Free online network labs — OSPF, BGP, VLAN, ACL, MPLS
89 hands-on networking labs that run in your browser: routing, switching, security, IPv6, MPLS and wireless. Real CLI on Cisco IOS, Junos, VyOS and EXOS, each step checked as you go. Free, no install, no account.
Fundamentals
- Break and fix — your first troubleshooting walkBeginner · 10 min
- Config mode — your first configuration changesBeginner · 10 min
- EXOS break and fix — port disabledBeginner · 8 min
- EXOS config — create a VLAN, add a port, give it an IPBeginner · 10 min
- EXOS ping and tracerouteBeginner · 5 min
- EXOS save configuration and show configBeginner · 5 min
- EXOS show and tell — three more readsBeginner · 7 min
- Junos break and fix — reproduce, localise, commit, verifyBeginner · 10 min
- Junos commit, rollback, show configurationBeginner · 7 min
- Junos config mode — set, show candidate, commitBeginner · 10 min
- Junos ping and tracerouteBeginner · 5 min
- Junos show and tell — read state across protocolsBeginner · 7 min
- Ping, traceroute, and netverdict's
diagnose pingBeginner · 7 min - Save your work and pull a tech-dumpBeginner · 6 min
- Show and tell — read a router's stateBeginner · 10 min
- VyOS break and fix — missing IP on uplinkBeginner · 8 min
- VyOS commit, save, show configurationBeginner · 7 min
- VyOS config mode — set, commit, saveBeginner · 10 min
- VyOS ping and tracerouteBeginner · 5 min
- VyOS show and tell — three more op-mode readsBeginner · 7 min
- Your first ExtremeXOS switch — VLAN-centric readsBeginner · 8 min
- Your first Junos router — op-mode and the terse viewsBeginner · 8 min
- Your first router — meet the netverdict CLIBeginner · 8 min
- Your first VyOS router — op-mode readsBeginner · 8 min
Routing
- Static routes — egress-interface form (point-to-point)Beginner · 8 min
- Static routes — fix hub-and-spokeBeginner · 12 min
- Syntax delta — static route (Cisco IOS)Beginner · 4 min
- Syntax delta — static route (Extreme EXOS)Beginner · 4 min
- Syntax delta — static route (Juniper Junos)Beginner · 5 min
- Syntax delta — static route (VyOS)Beginner · 5 min
- BGP — AS-path prepending for egress path influenceIntermediate · 10 min
- BGP — community-list standard: tag outbound, filter on receiveIntermediate · 14 min
- BGP — expanded community-list with regex matchIntermediate · 12 min
- BGP — local-preference for ingress path selectionIntermediate · 12 min
- BGP — MED for egress tiebreakIntermediate · 8 min
- EIGRP —
ip summary-address eigrpper-interfaceIntermediate · 10 min - EIGRP: AS 100 across a three-router chainIntermediate · 14 min
- OSPF — DR/BDR election on a broadcast segmentIntermediate · 12 min
- OSPF — multi-area + the ABRIntermediate · 14 min
- Reliable static routing — track-gated default routeIntermediate · 10 min
- OSPF —
area X rangefor ABR Type-3 summary aggregationAdvanced · 14 min - OSPF — virtual link across a transit areaAdvanced · 14 min
Switching
- Syntax delta — VLAN access port (Cisco IOS)Beginner · 5 min
- Syntax delta — VLAN access port (Extreme EXOS)Beginner · 5 min
- VLANs: configure access portsBeginner · 12 min
- EtherChannel: bundle two links between switches with LACPIntermediate · 12 min
- STP: force a root bridge in a redundant L2 triangleIntermediate · 12 min
- Trunk between two switchesIntermediate · 15 min
Security
- ACL: block a single hostBeginner · 10 min
- ACL — time-gated entries with
time-rangeIntermediate · 12 min - ACL: named extended — proto + src + dstIntermediate · 12 min
- Extended ACL — port range matchersIntermediate · 7 min
- Extended ACL with
object-group networkIntermediate · 10 min
IPv6
- IPv6 dual-stack: addresses + a static routeIntermediate · 14 min
- IPv6 static route — egress-interface formIntermediate · 7 min
- OSPFv3 — IPv6 routing alongside OSPFv2Intermediate · 12 min
WAN & MPLS
- GRE tunnel: connect two sites over the public internetIntermediate · 18 min
- MPLS L3VPN: connect a customer to a 3rd-party providerAdvanced · 15 min
- MPLS-VPN — full PE-side configuration (CE has it; now build the PE)Advanced · 18 min
Services & wireless
- Configure a DHCP serverBeginner · 12 min
- WLAN — broadcast a basic SSIDBeginner · 10 min
- AP-join profile — country code + SSHIntermediate · 10 min
- HSRP — interface tracking with priority decrementIntermediate · 12 min
- HSRP: configure first-hop redundancyIntermediate · 12 min
- NAT: PAT (overload) for an inside LANIntermediate · 14 min
- RF profiles — per-band radio plan + RF tagIntermediate · 12 min
- Tags + AP binding — wire a WLAN end-to-endIntermediate · 15 min
- Verify the wireless model with show commandsIntermediate · 12 min
- VRF-Lite — two customers on one routerIntermediate · 12 min
- Wireless policy profile — bind egress VLANIntermediate · 12 min
- Accounting + mDNS gateway + mobility groupsAdvanced · 12 min
- AP fault tolerance + rogue detection + AAA override / SGTAdvanced · 12 min
- Branch AP, DMZ controller, firewall in the middleAdvanced · 15 min
- CAPWAP carries any IP traffic — UDP/TCP round-trip via DNSAdvanced · 12 min
- CAPWAP discovery — AP joins controller via DHCP option-138Advanced · 15 min
- CAPWAP end-to-end — wifi-client traffic decap'd at the WLCAdvanced · 15 min
- CAPWAP retry, heartbeat, and wifi-client tunnel emissionAdvanced · 18 min
- CAPWAP round-trip — wifi-client traffic both directionsAdvanced · 18 min
- DHCP-via-AP — wifi-clients acquire IPs through CAPWAPAdvanced · 12 min
- FlexConnect groups + AVC profiles + WIPS containment + hyperlocationAdvanced · 12 min
- Guest WLAN — DMZ anchor + lobby-ambassador users + sleeping clientAdvanced · 14 min
- Mesh APs and WiFi-6 capabilityAdvanced · 12 min
- Per-AP radios + web-auth WLAN + band-select / load-balanceAdvanced · 12 min
- Per-WLAN ACLs at the AP — filter wireless client trafficAdvanced · 12 min
- QoS + WLAN scheduling + iPSK + fast-roaming + HA SSOAdvanced · 14 min
- Wireless client reach — probe through the joined controllerAdvanced · 12 min
- WPA2-Enterprise — RADIUS auth before traffic flowsAdvanced · 12 min