+8618344981205  spoto@spotoclub.com

Pass Your CCIE R&S Lab Exam with Materials
100% Cover Real Lab Exam

  •  Workbook & Solution & Tutorial Video
  •  Mock Lab Exam Environment
  •  Free Update During Service Duration
  •  7/24 CCIE Instructors Online Support
  •  Workbook 100% Cover Real Lab Exam
  •  Latest Pass Lab Exam Feedbacks
  •  Free Update During Service Duration
  •  1342+ CCIE LAB members Passed with SPOTO

Pass at First Attempt


Save Time & Money


Boost 50% Salary


Harness skills

Why Choose SPOTO

SPOTO Materials 100% Cover Real Exam

After long-term testing, SPOTO achieve its Lab materials accurate rate up to 100% cover exam. Our materials are highly recommended by SPOTO VIP members and candidates from 133 countries

96.8% First-Attempt Pass Rate

SPOTO helped over 1342 members get their CCIE certification until 22nd May 2019, first attempt pass-rate over 96.8%, which is far higher than other vendors. According to statics show that average one candidate need to take 2-3 times exam to get their CCIE certification, whereas you can pass at first try if you pass SPOTO all sections & mock tests

Save Time and Money

One need spending 1.8 years to prepare & pass Lab exam, whereas if you take three hours per day to practice SPOTO materials, you can pass your lab exam in 16 weeks. 
 If you prepare your lab 2 to 3 times to pass, you need pay exam fee at least $3200 to $4800, however if you prepare with SPOTO, just pay $1600 to pass.

Boost 50% of your Salary

According to PayScale research, the average annual pay for a CCIE in the United States is about $122K a year, whose salary is 2 times of candidates who without CCIE certification under some condition. The CCIE annual salaries are as high as $145,297 and as low as $63,616 the majority of CCIE salaries could currently range between $80,500 which is about 25th percentile to $125,000 which would be 75th percentile across the United States.

Can I Afford?

Ability Prerequisite

Prerequisite: Pass CCIE RS Written Exam

SPOTO offers materials that all you need to prepare & pass your lab exam. With the data shows that SPOTO helped over 1342 members to obtain their CCIE Certification, 35.6% members are fresh network engineers. You can pass your RS Lab exam at first try as long as you practice whole materials we offer and get a good score on SPOTO every sections exam and mock exam.

Prepare Duration

You can complete CCIE R&S Lab online training within 12 weeks if you practice lab materials 3 hours per day. Tutors and services will assist you along the whole preparation. Every module we do provide workbooks, solutions, and videos tutorial. You can watch videos first, and practice materials. 
3 weeks to practice TS module: TS1, TS2, TS new version
2 days to practice DIAG module: DIAG1~DIAG8
6.5 weeks to practice CFG module: H1, H1+, H2, H2+, H3
2 weeks to review and practice final RS Lab mock exam

SPOTO Materials Fee

What Will I Get

SPOTO offers all materials that you need to prepare CCIE RS Lab exam. You can easily pass exam within two to five months if you prepare with SPOTO complete & latest Lab materials.SPOTO CCIE Lab preparation materials include Lab workbooks, solutions, tutorial videos, module tests, mock exam and exam feedback.

  • CCIE Lab Workbooks
    100% cover real exam: the content of SPOTO materials will exactly the same in the exam
  • CCIE Lab Solutions
    Guarantee 100% pass exam: You can pass exam at first try as long as you remember & digest all solutions
  • Module Tests
    Test Your Ability: every module (TS, DIAG, CFG) with module test, If you pass module tests, you can go next module practice.
  • Tutorial Videos
    Explain Lively: tutor will show you details about how to conduct on every module practice.
  • Mock Exam
    Simulate Real Exam: We are encouraged to say that if you pass the mock exam, you can pass the lab exam.
  • Exam Feedback
    Exam Latest Info: We offer the details feedbacks of how candidates pass CCIE exam around the world.

SPOTO Materials Demo

TS1 Topology

Q1:Layer 2(2 point)

PC101 should successfully access Server 1 behind SW1.

PC101 cannot access R7/R8, fix the problem so that PC101 can ping R7.



  vlan 12

interface e1/0

  switch access vlan 100

router ospf 65100

  no passive-interface vlan12

Q2:PPP(2 point)

R17 should have one default route which points to R12 via PPP as shown below.



interface s4/0

  ppp ipcp route default

interface s4/0

  no ppp authentication chap callout


router bgp 14567

  network mask

Q3:OSPF(2 point)

When R1 tries to access the network, which is between R21 and R22, the traffic should be load balanced as shown in the exhibit.



router ospf 12345

  no max-metric router-lsa


interface Ethernet2/0

  no ip ospf cost 1

Q4:EIGRP(2 point)

Traffic from R11 destined to loopback 0 of R14 should be load balanced via EIGRP as shown in the exibit



interface Ethernet1/0

  no bandwidth 1000


interface Ethernet1/0

  no delay 1000


When R12 traces the following routes

it should get the same result as shown in the following exibit



ip prefix-list 194 permit

router bgp 12345

  no neighbor route-map MED out

  neighbor route-map MED in

R21#clear ip bgp * soft


router bgp 14567

  maximum-paths 2


route-map MED permit 10

  match ip address prefix-list 194

  set metric 100

R6#clear ip bgp * soft

Q6:IPv6(2 point)

Phone is not able to ping 2001:BEEF:CAFE::26/64 located on Server4, fix the problem so that the following is successful



route-map NEXT-HOP permit 10

  no set ipv6 next-hop 2001:2::2

  set ipv6 next-hop 2001:CC1E:BEEF:2225::17

R22#clear ip bgp * soft


route-map NEXT-HOP permit 10

  no set ipv6 next-hop 2001:3::3

  set ipv6 next-hop 2001:CC1E:BEEF:2225::18

R25#clear ip bgp * soft

Q7:DMVPN(4 point)

DMVPN is configured on R15,17,18 and 19. R15 is hub and rest of devices are spokes. fix the problem so that server 2 can access PC 107 as shown below



router eigrp 200

  no redistribute connected metric 1 1 1 1 1

interface tunnel 0

  ip nhrp redirect


interface tunnel 0

  ip nhrp shortcut

  no ip nhrp map

  ip nhrp map


interface tunnel 0

  ip nhrp map multicast


Interface tunnel 0

  no ip split-horizon eigrp 200

Q8:MPLS VPN(4 point)

R7 and R8 are configured as backbone for VPN network. R9, R10, PC 104 and PC 106 are VPN clients. ensure that the output matches the following exibit.



router bgp 65100

  neighbor default-originate


router bgp 65100

  neighbor default-originate


ip vrf BancoBank_ToHub

  route-target import 65100:101

  route-target import 65100:102


router ospf 65101

  default-information originate


router ospf 65102

  default-information originate


no ip nat source list 100 interface Ethernet0/0.125 overload

ip nat inside source list 100 interface Ethernet0/0.125 overload


router bg 12345

  address-family ipv4

   network mask

Q9:DMVPN NAT(2 point)

There is DMVPN configured between R7 (Hub) and R24 (Spoke) via Nat Network (R23).

ensure that PC 110 can access Server 1 as shown



crypto ipsec nat-transparency udp-encapsulation


crypto isakmp policy 10

  group 14

router ospf 65100

  network area 3

Q10:NAT(2 point)

R21 should manage NAS via telnet. Fix the problem so that telnet to NAS is successful as shown in exibit.


no ip nat source static tcp 23 interface Serial4/0 2323

ip nat inside source static tcp 23 interface Serial4/0 2323

no ip nat source static tcp 80 8008 extendable

ip nat inside source static tcp 80 8008 extendable


interface Ethernet0/0

  mac-address aabb.cc00.0000


  no shutdown


Customer just setup a IPv6 Network, with HSRPv6 on R1 & R2.

After setting up, all hosts lose connection.

What would you recommend to your L1 Engineer as a Quick Fix?

CE1 key configuration

  • standby 1 priority 200
  • standby 1 preempt
  • ipv6 nd router-preference low

CE2 key configuration

  • standby 1 preempt
  • ipv6 nd router-preference high

CE1 HSRP priority is 200, Active

CE2 HSRP priority is 100, Standby

host had the default route FE80::666.

Customer just setup a lPv6 Network, with HSRPv6 onR1 & R2.

After setting up, all hosts lose connection.

Q1:What would you recommend to your L1 Engineer as a Quick Fix?

Q2:What is the root cause of the problem caused by the current? Which Device

Q3:Choose the first frame id that demonstrate your doubt


Site 1 (Hub/Server), Site 2 (Spoke), Site 3 (Spoke), Site 4 (Spoke)

Q1:What is the issue

Q2:You will ask what to your engineer?

Q3:How to deal with current issues temporary?


Section 1 Layer 2 TechnologiesDownload Now

Section 1.1: LAN Access

The following requirements were pre-configured.

  • VTP is turned off in all switches.
  • All required VLAN, including access-ports configuration in all relevant switches are provisioned.
  • All required SVI interfaces in all relevant switches (including IP address and subnet mask) are provisioned.

Configure the network in all sites as per the following requirements:

  • Access-ports must immediately transition to the forwarding state upon link up, as long as they do not receive a BPDU. Use the minimal number of commands per switch to enable this feature.
  • If an access-port receives a BPDU, it must automatically shutdown. Use the minimal number of commands per switch to enable this feature.
  • Ports that were shutdown must attempt to automatically recover after 10 minutes.
  • None of the switches may generate a TC when any of access ports goes down.

Section 1.2: LAN Distribution

  • Configure the headquarters’ network, as well as the large and medium office networks as per the following requirements:
  • All trunks must always use dot1Q encapsulation.
  • Negotiation of trunking protocol must be disabled in all switches.
  • Distribution switches (SW300, SW301, SW400, SW401, SW500, SW501) must initiate etherchannel negotiation using LACP.
  • Access switches (SW310, SW410, SW510) must never initiate etherchannel negotiation.
  • Configure layer 2 etherchannels’ number as shown in the “Diagram 1: Main topology” and “Diagram 5: Layer 2 Connections” (that is, use only Po1 and/or Po2).
  • Ensure that all ports included in etherchannels are effectively in use and bundled in the expected channel.
  • Access switches must see similar output as shown below:

Section 1.3: LAN Resiliency: Spanning-Tree


Section 1.4: WAN Switching Technologies


Section 2 Layer 3 Technologies

Section 2.1: OSPF in HQ

Configure the headquarters network (BGP AS#65003) as per the following requirements:

  • Both gateway routers of the headquarters network must always advertise a default route into the OSPF domain.
  • All four devices produce the exact same output as shown below. Everything must match, except the “Dead Time” counters and line order.

Section 2.2: OSPF in DC#1


Section 2.3: B2B Connection with Partner#1


Section 2.11: Multicast in HQ


Section 3 VPN Technology

Section 3.1: MPLS VPN

Section 3.2: DMVPN

Complete the DMVPN phase 3 configuration in the network as per the following requirements:

  • R14 must be configured as the DMVPN hub router.
  • R51 and R60 must be the DMVPN spoke routers.
  • NHRP must be allowed to properly populate routing tables on spoke routers, on an on-demand basis.
  • Both spoke routers must receive a default route from the ISP#1 via BGP and must install it into their VRF INTERNET.
  • Protect the tunneled traffic by attaching the preconfigured IPsec profile to the tunnel interface on all tunnel end-points.
  • Use the preconfigured interface Tunnel 0 on all three routers in order to accomplish this task.
  • BGP must be used to exchange routing information between hub and spokes:
    • The hub must be configured in a way that does not require any additional configuration if new spokes in the same subnet were added to the network.
    • All BGP peerings between the hub and any spoke must be established between AS 65001 and AS 65100.
    • Both spokes must receive the aggregate prefixes (10.x.0.0/16) for all corporate sites from R14.
    • Both spokes must not receive any other prefixes in from R14.
  • Do not remove any existing configuration on R14, R51 and R60.
  • At the end of the exam, ensure that the following sequence of commands produces the same output:

Section 3.3: Internet Access


Section 3.4 LAN to LAN IPsec


Section 4 Infrastructure Security

Section 4.1: Device Security

The network architect decided to secure the datacenter #1 VLAN 2001 against unwanted or rogue Router Advertisement (RA) messages in order to ensure that SW111 is always selected as the default router by any host that is located in VLAN 2001.

Configure the datacenter #1 network as per the following requirements:

  • SW111 must analyze all RAs received on any ports of VLAN 2001 (including Eth0/0, Eth0/1, Eth0/2, Eth0/3) and it must filter out RAs that are sent by unauthorized devices.
  • SW111 must sent its own RA with the Default Router Preference(DRP)bits set to “high”.
  • You are not allowed RA with more than 2 Hop.



 interface vlan2001

  ipv6 nd router-preference high

 ipv6 nd raguard policy Vlan2001

 hop-limit maximum 2

 interface range Ethernet 0/0-3

  ipv6 nd raguard

  ipv6 nd raguard attach-policy Vlan2001

Section 4.2: Network Security

The network architect requires the link with partner #1 (connected to R42 in the large office) to be secured against spoofing attacks.

Configure the large office network as per the following requirements:

  • R42 must drop traffic received from the partner if the source IP address is not reachable via its interface e1/0.
  • No additional configuration must be required if any new prefix is received from the partner #1.
  • Do not configure any access-list in order to achieve the previous requirements.



ip cef

interface e1/0

 ip verify unicast source reachable-via rx allow-default

Section 5 Infrastructure Services

Section 5.1: System Management

SW200 is experiencing high CPU when a Network Management System (“NMS”, located in the datacenter #1) polls its dot1dBridge MIB.

Configure SW200 as per the following requirements:

  • Exclude the dot1dBridge MIB from the available MIBS all other MIB supported by SW200 must still be available to the NMS.
  • Only hosts residing in the network are allowed to poll SW200 using the read-only community string ‘ccie’ (without quotes!)
  • SW200 must ignore SNMP v1 requests for that community and must respond to SNMP v2c requests.

Section 5.2: Quality of Service


Section 5.3: Network Services


Section 5.4: Network Services


CCIE Routing and Switching Lab Training Videos


Matched mac address on SW and PC.
R17: ppp ipcp route default is missing
Wrong mask length on R22.
R3 has deny ospf acl
R13 had deny prefix . i had to remove that line
R5: had many missing neighbors. I had configured them all
R21: modified to negh x route-map x in
R25:didnot have neighbor activated under ipv6, activated it
R19 tunnel has missing config. added them to match with R15
R7,R8- Missing neighbors configuration
R3: one interface was not part of VRF. Configured the interface accordingly
R4/R6: ip ospf cost 1000 on int e2/0
Tunnel 10 had ospf broadcast.
R21 had ACL and i had to put permit ip any any
R24 e2/0 had IP of NAS as secondary IP. Removed secondary IP.

H2- Same as spoto but each questions had more options than what we had on RDP.

SEC1: Same as spoto but i had to bounce por-channels on SW300,301,310 after i configured MST. PO were not in a consistant state

2.1 Same as spoto
2.2 Same as spoto
2.3 Same as spoto
2.4 Same as spoto
2.5 Same as spoto
2.6 Same as spoto
2.7 Same as spoto
2.8 Same as spoto
2.9- Same as spoto- ipv6 unicast routing is not enable on SW111
2.10 &2.11 - Mutlicasting is same as spoto but ip multicast-routing is not enabled on all devices. It took some time to see things stable.

3.1 . SAME as spoto. Only OSPF is preconfigured. had to configure RD, MPLS, BGP
3.2 Same as spoto. Crypto was not configured properly on R51 & R60. Matched it with R14.
3.3 same as spoto
3.4 Same as spoto

4.1 Same as spoto
4.2 Same as spoto
SEC5: All same as Spoto . I didnot configure EEM script


1) vlan 12 SVI access-list edited the access-list to allow prefix
2) wrong encap, config on R17
3) Duplicate router-id
4) passive interface
5) next hop applied on R5
6) its ipv6 over ipv6 - activate on R25 not applied under add fam, ipv6 access-list blocking tcp
7) Tricky DMVPN - the image of problem area not include R14, R14 has access-list
- make tunnel phase 3
8) Tested both paths backup and main, default originate, ospf not advertise on SW, ip nat in missing from backup, increase cost on non mpls interfaces
9) access-list on R21
10) ip dhcp client-id int eth0/0 missing.

DIAG - Usinging syslog, config- multicast and HSRPv6

Same - BGP in DC not comeup i get weird error on TCP-AUTH. I remove config and config again
- Switchports on diagrams in exam, make all access
- DMVPN the pre-share key no cypto-keyring config, i configure
- nat access-list on the preconfig for lan to lan ipsec wrong--use same list name, edit the nat rules
- use diagrams to proof check requirements.
-cannot right click to paste config..i use shift+insert...waste time to right click and click again space.



Ticket 1:
- SW2: Port security - wrong MAC address

Ticket 2:
- R17: "ppp ipcp route default" was missing

Ticket 3:
- R22: E2/0 wrong subnet mask

Ticket 4:
- R13: prefix-list blocking

Ticket 5:
- R22: "next-hop-self" missing

Ticket 6:
- R25: E0/0 subnet not advertised
- It stared to work after clearing BGP

Ticket 7:
- R15: "ip nhrp redirect" missing
- R15: incorret host entry "user1spoke2"
- R19: "ip nhrp shortcut" missing
- R19: wrong nhrp authentication

Ticket 8:
- R7: neighbor not configured
- R7: neighbor not configured
- R8: interface E0/0.125 missing "ip nat inside"
- R6: BGP neighbor not activated under vpnv4 address-family

Ticket 9:
- Crypto config mismatch between R7 and R24. I copied everything from R7 and past it to R24.

Ticket 10: - R24: E0/0 Secondary IP address duplicated with NAS IP address.

- HSRPv6 + Multicast: The same as Spoto including packet sequence number in packet capture.

Overal it was very similar to Spoto. Only minor differences. A lot of configuration has been pre-configured.

1.1 - Same as Spoto
1.2 - Same as Spoto
1.3 - SW300 and SW301 had "no spanning-tree mst simulate pvst" configured
1.4 - Same as Spoto

2.1 - Same as Spoto
2.2 - OSPF already pre-configured. Only Lo1 on SW100 and Sw101 missing. There was strange interface Lo2001 with IP address 10.255.X.X on either SW110 or SW111. I do not remember anymore which switch it was. I advertised it to OSPF anyway, but I guess it is not necessary.
Passive interface was not configured in SW110/SW110.
2.3 - Same as Spoto. Only difference. The OSPF process ID was 2 and not 10. Also, there is no access R100. They explicitly asked: Confirm desired output from OSPF database on R42.
2.4 - Same as Spoto
2.5 - Same as Spoto
2.6 - Same as Spoto
2.7 - Same as Spoto
2.8 - Same as Spoto
2.9 - Same as Spoto, only IPv6 was not enabled in SW111
2.10 - Same as Spoto
2.11 - Same as Spoto

3.1 - Loopback IPs are different. For example while Spoto has RD and RT import/export has to be configured. Rest is the same.
3.2 - Partially preconfigured. crypto keyring missing on R60 and R51.
3.3 - Same as Spoto
3.4 - Same as Spoto. I copied ipsec related configuration from R24 and modified it for R71. NAT was already pre-configured.

4.1 - Same as Spoto. Requirement to have maximum hop limit 2
4.2 - Same as Spoto

5.1 - Same as Spoto. I configured EEM as well.
5.2 - Same as Spoto
5.3 - Same as Spoto
5.4 - Same as Spoto

Why Start Now?

Why Start Now?

It's a good time to prepare your CCIE RS Lab exam because there will not be updating during 2019 May to 2019 October. SPOTO gets all materials ready & available to pass at first attempt.

If you study CCIE RS Lab following SPOTO instructor guide, practicing lab three hours per day, you can finish your lab preparation in four month. 75% members passed Lab in 3.5 months, 12.3% members passed lab exam in 3 months, 7.4 members passed in 2 months, 5.3 members passed lab with 4 to 4.5 months.

CCIE RS Lab study consists of three modules: Troubleshooting, Diagnostics, Configuration. Every module study is diveded into sections. You can Go to next section study when you finish section test, as well as module study.

In the final step, we will offer mock exam after you complete whole lab study, moreover you can access the whole lab pass feedbacks.

How to Start

Get Start to Pass CCIE RS Lab Exam Now

1342 members pass with SPOTO RS Lab materials
First-Attempt Pass Rate Over 96.8%

  • Latest & Complete Workbooks & Solutions
  • Free Update During Service Duration
  • Tutorial Videos
  • Tutor Technical Support
  • All CCIE RS Lab Pass Feedbacks
  • VIP Service Group

"I Have a Few Questions..."

How soon can I receive the CCIE R&S Lab v5.0 materials?

The followings will be sent to your email no later than 8 hours after verification of your payment. 
-Software and setup instructions 
-SPOTO CCIE R&S Lab Exam v5.0 Learning Materials, including Workbooks, Solutions, and Instruction Video. (except H3 CFG, TS2 BT1 workbook and solutions) 
-CCIE R&S Lab Exam v5.0 Study Plan

When can I access R&S H3 server to practice H3 CFG and TS2 BT1?

1、If this is your first attempt on the lab exam, we highly recommend that you read the CCIE R&S Lab v5.0 study plan. Complete other CFG and TS on your laptop first. 
2、If you already attempted before, we suggest you try to pass our virtual exam (contact our tutor for access) before scheduling your CCIE R&S LAB Exam date and start practicing H3 CFG.

How many remote lab hours are included for H3 CFG and TS2 BT1? 

Up to 200 hours within your service period. You can purchase additional hours at USD$ 200 per 40 hours within your service period. Please contact our tutor for server hour suspension.

When can I access DIAG server?

10 days before your exam during your service period. Please contact our tutor to authorize your access. But You will need provide schedule screenshot (OLSM website screenshot) or payment invoice.

What kind of PC do I need to prepare the CCIE R&S Lab exam v5.0? 

Minimum PC Specification for CCIE LAB practice 
CPU: More Than the 2.5GHZ 
RAM: 12 GB 
Hard Drive: 100GB 
Network: internet access 
Software: Windows 7 or later (except Server OS) and Mac OS

How long is my service period? 

CCIE R&S Lab v5.0 service duration is from the date you purchase to Feb 23, 2020 (if you bought before Sept 23, 2019, service duration is 5 months)

What happens if the exam becomes unstable? 

We make sure you will receive updated information and materials of CCIE R&S Lab exam as soon as we learned any changes to the exam. In case we learned any major changes happened during your service period, your remaining service period will be calculated from the date we learned the exam becomes stable again.


We only provide our materials to one of your hardware devices. This is done by the software (Lock lizard and EV Player) we provide you to read our proprietary materials. If the tech spec (such as memory capacity) of your device changes, you may not be able to open the files we sent you. Before your setup, make sure your device meets our minimum spec.


SPOTOCLUB is SPOTO website. Fuzhou SPOTO Network Technology Co.,Ltd briefly as SPOTO. We rank top on Cisco Certification training in China and share good fame oversea.

For 16 years, over 73.68 million candidates we have serviced, over ten thousand of them have achieved their goal and get CCNA/CCNP/CCIE certification. Most of them receive offers from Fortune 500 companies.

Until 22nd May 2019, we have run CCNA training 454 times with over 19373 attendances. We have run CCNP training 520 times with over 9995 attendances. We have run CCIE training 237 times, and over 1342 members acquired their CCIE certification. Meanwhile, with SPOTO support, candidates have passed their CISSP, AWS, Oracle, RedHat, CISA, Microsoft certification exams.

With 16 years of exploration and practice in the field of IT adult vocational education, SPOTO has refined the enterprise spirit as “Learning changes the fate” which is also recognized as the method for SPOTO network education and student learning. Choice, action, persistence, and transcendence are the essence of SPOTO spirit which can be simplified as choice and persistence. SPOTO always considers that enlightenment is the vital purpose of education. Thus, SPOTO devotes to helping our clients, partners, and staff to realize their learning potential and make success all the time.

In the future, SPOTO devotes to be a global e-learning platform and ranks top with results: every two IT engineers get certified with SPOTO every day.For More information Please check ccie lab material. And we hope you will get your certs.