Hands-on CCNA and CCNP practice labs — OSPF, VLANs, ACLs, routing, NAT and more, each a real Cisco Modeling Labs scenario you build and grade against the answer key.
Browse by theme: all practice topics or certification tracks.
Two sites have dual WAN links (primary and backup). Both circuits are up and end-to-end connectivity works, yet every intersite flow rides the slow backup path. Your job: read which routes each router actually installed for the opposite site and why, then restore the intended path preference so traffic uses the primary circuit while keeping the backup standing by.
An overnight hardening change reached the core but not the branches. By morning, both OSPF adjacencies to the core were down even though every point-to-point link still pings and no addressing changed. Restore end-to-end reachability by diagnosing what the core and each spoke now disagree about on the carrier-facing transits and finishing the change on the branch ends.
Daily CCNA troubleshooting repair: two branch floors were renumbered and now users report DHCP failures and no Internet access. Work end-to-end from each floor’s client to the WAN: trace DHCP pool-to-interface bindings, validate NAT policy per floor, and restore both floors so leases are issued from the new plan and both can reach the provider loopback.
A replacement branch router came up on three carrier handoffs. All subinterfaces and /30s look correct and line protocols are up, yet no traffic passes. Your job: read what each circuit actually puts on the wire and bring the branch into alignment with the remote ends — including the carrier-published IP MTU on one circuit — without altering addressing or static routes.
A security audit showed that routers accepted SSH from outside the management LAN despite an existing filter. Diagnose how the management ACL is bound to the VTY lines and make it govern which inbound sessions the routers accept, without breaking data-plane reachability.
A dual-stack static routing lab with a subtle IPv6-only failure. IPv4 reaches across the WAN from a branch PC to an HQ server and loopback, while IPv6 to the same destinations fails. The IPv6 addressing on interfaces is correct; the break lies elsewhere. Compare what IPv4 knows versus what IPv6 knows for the same four destinations and make IPv6 match the working IPv4 design.
Daily CCNA troubleshooting drill: Two branches can ping the core over their transit links, yet the core does not learn any branch routes. Your job is to trace how OSPF is enabled on each device, isolate why the core’s routing table is missing the branch LANs and loopbacks, and bring both branches into the correct OSPF area without changing how the core enables it.
Free with an account
A branch user in VLAN 10 cannot reach the data center's line-of-business server, stalling the end-of-day batch upload. Two faults sit behind the one complaint, and clearing either alone leaves the user where they started. The client gets no answer from its own gateway either.
Branch staff cannot reach the server at 172.16.100.100, and they cannot close a day's tickets without it. Policy also requires Telnet from the user LAN to that server be denied while everything else passes, and the security review cannot confirm it is being enforced. Work the path from a client and find what is wrong.
A branch reaches its provider through one edge router that hides the user LAN behind its upstream address. Since a change window, everyone on 192.168.10.0/24 reports that nothing beyond the branch answers, while the router itself reaches the provider's test address. Find what is wrong.
Branch staff cannot work: no workstation on the user LAN holds an address. By design, clients there lease from the hub router's scope and the two sites route to each other statically. Find why no lease arrives; change nothing else.
A regional retailer's branch lost core access after last night's maintenance window. Users reach their gateway and the routers ping across the transit, but no OSPF neighbour appears and the branch LAN is missing from the core's table. The documented design is OSPF process 1, area 0 on both routers. Restore the adjacency without changing addressing or adding static routes.
A subscription unlocks every lab on this page for as long as it's active — the whole daily back catalogue, not just the labs published after you join, plus every series lab. Bundles and study paths aren't sold separately; the subscription is the only plan.
Free labs need no subscription at all: every lab you can build and grade without one is the sample, plus the opening lab of each series.