ONF Certified SDN Engineer (OCSE)

 ONF certified engineer    

Examination Details & Blueprint for 
ONF Certified SDN Engineer Exam

 

Exam Title: ONF-Certified SDN Engineer (OCSE-111)

Exam Details: 70 questions in 90 minutes and an overall (all domains) pass score of 70%.

Exam Delivery: Delivered electronically via secure login, with attestation and affirmation of academic integrity by the candidate. Exam to be available in English and Simplified Chinese by Q3 2016.

Exam Fees: $240.00. ONF members will receive a 25% discount. 
Additional fees for remote proctoring may be assessed. Please contact training providers for more details

Credential Awarded: ONF Certified SDN Engineer (OCSE) upon successful completion of the exam.

Exam Purpose: This certification exam attests and formally certifies that the successful candidate has vendor-neutral technical knowledge, skills, and abilities of the major domains of networking practices that support the theory and practice of Software Defined Networking (SDN). It presupposes deeper technical knowledge, skills, and abilities in computer networking practices, and will validate all the major aspects and domains of knowledge and practice in SDN networking environments. The certification will be considered mastery-level validation and certification examination for technical professionals in the domain of SDN networking.

Intended Exam Audience

 Job Position   Primary Job Responsibilities 
     
SDN Sales Engineer   Create BOM’s
High Level Architecture and Design
Product Comparisons/Capabilties
RFP’s/RFI’s
Product Line Updates
DevOps Engineer   Script & Automation IT
Describe/Define IT Automation
Process Re-engineering
Technical Marketing Engineer   Product Positioning and Differentiation 
Compare/Contrast Products (Both Internal and External Products)
Sales Enablement
Technical Documentation/White Papers/Collateral
Network Technician   Troubleshooting/Problem Isolation
Installation/Migration
Monitoring
Trouble tickets and documenting/communicating issues via wiki etc.
IT Analyst   Recommend IT Architectures/Products/Systems
Test Plans (product certifications for ONF)
Performance & Monitoring (see above in Network Technician)
Business ROI Comparisons
Network Technician (Mid-grade Level)   Troubleshooting/Problem Isolation
Installation/Migration
Monitoring
Trouble tickets and documenting/communicating issues via wiki etc.
IT Analyst (Mid-grade Level)   Recommend IT Architectures/Products/Systems
Test Plans (product certifications for ONF)
Performance & Monitoring (see above in Network Technician)
Business ROI Comparisons
Education (if there is public material or could use high level examples of ROI savings)
System Administrator (Mid-grade Level)   Manage IT Systems
Operations Process
Deploy Server/Storage Infrastructure (non-network)
Hypervisors/Overlays/Virtual Switches
Software Engineer (Mid-Grade Level)   Design, develop, and maintain software
Consultant/Professional Services Engineer   Design/Implement Network Services
ROI/CapEx/OpEx Analysis
Business Proposals authorship, management
Recommendations for Network Architecture/Integration 
Student/Research Lab/EDU   Validate course level knowledge for online course in SDN engineering expertise foundations at a practitioner level
Practicing more advanced networking technologies
Tech Evangelizing/White Papers/Speaking
Understanding from Academic/Theory and Practitioner Perspective
Network Engineer/Architect   Implementaton/Migration
Design/Architecture
Troubleshooting/Operations
Network Security Engineer   Implementation/Migration
Security Assessments for Network Infrastructure
Compliance Reviews 
Information Security/Assurance Engineer   Risk Assessment
Compliance Reviews 
Governance
Application/Physical Security Analysis
Malware
Incident Response
Hardware Engineer   Chip Design
Platform Design/Implementation
Solution Architect   High Level Design
Business Requirements Analysis and Translation
Technology Evangelism
Training and Mentoring
Technical Trainer   Course Development
Course Delivery
Technology Evangelism

Prerequisite Knowledge and Recommended Training Materials

In order to pass the ONF OCSE Exam, a deep technical knowledge from a practitioner standpoint of computer networking is assumed, with specific experience with SDN networking also required. While experiences and job responsibilities may vary, only those who have specific hands-on experience with SDN from a technical level should take this exam. Resources that would be helpful include publications on networking from an engineering/practitioner standpoint, mid-level certifications in networking from such organizations as Cisco, Citrix, CompTIA, Juniper, Metro Ethernet Forum (MEF), Microsoft, or others of similar complexity, and materials freely available from Open Networking Foundation. Other materials and resources may be referenced on https://onfstaging1.opennetworking.org/sdn-learning-resources.

ONF Certified SDN Engineer Examination Blueprint

 Domain   % of Exam
     
1. SDN Concepts   10%
2. OpenFlow   20%
3. SDN Architecture and Ecosystem   15%
4. SDN Implementation and Migrations   25%
5. Troubleshooting and Testing   15%
6. SDN Security   10%
7. SDN Futures   5%

 

Domain 1: SDN Concepts

Describe how SDN solves network issues and implements use cases.

  • SDN Value Proposition
  • Implementing the SDN Forwarding Plane
  • Implementing the SDN Control Plane
  • Evolution of Switches and Control Plane
  • Protocol Limitations that SDN solves
  • Inadequacies in Networks today
  • SDN Devices and Device Functions
  • Application workflow
  • Programmability (Netconf, Yang, REST)
  • NFV and SDN Use Cases

 

Domain 2: OpenFlow®

Describe and list the OpenFlow® Protocol message structures, features, and headers.

  • Message Types and Headers
  • Basic Operation/Packet Matching
  • Proactive vs Reactive Flows
  • Statistics/Counters
  • Flow Timers
  • Group Tables
  • IPv6
  • Optical Port Properties
  • Port groups and Mapping
  • Message Structures
  • Instructions and actions
  • OpenFlow® Management and Configuration Protocol (OF-Config, OAM, OFDPA, OVSDB, etc.)
  • Action Lists, Sets and Buckets
  • Detailed Packet Matching/TLV’s
  • Sub-Actions
  • Metering

 

Domain 3: SDN Architecture and Ecosystem

Identify SDN architectural component design, API principals and SDN network design.

  • Hybrid switch modes
  • Reactive versus Proactive Applications
  • Common API Primitives
  • API Communication Protocols (REST, RESTCONF, JAVA)
  • Controllers
    • Open Source versus Vendor Specific
    • Anatomy of a Controller
    • Controller Redundancy
    • Imperative/Declarative Paradigms
    • Topology Discovery
    • NBI Models/Implementations
  • Software vs Hardware switches
  • Managing Scalability

 

Domain 4: SDN Implementations and Migrations

List various SDN migration strategies and deployment options and considerations

  • Controller Placement Design and Considerations/Implementations
  • Application Considerations
  • Scalability Considerations
  • TCAM Limitations
  • Simplifying OpenFlow® with Table Type Patterns (TTP’s)
  • Controller Clustering
  • Controller Federations
  • Hierarchical Controllers
  • Migration Strategies Greenfield/Hybrid/Mixed
  • Migration Approaches
    • Direct
    • Phased
  • Migration Planning
  • Migration Best Practices
  • Implications of a mixed network
  • Carrier Ethernet Network Virtualization
  • Packet-Optical Integration
  • Optical Network Service Provider Data Center Interconnection (DCI)
  • OpenStack and SDN Controller interaction

 

Domain 5: Troubleshooting and Testing

Given a scenario, demonstrate knowledge of how to configure and monitor and test an SDN Network.

  • Troubleshooting Flow Table Scenarios
  • Reading Flow Table Entries
  • Packet/Wireshark Decoding/Debugging
  • REST Messaging Types/Wireshark
  • Curl debugging
  • Mininet set-up
    • ovs-ofctl
    • mn sudo
    • curl
  • Description of the test program
    • Test Profiles
    • Standards
    • Specifications
  • Performance Benchmarking
  • Tool Sets
    • of-test
    • wireshark dissector
    • flowsim
    • flowvisor

Domain 6: SDN Security

Identify ways to secure SDN controllers and switches.

  • Benefits to networks by SDN architecture
  • TCP level secure channel/communication/session establishment between controller/switch
  • In-Band and Out-of-Band management security considerations
  • Controller HA
  • The Implications of SDN on Network Security
  • Securing the OpenFlow® Protocol
  • Securing the OpenFlow® data plane
  • Software Development Lifecycle
  • Controller/Element Hardening
  • Securing users in a Wi-Fi environment

Domain 7: SDN Futures

List and describe SDN future projects and developments.

  • Describe the purpose of Protocol Independent Forwarding (PIF) and P4, and other packet forwarding innovations beyond OpenFlow?
  • Segment Routing
  • Open Source Initiatives (ONF, ODL, Ryu, ONOS, OPNFV, OCP, ODCA, Open Config)
  • TTP Use Cases
  • Mobile traffic offload
  • Pipeline Compiling
  • Optical Extensions
  • Security Extensions
  • Wireless/Mobility Extensions

List of Abbreviations & Acronyms

Please Note: terms and basic definitions referenced to Wikipedia and TechTerms.com, reference texts, as well as other non-proprietary sources, including ONF publications posted at http://wwwopennetworking.org.

 Term/Abbreviation/Acronym   Full Text Name
     
3GPP   third generation partnership project
Abstraction   a representation of an entity in terms of selected characteristics, while hiding or summarizing characteristics irrelevant to the selection criteria.
ACL   access control list
A-CPI   application-controller plane interface
AES   advanced encryption standard
API   application program interface
ARP   address resolution protocol
ASIC   application-specific intergrated circuit
BGP   border gateway protocol
Broadcast   Broadcast or flooding is a simple routing algorithm in which every incoming packet is sent through every outgoing link except the one it arrived on.
CAPEX   capital expenditure
CHAP   challenge handshake redundancy protocol
CLI   command line interface
CO   central office
Controller   see SDN Controller
CPU   central processing unit
Data link layer   The second lowest layer of the seven-layer Open Systems Interconnection (OSI) model of computer networking.
DDoS   distributing denial of service
DHCP   dynamic host configuration protocol
DPI   deep packet inspection
DNS   domain name system
East-West SDN Architecture   how entities within the same plane of the SDN architectures interrelate
FEC   forward error correction
Flood   Flooding is a simple routing algorithm in which every incoming packet is sent through every outgoing link except the one it arrived on.
Frame   a unit of data transferred over a L2 network
FTP   file transfer protocol
FOSS   free and open source software
HTTP   hypertext transfer protocol
HTTPS   hypertext transfer protocol secure
iBGP   interior border gateway protocol
ICMP   internet control message protocol
IDS   intrusion detection system
Information model   a set of entities, together with their attributes and the operations that can be performed on the entities. An instance of an information model is visible at an interface.
IPS   intrusion prevention system
IP   internet protocol
IP address   the unique value assigned to each host on a computer network that is employing the Internet Protocol for addressing
IPsec   internet protocol security
IPv4   internet protocol version 4, using a 32-bit integer value for host addressing
IPv6   internet protocol version 6, using a 128-bit interger value for host addressing
ISIS   intermediate system to intermediate system protocol
Layer   a stratum in a framework that is used to describe recursion within the data plane. Adjacent layers have a client-server relationship.
Layer 1, Layer One, L1   see Physical layer in the OSI model
Layer 2, Layer Two, L2   see data link layer in the OSI model
Layer 3, Layer Three, L3   see the network layer in the OSI model
Layer 4, Layer Four, L4   see the transport layer in the OSI model
Layer 5, Layer Five, L5   see the session layer in the OSI model
Layer 6, Layer Six, L6   see the presentation layer in the OSI model
Layer 7, Layer Seven, L7   see the application layer in the OSI model
Level   a stratum of hierarchical SDN or networking abstraction
LAN   local area network
LIFO   last in/first out
LLDP   link layer discovery protocol
MAC   media access control
MAN   metropolitan area network
MPLS   multiprotocol label switching protocol
Network layer   Provides the functions and processes that allow data to be transmitted from sender to receiver across multiple intermedia networks.
NFV   network function virtualization
NOC   network operations center
NOS   network operating system
NV-GRE   network visualization using generic routing encapsulation
OFA   OpenFlow® agent
OFC   OpenFlow® controller
OPEX   operational expense
OS   operating system
OSPF   open shortest path first
OVSDB   Open vSwitch database management protocol
Packet   a unit of data transferred over an L3 network.
Packet switch   A packet switch is a node in a network which uses the packet switching paradigm for data communication. Packet switches can operate at a number of different levels in a protocol suite; although the exact technical details differ, fundamentally they all perform the same function: they store and forward packets.
Physical layer   lowest layer of the seven layer Open Systems Interconnection (OSI) model of computer networking.
PKI   public key infrastructure
Port   A virtual data connection between computer programs connected through a computer network
RDP   remote desktop protocol
Router   A router is a networking device that forwards data packets between computer networks. A router is connected to two or more data lines from different networks (as opposed to a network switch, which connects data lines from one single network). When a data packet comes in on one of the lines, the router reads the addres information in the packet to determine its ultimate destination. Then, using information in its routing table or routing policy, it directs the packet to the next network on its journey.
RSVP   resource reservation protocol
SDN   software defined networking
SDN Architecture   The SDN architecure is:

  • Directly programmable: Network control is directly programmable because it is decoupled from forwarding functions.
  • Agile: Abstracting control from forwarding lets administrators dynamically adjust network-wide traffic flow to meet changing needs.
  • Centrally managed: Network intelligence is (logically) centralized in software-based SDN controllers that maintain a global view of the network, which appears to applications and policy engines as a single, logical switch.
  • Programmatically configured: SDN lets network managers configure, manage, secure, and optimize network resources very quickly via dynamic, automated SDN programs, which they can write themselves because the programs do not depend on proprietary software.
  • Open standards-based and vendor-neutral: When implemented through open standards, SDN simplifies network design and operation because instructions are provided by SDN controllers instead of multiple, vendor-specific devices and protocols.
SDN Controller   A software entity that has exclusive control over an abstract set of data plane resources. An SDN controller may also offer an abstracted information model instance to at least one client.
SLA   service level agreement
SNMP   simple network management protocol
Switch   A network switch (also called switching hub, bridging hub, officially MAC bridge) is a computer networking device that connects devices together on a computer network, by using packet switching to receive, process and forward data to the destination device. A network switch forwards data only to one or multiple devices that need to receive it, rather than broadcasting the same data out of each of its ports.
TCP   transmission control protocol
TLS   transport-layer security
UDP   user datagram protocol
Virtualization   an abstraction whose selection criterion is dedication of resources to a particular client of application. When the context is general, for example when speaking of virtual network elements (VNEs), the term virtual may be used even when abstract might suffice. Virtual is also sometimes used colloquially to mean non-physical.
VM   virtual machine
WAN   wide area network
WLAN   wireless local area network
XML   extensible markup language

Recommended Equipment & Software Buildout

Note: The ONF Certified SDN Engineer certification presupposes that the candidate have experience with the actual building and deployment of SDN networks, to that end, the candidate should familiarize him/herself with the following tools and build or otherwise have access to the following tools, preferably in a testing (non-operational) network. In this manner, the candidate can build, examine, test, and evaluate SDN tools, architectures, and networks thoroughly.

Equipment

  • Patch Panels
  • Punch downs blocks
  • Layer 3 Switch
  • Router
  • Firewall
  • Two basic PCs
  • Access point
  • Media converters
  • Configuration terminal (with telnet and SSH)

Hardware

  • NICs
  • Network switches/hubs
  • Power supplies
  • GBICs
  • SFPs

Spare parts

  • Patch cables
  • RJ-45 connectors, modular jacks

Tools

  • Telco/network crimper
  • Cable tester
  • Punch down tool
  • Cable striper
  • Coaxial crimper
  • Wire cutter
  • Tone generator

Software

  • Packet Sniffer
  • Protocol Analyzer
  • Mininet
  • Flowsim

Terminal Emulation Software

  • Linux/Windows OSs
  • Software Firewall
  • Software IDS / IPS
  • Network mapper
  • Virtual network environment

References

Links to relevant material may also be found at https://onfstaging1.opennetworking.org/sdn-learning-resources.