Hands-on CCNA and CCNP practice labs — OSPF, VLANs, ACLs, routing, NAT and more, each a real Cisco Modeling Labs scenario you build and grade against the answer key.
Browse by theme: all practice topics or certification tracks.
19 labs match your filters.
Configure inter-VLAN routing using router-on-a-stick with one router, one Layer-2 switch, and two hosts. Build VLAN 10 and VLAN 20, trunk the router uplink, create subinterfaces for each VLAN, and verify that hosts can now reach each other across VLANs.
Hands-on fundamentals with Cisco port security on host-facing access ports. Build a small two-switch campus with a trunk, place two Linux hosts in the same user VLAN, then enable port security with the explicit defaults (maximum 1, violation shutdown) on both host ports. Verify secure-up state and baseline host connectivity.
Build a static 802.1Q trunk between two Layer-2 switches to carry VLANs 10 and 20. Map hosts to access ports, verify trunk encapsulation and allowed VLANs, demonstrate same-VLAN reachability across the trunk, and confirm inter-VLAN isolation. Then simulate an allow-list drift fault, diagnose with show commands, and restore service.
Beginner CCNA ACL lab on a compact 5-node CML-Free topology. You will configure static routing end-to-end, implement source NAT (PAT) at the source edge, and then build a standard numbered ACL near the destination to allow a single NATed host and a specific subnet while denying all others. You will validate with pings from end hosts, observe ACL hit counters and NAT translations, and troubleshoot common mistakes such as ACL placement, wildcard masks, and pre-/post-NAT address matching.
Hands-on CCNA lab to practice creating VLANs on a single Layer-2 switch and assigning access ports. You will segment a flat network into two VLANs, place hosts into the right VLAN, and verify that intra-VLAN pings succeed while inter-VLAN pings fail (no routing present). Includes realistic verification and troubleshooting.
Hands-on CCNA static routing lab: build a small hub-and-spoke with two stub routers and a hub router. Configure default routes on the spokes and specific static routes on the hub so two user LANs reach each other end-to-end. Validate from real hosts and practice first-hop and return-path troubleshooting.
Hands-on CCNA beginner lab: build a 3-router chain with end hosts, enable OSPFv2 area 0, form full adjacencies, advertise loopbacks and LANs, verify route propagation end-to-end, and intentionally create then resolve an OSPF area mismatch on a transit segment.
A subscription unlocks every lab on this page for as long as it's active — the whole daily back catalogue, not just the labs published after you join, plus every series lab. Bundles and study paths aren't sold separately any more; anything bought before that change stays yours permanently, subscription or not.
Free labs need no subscription at all: every lab you can build and grade without one is the sample, plus the opening lab of each series.