CCIE-level material for engineers past the CCNP line. Articles tagged CCIE cover expert-track routing, overlays, security and automation, with full configs and real device output from CML.
SDM templates, errdisable recovery, and CAM aging: the unglamorous switch administration features that prevent table-full errors, dead ports, and mystery flooding, with real output from a CML lab.
ARP believes any answer it hears, which is why ARP spoofing works. Dynamic ARP Inspection and IP Source Guard fix that using the DHCP snooping binding table. Real CML output, plus an honest note on what a virtual switch can enforce.
DHCP snooping builds the binding table that DAI and IP Source Guard depend on. You see how the table populates, trusted vs untrusted ports, Option 82, and verification, with real CML output and an honest platform limitation.
One flooding host can saturate an entire VLAN. Storm control caps broadcast, multicast, and unknown-unicast rates per port; this covers the configuration, both threshold styles, the right action, and an honest note on platform support.
A link that transmits but cannot receive never hears the BPDU telling it to block, and spanning tree loops. UDLD detects unidirectional links and shuts the port first. Covers normal and aggressive mode with real CML output.
An MST core touching a Rapid-PVST access layer is one of the most misunderstood seams in Layer 2. Build the boundary in a CML lab, see the CIST at work, and deliberately trigger the PVST simulation inconsistency so you can recognize it.
Migrate a live network from EIGRP to OSPF without dropping a packet: run both protocols side by side, then flip administrative distance one command at a time. The ships in the night technique with real lab output.
Two-point redistribution is where networks go to die. This article builds the classic CCIE failure for real in a CML lab, shows a route being re-injected into the protocol it came from, and then fixes it with the exact output at each step.
Tunnels up, neighbors up, routes missing: split horizon breaks EIGRP over DMVPN's mGRE cloud. Covers split horizon and next-hop-self, dual-hub design, and the dual-homed loop, with real CML output.
Offset lists add metric to specific routes on a specific interface in a specific direction, without touching delay for everyone else. See them steer spokes to HUB1 in a dual-hub DMVPN on IOS XE, with exact before and after metrics.
EIGRP summarization shrinks routing tables but hides detail. A leak map lets you advertise the summary and still punch through specific prefixes that must stay visible. Shown working on Cisco IOS XE with real DMVPN lab output.
EIGRP Site of Origin stamps routes with an extended community so dual-homed WAN sites do not learn their own prefixes back. Covers what SoO does, how it is configured, and what we actually found trying it on IOS XE.