Practice labs

CCNA & CCNP practice labs — hands-on Cisco CML scenarios

Hands-on CCNA and CCNP practice labs — OSPF, VLANs, ACLs, routing, NAT and more, each a real Cisco Modeling Labs scenario you build and grade against the answer key.

Browse the 19 free labsBrowse by theme: all practice topics or certification tracks.

Browse by track & topic
IntermediateLocked

OSPF Multi-Area: ABR Area Mismatch and Route Repair

Build and troubleshoot a compact multi-area OSPF design with a single ABR between area 0 and area 10. You will deploy OSPF, observe an adjacency failure caused by an area mismatch on one transit link, repair it, and validate that routes propagate end to end between two user LANs.

CCNA & CCNP55 min4 objectives

AdvancedLocked

OSPF MD5 Authentication: Backbone Integrity and Area Mismatch

Deploy OSPFv2 with MD5 authentication on backbone links, deliberately trigger and diagnose an area mismatch adjacency failure, then fix it and restore end-to-end reachability between two branch hosts in a compact three-router topology.

CCNA & CCNP68 min5 objectives

BeginnerDailyLocked

Layer 2 Access Hardening: PortFast, BPDU Guard & Sticky MAC

Hands-on CCNA Layer 2 switching lab: build VLANs, access ports, hardened 802.1Q trunks, and basic port-security across two access switches and an L2 core. Verify segmentation end-to-end from real hosts and practice troubleshooting native-VLAN and port/VLAN mismatches.

CCNA55 min5 objectives

BeginnerLocked

OSPFv2: Router IDs, Neighbor States, and Loopback Adjacency

Deploy OSPFv2 across three routers with unique, loopback-derived router-ids. Observe OSPF neighbor state transitions, advertise loopbacks and LANs, and troubleshoot an adjacency failure caused by a duplicate router-id. Validate full end-to-end reachability from client hosts after fixing the issue.

CCNA55 min5 objectives

BeginnerFree2026-06-23

OSPFv2 Single-Area Fundamentals: Adjacency and Area 0 Basics

Hands-on CCNA beginner lab: build a 3-router chain with end hosts, enable OSPFv2 area 0, form full adjacencies, advertise loopbacks and LANs, verify route propagation end-to-end, and intentionally create then resolve an OSPF area mismatch on a transit segment.

CCNA55 min5 objectives

Free with an account

IntermediateLocked

CCNA: OSPF Passive Interfaces & Default Origination

Deploy OSPFv2 across a 3-router, 2-LAN branch/core/edge topology. Mark LAN-facing interfaces as passive so they do not send OSPF hellos or form adjacencies. Originate a default route only from the edge router and verify default propagation end-to-end using real client traffic. Includes realistic troubleshooting around missing adjacencies, non-propagating defaults, and unreachable external destinations.

CCNA70 min5 objectives

AdvancedLocked

OSPFv2 Multi-Area Capstone: 3-Rtr Line, Auth, LAN Host Intact

Advanced CCNP OSPFv2 multi-area capstone. Build a three-router line topology with area 10 at the branch, area 0 at the core, and MD5 authentication on the area 0 transit. Advertise all loopbacks and a branch user LAN. Validate end-to-end reachability from the branch host to every router loopback and the core LAN. Includes realistic enterprise management and verification flows.

CCNA & CCNP80 min4 objectives

BeginnerDailyLocked

VLANs for Two Departments: Trunking & Sticky MAC Security

Hands-on CCNA lab: build VLANs for Sales and Engineering, implement 802.1Q trunks with a hardened native VLAN, assign access ports, and apply sticky MAC port-security on access interfaces. The design uses a compact, realistic branch topology with a router-on-a-stick gateway, a distribution L2 switch, one access L2 switch, and two end hosts. Students deploy, verify, and troubleshoot VLAN reachability, trunk integrity, and port-security violations.

CCNA70 min4 objectives

BeginnerDailyLocked

Compact Branch LAN: Two VLANs, ROAS & Sticky Port Security

Configure a compact branch LAN with router-on-a-stick inter-VLAN routing, two access switches, and two user VLANs. Implement VLANs, 802.1Q trunks with a hardened native VLAN, secure user-facing ports with port-security, and verify end-to-end reachability from the hosts. Includes realistic troubleshooting of VLAN assignment, trunk allow-lists, and port-security violations.

CCNA65 min4 objectives

BeginnerDailyLocked

Campus Layer 2: VLANs, a Management VLAN & Port Security

Build and harden a small branch campus Layer 2 network with a distribution switch and two access switches. Implement VLANs, trunking, and basic port security, then verify from the end hosts and troubleshoot common L2 mistakes.

CCNA75 min6 objectives

AdvancedDailyLocked

CCNP: OSPF Backbone & Area Mismatch Recovery

Advanced multi-area OSPF lab with a realistic two-site design and a WAN ABR. You will deploy OSPF with a backbone (area 0) and a non-backbone area, intentionally create an area mismatch on one transit link to observe the failure, then correct it to restore full reachability. The final build demonstrates solid OSPF hygiene and SSH-only management.

CCNP85 min5 objectives

What's unlocked, and what's free

Subscription access, and the labs that need none.

A subscription unlocks every lab on this page for as long as it's active — the whole daily back catalogue, not just the labs published after you join, plus every series lab. Bundles and study paths aren't sold separately any more; anything bought before that change stays yours permanently, subscription or not.

Free labs need no subscription at all: every lab you can build and grade without one is the sample, plus the opening lab of each series.