CCIE Service Provider is the highest-paying CCIE track, validating expert-level skills in service provider networking — MPLS, Segment Routing, advanced BGP, carrier Ethernet, and IOS-XR platform mastery. The v5.0 lab exam is 8 hours and tests both design reasoning and hands-on configuration across complex multi-AS, multi-VPN topologies running on Cisco IOS-XR.
The defining challenge of CCIE SP is IOS-XR. Unlike IOS-XE, IOS-XR uses a commit-based configuration model, separates the admin plane from the data plane, and allows individual process restarts without a full router reload. This fundamental difference in how you interact with the operating system adds 1-2 months of dedicated learning to your preparation timeline compared to other CCIE tracks.
Exam Overview
The CCIE Service Provider v5.0 exam consists of two modules:
| Module | Duration | Format | Key Focus |
|---|---|---|---|
| Module 1: Design | 3 hours | Scenario-based | SP architecture reasoning, technology selection, no CLI |
| Module 2: Deploy, Operate, Optimize | 5 hours | Hands-on lab | IOS-XR configuration, troubleshooting, service deployment |
The Design module requires you to justify technology choices for real SP scenarios — when to use SR-MPLS versus SRv6, how to scale BGP in a multi-AS backbone, and which VPN architecture fits a given customer requirement. The Deploy module tests your ability to configure, verify, and troubleshoot complex SP topologies under time pressure on IOS-XR.
Core Exam Domains
| Domain | Weight | Technologies |
|---|---|---|
| SP Core Networking | 30% | MPLS, SR-MPLS, SRv6, LDP, RSVP-TE, IS-IS, OSPF |
| SP VPN Services | 25% | L3VPN, L2VPN, VPLS, EVPN, mVPN, inter-AS VPN |
| SP Access & Aggregation | 15% | Carrier Ethernet, QoS, BNG, pseudowires |
| SP Security | 10% | LPTS, RPKI, BGP security, ACLs, CoPP |
| SP Automation | 10% | NETCONF/YANG, MDT, Python, NSO |
| SP Design | 10% | Capacity planning, migration strategies, redundancy |
Who Should Pursue This Track?
CCIE Service Provider is ideal for:
- Service provider engineers working at telcos, ISPs, or carrier networks who configure MPLS and BGP daily
- Backbone and peering engineers at hyperscalers and CDNs who manage large-scale BGP deployments
- CCNP Service Provider holders ready to advance to expert-level SP networking
- Network engineers transitioning from enterprise to service provider environments who want to command higher salaries
- Engineers with IOS-XR production experience who want to formalize their expertise with a CCIE credential
Prerequisites: Strong CCNP Service Provider-level knowledge. Production experience with BGP and MPLS is highly recommended. Basic IOS-XR familiarity will significantly reduce your preparation time.
Study Timeline & Preparation Path
Month 1-2: IOS-XR and Core Foundations
- IOS-XR commit model:
commit,commit best-effort,commit replace,rollback configuration - IOS-XR admin plane: admin mode, process restart, syslog differences
- IS-IS and OSPF on IOS-XR: configuration syntax differences from IOS-XE
- LDP-based MPLS: label allocation, LDP session management, MPLS forwarding verification
- Segment Routing fundamentals: SRGB/SRLB, prefix SIDs, adjacency SIDs, TI-LFA
Month 3-4: VPN Services and Advanced BGP
- L3VPN: VRF configuration, MP-BGP VPNv4/v6, RT import/export, inter-AS options A, B, and C
- L2VPN: VPLS with BGP autodiscovery, EVPN-VPWS, EVPN E-LAN services
- SRv6 VPN services: SRv6 locators, SRv6 L3VPN SID assignment, SRv6 TE policies
- BGP advanced: route reflector clusters with optimal topology, confederations, extended communities, BGP PIC edge and core, Diverse Path, Add-Path
- Multicast VPN: mVPN profiles, PIM in VRF, MDT default and data groups
Month 5-6: Security, Automation, and Design
- SP security: LPTS (Local Packet Transport Services) on IOS-XR, RPKI deployment, BGP flowspec, control plane ACLs
- Automation: NETCONF/YANG with IOS-XR (OpenConfig and Cisco-native models), model-driven telemetry with gRPC, Python scripting with ncclient
- Carrier Ethernet QoS: H-QoS, traffic shaping, MPLS EXP marking, QoS policy propagation
- Design module preparation: SP network migration scenarios, capacity planning, redundancy design
Month 7: Exam Readiness
- Full 8-hour mock labs (minimum 4 attempts with realistic time pressure)
- Design module drills: write architecture justifications for MPLS-to-SR migration, multi-AS backbone scaling, and customer VPN deployment
- Speed-config library: IOS-XR templates for BGP neighbors, MPLS/SR, VRF, and L2VPN
- Troubleshooting drills: diagnose and fix MPLS label issues, BGP convergence problems, and VPN reachability failures on IOS-XR
Salary & Career Impact
| Role | Average Salary (US) | With CCIE SP |
|---|---|---|
| SP Network Engineer | $105,000 | $135,000 |
| Senior SP Engineer | $125,000 | $155,000 |
| Backbone/Peering Engineer | $140,000 | $170,000 |
| SP Network Architect | $150,000 | $175,000 |
CCIE Service Provider commands the highest salaries of all CCIE tracks because service provider networks are mission-critical infrastructure with zero tolerance for downtime. Telco carriers, hyperscalers, CDNs, and large ISPs compete for a small pool of SP-qualified engineers. The combination of MPLS expertise and Segment Routing knowledge is particularly valuable as the industry migrates from legacy MPLS-TE to SR-MPLS and SRv6.
Career paths diverge after CCIE SP. Telco roles at carriers like AT&T, Verizon, and Lumen offer stability, union benefits, and predictable schedules. Cloud and hyperscaler roles at companies like Google, Amazon, and Meta pay 15-25% more with equity compensation but demand on-call rotations and faster operational tempo. Both paths are strong — your choice depends on whether you optimize for stability or compensation. See our detailed career analysis for a full breakdown.
ROI calculation: At a $30,000-$45,000 average salary increase and typical $5,000-$10,000 total prep cost, CCIE SP pays for itself within the first year. The niche specialization means less competition for roles compared to the more popular CCIE EI track.
Lab Environment & Practice
Recommended setup:
- CML Personal ($199/year): Supports IOS-XRv 9000 images for authentic SP lab practice. Build topologies with 6-8 XRv routers to simulate realistic multi-AS cores. CML vs INE vs GNS3 comparison →
- Cisco dCloud (free): Reservable pre-built SP lab topologies with IOS-XR nodes. Limited session duration but useful for structured exercises.
- Hardware requirements: CML with IOS-XRv images requires at minimum 32 GB RAM and 8 CPU cores for a 6-router topology. IOS-XRv 9000 images are memory-intensive — allocate 3 GB RAM per router instance.
Essential lab exercises:
- Build a 6-router IS-IS core with LDP-based MPLS, then migrate to SR-MPLS with TI-LFA fast reroute
- Configure L3VPN with inter-AS Option B between two autonomous systems running different IGPs
- Deploy SRv6 end-to-end: locators, SRv6 L3VPN, and SRv6 TE policies with on-demand nexthop
- Build a BGP route reflector hierarchy with optimal RR placement, communities for policy control, and BGP PIC for sub-second convergence
- Configure carrier Ethernet services: VPLS with BGP autodiscovery, EVPN-VPWS, and H-QoS policies
The IOS-XR Learning Curve
This is the single biggest factor that separates CCIE SP preparation from other tracks. If you are coming from IOS-XE, expect these differences to slow you down initially:
Commit model: Every configuration change sits in a candidate configuration until you explicitly run commit. This is powerful for complex changes but requires a different mental model. You can verify your pending changes with show configuration changes, roll back with rollback configuration last 1, and even schedule commits with commit confirmed.
Admin plane separation: IOS-XR runs a separate admin process for management tasks. System administration (software installation, hardware management) happens in admin mode, while routing configuration happens in global configuration mode. Understanding when to use each is essential.
Process restart: Individual routing processes (BGP, IS-IS, MPLS LDP) can be restarted without affecting other processes or the data plane. The command process restart bgp restarts the BGP process while MPLS forwarding continues uninterrupted. This is a key troubleshooting technique on the exam.
Configuration hierarchy: IOS-XR uses a hierarchical configuration structure that differs significantly from IOS-XE flat configuration. Interface configurations, routing protocol configurations, and VPN configurations each have their own subtrees.
Dedicate your first 4-8 weeks exclusively to mastering these IOS-XR fundamentals before diving into SP-specific protocols. Candidates who skip this step consistently report running out of time in the Deploy module because they are fighting the operating system instead of solving the actual problems.
Related Articles
- CCIE Service Provider Career Crossroads: Should You Stay in Telco or Pivot to Cloud?
- CCIE Service Provider Salary in 2026: What MPLS and Segment Routing Engineers Actually Earn
- Segment Routing vs MPLS TE: Which to Master for CCIE Service Provider in 2026
- MWC 2026 Recap: AI-Native 6G Networks and What It Means for CCIE Service Provider Candidates
- SRv6 uSID Migration: From MPLS to IPv6 SR
- BGP RPKI Route Origin Validation: A Hands-On Guide
Ready to Start Your CCIE Service Provider Journey?
Get a free personalized study plan within 24 hours. Tell us your current level, target date, and available study hours — we’ll build a roadmap tailored to your schedule, including an IOS-XR ramp-up plan matched to your existing experience.