Thirteen hands-on first-hop redundancy labs — HSRP virtual gateways, priority/preempt, interface tracking, MD5 authentication, timers, HSRPv2, multi-group load-sharing, and VRRP — on CML free-tier (5 nodes or fewer).
Build a fault-tolerant default gateway on a single LAN using HSRP. Two routers share one virtual IP so a host keeps the same default route even if one router fails. You will configure basic HSRP group 1 with a shared VIP, verify active/standby roles, and confirm the host can ping the virtual gateway.
View lab detailsSet HSRP priority to deterministically choose the active default gateway on a shared LAN. Two IOS routers (R1, R2) and one access switch serve a small user LAN with a single virtual gateway IP. By default R2 becomes active due to its higher interface IP; raise R1’s HSRP priority so it becomes the designated active router for group 1 while hosts keep a single virtual gateway.
View lab detailsIntermediate CCNA lab focused on HSRP preempt behavior. Two routers share a virtual default gateway on a single user VLAN. The baseline already has HSRP group 1 with R1 at higher priority, but HSRP doesn't preempt by default — if R1 reboots, R2 stays active even after R1 returns. The learner enables preempt on R1 so it deterministically reclaims the active role whenever it's up, keeping the intended primary in control. Verification uses show standby on routers and basic host pings to the virtual gateway.
New here? Start with the free study hub and step-by-step guides, then own the bundle to practice on real Cisco IOS.
13 hands-on, auto-graded CCNA & CCNP labs spanning 18 topics — each one a real Cisco Modeling Labs scenario you build on Cisco IOS. It's a one-time $29.99 and every lab is yours to keep forever.
A one-time purchase — $29.99. Buy once and own every lab in the bundle permanently; it's separate from the daily-lab subscription, so there's nothing recurring.
Yes — each lab is a Cisco Modeling Labs (CML) topology you import and build on real Cisco IOS, and the CML free tier is enough. You download the topology and lab guide, then build it yourself.
Every lab ships as a problem to solve. You build it in CML, then submit your config to grade it against the answer key — you get a pass/fail on each objective, so you know exactly what's right and what to fix instead of guessing.
CCNA & CCNP. The labs are sequenced to build the hands-on configuration and troubleshooting skills CCNA & CCNP candidates are expected to demonstrate on real gear.
Implement HSRP with interface tracking so the virtual gateway fails over when the active router loses its upstream link. Two routers (R1, R2) share a user LAN via SW with a single virtual default gateway for the PC, and both uplink to a separate CORE switch. The learner adds HSRP group 1 with a virtual IP, priority/preempt on R1, and tracks R1's uplink to drive deterministic failover.
View lab detailsHarden an HSRP virtual default gateway with MD5 authentication so only trusted routers can participate. You’ll secure an existing HSRP group on two IOS routers that share a user VLAN via a single L2 switch. Validate the authentication state on both routers and confirm the endpoint still reaches the virtual IP.
View lab detailsConfigure HSRP on two routers with a shared virtual gateway and speed up failover by tightening hello/hold timers to 1/3 seconds. Validate deterministic active/standby selection and confirm timer settings via show commands.
View lab detailsMigrate a single-subnet LAN from HSRP version 1 assumptions to HSRP version 2, enabling group numbers above 255. Configure HSRPv2 on two routers that share one virtual default gateway IP so hosts retain gateway resilience without reconfiguration.
View lab detailsImplement two HSRP groups on a single VLAN so each router is Active for one group and Standby for the other. Two hosts split default gateways across the two virtual IPs for deterministic load-sharing with redundancy.
View lab detailsReplace HSRP with open-standard VRRP to provide a shared virtual gateway on a single access VLAN. Configure VRRP group 1 with a common virtual IP and deterministic master/backup roles via priority and preempt. Validate using show vrrp commands and end-host pings.
View lab detailsConfigure VRRP with interface object tracking so the virtual gateway fails over when the active router loses its upstream link, avoiding black-holing. The site LAN (VLAN 10) uses a single virtual default gateway (10.0.10.254) shared by two IOS routers (R1, R2). A separate access switch (SW) bridges the LAN. Both routers uplink via Ethernet0/1 to a second switch (CORE) on VLAN 99 to represent the upstream path. R1 is the intended VRRP master (priority 110). You will create a track object that monitors R1's uplink (Ethernet0/1) and decrements its VRRP priority by 20 if the link fails, allowing R2 to preemptively take over as master. The lab grades the deterministic VRRP configuration: common group and virtual IP on both routers, R1 priority 110, the global track object, and the 'vrrp 1 track 1 decrement 20' tie-in on R1.
View lab detailsAdvanced VRRP on a single VLAN: configure two VRRP groups on R1/R2 so each router is Master for one group and Backup for the other, distributing host egress while preserving gateway redundancy.
View lab detailsAdvanced CCNP VRRP lab: standardize the VRRP advertisement interval to 3 seconds on a shared user VLAN. Two IOS routers (R1, R2) and two hosts connect to a single access switch on VLAN 10 (10.0.10.0/24). Both routers share VRRP group 1 and the same virtual IP 10.0.10.254 so hosts keep one default gateway. R1 is the master via priority 110; both routers explicitly set 'vrrp 1 timers advertise 3' to enforce a consistent master advertisement rate and backup master-down detection window. Verify with 'show vrrp' (Advertisement interval 3.000 sec) and host pings to the VIP.
View lab detailsTroubleshoot and repair a pre-broken HSRP gateway on a single shared LAN. Two routers (R1, R2) and two clients (PC1, PC2) connect to a single L2 switch (SW1) in VLAN 10. The hosts intermittently lose gateway reachability because both routers act active due to seeded faults. Use show commands to diagnose, then correct HSRP so both routers share one virtual IP and R1 deterministically wins active.
View lab details