Hands-on CCNA and CCNP practice labs across OSPF, VLANs, ACLs, routing, NAT, security, and more — each a real Cisco Modeling Labs scenario you build in your own CML and grade against the answer key. Filter by topic, track, and difficulty. A subscription unlocks every daily lab published since you joined while it's active; earlier labs unlock permanently with a bundle.
Prefer to browse by theme? See all practice topics or certification tracks.
65 labs match your filters.
Deploy a 5-node OSPFv2 lab featuring a redundant area 0 triangle (R1–R2–R3) and an ABR (R3) connecting to area 1 with branch networks on R4. A client on R1’s area 0 LAN validates reachability to branch loopback networks summarized by the ABR. You will set explicit router-ids from Loopback0, use passive-interface default, advertise R4’s loopbacks as /24s using ip ospf network point-to-point, and summarize area 1 into a /23 on the ABR. Verify FULL adjacencies, a single O IA summary on R1, and end-to-end connectivity. Troubleshoot an introduced area mismatch and interface/addressing issues.
Build a 3-router triangle with two branch LANs and real Alpine clients. Deploy primary static routes via the hub and floating backup statics over a direct branch-to-branch link. Verify reachability, path selection, and failover by simulating a hub outage.
Troubleshoot a Layer-2 forwarding fault that breaks a user VLAN between access/distribution switches, then implement static secure MAC binding on the client-facing access port. You will restore end-to-end VLAN 20 reachability and enforce a single authorized MAC on the user port using port-security with violation restrict.
Hands-on CCNA L2 switching lab: build a small campus with a distribution switch and two access switches carrying a shared user VLAN over 802.1Q trunks. Harden access ports with sticky port-security in violation shutdown mode. Intentionally seed and diagnose broken trunks/host VLANs, restore end-to-end host reachability, then trigger a port-security violation to observe err-disabled behavior and perform manual recovery.
Hands-on CCNA switching lab contrasting single-VLAN access ports with 802.1Q trunks. You begin with the inter-switch link configured as a plain access port, so only one VLAN reaches the router-on-a-stick gateway while the other cannot. You will diagnose the connectivity problem, convert the link into a properly hardened 802.1Q trunk, and validate that both VLANs regain access to their gateway.
Diagnose and remediate a trunk misconfiguration between an access switch and a distribution switch so that same-VLAN hosts across two access switches can communicate end-to-end. Use CDP and trunk verification commands to investigate the fault and restore proper trunk operation, without introducing any Layer-3 routing.
Build a small hub-and-branch network to master default static routes and the gateway of last resort. Each branch uses a default route toward the hub; the hub holds specific routes back to branch LANs. Verify routing tables and end-to-end host connectivity, then troubleshoot common misconfigurations.
Archive preview only
Deploy IP addressing and bidirectional static routing across a three-router topology to connect two branch LANs through an HQ hop. Practice verification from end hosts, analyze routing tables, and troubleshoot asymmetric reachability.
Archive preview only
Beginner CCNA lab focusing on IPv4 addressing and basic Layer 3 verification on a small branch network. You will assign IP addresses to router interfaces, confirm end-host default gateways, and verify connected reachability using host-based pings. You will also learn to read 'show ip interface brief' and 'show ip route' to confirm operational state before any routing beyond directly-connected networks is configured.
Archive preview only
Deploy VLANs, hardened 802.1Q trunks, router-on-a-stick inter-VLAN routing, and sticky port security in a compact branch topology. Verify from real hosts and troubleshoot common misconfigurations.
Archive preview only
Deploy and troubleshoot VLANs, 802.1Q trunks, and port security in a realistic small-branch ROAS design. You will stand up VLANs 10/20/99 with a hardened trunk native VLAN 999, configure sticky port security on access ports, correct a misassigned VLAN, and resolve an err-disabled port caused by a port security violation. Finish by verifying end-to-end host connectivity across VLANs.
Archive preview only
Beginner CCNA ACL lab on a compact 5-node CML-Free topology. You will configure static routing end-to-end, implement source NAT (PAT) at the source edge, and then build a standard numbered ACL near the destination to allow a single NATed host and a specific subnet while denying all others. You will validate with pings from end hosts, observe ACL hit counters and NAT translations, and troubleshoot common mistakes such as ACL placement, wildcard masks, and pre-/post-NAT address matching.