Practice labs

CCNA & CCNP practice labs — hands-on Cisco CML scenarios

Hands-on CCNA and CCNP practice labs — OSPF, VLANs, ACLs, routing, NAT and more, each a real Cisco Modeling Labs scenario you build and grade against the answer key.

Browse by theme: all practice topics or certification tracks.

Browse by track & topic
IntermediateDailyLocked

CCNA Foundations: The IPv6 Default Route — One Route Out

Build a compact branch-to-edge topology that is dual-stack for IPv4 and intentionally incomplete for IPv6. IPv4 is fully working as a baseline. Your job: enable IPv6 forwarding on both routers, replace specific IPv6 routes at the branch with a single default (::/0) toward the edge, and add a specific IPv6 return route on the edge back to the branch LAN. Verify the branch host reaches the edge-side resources over IPv6 while the IPv4 plane remains stable.

CCNA55 min4 objectives

IntermediateDailyLocked

CCNA Foundations: IPv6 Static Routes — Point at the Next Hop

Dual-stack enterprise lab with two routers, a shared access switch, and two hosts in separate VLANs. IPv4 is fully working via static routes in the starter. Your task is to add IPv6 static routes on both routers so the clients can communicate end-to-end over IPv6. Learn why a link-local next hop on a point-to-point link requires specifying the exit interface.

CCNA45 min4 objectives

BeginnerDailyLocked

CCNA Foundations: SLAAC — Let the Router Hand Out the Prefix

Single-site IPv4/IPv6 lab where IPv4 is already working. You will enable IPv6 routing on the router and place a single /64 on the user LAN so two hosts autoconfigure via SLAAC. Then verify each host’s chosen IPv6 address and the learned default route via the router’s link-local address, and test end-to-end IPv6 connectivity.

CCNA45 min4 objectives

BeginnerDailyLocked

CCNA Foundations: Link-Local & Neighbor Discovery

A focused, enterprise-clean IPv6 day in a progressive CCNA series. You will enable IPv6 on a single user LAN, assign a deterministic link-local gateway, and observe Neighbor Discovery (ND) in action. IPv4 is already working; your job is to turn on IPv6 unicast routing, add a global unicast /64 to the gateway interface, and set an explicit link-local address so hosts learn a predictable next-hop. You will verify SLAAC-derived host addresses, default routes learned via RA, and ND neighbor tables on the router, and then test by pinging both the router’s link-local and global addresses from the hosts.

CCNA45 min6 objectives

BeginnerDailyLocked

CCNA Foundations: IPv6 Addressing — Put a /64 on the Wire

Bring IPv6 up alongside the already-working IPv4 baseline. You will enable IPv6 unicast routing on both routers, put a unique 2001:db8::/64 on each site LAN, put a /127 on the router-to-router transit, and address the dual-homed workstation on both of the LANs it is plugged into plus its IPv6 default route. Verify that IPv6 reaches both on-link gateways and, through the default route, the near router's transit address — while the far router's transit address stays unreachable over IPv6 and reachable over IPv4, because no IPv6 routing between the sites exists yet.

CCNA50 min4 objectives

AdvancedDailyLocked

CCNA Resilient Campus Capstone: STP + EtherChannel + FHRP

Bring together core campus redundancy skills in one focused day: elect a deterministic STP root on the intended distribution switch, form a working LACP EtherChannel between distribution and access, harden edge with PortFast/BPDU Guard, and stand up an HSRP virtual gateway that the VLAN 10 users actually use. The starter is intentionally mis-tuned across layers so you must build or repair it end-to-end.

CCNA95 min5 objectives

IntermediateDailyLocked

CCNA Foundations: VRRP — Standards-Based First-Hop Redundancy

Build gateway resiliency on a campus user LAN using VRRP between two edge routers. You will configure a VRRP group with a shared virtual IP, set a higher priority on the intended master, and prove failover from the end hosts without changing the default gateway. Includes full SSH management on routers, a clean L2 access switch, and two clients using the VRRP VIP.

CCNA55 min4 objectives

IntermediateDailyLocked

CCNA: HSRP Preemption & Tracking — Fail Over and Back

Daily CCNA campus-redundancy lab focusing on HSRP preemption and interface tracking. You will refine an already-working HSRP default gateway so it follows real network health: fail to the standby when the preferred router loses its upstream, and preempt back when it recovers. The topology is an enterprise-clean small site with two distribution routers sharing a user VLAN through a Layer-2 access switch, each with its own point-to-point uplink to a core router. The starter works in steady state but suffers a blackhole during uplink failures and never reclaims Active without preemption. Your job is to add preempt and tracking on the correct router/interface and verify end-to-end forwarding under failover and failback.

CCNA65 min5 objectives

IntermediateDailyLocked

CCNA Foundations: HSRP — One Virtual Gateway, Two Routers

Stand up HSRP on two routers sharing a single user VLAN so campus hosts point to a resilient virtual default gateway. You will configure HSRP on both routers, make one router the active forwarder, and verify failover from the end hosts.

CCNA55 min5 objectives

IntermediateDailyLocked

CCNA EtherChannel: Why Won't It Bundle?

Troubleshoot and fix an LACP EtherChannel between campus switches so both physical members bundle and the trunk reliably carries VLAN 10. Two independent faults are seeded: an intra-bundle trunk mismatch on one switch and an administratively down member on the other. Learners diagnose with show commands, align trunk attributes, and verify end-to-end host reachability.

CCNA55 min5 objectives

IntermediateDailyLocked

CCNA Foundations: Grow the Bundle & Spread the Load

Daily CCNA campus-redundancy lab focused on EtherChannel scale-out and hashing. Two distribution switches are joined by three parallel trunk links. Two links are already bundled with LACP into a trunking port-channel; the third is a plain trunk currently STP-blocked and wasting capacity. Add the spare link to the existing bundle on both sides and change the global hashing method so multiple flows can actually use multiple member links. End-to-end switching must continue to work for the users VLAN.

CCNA55 min4 objectives

IntermediateDailyLocked

CCNA: EtherChannel Mode Matching (PAgP, LACP, Static)

Hands-on CCNA EtherChannel repair lab. Two uplinks between a distribution and an access switch are intended to form a single port-channel trunk carrying VLAN 10. The starter ships with a real mode mismatch across the bundle and an allow-list error, so the Port-channel stays down and hosts cannot talk. Learners diagnose the symptom and standardize on one protocol family (PAgP, LACP, or Static) and correct trunking so VLAN 10 forwards end-to-end.

CCNA55 min4 objectives

What's unlocked, and what's free

Subscription access, and the labs that need none.

A subscription unlocks every lab on this page for as long as it's active — the whole daily back catalogue, not just the labs published after you join, plus every series lab. Bundles and study paths aren't sold separately; the subscription is the only plan.

Free labs need no subscription at all: every lab you can build and grade without one is the sample, plus the opening lab of each series.