As some of you probably already know, the CCNA Security IINS exam topics have been refreshed from version 2.0 to version 3.0. The new exam is now called CCNA 210-260 “Implementing Cisco Network Security”. We will now take a look at the differences between the two exams and highlight the most important topic changes.

First thing, IINS 3.0 topics combine and adjust the current domains. Instead of covering nine domains (IINS 2.0), only seven domains are now included. This change was made to better reflect current job roles and job tasks typically performed by CCNA Security individuals. Note that although there are fewer domains, the exam remains the same length – it lasts for 90 minutes and contains 60-70 questions. This is because some new technologies were added and certain topic areas are now covered in more depth. The exam prerequisites did not change – you will not be able to obtain a valid CCNA Security Certificate until you already possess a valid CCENT or CCNA R&S, or any CCIE certificate.

In general, the new CCNA Security exam tests the candidate’s knowledge of secure network infrastructure, understanding core security concepts, managing secure access, VPN encryption, firewalls, intrusion prevention, web/email content security, and endpoint security. This not only includes the ability to configure certain technologies, but also the abilities to install, troubleshoot, and monitor the equipment to maintain integrity, confidentiality, and availability of data and devices.

Let’s now closely examine the most important differences between the old 2.0 and new 3.0 IINS CCNA Security exam:

• Cisco Configuration Professional (IOS GUI) is not included in IINS 3.0. Only Command Line is expected to be used for configuration (like in the CCIE Security exam).
• It is now assumed that CCNA Security candidates already know the fundamentals of IPv6 (covered in ICND1). This means that IPv6 is not part of the IINS 3.0 blueprint.
• Focus on ACLs has been reduced in the new exam (already covered in ICND1).
• Intrusion Prevention System (IPS) theory (no implementation) is now covered from the perspective of FirePower solution, instead of 4200 series sensors.
• Site-to-Site VPN configuration includes IOS – ASA examples.
• New security topics were added: 802.1x, Identity Services Engine (ISE), Bring Your Own Device (BYOD), Cloud Web Security (CWS).
• Certain examples and technologies were updated. For example, stronger cryptographic algorithms are used.
• The new exam is more hands-on based.

A full list of the new CCNA Security exam topics (the blueprint) can be found here:
https://learningnetwork.cisco.com/community/certifications/security_ccna/iins-v3/exam-topics

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Ehsan Emad, CCIE #28551 (Data Center)
• Jeremy Porter, CCIE #16273 (Wireless)
• Adrian McCaskill, CCIE #48071 (Wireless)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Katie Mac, CCIE #50931 (Data Center)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Marius Hole, CCIE #50543 (Data Center)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

So as with most things, a student just pointed out to me that the CCIE DC v2 has silently been pushed out into the Cisco Learning portal! See here:

http://www.cisco.com/web/learning/certifications/expert/ccie_dc/index.html

There is a PDF in there now showing the differential changes in the v1 and v2 blueprints:

http://www.cisco.com/web/learning/certifications/shared/docs/ccie-datacenter-comparison.pdf

Lab Structure

Well here is the rundown folks:

1. 1 hour diagnostic section added
   1. Tests diagnostics around network issues, and the analyzing of the network without access to actual devices
   2. Independent tickets garnered from multiple sources (diagrams, emails, logs, etc…)
   3. Multiple Choice, Drag-n-drop, point-and-click item types (similar to the written examination)
2. Troubleshoot and Configuration will be the remaining 7 hours

You have to pass both of these sections individually (achieve the minimum), and as well have a combined score above the combined minimum for both modules.

Lab Topics and Hardware

They have changed quite a bit in regards to topics, though they haven’t removed very much from the existing lab exam. A lot of what I put in parenthesis below is me, making an educated guess as to what they mean by those line items. With an already pretty full 8-hour exam, cramming some, or even all of this into it seems like a far cry. I believe they will probably add bits and pieces of either standalone 9k’s running NX-OS and VXLAN, or ACI into the mix, and the rest of the cloud/policy/orchestration stuff will most likely become the ‘services’ portion of the v2 DC lab exam (comparable to the services section in the R/S exam…).

Short list is as follows…

Topics Added:

• DC automation (This could be ACI, UCS Central/Director)
• DC orchestration
• Cisco Cloud offerings (This could be Intelligent Automation for Cloud, Intercloud Fabric)
• Policy and non-policy driven internal fabric connectivity (ACI)
• Infrastructure policies and elements (ACI)
• External fabric connectivity (ACI)
• Evolving technologies (they say this is Network programmability, Cloud, and IoT)

Topics removed:

• FCIP
• ACE

Hardware is changing dramatically on v2 of this exam. I cant do any better than the side-by-side Cisco gave us here:

The most notable differences…well everything! Obviously ACI is making a crash at this party, with the APIC cluster, as well as the 9336 and 9372 joining the fun. They have downgraded the 7K to a 7004, with Sup2e (i.e. 8 VDC capabilities) as well as dropping EOL/EOS line cards in lieu of the newer F3 line cards (can you say feature sandwich! FEX, VXLAN, OTV, VPLS, FabricPath, MPLS, and more!). Also notable, the 5k’s are replaced with 5672’s, which support VXLAN, as well as the more traditional features supported by the 5548-UP’s. The 2232-pp FEX is also being replaced with the 2348 model, but no huge change in capabilities there.

The UCS configuration has also changed a little, with the upgrade of the C-series to the M4 model, and the addition of the UCS-4308 M-series. This device will be managed from UCSM, but is a 2RU chassis that holds up to 8 UCS M142 compute nodes. This will be connected to the 6248 FI’s, most likely using the 40G breakout cables (40GB to 4 x 10G). Also, some minor changes with regards to the B-series, adding the M4 series blades within the existing B5108 chassis, with the exclusion of the Emulex mezzanine cards, and the inclusion of the VIC 1340. This is another MLOM card (along with the VIC 1240), that will provide 40GB of connectivity to the M4 series blade. This leaves the mezzanine slot open for VIC1380/1280, or port expander cards.

All in all I think the changes have been long awaited. Now we will see who in the world can afford to buy a home lab! I personally think that the automation, orchestration, and cloud aspect are going to make this track increasingly challenging unless hand-on experienced is gained with these technologies. Though ACI is being more widely adopted, the amount of people with experience with the Cisco cloud offerings is not. Very few people have gotten the opportunity to mess with those technologies yet, but I anticipate that is part of Cisco’s push to get it out in front of its ‘expert’ population!

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Eric Loadwick, CCIE #51020 (Data Center)
• Yongqing Han, CCIE #50738 (Data Center)
• Sompop Amositichai, CCIE #51022 (Security)
• Rovshen Nazarov, CCIE #50964 (R&S)
• Gabor Kovacs, CCIE #50970 (Collab)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

While teaching a CCIE R&S Bootcamp the other day, I realized that I get a lot of the same questions pertaining to the CCIE R&S V5 Lab pretty frequently, so I decided to put together a video series that addresses these questions. I’ve mapped out 4 videos – each of which cover the 3 section in the lab, and an introduction to the general lab concepts and theory. Enjoy, and if there’s anything I can help you with please feel free to email me at jp@ipexpert.com.

JP Cedeno, CCIE R&S V5 (CCIE #47408)
iPexpert’s Sr. CCIE R&S Instructor

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Maiquel Consalter, CCIE 51129 (Security)
• James Prendergast, CCIE #51060 (R&S)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

Just when you thought you were prepared for your CCIE written exam, think again! Cisco has announced that as of July 25th 2016 they will be adding the section called “Evolving Technologies” to all written exams. If you are scheduled to take your written, in any track, before July25th than not to worry, these changes will not affect you in anyway according to Cisco.

This new section is going to account for 10% of your overall score on the exam with the original topics in your blueprint coming out to 90%. The most interesting point that we need to focus on is that the subdomains of this new section are subject to change as “new and emerging technologies are developed and adopted by the industry”.

Now I know what you’re thinking, “how am I supposed to study for this?”. It’s not all that bad! Cisco has at least given us some resources that we can use to begin preparing for these new topics on our written exam. Here at iPexpert, we’ll be adding these topics to new Written VOD products accordingly, and releasing updates over the next few months.

The last big update to the CCIE blueprints that I want to call to your attention affects both the lab and written blueprints. Cisco announced that they will now be combining the existing written and lab topics into “one modular and unified version”. According to Cisco this is to ensure that all “candidates prepare with a comprehensive understanding of each topic”. *This fits well within our Structured Learning Approach, and the new way in which we’re designing our materials!

The goal here, with this new “unified” blueprint, is to ensure that candidates have a deeper understanding of topics “to include planning, design, implementation, diagnosis, and troubleshooting”. In short, Cisco is tired of CCIE’s who only know how to perform that one task that’s required on their lab, or written, exam, and quite frankly, we think it’s a great call by Cisco! They are attempting to deliver CCIE’s to the world who can do more than just pass an exam. So, get ready, the CCIE written exams appear to be getting more difficult in the upcoming months, which is a great thing. We all want that CCIE number to remain the top IT certification, and most prestigious, don’t we!?

JP Cedeno, CCIE R&S V5 (CCIE #47408)
iPexpert’s Sr. CCIE R&S Instructor

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Martin Abildgaard, CCIE #51116 (Collaboration)
• Ryan Jensen, CCIE #51211 (R&S)
• Maiquel Consalter, CCIE #51129 (Security)
• James Prendergast, CCIE #51060 (R&S)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Joe Harris, CCIE #6200 (Data Center)
• Marco Torrez, CCIE #51051 (Collaboration)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

CCIE Data Center Lab, v2 – iPexpert’s Plan

The announcement of the CCIE Data Center Version 2 blueprint has changed the exam that we once knew. No longer are the MDS switches around, plaguing us with the perfectly rational fears of iSCSI gateway configuration, or FCIP configuration nuances. Gone too are the days of fighting the IP protocol stack running on the ever-finicky MDS switches. While some rejoice these facts, I take a step back and try to wrap my head around “what’s next?”

At iPexpert we strive to stay ahead of the proverbial curve within the training market; so immediately after analyzing the impact of the changes (and subsequently drinking quite a bit of beer), we began planning and calculating the changes that we would need in order to adapt to the new version of the exam.

We will most definitely be updating our product portfolio to accommodate the changes. This includes, but is not limited to our:

• CCIE Data Center, Volume 1 – Technology Workbook
• CCIE Data Center, Volume 2 – Full-Scale Mock Lab Workbook
• CCIE Data Center Lab VoD
• CCIE Data Center Written VoD
• CCIE Data Center Lab Bootcamps (Live and Online)
• CCIE Data Center Rack Rental Options

Many topics have remained consistent between the two blueprints, however much has been added. So, within the workbooks and VoD series, some of the first topics I plan to attack are:

• VXLAN
o Flood and Learn
o eVPN
o Etc.
• Layer 3
o PFR
o LISP
o BGP (iBGP and eBGP)
o Etc.
• ITD
• ACI (et all)

While there are more topics that have been added, these are the ones that immediately drew my attention. Honestly, protocols such as LISP and BGP have needed to appear on this exam for quite a while now, so I’m happy to finally see them added! Topics such as ACI however, were a bit of a surprise to me. I expected to see the Nexus 9K’s make an initial appearance in standalone (NX-OS) mode, so the addition of the entire ACI solution was shocking! Again, I am happy to see it, but there is going to be quite a learning curve, I believe, for candidates wanting to learn this product at the expert level.

Now, the topic I’m sure everybody is wondering about… online CCIE Data Center Racks. Who will provide these super-expensive racks for everybody to practice upon? Let’s face it, it’s going to be borderline impossible to build home racks to practice on (unless VIRL gets substantially better, and the ACI emulator starts getting pushed for free ); not to mention, the CCIE program itself requires hands-on practice. Will we be modifying our racks to accommodate this new blueprint? Short answer is: Yes! Below is a high-level breakdown of what we plan on doing:

• Decommissioning our technology racks and moving to 6 full-scale mock racks
• Replacing all 7K SUP1’s with SUP2E’s
• Replacing all M1 and F1 cards with newer F3 modules
• Replacing all 5548-UP’s with the new 5672-UP’s
• Replacing 6140 FI’s with 6248-UP’s
• Taking out all MDS 9222i’s
• Taking out ACE’s
• Adding an APIC controller, 93xx Spine, and multiple 93xx Leaf switches

We believe that this, along with the existing UCS chassis and server blades, will give us enough flexibility to train all of you for this new CCIE DC (v2) blueprint!

We’ve already ordered our first full-scale rack, and I’ve begun the planning and outlining of our new content. With that being said, I will be designing our new content to fit into our new methodology – which will allow us to release content in a very applicable fashion. We’ll start releasing a each section of our Volume 1 Workbook along with the DSG and Video on Demand recordings that fall into this technology breakout. I’ll also be scheduling my Workbook Mentoring Sessions to coordinate with this, so students can watch along and ask questions as I’m completing each lab on a new rack of V2 hardware from my HD studio, located where I’m based – in Tulsa.

Once I finish the Volume 1 Workbook, we’ll be decommissioning all of our V1 racks, except 1, and then pushing the V2 racks live for your usage. I’ll then start on our course content. Our last V1 DC course is scheduled for June 13th, and I’ll be delivering that online. The first V2 course will be happening in late July or August (we may run this immediately after Cisco Live, in Vegas, starting July 18th, but that’s not set in stone). If it doesn’t happen then, we may be looking at August 1st for this first V2 course.

Upon completion of our course content, I’ll jump over to the Volume 2 Workbook (5 Mock Lab Scenarios) and Detailed Solution Guide (along with Video Solutions).

The final phase of this will be me conducting a CCIE Data Center V2 Written course, online. This will be a recorded course, which we’ll then make available as our V2 Written VoD.

We’d like to forewarn everyone – that this rollout of new content won’t be instant. It will likely span over the course of 2016 (at least through Q3). However, as I mentioned, we’ll be releasing this in bits and pieces, so you’ll be able to digest each topic and technology in a strategic, laid out fashion. Another bonus is that customers who are currently subscribers will be eligible for all V2 updates as they’re released!

Well, that covers my update. We’ve received a large number of inquiries, and I wanted our DC candidates to let you know our plan, and that we are already taking this very seriously, and moving forward to support you throughout this blueprint change! It’s an exciting time for us, we’re excited, because we couldn’t agree with Cisco more – this is what a DC lab should entail!

Stay tuned for more announcements and updates. These will be made available on our blog, as well as my CCIE Data Center Study Group (on Facebook).

-Jason

Jason Lunde is iPexpert’s CCIE Data Center Program Manager & Sr. Technical Instructor. Jason Lunde is a dual CCIE who passed the R&S v4 lab in 2011, and the data center lab in December of 2013, both on his first attempt. He also holds a BS in CIS from Colorado State University, and a MS in Infosec. Mgmt. from Colorado Technical Institute. Jason has been in and around the networking industry for over a decade, and his real-world expertise spans many verticals such as oil & gas, education, banking, entertainment, and retail. Jason’s continued hands-on expertise makes him one of the only CCIE Data Center instructors on the planet who has the luxury of true, large-scale, enterprise hands-on experience along with several years of classroom and training experience.

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Patrick Rockholz, CCIE #46911 (Data Center)
• Adel Guermas, CCIE #51303 (Data Center)
• Kevin Minihane, CCIE #51346 (Data Center)
• Ken Thomas, CCIE #51327 (R&S)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Uli Vierkötter, CCIE #51193 (Data Center)
• Andreas Frey, CCIE #51345 (Security)
• Chad Collier, CCIE #51426 (Data Center)
• Sean Garrett, CCIE #11390 (Data Center)
• Tim Roth, CCIE #45451 (R&S)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Kristján Kristinsson, CCIE #51392 (Data Center)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Doug Murphy, CCIE #40638 (Data Center)
• Benji DeBerry, CCIE #51550 (Data Center)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Sarbjeet Singh Sohi, CCIE #51410 (Route and Switch)
• Ravi Kumar, CCIE #45472 (Data Center)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• James Gusman, CCIE #46507 (Route and Switch)
• Boris Bertelson, CCIE #6373 (Data Center)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!
nike free 4.0

This Week’s CCIE Success Stories

new balance sneakers
• Khalid Nauman, CCIE #51757 (Data Center)
• Antonio Soares, CCIE #18473 (Data Center)

michael jordan air jordan shoes

Here’s What Our Students Had to Say!

new balance store new york

Khalid Nauman, CCIE 51757 (Data Center)
“It was a long journey but I finally got my CCIE in Data center. With the help of your great videos, bootcamps and especially my instructor Jason Lunde (the BEST instructor) I’ve ever had. M”


Tom Ugoretz, CCIE #51603 (Collaboration)
“The training provided by iPExpert throughout my CCIE journey was essential to my success. The materials and classroom training were second-to-none and allowed me to pursue the certification at a pace that worked for myself, my employer, and my family. I would recommend iPExpert to anyone wishing to achieve their CCIE goals.”


James Schultz CCIE #51484
“In December I passed my lab on my first attempt! CCIE# 51484. I attended the CCIE 1 week lab experience in early November and it was a great investment. It really showed me where I needed work, so I was able to iron it out in the following month. Thanks”

nike free 3.0 run

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!

Please join us in congratulating the following iPexpert students who have passed their CCIE lab!

This Week’s CCIE Success Stories

• Lucas Handybiantoro, CCIE #51350 (Routing and Switching)
• Yuri Meca, CCIE #49668 (Wireless)
• Ferenc Kuris, CCIE #46451 (Routing and Switching)
• Vidhyadhar Rapolu, CCIE #38175 (Collaboration)
• Robert Loeffler, CCIE #49780 (Routing and Switching)
• Diego Martin, CCIE #51740 (Collaboration)
• Sanaullah Khan, CCIE #47771 (Routing and Switching)
• Tim Roth, CCIE #51451 (Routing and Switching)
• Feras Nemri, CCIE #51388 (Collaboration)
• Yasmin Hushki, CCIE #50093 (Collaboration)
• Ferenc Kuris, CCIE #46451 (Routing and Switching)

We Want to Hear From You!

Have you passed your CCIE lab exam and used any of iPexpert’s self-study products, or attended a CCIE Bootcamp? If so, we’d like to add you to our CCIE Wall of Fame!