JNCIP-SP logo
Focused certification exam prep
Start practice

JNCIP-SP Exam Domains 2026: Complete Guide to All 7 Content Areas

TL;DR
  • JN0-664 covers exactly seven official objective headings: OSPF, IS-IS, BGP, CoS, IP Multicast, Layer 3 VPNs and Layer 2 VPNs.
  • Juniper publishes no percentage weights, so no domain can be labeled "highest-weighted" from official sources.
  • The exam is 65 multiple-choice questions in 90 minutes, built on Junos OS 22.3.
  • An active JNCIS-SP is the prerequisite certification; JNCIA-Junos is not a direct substitute.

The JN0-664 Blueprint at a Glance

The Juniper Networks Certified Professional, Service Provider Routing and Switching (JNCIP-SP) is delivered through the JN0-664 written exam, aligned to Junos OS 22.3. Its objectives are published in the Exam objectives section of Juniper's certification overview and fall into seven headings. This guide walks through each one, explains what the objective language actually asks of you, and shows how the domains connect. For the broader picture of the credential, see What Is JNCIP-SP? and the JNCIP-SP requirements guide.

#Official Objective HeadingCore Theme
1OSPFLink-state IGP, OSPFv2 and OSPFv3
2IS-ISLink-state IGP, levels and leaking
3BGPPath selection, policy, scaling, flowspec
4Class of Service (CoS)Classification, scheduling, rewrite
5IP MulticastIGMP, PIM, RPs, SSM
6Layer 3 VPNsVRFs, RD/RT, sham links, MVPN
7Layer 2 VPNsBGP L2VPN, L2 circuits, VPLS, EVPN

Note what is absent: there is no standalone "MPLS" or "traffic engineering" heading in the official hierarchy. Some third-party practice pages add those headings, but the pinned Juniper objectives do not. MPLS-based transport shows up as the machinery underneath the VPN domains rather than as its own objective.

How to Read the Objectives Without Weights

Juniper does not publish percentage weights for JN0-664, and the number of sub-bullets under a heading is not a weighting model. A heading with a long list of subtopics is not necessarily tested more heavily than a short one. Treat every domain as fair game and use the objective verbs to calibrate depth.

Each domain follows the same two-tier pattern:

  • "Describe" objectives test concepts, operation and functionality: how a protocol behaves, what a message or attribute does, why a design choice matters.
  • "Given a scenario, demonstrate configuration or monitoring knowledge" objectives test whether you can read a Junos configuration or command output and reason about it. Layer 2 VPNs add troubleshooting to that list.
Written, not hands-on: JN0-664 is an English-language written multiple-choice exam. Scenario objectives are written knowledge objectives, not a separate practical assessment, and JN0-664 is not the expert-level hands-on lab exam. Candidates still need to be fluent in Junos configuration syntax and operational-mode output, because scenario questions lean on both.

If you want a sense of difficulty before committing, read How Hard Is the JNCIP-SP Exam?. For a structured preparation path, see the JNCIP-SP study guide.

Domain 1: OSPF

The OSPF objective covers both OSPFv2 and OSPFv3, so you must be able to compare them, not just recall v2 behavior.

OSPF: Concepts You Must Describe

  • Area types and their operations
  • LSA flooding across multiple areas
  • Designated and backup designated router operation
  • The SPF algorithm
  • Metrics, including external metric types
  • Route summarization and restriction
  • Virtual links
  • OSPFv2 versus OSPFv3

What the Scenario Tier Adds

Given a scenario, you must show configuration or monitoring knowledge for single-area and multi-area OSPF, including implementing OSPF routing policy. Expect to reason about why a route is or is not present in a given area, how summarization at an area border changes what neighbors see, and how an import or export policy shapes the result. Practice reading show ospf database and neighbor output and tying LSA types to area behavior.

Domain 2: IS-IS

IS-IS is the domain many candidates under-prepare, particularly if their background is OSPF-heavy. Learner discussions frequently list IS-IS among the weaker areas.

IS-IS: Concepts You Must Describe

  • Areas, levels and their operations
  • Link-state PDU flooding through a multi-area IS-IS network
  • Designated intermediate system operation
  • The SPF algorithm
  • Metrics, including wide metrics
  • Route summarization and route leaking

The scenario tier mirrors OSPF: configure and monitor single-area and multi-area IS-IS, and implement IS-IS routing policy. Route leaking between levels and the behavior of wide metrics are natural scenario material because they change which prefixes appear where.

Domain 3: BGP

BGP has the longest list of described concepts, and it underpins everything in the VPN domains, so time invested here pays off twice.

BGP: Concepts You Must Describe

  • The route-selection process
  • Next-hop resolution
  • Attributes and their operation
  • Communities and regular expressions
  • Multipath, multihop and load balancing
  • Advanced options and route damping
  • Flowspec
  • Multiprotocol BGP

Scaling through route reflection is listed as a separate description requirement, and the scenario tier requires BGP configuration or monitoring knowledge including BGP routing policy. Build fluency in how policy terms match on communities and AS-path regular expressions, and in how a route reflector alters advertisement behavior. Multiprotocol BGP deserves extra attention because it carries the VPN address families you meet in Domains 6 and 7.

Domain 4: Class of Service

CoS rewards methodical, pipeline-style thinking. Learners commonly report it as a gap area, in part because it is configuration-dense and unforgiving of vague understanding.

CoS: Concepts You Must Describe

  • CoS processing on Junos OS devices
  • Header fields used for classification
  • Forwarding classes and classification
  • Packet loss priority
  • Policers
  • Schedulers and drop profiles
  • Rewrite rules

Trace a packet end to end: classify on ingress using header fields, assign a forwarding class and loss priority, police if required, queue and schedule on egress with drop profiles, and optionally rewrite markings. Scenario questions typically hand you a configuration and ask what happens to a particular class of traffic. Practice reading configurations for the stage at which a behavior is determined.

Domain 5: IP Multicast

Multicast is another frequently reported weak spot. Its concepts build on each other, so gaps compound quickly.

IP Multicast: Concepts You Must Describe

  • Multicast addressing and traffic flow
  • Any-source multicast versus source-specific multicast
  • RPF concept and operation
  • IGMP
  • PIM dense mode and sparse mode
  • Rendezvous-point concept, operation, discovery and election
  • SSM requirements, benefits and address ranges
  • Anycast RP

The scenario tier covers configuration and monitoring knowledge for IGMP and PIM dense or sparse mode including SSM, and implementing IP multicast routing policy. RPF is the thread that ties it together: many multicast failures trace back to the unicast routing table, which is why a solid IGP and BGP foundation helps here. Learn the RP discovery and election mechanisms in enough depth to distinguish them from each other.

Domain 6: Layer 3 VPNs

This domain draws on routing, BGP and MPLS transport at once, and it has a wide list of subtopics.

Layer 3 VPNs: Concepts You Must Describe

  • Control-plane and data-plane traffic flow
  • Full-mesh versus hub-and-spoke topologies
  • VPN-IPv4 addressing, route distinguishers and route targets
  • Route distribution and site of origin
  • Sham links
  • Virtual routing and forwarding table-label
  • Next-generation multicast VPNs, with control and data traffic flow
  • Scaling, IPv6 Layer 3 VPNs and Internet access options

Junos OS support for carrier-of-carriers and inter-provider VPN models is listed as a separate description objective. The scenario tier asks for configuration or monitoring knowledge of Layer 3 VPN components. A useful habit is to follow a customer route from CE advertisement, through PE import into a VRF, across the core as a VPN-IPv4 route with its route target, and out to the remote CE, naming the control-plane and data-plane element at each hop.

Don't invent new domains: Next-generation MVPN, IPv6 VPNs and carrier-of-carriers appear inside Domain 6, not as separate headings. Keep your notes organized under the official seven.

Domain 7: Layer 2 VPNs

The official objectives separate four technology branches. Candidates often blur them, so keep them distinct in your notes.

BranchConcepts Named in the Objectives
BGP Layer 2 VPNsControl/data-plane flow, forwarding tables, connection mapping, Layer 2 VPN NLRI, route distinguishers, route targets, scaling
LDP Layer 2 circuitsControl/data-plane flow, virtual-circuit label, autodiscovery, Layer 2 interworking
VPLSControl/data-plane flow, BGP and LDP label distribution, route targets, multihoming, site IDs
EVPNControl/data-plane flow, MAC learning and distribution, multihoming, BGP EVPN label distribution

This is the one domain whose scenario tier explicitly includes troubleshooting alongside configuration and monitoring, covering BGP Layer 2 VPNs, LDP Layer 2 circuits, EVPNs and VPLS. VPLS is another area learners report as tricky, largely because of the two label-distribution models and the multihoming and site-ID mechanics. Compare how each technology learns and distributes reachability: VPLS and EVPN differ fundamentally in how MAC addresses are learned.

Two Terminology Errors in the Official Overview

The pinned Juniper overview contains two visible terminology errors, and they matter because a learner who memorizes them will be wrong in the real world.

  • IS-IS "LSP" flooding. The overview expands LSP as "Label-switched path." In IS-IS, the flooded units are link-state PDUs, as Juniper's IS-IS overview documentation makes clear. This is a link-state flooding objective, not an MPLS one.
  • "PIM" as Physical Interface Module. In multicast, PIM means Protocol Independent Multicast, per Juniper's PIM overview. Study dense mode and sparse mode as multicast routing protocol behavior.
Study the technology, not the typo: Learn IS-IS link-state PDU flooding and Protocol Independent Multicast. The objective headings remain as Juniper published them, but the correct technical meanings are what will help you on the exam.

Sequencing the Seven Domains

A sensible order follows dependencies rather than the objective list. The IGPs come first because everything rides on them, BGP next because the VPN domains require it, and the hardest-reported topics early enough to revisit.

Weeks 1-2

IGP Foundations

  • OSPF multi-area behavior, summarization and policy
  • IS-IS levels, wide metrics and route leaking, given extra time as a commonly reported gap
Weeks 3-4

BGP and CoS

  • Path selection, communities, route reflection, multiprotocol BGP
  • The full CoS pipeline from classifier to rewrite rule
Weeks 5-6

Multicast and Layer 3 VPNs

  • RPF, PIM sparse mode, RP mechanisms and SSM
  • RD/RT mechanics, hub-and-spoke, sham links, MVPN
Weeks 7-8

Layer 2 VPNs and Review

  • BGP L2VPN, L2 circuits, VPLS and EVPN side by side
  • Mixed-domain scenario review and timed question practice

Adjust the pace to your background. A candidate who already works daily with MPLS VPNs may compress Weeks 5-6, while someone new to multicast should expand them. Use the JNCIP-SP cheat sheet for late-stage review, and try the JNCIP-SP practice tests to find which domains need more time.

Exam Mechanics That Frame the Domains

Knowing the format helps you pace across seven domains. The facts below come from Juniper's certification overview and program policies.

ItemDetail
Exam code and versionJN0-664, Junos OS 22.3
Questions and time65 multiple-choice questions, 90 minutes
DeliveryPearson VUE test center or OnVUE remote, subject to availability and technical checks
Fee$400 USD plus applicable taxes; no member/nonmember distinction published
Passing scoreSet statistically for the exam and reported to the candidate
PrerequisiteActive JNCIS-SP
ValidityThree years

With 65 questions in 90 minutes, you have a little under a minute and a half per question on average, which is enough for most knowledge items but tight if you linger on configuration-reading scenarios. For deeper detail, see the certification cost breakdown, the passing score explainer and the exam scheduling guide.

Retakes and Renewal

There is no wait after a first failed attempt. After a second or subsequent failure, you must wait 14 calendar days, counted from the day after the failed attempt. You must wait at least 18 months before repeating an exam you have already passed. The credential is valid for three years; renewal comes from passing an eligible current exam, completing a specified qualifying course, or earning a higher-level certification in the same track.

Keep the voucher assessment separate: Juniper's separate voucher assessment (80 minutes, three attempts, 70% for a discount voucher) and the practice-test page's 70% threshold do not describe the live exam. The real passing score is set statistically for JN0-664. Don't use either figure to predict your result.

Optional recommended training named in the overview covers Advanced Junos Service Provider Routing, Junos Layer 2 VPNs and Junos Layer 3 VPNs. Course attendance does not guarantee a pass, and course hours say nothing about exam duration. For more on structured courses, see JNCIP-SP training. If you are weighing the credential's value, read whether JNCIP-SP is worth it; no reliable salary figure restricted to JNCIP-SP holders was verified, so treat any such claim with caution.

Frequently Asked Questions

How many domains does the JNCIP-SP exam have?

The official JN0-664 objectives list seven headings: OSPF, IS-IS, BGP, Class of Service, IP Multicast, Layer 3 VPNs and Layer 2 VPNs. Juniper does not publish percentage weights for them.

Which JNCIP-SP domain is weighted most heavily?

That cannot be determined from official sources, because Juniper publishes no domain weights. Third-party weighting claims are unsupported by the issuer overview, so prepare all seven domains rather than guessing at emphasis.

Is MPLS a separate domain on JN0-664?

No. The official hierarchy has no standalone MPLS or traffic-engineering heading. MPLS-based transport appears as the foundation beneath the Layer 3 VPN and Layer 2 VPN objectives.

What do I need before taking JN0-664?

An active JNCIS-SP is the prerequisite certification, and JNCIA-Junos does not substitute for it directly. Exams may be taken in any order, but the prerequisite requirement must still be fulfilled. See the requirements guide for details.

Does the exam include hands-on labs?

No. JN0-664 is a written multiple-choice exam of 65 questions in 90 minutes. Scenario objectives test knowledge of configuration, monitoring and, for Layer 2 VPNs, troubleshooting, but they are not a practical lab assessment.

Ready to pass your JNCIP-SP exam?

Put this into practice with free JNCIP-SP questions across every exam domain.