格考试（即笔试，2.5小时） 考试费：￥3000
2、CCIE实验考试（一天） 考试费：￥10850
3、CCIE面试（英文）
笔试部分考试在中国各个城市基本都能考，而实验室部分考试在世界范围内只有9个考场：研究三角园区（美）、圣何塞（美）、悉尼（澳）、香港（中）、北京（中）、班加罗尔（印）、东京（日）、布鲁塞尔（比）、圣保罗（巴）、。
CCIE目前在考的共分为5类：
Routing & Switching(R&S) 路由交换CCIE
Service Provider(SP) 电信运营商CCIE
Security 安全CCIE
Voice 语音CCIE
Storage Networking 存储CCIE
CCIE认证的有效期为两年
如果以通过CCIE试验考试重认证只需要进行笔试重认证；如果在证书没有过期时进行重认证那么有效日期将累加
重认证 重新参加笔试
以下为CCIE考试大纲和学习内容
路由交换CCIE认证内容
认证介绍：
路由和交换领域的CCIE认证资格表示网络人士在不同的LAN、WAN接口和各种路由器、交换机的联网方面拥有专家级知识。R&S 领域的专家可以解决复杂的连接问题，利用技术解决方案提高带宽、缩短响应时间、最大限度地提高性能、加强安全性和支持全球性应用。考生应当能够安装、配置和维护LAN、WAN和拨号接入服务。
备考参考用书：
TCP /IP路由协议卷一
TCP /IP路由协议卷二
3560交换机配置指南
端到端的QOS网络设计
IPV6设计与实现
课程涉及内容：
桥接部分
Frame relay
VLANs, VTP, STP, MSTP, RSTP, Trunk, Etherchannel, management, features, advanced configuration, Layer 3
Tunneling
IGP部分：
OSPF
EIGRP
RIPv2
IPv6: Addressing, RIPng, OSPFv3
GRE
ODR
Filtering, redistribution, summarization and other advanced features
BGP 部分
IBGP
EBGP
Filtering, redistribution, summarization, synchronization, attributes and other advanced features
IP特性部分：
IP addressing
DHCP
HSRP
IP services
IOS user interfaces
System management
NAT
NTP
SNMP
RMON
Accounting
SLA
多播部分：
PIM, bi-directional PIM
MSDP
Multicast tools, source specific multicast
DVMRP
Anycast
服务质量：
Quality of service solutions
Classification
Congestion management, congestion avoidance
Policing and shaping
Signaling
Link efficiency mechanisms
Modular QoS command line
安全特性部分：
AAA
Security server protocols
Traffic filtering and firewalls
Access lists
Routing protocols security, catalyst security
CBAC
Other security features
安全CCIE认证内容
认证介绍：
安全领域的 CCIE 认证表示网络人士在 IP 和 IP 路由，以及特定的安全协议和组件方面拥有专家级知识。获得安全CCIE，能够设计安全的网络。熟练使用ASA/PIX，IPS，VPN产品以及各种安全技术。
备考推荐资料：
CISCO VPN配置完全手册
路由器防火墙
安全原理与实践
……
课程设计内容：
Implement secure networks using Cisco ASA Firewalls
Perform basic firewall Initialization Configure device management Configure address translation (nat, global, static) Configure ACLs Configure IP routing Configure object groups Configure VLANs Configure filtering Configure failover Configure Layer 2 Transparent Firewall Configure security contexts (virtual firewall) Configure Modular Policy Framework Configure Application-Aware Inspection Configure high availability solutions Configure QoS policies
Implement secure networks using Cisco IOS Firewalls Configure CBAC Configure Zone-Based Firewall Configure Audit Configure Auth Proxy Configure PAM Configure access control Configure performance tuning Configure advanced IOS Firewall features
Implement secure networks using Cisco VPN solutions Configure IPsec LAN-to-LAN (IOS/ASA) Configure SSL VPN (IOS/ASA) Configure Dynamic Multipoint VPN (DMVPN) Configure Group Encrypted Transport (GET) VPN Configure Easy VPN (IOS/ASA) Configure CA (PKI) Configure Remote Access VPN Configure Cisco Unity Client Configure Clientless WebVPN Configure AnyConnect VPN Configure XAuth, Split-Tunnel, RRI, NAT-T Configure High Availability Configure QoS for VPN Configure GRE, mGRE Configure L2TP Configure advanced Cisco VPN features
Configure Cisco IPS to mitigate network threats Configure IPS 4200 Series Sensor Appliance Initialize the Sensor Appliance Configure Sensor Appliance management Configure virtual Sensors on the Sensor Appliance Configure security policies Configure promiscuous and inline monitoring on the Sensor Appliance Configure and tune signatures on the Sensor Appliance Configure custom signatures on the Sensor Appliance Configure blocking on the Sensor Appliance Configure TCP resets on the Sensor Appliance Configure rate limiting on the Sensor Appliance Configure signature engines on the Sensor Appliance Use IDM to configure the Sensor Appliance Configure event action on the Sensor Appliance Configure event monitoring on the Sensor Appliance Configure advanced features on the Sensor Appliance Configure and tune Cisco IOS IPS Configure SPAN & RSPAN on Cisco switches
Implement Identity Management Configure RADIUS and TACACS+ security protocols Configure LDAP Configure Cisco Secure ACS Configure certificate-based authentication Configure proxy authentication Configure 802.1x Configure advanced identity management features Configure Cisco NAC Framework
Implement Control Plane and Management Plane Security Implement routing plane security features (protocol authentication, route filtering) Configure Control Plane Policing Configure CP protection and management protection Configure broadcast control and switchport security Configure additional CPU protection mechanisms (options drop, logging interval) Disable unnecessary services Control device access (Telnet, HTTP, SSH, Privilege levels) Configure SNMP, Syslog, AAA, NTP Configure service authentication (FTP, Telnet, HTTP, other) Configure RADIUS and TACACS+ security protocols Configure device management and security
Configure Advanced Security Configure mitigation techniques to respond to network attacks Configure packet marking techniques Implement security RFCs (RFC1918/3330, RFC2827/3704) Configure Black Hole and Sink Hole solutions Configure RTBH filtering (Remote Triggered Black Hole) Configure Traffic Filtering using Access-Lists Configure IOS NAT Configure TCP Intercept Configure uRPF Configure CAR Configure NBAR Configure NetFlow Configure Anti-Spoofing solutions Configure Policing Capture and utilize packet captures Configure Transit Traffic Control and Congestion Management Configure Cisco Catalyst advanced security features
Identify and Mitigate Network Attacks Identify and protect against fragmentation attacks Identify and protect against malicious IP option usage Identify and protect against network reconnaissance attacks Identify and protect against IP spoofing attacks Identify and protect against MAC spoofing attacks Identify and protect against ARP spoofing attacks Identify and protect against Denial of Service (DoS) attacks Identify and protect against Distributed Denial of Service (DDoS) attacks Identify and protect against Man-in-the-Middle (MiM) attacks Identify and protect against port redirection attacks Identify and protect against DHCP attacks Identify and protect against DNS attacks Identify and protect against Smurf attacks Identify and protect against SYN attacks Identify and protect against MAC Flooding attacks Identify and protect against VLAN hopping attacks Identify and protect against various Layer2 and Layer3 attacks
电信运营商CCIE认证内容
认证介绍：
电信运营商CCIE认证（以前被称为通信和服务）表示网络人士在IP原理和核心IP技术（例如单播IP路由、QoS、组播、MPLS、MPLS VPN、流量工程和多协议BGP）方面拥有专家级知识，并且在至少一项与电信运营商有关的网络领域具有专业知识。这些领域包括拨号、DSL、有线网络、光网、WAN交换、IP电话、内容网络和城域以太网。
备考用书：
MPLS VPN 体系结构卷一
MPLS VPN 体系结构卷二
MPLS 流量工程
高级MPLS VPN设计
域间多播技术
……
课程内容：
.
Bridging and Switching VTP, VLAN, Trunk, Spanning tree Frame Relay, DLCI, FR multilink ATM PVC, SVC, FR/ATM interworking PPPoE
IGP Routing IS-IS, Level 1/2, Metric OSPF, LSA, Area Redistribution, Summarization, Filtering Policy routing
EGP Routing IBGP, EBGP BGP attributes Confederation, Route reflector Synchronization, Aggregation, Stability Redistribution, Filtering Multipath
SP Multicast PIM-SM, PIM-DM, SSM, PIM-BIDIR, IGMP Auto RP, Static RP, BSR, Anycast RP MP-BGP for multicast, MSDP
MPLS Label distribution, LDP/ TDP Label filtering, Label merging, Multipath MPLS COS MPLS Netflow MPLS over ATM MPLS Traffic Engineering
L3/L2 VPN MPLS VPN, MP-iBGP PE-CE routing, RIPv2, OSPF, EIGRP, Static, ISIS, EBGP BGP Extended Community Inter AS MPLS VPN Carrier Supporting Carrier VRF-Lite, VRF Select Multicast MPLS VPN GRE, multipoint GRE AToM, L2TPv3 802.QinQ
SP QoS and Security DSCP/EXP, TOS, NBAR Marking, Shaping, Policing CAR, FRTS WRQ, CBWFQ, LLQ, PQ, CQ RED, WRED LFI, cRTP RSVP ACL, RPF, Filtering Routing update security Common attacks
High Availability NSF, GLBP Fast reroute, Link/Node protection HSRP, VRRP
Management SNMP, SYSLOG, RMON Accounting Netflow NTP
CCIE 认证是目前Cisco认证体系中最顶级的证书。要取得CCIE认证证书，需要取得以下课程考试：
1、CCIE资格考试（即笔试，2.5小时） 考试费：￥3000
2、CCIE实验考试（一天） 考试费：￥10850
3、CCIE面试（英文）
笔试部分考试在中国各个城市基本都能考，而实验室部分考试在世界范围内只有9个考场：研究三角园区（美）、圣何塞（美）、悉尼（澳）、香港（中）、北京（中）、班加罗尔（印）、东京（日）、布鲁塞尔（比）、圣保罗（巴）、。
CCIE目前在考的共分为5类：
Routing & Switching(R&S) 路由交换CCIE
Service Provider(SP) 电信运营商CCIE
Security 安全CCIE
Voice 语音CCIE
Storage Networking 存储CCIE
CCIE认证的有效期为两年
如果以通过CCIE试验考试重认证只需要进行笔试重认证；如果在证书没有过期时进行重认证那么有效日期将累加
重认证 重新参加笔试
以下为CCIE考试大纲和学习内容
路由交换CCIE认证内容
认证介绍：
路由和交换领域的CCIE认证资格表示网络人士在不同的LAN、WAN接口和各种路由器、交换机的联网方面拥有专家级知识。R&S 领域的专家可以解决复杂的连接问题，利用技术解决方案提高带宽、缩短响应时间、最大限度地提高性能、加强安全性和支持全球性应用。考生应当能够安装、配置和维护LAN、WAN和拨号接入服务。
备考参考用书：
TCP /IP路由协议卷一
TCP /IP路由协议卷二
3560交换机配置指南
端到端的QOS网络设计
IPV6设计与实现
课程涉及内容：
桥接部分
Frame relay
VLANs, VTP, STP, MSTP, RSTP, Trunk, Etherchannel, management, features, advanced configuration, Layer 3
Tunneling
IGP部分：
OSPF
EIGRP
RIPv2
IPv6: Addressing, RIPng, OSPFv3
GRE
ODR
Filtering, redistribution, summarization and other advanced features
BGP 部分
IBGP
EBGP
Filtering, redistribution, summarization, synchronization, attributes and other advanced features
IP特性部分：
IP addressing
DHCP
HSRP
IP services
IOS user interfaces
System management
NAT
NTP
SNMP
RMON
Accounting
SLA
多播部分：
PIM, bi-directional PIM
MSDP
Multicast tools, source specific multicast
DVMRP
Anycast
服务质量：
Quality of service solutions
Classification
Congestion management, congestion avoidance
Policing and shaping
Signaling
Link efficiency mechanisms
Modular QoS command line
安全特性部分：
AAA
Security server protocols
Traffic filtering and firewalls
Access lists
Routing protocols security, catalyst security
CBAC
Other security features
安全CCIE认证内容
认证介绍：
安全领域的 CCIE 认证表示网络人士在 IP 和 IP 路由，以及特定的安全协议和组件方面拥有专家级知识。获得安全CCIE，能够设计安全的网络。熟练使用ASA/PIX，IPS，VPN产品以及各种安全技术。
备考推荐资料：
CISCO VPN配置完全手册
路由器防火墙
安全原理与实践
……
课程设计内容：
Implement secure networks using Cisco ASA Firewalls
Perform basic firewall Initialization Configure device management Configure address translation (nat, global, static) Configure ACLs Configure IP routing Configure object groups Configure VLANs Configure filtering Configure failover Configure Layer 2 Transparent Firewall Configure security contexts (virtual firewall) Configure Modular Policy Framework Configure Application-Aware Inspection Configure high availability solutions Configure QoS policies
Implement secure networks using Cisco IOS Firewalls Configure CBAC Configure Zone-Based Firewall Configure Audit Configure Auth Proxy Configure PAM Configure access control Configure performance tuning Configure advanced IOS Firewall features
Implement secure networks using Cisco VPN solutions Configure IPsec LAN-to-LAN (IOS/ASA) Configure SSL VPN (IOS/ASA) Configure Dynamic Multipoint VPN (DMVPN) Configure Group Encrypted Transport (GET) VPN Configure Easy VPN (IOS/ASA) Configure CA (PKI) Configure Remote Access VPN Configure Cisco Unity Client Configure Clientless WebVPN Configure AnyConnect VPN Configure XAuth, Split-Tunnel, RRI, NAT-T Configure High Availability Configure QoS for VPN Configure GRE, mGRE Configure L2TP Configure advanced Cisco VPN features
Configure Cisco IPS to mitigate network threats Configure IPS 4200 Series Sensor Appliance Initialize the Sensor Appliance Configure Sensor Appliance management Configure virtual Sensors on the Sensor Appliance Configure security policies Configure promiscuous and inline monitoring on the Sensor Appliance Configure and tune signatures on the Sensor Appliance Configure custom signatures on the Sensor Appliance Configure blocking on the Sensor Appliance Configure TCP resets on the Sensor Appliance Configure rate limiting on the Sensor Appliance Configure signature engines on the Sensor Appliance Use IDM to configure the Sensor Appliance Configure event action on the Sensor Appliance Configure event monitoring on the Sensor Appliance Configure advanced features on the Sensor Appliance Configure and tune Cisco IOS IPS Configure SPAN & RSPAN on Cisco switches
Implement Identity Management Configure RADIUS and TACACS+ security protocols Configure LDAP Configure Cisco Secure ACS Configure certificate-based authentication Configure proxy authentication Configure 802.1x Configure advanced identity management features Configure Cisco NAC Framework
Implement Control Plane and Management Plane Security Implement routing plane security features (protocol authentication, route filtering) Configure Control Plane Policing Configure CP protection and management protection Configure broadcast control and switchport security Configure additional CPU protection mechanisms (options drop, logging interval) Disable unnecessary services Control device access (Telnet, HTTP, SSH, Privilege levels) Configure SNMP, Syslog, AAA, NTP Configure service authentication (FTP, Telnet, HTTP, other) Configure RADIUS and TACACS+ security protocols Configure device management and security
Configure Advanced Security Configure mitigation techniques to respond to network attacks Configure packet marking techniques Implement security RFCs (RFC1918/3330, RFC2827/3704) Configure Black Hole and Sink Hole solutions Configure RTBH filtering (Remote Triggered Black Hole) Configure Traffic Filtering using Access-Lists Configure IOS NAT Configure TCP Intercept Configure uRPF Configure CAR Configure NBAR Configure NetFlow Configure Anti-Spoofing solutions Configure Policing Capture and utilize packet captures Configure Transit Traffic Control and Congestion Management Configure Cisco Catalyst advanced security features
Identify and Mitigate Network Attacks Identify and protect against fragmentation attacks Identify and protect against malicious IP option usage Identify and protect against network reconnaissance attacks Identify and protect against IP spoofing attacks Identify and protect against MAC spoofing attacks Identify and protect against ARP spoofing attacks Identify and protect against Denial of Service (DoS) attacks Identify and protect against Distributed Denial of Service (DDoS) attacks Identify and protect against Man-in-the-Middle (MiM) attacks Identify and protect against port redirection attacks Identify and protect against DHCP attacks Identify and protect against DNS attacks Identify and protect against Smurf attacks Identify and protect against SYN attacks Identify and protect against MAC Flooding attacks Identify and protect against VLAN hopping attacks Identify and protect against various Layer2 and Layer3 attacks
电信运营商CCIE认证内容
认证介绍：
电信运营商CCIE认证（以前被称为通信和服务）表示网络人士在IP原理和核心IP技术（例如单播IP路由、QoS、组播、MPLS、MPLS VPN、流量工程和多协议BGP）方面拥有专家级知识，并且在至少一项与电信运营商有关的网络领域具有专业知识。这些领域包括拨号、DSL、有线网络、光网、WAN交换、IP电话、内容网络和城域以太网。
备考用书：
MPLS VPN 体系结构卷一
MPLS VPN 体系结构卷二
MPLS 流量工程
高级MPLS VPN设计
域间多播技术
……
课程内容：
.
Bridging and Switching VTP, VLAN, Trunk, Spanning tree Frame Relay, DLCI, FR multilink ATM PVC, SVC, FR/ATM interworking PPPoE
IGP Routing IS-IS, Level 1/2, Metric OSPF, LSA, Area Redistribution, Summarization, Filtering Policy routing
EGP Routing IBGP, EBGP BGP attributes Confederation, Route reflector Synchronization, Aggregation, Stability Redistribution, Filtering Multipath
SP Multicast PIM-SM, PIM-DM, SSM, PIM-BIDIR, IGMP Auto RP, Static RP, BSR, Anycast RP MP-BGP for multicast, MSDP
MPLS Label distribution, LDP/ TDP Label filtering, Label merging, Multipath MPLS COS MPLS Netflow MPLS over ATM MPLS Traffic Engineering
L3/L2 VPN MPLS VPN, MP-iBGP PE-CE routing, RIPv2, OSPF, EIGRP, Static, ISIS, EBGP BGP Extended Community Inter AS MPLS VPN Carrier Supporting Carrier VRF-Lite, VRF Select Multicast MPLS VPN GRE, multipoint GRE AToM, L2TPv3 802.QinQ
SP QoS and Security DSCP/EXP, TOS, NBAR Marking, Shaping, Policing CAR, FRTS WRQ, CBWFQ, LLQ, PQ, CQ RED, WRED LFI, cRTP RSVP ACL, RPF, Filtering Routing update security Common attacks
High Availability NSF, GLBP Fast reroute, Link/Node protection HSRP, VRRP
Management SNMP, SYSLOG, RMON Accounting Netflow NTP