MTL – Multi Technology Lab consist of many technologies in a large topology. When network design is considered, there is no single protocol, many protocols interact with each other. In my CCIE Enterprise Infrastructure Training, I have many MTL (Multi Technology Lab), and students are able to watch the videos, and with the config files, they are able to perform each task in the Lab themselves.

From OSPF, EIGRP to BGP, QoS to Multicast, Layer 2 Technologies to Security, SD-WAN and many other technologies are all in the same lab. Traditionaly these kind of Labs were called as Mock Labs but better term is Multi Technology Lab. If you see on the social media next time one of this labs with OE logo, you know that it is MTL! Let me see your comment

You can check the schedule of next CCIE Enterprise Course by clicking here! 

OSPF is the most common network engineer interview topics without any doubt. Almost all network engineers faced with some OSPF questions in their interview. Thus I thought it is important to cover common questions and the answer with the blog post.

From OSPF LSAs to OSPF Areas, by having Multi Area Hierarchical OSPF for stability, OSPF security and OSPF Fast Convergence, I prepared many questions and explaining them in detail in the below video.

There are many questions in the video and if you liked the video, subscribe to Orhan Ergun YouTube Channel and share your thoughts in the comment section.

Note: OSPF Interview Questions in this video from basics to advanced level and studying this 65 minutes video will enhance your OSPF knowledge definitely!

Cisco Viptela SD-WAN Training. I recently added Self Paced Cisco Viptela SD-WAN training under Training on the website. You can purchase it and start studying the course right away.

This course covers all SD-WAN  concepts from basic to advance level.

Not only many hours theory and design, but there are more than 12 hours Lab/Configuration in this course to demonstrate, different features in SD-WAN.

Students of this course are placed in a study group, so when they have any problem, we support them in the group. This is key for learning and I follow the same methodology in all my trainings.

It covers at the moment, Cisco Viptela SD-WAN but when the new content is available for the other vendors SD-WAN solution, students will be able to access the new content for free as well.

Starting from installing certificates on the SD-WAN Controller (VBond, VSmart, VManage), all the way cloud integration, Direct Internet Access, Dynamic Path Selection, Application Based Traffic Engineering, QoS, Forward Error Correction, Deduplication, Zero Touch Provisioning and many other topics are covered from theory and design aspects and demonstrated in a Lab environment.

Last but not least, guest designers will discuss their real life SD-WAN design and Continue reading

100+ hours CCIE Enterprise Infrastructure Training/Bootcamp. Can it happen? Yes, in fact my CCIE Enterprise Instructor Led course is over 100 hours, design , theory and lab content.

In the CCIE Enterprise training I go through not only traditional technologies such as OSPF, EIGRP , BGP , MPLS, Multicast, QoS, IPv6 etc. but also there are so many SD-WAN , SD-Access and Network Programmability and Automation content.

Probably you have seen some topologies on social media (I use LinkedIn mostly), those topologies consists of many tasks and we cover all of them in the training.

I have two versions of CCIE Enterprise Training.

     1.Self Paced CCIE Enterprise Infrastructure Training:

In this training, all the content of CCIE Instructor Led training is covered but as a recorded video format. Participant of Self Paced CCIE Enterprise Training gets not only videos but also Config files/Labs , workbooks, design comparison charts (don’t forget there is 3 hours design module in CCIE Enterprise exam), session materials and so on. Self Paced training students are placed in a study group together with the Instructor Led CCIE Enterprise training/bootcamp students.

    2. Instructor Led CCIE Enterprise Infrastructure Continue reading

BGP Convergence and ASn allocation design in Large Scale Networks covered in this post and the video at the end of the post.

This content is explained in great detail in my BGP Zero to Hero course as well as CCIE Enterprise Training.

BGP is always known as slowly converged protocol. In fact this is wrong knowledge. If you just mention about BGP Control plane convergence, can be true but we always ignore BGP Data Plane Convergence which is commonly known as BGP PIC (Prefix Independent Convergence) 

In this post, I will explain the BGP Path Hunting process which slows down the convergence process. Path Hunting is not only BGP but in general distance vector protocols convergence problem.

Effect of Path Hunting gets very problematic in densely meshed topologies such as CLOS or Fat Tree.

Many Leaf and Spine switches might be in the network and when EBGP is used (As it is recommended in RFC 7938) Path Hunting should be avoided by allocation the Autonomous System number to the networking devices wisely.

Otherwise, for the prefix which is not anymore advertised to network due to failure for example, BGP speaking routers try any Continue reading

BIER is Bit Indexed Explicit Replication which is a newest proposal for IP Multicast.

Although I say IP Multicast, of course it works on MPLS networks as well.

BIER works by assigning every edge device a Bit Mask position. Then, instead of sending Multicast packet to each destination IP address (Receiver IP address), basically it sets the Bit positions and save the amount of data plane state.

It uses Unicast transport as underlay reachability, and Bit Mask is advertised through IGP control plane.

So, OSPF and IS-IS newly assigned TLVs handle the BitMask to Edge device (BFER – Bit Forwarding Edge Router in BIER terminology) assignment and distribution.

It is in theory can be used not only for multicast but also for Unicast traffic as well.

When we use it, we don’t need to have mLDP, RSVP P2MP LSPs, or PIM in the Core Network (Of course at the Edge, you can still have towards the customer in mVPN scenarios).

So basically, by removing those protocols from the network, in theory, simpler network design you should have. I am saying in theory, because having less protocol doesn’t always mean, having simpler design.

Because we would be throwing the complexity to Continue reading

BGP+SPF Imagine we replace BGP best path selection decision with SPF. BGP+SPF exactly does that. In this post, I will explain why we are looking for alternative protocols for Massively Scale Datacenter.

Although there is no exact answer how many devices should be in the datacenter so datacenter can be considered Massively Scale, but we know 10.000 Racks are not uncommon in these type of datacenter and each rack, when BGP is used as a transport, gets it’s own unique AS number.

Before I explain BGP+SPF, let’s understand why traditional , very well know, OSPF or IS-IS are not used in these type of datacenter.

Answer is scalability. OSPF and IS-IS are chatty protocols and flooding aspect of these protocols are just not suited to very densely meshed connectivities. Yes, these datacenter run on CLOS topology and CLOS is densely meshed topology.

Also, we want to have wide ECMP in these type of datacenter, meaning, between the TOR, Leaf and Spine devices, there are so many equal cost path and we want to utilize them all. OSPF and IS-IS will be limited to number of ways of ECMP.

BGP is very well suited protocol which provides very wide ECMP Continue reading

CCIE Enterprise Infrastructure Training by Orhan Ergun. As Orhan Ergun, I always aim to provide best training in the world. I started recently CCIE Enterprise Infrastructure v1. 0 training. In this post you will see why you should get this training, why you should get it from Orhan Ergun, what are the requirement to attend , what are the unique benefits, training outline and many other details.

CCIE Enterprise Infrastructure v1.0

• New CCIE Enterprise Infrastructure training will prepare you for the new solutions of enterprise networks in today’s networking era.
• This Training is more oriented on the basis of new and latest solutions instead of the legacy network technologies.

Benefits of Orhan Ergun CCIE Enterprise Infrastructure Training: 

• 20 days – 10 Weekends – 2 and half months (80 hours, 4 hours each day, on weekends) training
• CCIE IE Workbook and Classroom materials (More than thousand pages)
• It will be live training but self paced training will be provided when it is completed for free to the attendees
• Attendees will be able to receive SP Design and Segment Routing Workbooks 
• When you want to attend CCDE Training, extra 40% discount

Why CCIE Enterprise Infrastructure Training Continue reading

As you know couple days ago I announced that I will giveaway 3 of my books to 10 people. In this post, you will see the names of the winners. Thanks for the all participants and I am glad to share my efforts with the community. Also I have many new connections who I can provide useful content by the time. At the end of the post, you will see another surprise by me!

1022 people liked it, some of them was 2nd level connection while they liked, and some of them applied after 11pm gmt+3 on Sunday Feb9, 2020. Thus, 894 people were counted as eligible.

Random name picker on https://commentpicker.com/random-name-picker.php was used to pick the names.

List of the people who won the books as below. We will be connecting them to learn which book they want to receive from us.

1. Akinfemi Akinyanju
2. Dennis Krulac
3. Vannaro Mao
4. Navid Yahyapour
5. Vuthha Seang
6. Marius Viotel Nastasa
7. Luca Banfo
8. Ahsan Mateen
9. Abderrahmane Bendaoud
10. Siva Ntshobane
11. Hassan Shah

I would give the books to 10 people but one of my LinkedIn followers wanted to give one book as a gift, thus we selected 11 Continue reading

This post was first published on “Service Provider Networks Design and Architecture by Orhan Ergun” book. 

This post was first published in ‘ Service Provider Networks Design and Architecture by Orhan Ergun ‘ book.

Recently I published a new book on Segment Routing.

Segment Routing have been deployed by many networks (Both Enterprises and Service Providers ) for many different use cases such as Traffic Engineering, Fast Reroute , Monitoring and so on and I believe Segment Routing will be even more popular in near future. Thus, I believe this book should be read by anyone who are interested in networking.

You can get the sample copy of the book and purchase it from here. 

This book covers both Theory and Practical aspect of Segment Routing.

Segment Routing is a technology that is gaining popularity as a way to simplify MPLS networks. It has the benefit of interfacing with Software Defined Networks and works based on Source Routing.

This Workbook will be useful for those who want to understand, deploy,  verify and troubleshoot Segment Routing Networks. This Workbook will be useful for the  CCIE and CCDE certification exams.

Book Content:

• Segment routing fundamental and concepts
  • Segment routing introductions
  • SR and MPLS data plane
  • Segment routing global block
• Segment routing in IGP
  • SR Control Plane overview
  • SR in OSPF
  • SR in ISIS
  • IP FRR (LFA/TI-LFA)
  • Configuration lab and troubleshooting tips
  • Segment Routing and LDP
    • Continue reading

In computer network engineering almost always we use different definitions/wordings to explain same thing. In this post, I will give you some examples, please add whatever else you remember in the comment box below , we can discuss them there.

All below keywords explain the same thing. 

Let’s start with MPLS Cases :

1. Tunnel Label , Transport Label , Transport Label , Outer Label , Topmost Label , Outmost Label : They all define PE to PE reachability in MPLS network.
2. Ingress PE , Source PE , Headend PE , Ingress LSR , Edge LSR : Either in MPLS VPN or MPLS Traffic Engineering cases, you can see these keywords and they all define the same thing.
3. Inner Label, VPN Label , VC (Virtual Circuit) Label , Service Label : They all define same thing which is Layer 2 VPN customer service information.

Inter Domain Routing Cases :

1. IX (Internet Exchange) , IXP (Internet Exchange Point) , Internet Exchange , Peering Point , Exchange Point
2. Public Peering Exchange , MLPE (Multi Lateral Peering Exchange) , Public Exchange

IOT Case:

1. Smart Device, Smart Object , Sensors , Intelligent Object , Smart Things

Routing :

ASBR , IGW (Internet Continue reading

BGP PIC ( Prefix Independent Convergence ) is a BGP Fast reroute mechanism which can provides sub second convergence even for the 500K internet prefixes by taking help of IGP convergence.

BGP PIC uses hierarchical data plane in contrast to flat FIB (Forwarding table) design which is used by Cisco CEF and many legacy platforms.

In a hierarchical dataplane , the FIB used by the packet processing engine reflects recursions between the routes.

I will explain the recursion concept throughout the post so don’t worry about the above sentence, it will make sense.

There are two implementation of BGP PIC concept and they can protect the network traffic from multiple failures.

Link, node in the core or edge of the network can be recovered under a second and most of the case under 100ms ( It mostly depends on IGP convergence, so IGP should be tuned or IGP FRR can be used ).

In this article I will not explained IGP fast convergence or IGP Fast reroute but you can read my Fast reroute mechanism article from here.

BGP PIC can be thought as BGP Fast Reroute Mechanism which relies on IGP convergence for the failure detection. ( All overlay Continue reading

Overview

In Leaf/Spine VXLAN based data centers, everyone likes to provide HA with Active/Active in it, so choices are different. There are two types of HA in data centers, Layer 3 and Layer 2.

For layer 3 HA, always there is more than one spine that can provide ECMP and HA at same time. However, Layer 2 redundancy for hosts and l4-l7 services that connected to leafs are more than an easy choice. As Cisco provided vPC for nearly 10 years ago, almost this was the first (and only) choice of network engineers. Also, other vendors have their own technologies. For example, Arista provided Multi-chassis Link Aggregation (MLAG) for L2 HA in leafs. But, there is always a problem in implementation of them. One example in vPC is “peer-link” that is an important component in the vPC feature. However, it can be a tough one in most cases like Dynamic Layer-3 routing over vPC or Orphan members that may cause local traffic switching between vPC peers without using Fabric links.

To address the “peer-link” issue, there is a “fabric-peering” solution that uses Fabric links instead of “peer-link” and convert it to “virtual peer-link”. With this solution there is no concern Continue reading

If you are replacing one technology with the other, these questions you should be asking.

This may not be the complete list and one is maybe more important than the other for your network , but definitely keep in mind or come back to this post and check before you replace one technology with another one !

Is this change really needed ? Is there a valid business case ?

First and most important question, because we are deciding whether this change is absolutely necessary. If the technology which you will migrate won’t bring any business benefit (OPEX, CAPEX , New Revenue Stream etc.) then existing technology should stay.

This is true for the new software release on the routers as well. If there is no new feature which you need to use with the new software release and if there is no known bug that effects the stability of the network, having a longer software lifecycle is better than upgrading the software frequently.

What is the potential impact to overall network ?

New technology might require extra resource usage on the network. Can your network devices accommodate this resource usage growth ? Opposite is true as well. New technology Continue reading

Hi Everyone,

I would like to inform you that Instructor Led CCDE Class in South Africa/Johannesburg Training is full. So please don’t register for it.

Having more people will reduce the time required for discussions. Those who attended any of my earlier class know that we have already very packed agenda, approximately 2000 pages documents and so many real life discussions in 5 days. Hopefully we will schedule another training session in SA next year, and please when I announce, just hurry up for registration.

I will be in Johannesburg between May 13 – 18, if you would like to meet me, please send me an email to [email protected]

Even if you are not considering any network design training, still that is okay, would like to meet and know as many network engineer as I can while still I am able to

I missed writing , missed writing a post lot on the website specifically !. Because I know you are reading right now and wonder where I have been.

I just checked and seen that my last post was on October 26. More than 2 months , I didn’t share anything on the website. I wanted to come here and share something , technical or social , but believe me guys November and December 2017 was so busy from my side.

One of the activity which took my time during this period was Telecom Operator design training which I did in Kenya/Nairobi on November. Safaricom Kenya – Incumbent Telecom Operator/Internet Service Provider.

It was 5 days training and IP/MPLS Backbone planners , Transport network engineers, mobile access and core engineers , fix and mobile wireless service engineers (They have very good fiber penetration in the country) many people attended this training.

Most of the topics were from my CCDE training blueprint but after couple discussions with their lead engineers, we removed CCDE Practical scenarios and couple other topics , as they won’t attend CCDE exam , but added other technologies which they are considering to implement and some of those technologies is Continue reading

Many of my students have been asking whether CCDE Practical/Lab Exam Result policy is still the same.

As you might know after CCDE 2017 May exam cancellation , practical exam results can be learned after 8 to 12 weeks. This mean, if you attend CCDE Practical exam, you cannot learn the result (Pass or fail) on the same day. It was the case until CCDE 2017 May exam.

You used to finish the 8 hours exam and when you click the end exam button, exam result was just there !

This is not the case anymore. Last CCDE Practical exam was on November 2017 and the attendees are still waiting their results as of today. There is no any new announcement by Cisco and I would expect the same thing for February 27, 2018 CCDE Practical exam.

Learning exam result is good probably for the exam security but I hear complaints from the students and i think some of my readers are thinking the same.

They say, if they knew that they failed , they could schedule the next exam. Exam results of the previous one arrives right before the next one , thus , candidates cannot find a time to Continue reading

GLBP stands for Gateway Load Balancing Protocol. In this article, I will explain where GLBP is used , where it shouldn’t be used with the topologies.

GLBP is a Cisco preparatory protocol. In most networks, design requirements might be to use only standard based protocols. If that is the case, GLBP is not a standard based protocol and business cannot use it.

Unlike HSRP and VRRP, GLBP supports flow based load balancing.

HSRP and VRRP can only supports active/standby redundancy or Vlan based load balancing.

GLBP was invented to provide an active-active traffic forwarding the network traffic but there is almost no use case in today networks.

In some cases, GLBP has create more problem than it should solve.

Figure – GLBP at the Enterprise Internet Edge

In the above picture, I depict classical Enterprise Internet edge network. Firewall, Layer 2 switch and Internet Gateways.

Service Providers don’t use stateful devices such as Firewall at the Internet edge.

If in this network, GLBP is used, firewall would send an ARP for the default gateway and only one of the Internet Gateway routers would be used as a default gateway. If there would be two firewalls, another firewall could Continue reading