Hands-On Lab Guides
75 labs, 457 lessons. Every command explained, every IP exact, every topology drawn. Built for first-time learners doing labs on real equipment.
CCNA Labs
10 beginner-friendly labs covering switching, routing, services, and security fundamentals
Lab 1: VLANs & Trunking
Create VLANs, assign access ports, configure 802.1Q trunks
Lab 2: Inter-VLAN Routing
Router-on-a-stick, SVIs, Layer 3 switching
Lab 3: EtherChannel & Spanning Tree
LACP, PAgP, RSTP, PortFast, BPDU Guard
Lab 4: Static Routing & IP SLA
Static routes, floating static, IP SLA tracking
Lab 5: OSPF Single Area
OSPFv2 single area, DR/BDR, cost, neighbor states
Lab 6: Multi-Area OSPF
Multi-area OSPF, ABR, summarization, stub areas
Lab 7: DHCP, NAT & PAT
DHCP server/relay, static NAT, dynamic NAT, PAT
Lab 8: ACLs & Port Security
Standard/extended ACLs, VLAN ACLs, port security
Lab 9: IPv6 Fundamentals
IPv6 addressing, SLAAC, OSPFv3, dual-stack
Lab 10: FHRP & Network Services
HSRP, VRRP, NTP, DHCP snooping, IP SLA
Lab 61: IOS Navigation & Basic Commands
CLI modes, help system, show commands, config save
Lab 62: Router & Switch Initial Configuration
Hostname, passwords, banners, SSH, console security
Lab 63: Device Management & Monitoring
CDP/LLDP, syslog, NTP, SNMP, config backup
Lab 64: IPv4 Subnetting Lab
Subnetting practice, VLSM, address assignment
Lab 65: OSPF Troubleshooting
OSPF troubleshooting: neighbor, MTU, area, auth issues
Lab 66: EIGRP Configuration
EIGRP classic/named mode, metrics, variance, stub
Lab 67: Dynamic Routing Troubleshooting
Routing protocol comparison, debug, redistribution
Lab 68: HSRP — Gateway Redundancy
HSRP config, priority, preemption, tracking
Lab 69: Standard Access Control Lists
Standard ACLs, wildcard masks, placement, implicit deny
Lab 70: Extended Access Control Lists
Extended ACLs, protocol/port filtering, placement
Lab 71: Device Security Hardening
AAA, SSH-only, VTY ACLs, login block-for, hardening
Lab 72: Network Troubleshooting Methodology
OSI-based troubleshooting, structured methodology
Lab 73: DHCP Snooping & DAI
DHCP snooping, trusted ports, DAI, ARP inspection
Lab 74: Network Automation Basics
REST APIs, JSON, Python basics, automation concepts
Lab 75: Wireless Configuration Basics
WLC config, WLAN creation, WPA2/WPA3, AP association
CCNP Enterprise Labs
Advanced routing, SD-WAN, SD-Access, MPLS, QoS, and network automation
Lab 11: Advanced OSPF
LSA types, stub/NSSA, filtering, virtual links, BFD
Lab 12: EIGRP Mastery
Named mode, variance, stub, leak-maps, SHA auth
Lab 13: BGP Fundamentals
eBGP, iBGP, route reflectors, network command, filtering
Lab 14: BGP Path Selection
Weight, local-pref, AS-path, MED, communities
Lab 15: Route Redistribution
Mutual redistribution, route-maps, tagging, loop prevention
Lab 16: DMVPN & IPsec
DMVPN phases, NHRP, mGRE, IPsec, spoke-to-spoke
Lab 17: MPLS VPN
MPLS, LDP, VRFs, MP-BGP, PE-CE routing
Lab 18: SD-WAN Deployment
vManage, vSmart, vBond, WAN edge onboarding, templates
Lab 19: SD-Access Fabric
DNAC, ISE integration, LAN automation, VNs, SGTs
Lab 20: QoS & Network Automation
MQC, policing, shaping, LLQ, Python, Netmiko, EEM
CCNP Security Labs
ASA firewalls, VPN technologies, ISE, AAA, and content security
Lab 21: ASA Firewall Basics
ASA interfaces, security levels, basic ACLs, routing, ASDM
Lab 22: ASA NAT
Static NAT, dynamic NAT, PAT, policy NAT, NAT exemption
Lab 23: ASA Access Control & Inspection
MPF, application inspection, URL filtering, threat detection
Lab 24: Site-to-Site IPsec VPN
IKEv1, crypto maps, PSK, PKI, GRE over IPsec
Lab 25: AnyConnect SSL VPN
AnyConnect, SSL/DTLS, connection profiles, split tunneling
Lab 26: DMVPN & FlexVPN
DMVPN, FlexVPN, IKEv2, GETVPN, VPN HA
Lab 27: ISE & 802.1X
ISE setup, 802.1X, MAB, VLAN assignment, DACLs
Lab 28: ISE Advanced
BYOD, guest portals, posture, profiling, TrustSec
Lab 29: TACACS+ & AAA
TACACS+, AAA on IOS/ASA, command authorization, accounting
Lab 30: Email & Web Security
ESA mail filtering, WSA web proxy, WCCP, URL filtering
Lab 31: Secure Firewall — FTD Architecture
FTD architecture, deployment modes, FMC management
Lab 32: FTD Access Control & IPS
Access control policies, IPS, file/malware, SSL decrypt
Lab 33: Secure Firewall Zero Trust Access
Zero Trust Access, ZTNA, SAML, identity-based policies
Lab 34: ISE Deployment — Planning to Production
ISE deployment planning, sizing, HA, node roles
Lab 35: ISE Posture & Compliance
Posture assessment, compliance, remediation, Duo MFA
Lab 36: 802.1X Troubleshooting Deep Dive
802.1X troubleshooting, RADIUS debug, EAP analysis
Lab 37: VPN Technology Comparison
VPN comparison, migration from DMVPN to SD-WAN
Lab 38: AIOps for Network Security
AIOps for firewall, anomaly detection, AI-driven security
SD-WAN Deep Dive
Catalyst SD-WAN architecture, policies, security integration, APIs, and AI operations
Lab 39: Catalyst SD-WAN Architecture
SD-WAN architecture, control/data/management planes
Lab 40: SD-WAN Policies Deep Dive
Control policies, data policies, app-aware routing
Lab 41: SD-WAN with Secure Firewall
SD-WAN + Secure Firewall, service chaining, SSE
Lab 42: SD-WAN Manager APIs
SD-WAN REST APIs, automation, monitoring
Lab 43: AI-Powered SD-WAN Operations
AI for SD-WAN, LLMs, predictive analytics
Catalyst Center & SD-Access
Catalyst Center deployment, SDA fabric, TrustSec segmentation, APIs, and troubleshooting
Lab 44: Catalyst Center — From Zero to Deploy
Catalyst Center deployment, hierarchy, discovery, assurance
Lab 45: SD-Access Fabric — LISP/VXLAN
SDA fabric, LISP/VXLAN, control/data/policy planes
Lab 46: End-to-End Segmentation — TrustSec/SGT
TrustSec SGTs, micro-segmentation, SGACLs, cross-domain
Lab 47: SD-Access as Code
SDA automation, Catalyst Center APIs, ISE APIs, IaC
Lab 48: Catalyst Center Troubleshooting
Catalyst Center troubleshooting, services, errors
Network Automation
NETCONF, RESTCONF, Ansible, Python, Terraform, gRPC/gNMI, and NSO
Lab 49: NETCONF & RESTCONF
NETCONF, RESTCONF, YANG models, programmatic config
Lab 50: Ansible for Network Automation
Ansible playbooks, IOS/NXOS modules, roles, inventory
Lab 51: Python for Network Management
Python Netmiko, pyATS, REST APIs, device management
Lab 52: YANG Models & Telemetry
YANG models, MDT, streaming telemetry, gRPC
Lab 53: Terraform for Cisco Networks
Terraform IaC, Cisco providers, state management
Lab 54: gRPC, gNMI & Modern Protocols
gRPC, gNMI, gNOI, streaming, modern automation
Lab 55: NSO & Change Management
Cisco NSO, change management, service orchestration
AI for Network Engineers
AI/ML fundamentals, AIOps, LLMs for networking, IaC with AI, and AI-driven security
Lab 56: AI/ML Fundamentals for Network Engineers
AI/ML concepts, supervised/unsupervised, neural networks
Lab 57: AIOps — Real Use Cases
AIOps real use cases, anomaly detection, RCA, forecasting
Lab 58: LLMs & Generative AI for Networks
LLMs for networking, ChatGPT/Claude, config generation
Lab 59: Infrastructure as Code with AI
AI-powered IaC, self-healing, drift detection
Lab 60: AI-Driven Network Security
AI security, threat detection, ETA, security automation