How I Built My CCIE Enterprise Infrastructure Transports/SDN Lab | Part 1

This video is an overview of the process I used to build my CCIE lab for the Transports and SDN domains.
00:00:00 - Intro and Prerequisites for the Lab
00:03:00 - MPLS Service Provider
00:54:00 - Internet Service Provider
1:10:00 - DMVPN
1:27:00 - IKEv2
1:43:00 - Data Center Core
1:47:00 - SD-WAN Controllers
2:30:00 - MPLS and Internet Handoff
2:38:00 - SD-WAN Edges
Part 1:
- MPLS VPN Service Provider Config
- Internet SP Config
- Dual Hub DMVPN w/ IKEv2
- Cisco SD-WAN Controller Bring Up
- Catalyst 8kv WAN Edge Bringups
- MPLS to Internet Handoff
Part 2 (TBD):
- SD-WAN TLOC Extentsion
- Intra-Site Routing (combining the transports)
- DNAC Bringup
- ISE Bringup
- Bridging ISE / DNA into the topology
- Catalyst 9kv Onboarding
Part 3 (TBD):
- DNA / ISE Integration
- Fabric Site Creation
- Fabric Border IP Handoff
- IPv6 Dual Stack (6VPE, DMVPN v6)

[@stefansteenkamp345]

This is so helpful for CCIE EI lab. Thank you !

[@JKRowl]

Love this, this is awesome! Thank you so much!!! Cant wait for the next!

[@frickusan]

Nice video, looking forward to the next parts

[@gaz1978]

New subscriber here followed from your LinkedIN post.
Currently doing CCNP DC but hoping to circle back around to CCIE ENT in the future to give it another shot and this will really come in handy.

[@itst0m]

Amazing vid

[@Zenobia992]

awesome

[@xxkenia]

waiting for part 2

[@masonreimert]

Also, I did make a verbal error in the MPLS section. I state that PHP happening too soon will expose the IP header. This was incorrect because we are using VPN v4, this will actually expose the iBGP VPN label to a non PE router. The outcome will be as described, but the cause is not what I originally stated.

[@masonreimert]

Breakdown of the Parts:
Part 1 (about 4 hours):
- MPLS VPN Service Provider Config
- Internet SP Config
- Dual Hub DMVPN w/ IKEv2
- Cisco SD-WAN Controller Bring Up
- Catalyst 8kv WAN Edge Bringups
- MPLS to Internet Handoff
Part 2 (TBD):
- SD-WAN TLOC Extentsion
- Intra-Site Routing (combining the transports)
- DNAC Bringup
- ISE Bringup
- Bridging ISE / DNA into the topology
- Catalyst 9kv Onboarding
Part 3 (TBD):
- DNA / ISE Integration
- Fabric Site Creation
- Fabric Border IP Handoff
- IPv6 Dual Stack (6VPE, DMVPN v6)

[@cinemaofsounds]

Much easier for those that want this lab is to export yaml file fo people can import it.....yes I see you on reddit and nice lab

[@musaab50]

Hi Mason. Great work thanks.
Following your video got almost all except mpls cedge can’t talk to inet cedge. I think im missing the connection between mpls and inet transport redistribution. Help please

[@masonreimert]

do you mean there's no BFD session? There won't be because they have the same site-id. Global rule for Cisco SD-WAN is do not form tunnels or BFD sessions with TLOCS at the same site ID.

[@bmshavel6737]

Do you have the steps for creating the randomized cat9000? I think I have Terry Vinson's image but does not seem to be working.

[@masonreimert]

shoot me an email with what you're trying [e-mail]

[@NACNinja]

Hey, loved the video. I was wondering if you had discord. Just was wondering we could chat more about adding vdnac and ise in vmware. Also connecting them in esxi...

[@masonreimert]

I have discord but I am not very active I think my username is masonreimert, I'm on LinkedIn as Mason Reimert and on reddit as mreimert. Feel free to reach out!

[@shahbaaze]

Can i build this lab on ucs m3 c220 128 gb ram, 2x xenon e5-2630 hex core

[@masonreimert]

You could run the CML part on that, if you don't use SDA. If you need SDA you'll need to add some ram to that for edge nodes + add another server for DNAC. Watch the next part for more info. DNAC will not run without at least 40 cores.

[@shahbaaze]

Thanks for your quick response 😀

[@GriffinFTW]

Where do you get the SDN controller images?

[@masonreimert]

right now you have to search around for them on the internet. but, in the next CML version coming out soon I am being told they are going to be included.

[@GriffinFTW]

@@masonreimert thanks! Is this true for DNAC aka catalyst center now as well? I heard it takes like 60 vCPUs

[@masonreimert]

@@GriffinFTW DNA and ISE are not included with CML. ISE can be downloaded as an evaluation from Cisco and ran on VMWare, DNA needs to be ran on VMWare with at least 40 CPUs and 150gb ram. my next video tomorrow will go over all of this.