Build the campus and core
Configure the switched campus, EIGRP, OSPF, BGP and multicast, and read routing at expert depth.
Partners and press
Overview
The written exam says you know it. The lab shows you can build it.
The Expert enterprise credential: the ENCOR qualifying exam, then an eight-hour hands-on lab, with no prerequisites listed. The lab has you plan, design and operate dual-stack networks, with infrastructure at 30% and SD-Access and SD-WAN at 25%. Transport, security and services, and automation take 15% each, and the credential is valid for three years.
13Modules
8Hours
3Years valid
7Roles
What it tests
Learn all the way down.
Learn all the way down.
Perform when it matters.
Deploy software-defined fabrics
Build SD-Access underlay, overlay and segmentation, and SD-WAN controllers, overlay routing and WAN edge.
Carry traffic across the WAN
Configure GRE tunnels, MPLS and DMVPN transports, and troubleshoot what runs over them.
Secure, operate and automate
Harden devices, run QoS and network services, and automate with Python, Jinja and data formats such as JSON and YAML.
Course outline
From protocol detail
From protocol detail
to a dual-stack enterprise you can fix.
We design this course ourselves. Cisco runs the exam and issues the credential, and LUNARTECH is independent of Cisco.
The campus is the foundation of everything above it. You tune spanning tree and MST, bundle links, secure access ports, and troubleshoot Layer 2 failures that appear as problems higher up the stack.
- Spanning tree tuning and protection features
- MST regions, instances and mismatches
- EtherChannel behavior and load-balancing hashes
- VLAN, trunk and VTP pitfalls
- Storm control, port features and errdisable recovery
- Reading Layer 2 forwarding state to find a fault
You build A campus with MST and bundled uplinks, plus a log of Layer 2 faults you planted and fixed.
Expert troubleshooting depends on knowing what a router does with a packet. You trace route selection into the forwarding table, control paths with policy-based routing and tracking, and handle redistribution without loops.
- RIB, FIB and adjacency tables
- Administrative distance and route selection
- Policy-based routing and route maps
- IP SLA tracking for conditional routes
- Redistribution, tagging and loop prevention
- Dual-stack IPv4 and IPv6 forwarding
You build A redistribution lab that is loop-free by design, with route tags and filters explained.
EIGRP is simple to start and subtle to master. You use named mode, tune the metric, shape the topology with stubs and summaries, and diagnose stuck-in-active conditions and feasibility traps.
- Named mode configuration for IPv4 and IPv6
- Composite metric and tuning it
- Successors, feasible successors and query scope
- Stub routing and summarization
- Leak maps and route filtering
- Authentication and troubleshooting adjacencies
You build A summarized EIGRP network with stub sites and a documented query-scope test.
Large OSPF networks live or die by area design and LSA behavior. You work with every LSA type, area type and summarization point, tune convergence, and read the link-state database to find faults.
- LSA types and the database
- Stub, totally stubby and NSSA areas
- Inter-area summarization and filtering
- Virtual links and when they are a sign of poor design
- Fast convergence tuning
- OSPFv3 and address families
- Reading the database to troubleshoot
You build A multi-area dual-stack OSPF network with NSSA and summarization, verified from the database.
Enterprises depend on BGP for the internet, partners and large internal routing. You master path attributes and policy, scale with reflection, influence traffic both ways, and secure your sessions.
- Path attributes and best-path selection
- Local preference, MED, AS path and communities
- Route reflectors and confederations
- Conditional advertisement and aggregation
- Multihoming and inbound traffic control
- Session security and prefix protection
- Troubleshooting BGP convergence and policy
You build A multihomed dual-stack BGP edge with inbound and outbound policy, tested for failover.
Multicast fails in ways unicast never does. You build PIM sparse mode with several rendezvous point methods, add source-specific and bidirectional designs, and trace state hop by hop.
- IGMP and snooping at the edge
- PIM sparse mode and shared trees
- Static RP, Auto-RP and BSR compared
- Anycast RP and source discovery between RPs
- Source-specific and bidirectional multicast
- Reverse path forwarding failures
- IPv6 multicast
You build A multicast network with redundant rendezvous points and a traced, working stream.
Enterprises still build transport by hand. You configure GRE tunnels, an MPLS network with L3VPN, and DMVPN in each phase with IPsec, and learn to troubleshoot traffic that crosses them.
- GRE tunnels and their pitfalls
- LDP and label forwarding
- MPLS L3VPN in the enterprise
- DMVPN phases and NHRP behavior
- Protecting tunnels with IPsec
- Routing over DMVPN
- Troubleshooting overlay and tunnel faults
You build A DMVPN network with IPsec and dynamic routing, and an MPLS VPN carrying two segments.
SD-Access demands a clean underlay and exact fabric roles. You build the underlay, deploy border, control and edge nodes, onboard clients, and apply segmentation with virtual networks and group tags.
- Underlay requirements and design
- Fabric site roles and placement
- LISP control plane and VXLAN data plane
- Onboarding wired and wireless clients
- Virtual networks and group-based policy
- Border handoff to the rest of the network
- Troubleshooting a fabric
You build A working fabric with two virtual networks and group policy between them.
SD-WAN is a system of cooperating parts. You bring up controllers with certificates, onboard edge devices, work with OMP and transport locators, and apply templates, segmentation and policy.
- Controller roles and certificate trust
- Onboarding an edge device
- OMP route and policy exchange
- Transport locators and color
- Templates and feature configuration
- Segmentation with VPNs
- Control and data policy
- Troubleshooting control connections
You build A working SD-WAN overlay with two transports, segmented VPNs and an application policy.
Infrastructure is a target in its own right. You centralize device access, harden the planes, protect the first hop in IPv4 and IPv6, and filter traffic at the edge of the network.
- AAA with TACACS+ and RADIUS
- Control plane policing and management plane protection
- Infrastructure ACLs and unicast reverse path forwarding
- DHCP snooping, ARP inspection and source guard
- IPv6 first-hop security
- Securing routing protocols
- Verifying that protections work
You build A hardened network with first-hop protections for both IP versions, with tests that prove them.
Services and quality of service decide how the network feels to users. You build end-to-end QoS, NAT, DHCP and first-hop redundancy for both IP versions, and predict their interaction with tunnels and encryption.
- Classification, marking and queuing end to end
- Policing, shaping and hierarchical QoS
- NAT variants and NAT64
- DHCP, DHCPv6 and SLAAC
- HSRP, VRRP and gateway redundancy
- QoS over tunnels and encrypted links
- Time synchronization and DNS dependencies
You build An end-to-end QoS and services design that holds up over tunnels and for IPv6.
A network that is built must also be run, tuned and scripted. You monitor with flows, telemetry and logging, optimize path selection and convergence, and automate with Python, Jinja, data formats and model-driven interfaces.
- Logging, SNMP, flow export and telemetry
- SPAN and packet capture for diagnosis
- Optimizing convergence and path selection
- JSON and YAML as data formats
- Jinja templates for configuration
- Python with REST and model-driven interfaces
- EEM and on-box automation
You build A Python and Jinja tool that renders and pushes device configuration from a YAML inventory.
Combine every domain into one network. You plan addressing and protocols, build campus, WAN, fabric and services, add security, automate, and then locate faults across layers without hints.
- Planning addressing, protocols and transport
- Building campus, WAN and fabric layers
- Adding security, QoS and services
- Automating deployment and verification
- Finding and fixing cross-layer faults
You build A full dual-stack enterprise lab with automation and a log of injected faults and their fixes.
Issued by
Certifying body · Independent of LUNARTECH
Cisco
Cisco designs and sells much of the networking equipment the internet runs on. It runs this program itself and publishes the topics for every exam. Professional and Expert credentials last three years. LUNARTECH is independent of Cisco.
How you get there
Top-tier roles go to people who can do the work.
Top-tier roles go to people who can do the work.
Here’s how you get there.
Know where you start.
Cisco lists no prerequisites for ENCOR or for the lab, and states no recommended experience.
Work through the course.
Thirteen modules, designed by LUNARTECH, at your own pace.
Sit it with Cisco.
Cisco runs the exam and issues the credential, so you register and book directly with them.
Support
Support at every stage.
Support at every stage.
You won’t be working through this alone.
Before you start
Try it first.
A 3-day free trial opens a selection of the content. Your card is only charged once it ends.
While you learn
Mentors within reach.
Stuck on a concept? Reach out to a mentor whenever you need help.
While you learn
One-on-one sessions.
On the yearly plan, one-on-one sessions give you dedicated support.
Any time
A team behind you.
Write to info@lunartech.ai at any point, from your trial onwards. If your employer is funding you, we’ll set it up with them directly.
All the way through
A schedule that fits around your life.
Your own paceFrom anywhereAt any hour
After the last lesson
Stay in the network.
Your alumni network stays with you: ongoing support, opportunities and industry insight.
Career support
Career support, past the last lesson. Coaching, a sharper resume, real interview preparation and the people to know.
Career direction
Tailored coaching helps you decide where to aim and how to get there.
Strong portfolio
Hands-on projects become work you can show, not just claim.
Resume and profile
Personalized refinement, so what you send says what you can actually do.
Interview preparation
Preparation for the questions that decide it, so you walk in ready.
Network and search
Connections with industry leaders, and an alumni network that stays with you.
Reviews
Real stories from the community.
LUNARTECH Academy has been the most empowering learning experience of my life, giving me a clear, structured path from the absolute basics to building real-world AI systems with confidence.
Your page is fantastic. As a bachelor’s student in Data Science now accepted for a master’s at UConn, your work has been a real source of motivation.
The programme’s clear, bite-sized content and practical projects dramatically improved my speed from fuzzy idea to MVP and my ability to communicate AI value. I followed the system, and it works.
I really appreciate your teaching style and the way you break down complex topics. It has been incredibly helpful.
After years working mainly with R for econometrics, I found your Python machine learning course a refreshing and engaging way to learn Python.
As a Data Science graduate, I want to thank you for the effort you put into making videos to support growing data scientists.
I’ve been following your work since taking your machine learning course, and I’m impressed by your practical approach to applying AI.
Why choose us
Built around how you actually learn.
One standard behind every course, from the first lesson to long after the last.
Hands-on practice
Apply every idea to real problems, so it becomes something you have used, not only seen.
Industry-aligned curriculum
We keep courses current with the tools, techniques and skills the field asks for.
Flexible learning
Study at your own pace, from anywhere, at any hour.
Certificate of completion
Finish the course and earn a certificate that shows what you have learned.
Focus on your success
Personalized learning plans and support structures carry you through the hard parts.
Lifetime alumni network
Stay connected after you finish, with ongoing support, opportunities and industry insight.
Your certificate
It doesn’t raise its voice. Neither will you.
Finish a LUNARTECH course and its certificate is issued in your name, under our signature. Cisco’s credential comes from Cisco, when you pass its exam.
Certificate of completion
Your Name
CCIE Enterprise Infrastructure course
LUNARTECH RISE Academy
Pricing
This course comes with the membership.
This course comes with the membership.
So does everything else.
One membership opens every course, certification, workshop and masterclass in the Academy. Every plan starts with a 3-day free trial. You register and book the exam directly with Cisco.
3 days free, then $29.97 a month. Your card is only charged once the trial ends.
Included in every plan
- Every course in the Academy
- Every certification course
- Workshops and masterclasses
- A certificate of completion
- A 3-day free trial
- Learning at your own pace
- The lifetime alumni network
- Upgrades at any time
In practice
Seven roles.
Seven roles.
One credential across them all.
No single job owns it. Here’s where each role leans hardest, and where its work ends up.
- 01Infrastructure
- 02Software-defined
- 03Transport
- 04Security, services
- 05Automation
-
The hardest outages cross three protocols. The lab tests whether you can trace them.
Infrastructure, Transport, Security, services
Large enterprise networks, Campus and hospital networks
-
SD-WAN moves the design into controllers. You must know both layers.
Software-defined, Transport, Automation
Global branch and WAN design, Managed network services
-
Dual-stack networks need changes that repeat exactly. Templates and APIs beat hand-typed changes.
Automation, Software-defined
Large enterprise networks, Managed network services
-
Segmentation lives in the campus fabric now. Security and services share one design.
Security, services
Large enterprise networks, Campus and hospital networks
-
Cloud workloads reach the branch over the WAN. Transport design decides the path they take.
Software-defined, Transport
Global branch and WAN design
-
Clients bring an old campus and a new target. You plan the path between them.
Infrastructure, Software-defined, Transport
Global branch and WAN design, Managed network services
-
A hospital campus cannot take a maintenance window lightly. Infrastructure depth keeps the change plan honest.
Infrastructure, Security, services
Managed network services, Campus and hospital networks
- Large enterprise networks
- Global branch and WAN design
- Managed network services
- Campus and hospital networks
Network Engineer
The hardest outages cross three protocols. The lab tests whether you can trace them.
Over 10,000 students trust LUNARTECH
LUNARTECH gives you the skills
to learn, build, create and lead.
Engineers
Understand systems all the way down. Build the ones others rely on.
Scientists
Understand what the data says. Build models that hold up.
Researchers
Understand the papers. Build on them, and take the work further.
The field
Anyone can use AI.
Anyone can use AI.
Few can engineer it. This is where that starts.
+340%growth in open roles requiring AI skills
Roles and pay
~35,000 open roles right now
Open roles: Built In, Greenhouse, LinkedIn.
Typical salaries: Glassdoor, Levels.fyi, Payscale, Indeed, Ravio, JobRise, U.S. BLS. Military: 2026 U.S. basic pay, drone officers with aviation incentive pay.
Updated November 2026.
FAQ
Frequently asked questions.
Need help? These answers cover most of what people ask before they start.
No. Cisco issues it. LUNARTECH is independent of Cisco, and its names and marks belong to it. When you finish a course of ours, you earn a LUNARTECH certificate of completion for that course.
No. We design this course ourselves, around what the exam covers. Cisco has no part in it, and you still register and book the exam directly with Cisco.
8 hours, core exam, then lab.
Cisco lists no prerequisites for ENCOR or for the lab, and states no recommended experience.
3 years. Earn Continuing Education credits or retake exams before they expire.
We last reviewed it on 5 November 2026, from Cisco’s own pages. Details change, so check the official page before you book.
Our 3-day free trial gives you access to a selection of content in the bootcamps, courses and materials, so you can experience the value of our content first-hand. This includes comprehensive learning materials and interactive sessions. You won’t be charged during this period, though we require your credit card details at the start to ensure a seamless transition should you choose to continue.
Yes, entering your credit card details is a necessary step to begin your free trial. The process is entirely secure, and we ask for it to provide a seamless transition to a paid subscription if you decide to continue beyond the trial. You will only be charged after the trial period ends, with full access to our content based on the plan you choose.
After your 3-day free trial you gain access to the full breadth of our content, depending on the subscription plan you choose. We offer free trials for our monthly, bi-annual and annual plans, and each plan provides a different scope of access and benefits.
If your employer has agreed to fund your learning, in part or in full, please contact us at info@lunartech.ai. We’ll work with you and your employer to set up everything needed for your subscription.
Yes. Our support remains strong both during your free trial and after you subscribe. Reach the team at info@lunartech.ai with any question, whether you’re onboarding, navigating your trial, or need help as a member. Subscribers to the yearly plan also receive dedicated support in one-on-one sessions.
You can upgrade your plan at any time during your subscription. Downgrading is not available for bi-annual or annual plans, but you can cancel and then choose a new plan that suits you better. For bi-annual and annual plans we also offer payment in instalments; please reach out to learn more.
The course
Build the skills behind CCIE Enterprise Infrastructure.
Show you can build and fix a large enterprise network under a clock. Start with a free trial, or enroll in a plan and work through the course at your own pace. Cisco runs the exam and issues the credential.
LUNARTECH is independent of the vendors and certifying bodies listed here. Their names, exam titles and marks belong to them, exams are run by them, and credentials are issued by them. Reviewed 5 November 2026. Catalogues change often, so confirm the details on the official page before you book.
