Cisco Expert Certification

CCIE Service
Provider350-501L — SP Expert Lab Exam

Prove your ability to plan, design, implement, operate, and optimize solutions for complex service provider networks. The CCIE SP expert lab validates deep mastery of SR, SRv6, EVPN, and model-driven programmability at carrier scale.

Start Your Learning Path

Expert LevelWorld's most recognised SP credential

SR-MPLS & SRv6Programmable transport engineering

EVPN & mVPNAdvanced VPN service architectures

102 Video Classes46:30 hrs of expert instruction

Unlimited opportunities in carrier networking

The CCIE Service Provider validates expert-level mastery of the full SP technology stack. Prove you can design, deploy, and optimize complex service provider networks with modern segment routing and model-driven automation.

Advanced BGP, IS-IS, and OSPF with carrier-scale design

SR-MPLS, SRv6, ODN, TI-LFA, and PCE traffic engineering

EVPN, VPLS, L3VPN, Inter-AS VPN, CSC, and mVPN

NSO, YANG, gRPC telemetry, and IOS XR programmability

Expert SP Skills

Master the full service provider technology stack

From advanced BGP design to segment routing, SRv6, EVPN, and IOS XR programmability — CCIE SP demands mastery of every layer of carrier infrastructure.

Advanced SP Routing

Design IS-IS, OSPF, and BGP at carrier scale with route reflectors, confederations, and RPKI security.

Advanced VPN Services

Deploy MPLS L3VPN, EVPN, VPLS, Inter-AS VPN, CSC, and multicast VPN architectures.

Segment Routing & SRv6

Implement SR-MPLS, SRv6, ODN, TI-LFA, and PCE for programmable traffic engineering.

SP Security

Harden carrier networks with CoPP, LPTS, RPKI, BGPsec, uRPF, Flowspec, and DDoS mitigation.

QoS & Services

Configure MPLS QoS models, DiffServ, multicast, and Carrier Ethernet OAM for SP service delivery.

Model-Driven Automation

Automate SP operations with NSO, YANG, gRPC telemetry, NETCONF, and Python scripting.

Exam Blueprint

Six domains. Complete SP expert mastery.

From advanced routing and VPN services to segment routing, QoS, security, and automation — the full CCIE SP blueprint.

Explore the curriculum

DOMAIN 0125%

Network Infrastructure

Design and implement advanced IS-IS, OSPF, BGP, and high-availability solutions for carrier-grade SP networks.

DOMAIN 0220%

VPN Services

Implement advanced MPLS L3VPN, L2VPN, EVPN, inter-AS VPN, CSC, and multicast VPN architectures.

DOMAIN 0320%

MPLS & Segment Routing

Master advanced MPLS forwarding, LDP, SR-MPLS, SRv6, and traffic engineering with PCE and TI-LFA.

DOMAIN 0415%

Security

Implement comprehensive SP security including CoPP, LPTS, BGP security, infrastructure ACLs, and DDoS mitigation.

DOMAIN 0510%

Services & QoS

Configure advanced QoS policies, multicast services, and Carrier Ethernet OAM for service provider offerings.

DOMAIN 0610%

Automation & Programmability

Use model-driven programmability, NSO, YANG, gRPC telemetry, and NETCONF/RESTCONF for SP automation.

Domain percentages can change. Always review Cisco's official CCIE SP exam page before scheduling.

What You Will Learn

A clear, exam-aligned curriculum

Expand each domain to explore the routing, VPN, SR, security, and automation skills covered in this CCIE SP course.

IS-IS multi-level hierarchical design, route leaking, and redistribution
OSPF multi-area design, LSA types, path control, and stub/NSSA areas
BGP advanced: route reflectors, confederations, communities, and policy
BGP Flowspec, RPKI, and BGPsec for SP routing security
High availability: NSR, NSF, graceful restart, BFD, and link aggregation
IPv6 deployment: native IPv6, 6PE, 6VPE, and transition technologies

MPLS L3VPN: VRF design, route distinguishers, route targets, and MP-BGP VPNv4
Inter-AS VPN: Option A, B, and C with route reflector integration
Carrier Supporting Carrier (CSC) VPN architecture and deployment
EVPN: MAC-VRF, IP-VRF, EVPN-VXLAN, and IRB configurations
L2VPN: VPLS, VPWS, E-Line, E-LAN, E-Tree, and Carrier Ethernet OAM
Multicast VPN (mVPN): Profile 0/14/15 and shared/source MDT design

MPLS data plane: FIB, LFIB, label operations, and PHP/UHP modes
LDP: session establishment, label advertisement modes, and LDP-IGP sync
Segment Routing MPLS (SR-MPLS): adjacency/prefix SIDs and SRGB/SRLB
SRv6: SID structure, End functions, and SRv6 L3VPN deployments
SR Traffic Engineering: ODN, On-Demand Nexthop, and affinity-based paths
TI-LFA, PCE/PCEP, and topology-independent FRR for fast convergence

Control plane protection: LPTS, CoPP, and BGP-TTL security for IOS XR
BGP security: prefix validation, RPKI, BGPsec, and route filtering
LDP security: authentication, targeted LDP protection, and label filtering
Data plane security: uRPF, RTBH, ACLs, and traffic scrubbing
Management plane: TACACS+, AAA, SNMPv3, SSH, and NetConf access control
DDoS mitigation: Flowspec, traffic diversion, and scrubbing architectures

MPLS QoS models: Pipe, Short Pipe, and Uniform mode design and configuration
DiffServ: DSCP marking, queuing (FIFO/WFQ/CBWFQ/LLQ), shaping, and policing
Multicast: PIM-SM, PIM-SSM, MSDP, Auto-RP, BSR, and multicast TE
Carrier Ethernet OAM: CFM, Y.1731, and E-LMI for SLA measurement
Traffic engineering: CBTS, PBTS, MAM, RDM bandwidth models
MEF services: E-Line, E-LAN, E-Tree with performance monitoring

IOS XR programmability: gRPC, gNMI, and model-driven telemetry streaming
YANG data models: IOS XR native, OpenConfig, and IETF YANG for SP
NETCONF/RESTCONF: configuration management and operational data retrieval
Network Services Orchestration (NSO): service packages and NEDs
Ansible and Python automation for large-scale SP device management
Streaming telemetry: dial-in vs. dial-out, sensor paths, and export

Career Outcomes

Command the highest-tier SP networking roles

CCIE Service Provider is one of the most valued credentials in carrier networking. It opens doors to principal engineering, architecture, and automation leadership at ISPs and telcos worldwide.

Who should learn?CCNP SP holders and senior engineers targeting CCIE and principal SP roles

CCIE SP Specialist

Recognised globally as a Cisco Internetwork Expert in carrier-grade service provider infrastructure.

SP Network Architect

Design large-scale ISP and telco networks with SR, SRv6, EVPN, and advanced QoS frameworks.

Segment Routing Engineer

Implement SR-TE, SRv6, TI-LFA, and PCE-based paths for programmable SP transport networks.

SP Automation Lead

Drive model-driven automation using NSO, YANG, gRPC telemetry, and IOS XR programmability.

Your Roadmap

From CCNP SP to Cisco SP Internetwork Expert

A structured path through advanced routing, segment routing, VPN services, security, and SP automation.

Advanced Routing

Master carrier-scale IS-IS, OSPF, BGP, route reflectors, confederations, and RPKI.

SR-MPLS & SRv6

Deploy SR-MPLS, SRv6, ODN, TI-LFA, and PCE for programmable traffic engineering.

VPN & QoS Services

Implement EVPN, L3VPN, Inter-AS, CSC, mVPN, and MPLS QoS for carrier service delivery.

Security & Automation

Apply RPKI, BGPsec, LPTS, CoPP, and automate with NSO, YANG, gRPC, and NETCONF.

Exam domains are based on Cisco's official CCIE Service Provider page.

Ready to pursue the CCIE Service Provider credential?

Talk with a course advisor about the CCIE SP path, study strategy, and how our 102-class course prepares you for the expert lab exam.

Chat on WhatsApp