A few months ago Juniper announced that the JNCIE-ENT lab exam would be getting a much-needed refresh. On November 1st will be saying goodbye to JPR-943 and hello to JPR-944. This new lab exam is also a 6-hour hands-on lab instead of the previous 8-hour hands-on.

I do plan to update my JNCIE-Workbook based on this new lab, yet have no definitive timeline to accomplish that task. While my workbook may not cover everything in the syllabus (EVPN, Space, Scripts) it seems as though much of it is still relevant. In honor of the new exam, here is a link to purchase the workbook for $49.99, that is half-off the normal price. Each purchase from LeanPub comes with a 30-day, money-back guarantee.

I was able to grab the exam details from the Juniper Certification website and list them below. One nice thing with this new lab, I think we can 100% virtualize this exam for study – except for maybe the POE stuff. Once I start to lab it for the workbook, I will be able to figure out more.

Oh – one thing I did notice that was missing from the new lab – MULTICAST. While that was somewhat easy on the old lab, I am sure there are many more breathing a sigh of relief that it is not there. If it does turn out to be there, I will update this post.

Hardware used in the new JNCIE-ENT lab:

  • vMX Virtual Router running 18.3
  • EX4300 Series Switch running 18.4
  • Junos Space Network Director v3.5

Exam Objectives


  • On-box and off-box scripts
    • Commit, OP, and Event Scripts
    • PyEx Scripts
  • Junos Space
    • Importing devices to Network Manger
    • Configuration Management

Class of Service

  • Multiple queues
  • BA classifier
  • Multifield classifier
  • Rewrite rules
  • Polices


  • EVPN configuration and troubleshooting


  • OSPFv2, OSPFv3, and IS-IS
    • Authentication
    • Multi-area OSPF
    • NSSA
    • IPv4 routings using OSPFv3
  • Routing policies


  • Troubleshoot and configuration
    • Multi-ISP routing
    • IBGP route-reflector
    • Resolution of BGP hidden routes
  • Route selection process
    • IBGP, Local Preference, AS-Path, Prepend, MED
    • Protocol preferences
    • Communities
  • Routing policies

System Setup

  • Device-level security
    • Securing local control plane
  • Interfaces
    • AE interface
    • LACP
    • VRRP
  • System-level configuration
    • SNMP
    • System logging
    • User account
    • DHCP services
    • NTP

Layer 2 Switching and Security

  • Virtual Chassis
  • VLAN
    • IRB interfaces
    • Private VLAN
    • 802.1Q tunneling
    • Native VLAN
  • Spanning tree protocols
    • Root bridges, root ports, designated ports
    • Various guards for Spanning Tree
  • POE and telephone functions
    • VoIP VLAN assignments
    • VoIP class of service
    • POE and LLDP-MED
  • Layer 2 security
    • DAI, DHCP snooping, Storm control
    • Layer 2 interface security features

Protocol Independent Routing

  • Protocol independent routing policy
    • Aggregate, generate, qualified next hops, and static routes
  • Filter based forwarding
  • GRE tunnels