Lab catalog
Filter by track and difficulty, or search by title and code.
Network Building Blocks: TCP/IP & OSI Models, Frames and Packets
40m · easy
Bandwidth vs Throughput, Latency and Delay
35m · easy
Network Types and Topologies: LAN to WLAN
30m · easy
Cloud vs On-Premises: SaaS, PaaS, IaaS
30m · easy
Common Applications and Protocols
40m · easy
Private vs Public Addresses and NAT Concepts
40m · easy
IPv4 Addresses and Subnet Formats
45m · easy
IPv6 Addresses and Prefix Formats
45m · medium
Cables and Connectors in the LAN
30m · easy
Wi-Fi, Cellular, and Wired Technologies
30m · easy
Endpoint Devices from PCs to IoT
30m · easy
Set Up and Check Connectivity on Client Operating Systems
40m · easy
Read Device Status Lights
30m · easy
Cable a Small Network from a Diagram
35m · easy
Identify Ports on Network Devices
35m · easy
Basic Routing Concepts: Default Gateway, L2 vs L3
40m · easy
Basic Switching Concepts: MAC Tables and VLANs
45m · easy
Troubleshooting Methodology and Help Desk Practice
35m · easy
Capture Packets (Wireshark + Embedded Packet Capture)
40m · easy
Basic Diagnostic Commands: ping, traceroute, nslookup, ipconfig
40m · easy
Remote Access: Console, Telnet, SSH, RDP, VPN
45m · easy
Cisco show Commands and Privilege Levels
45m · easy
How Firewalls Filter Traffic
45m · easy
Foundational Security: CIA, AAA, MFA, Threats
45m · easy
Wireless Security on a Home Router (WPA/WPA2/WPA3)
45m · easy
Identify Network Components
40m · easy
Network Topology Architectures: Two-Tier and Three-Tier
40m · easy
Spine-Leaf, WAN, SOHO, and Cloud Topologies
40m · easy
Compare TCP and UDP
40m · easy
Build and Test a SOHO Network
60m · medium
Physical Interfaces and Cabling Types
40m · easy
Identify Interface and Cable Issues
50m · medium
Virtualization Fundamentals: Servers, Containers, and VRFs
40m · medium
Basic Router Configuration
45m · easy
Configure a Basic IPv4 Network
40m · easy
Subnetting and VLSM Across Segments
60m · medium
Private IPv4 Addressing
35m · easy
Configure and Verify IPv6 Addressing and Prefix
50m · medium
IPv6 Address Types: GUA, ULA, and Link-Local
45m · medium
IPv6 SLAAC and Modified EUI-64
45m · medium
Wireless Principles: Channels, SSID, RF, and Encryption
40m · easy
Cisco Wireless Architectures and AP Modes
40m · medium
Wireless Security Protocols: WPA, WPA2, and WPA3
45m · medium
Verify IP Parameters on Client Operating Systems
40m · easy
Troubleshoot Wireless Client Connectivity (Windows / macOS / Linux)
40m · easy
Configure DHCP Client and Relay
55m · medium
The Role of DHCP
45m · easy
Configure and Verify Basic Switch Settings
45m · easy
Inter-VLAN Routing: Router-on-a-Stick
55m · medium
Inter-VLAN Routing: Layer 3 Switch SVIs
55m · medium
Switching Concepts: MAC Learning, Aging, and Flooding
45m · easy
Examine Ethernet Frames and the MAC Address Table
45m · easy
Create and Assign VLANs on a Single Switch
45m · easy
VLANs Spanning Multiple Switches
50m · medium
Configure Voice and Data VLANs on Access Ports
45m · easy
Default VLAN Behavior and Verification
35m · easy
Configure and Verify Trunk Links and 802.1Q
50m · medium
Native VLAN Configuration and Mismatch Troubleshooting
45m · medium
Configure and Verify CDP and LLDP
45m · easy
Layer 2 EtherChannel with LACP
55m · medium
Layer 3 EtherChannel with LACP
60m · hard
Interpret Rapid PVST+ Operations
55m · medium
PortFast and BPDU Guard
45m · easy
Root Guard, Loop Guard, and BPDU Filter
60m · hard
Wireless Foundation: Bring Up the WLC and Join the AP
45m · medium
Create a WLAN in the WLC GUI
55m · medium
Configure a Wireless Client and Associate to the WLAN
55m · medium
Multi-Switch Campus Access Capstone
90m · hard
Troubleshoot Layer 2/3 with Capture, Extended Ping, and Show Logging
45m · hard
Interpret the Components of the Routing Table
50m · easy
Routing Table Codes, AD, and Metric
45m · easy
Router Forwarding Decision: Longest Prefix Match
45m · easy
Administrative Distance and Metric in Action
45m · easy
Configure IPv4 Static and Network Routes
50m · easy
Configure IPv4 Default Routes
45m · easy
Configure IPv4 Host Routes
40m · easy
Configure IPv6 Static Routing
55m · medium
Configure Floating Static Routes
55m · medium
Configure Single-Area OSPFv2
60m · medium
OSPFv2 Neighbor Adjacencies
50m · medium
OSPFv2 on Point-to-Point Links
45m · medium
OSPFv2 Broadcast Networks: DR/BDR Election
55m · hard
OSPFv2 Router ID Selection
45m · medium
OSPF Passive Interfaces and Default Route Injection
50m · medium
Troubleshoot OSPFv2 Neighbor Adjacency
65m · hard
OSPF Cost and Path Selection
50m · medium
Static and OSPF Combined Routing
60m · hard
Inter-VLAN Routing with OSPF
70m · hard
Configure Single-Area OSPFv3 for IPv6
55m · medium
Describe First Hop Redundancy Protocols
40m · easy
FHRP Operation and Failover Behavior
55m · medium
Configure and Verify VRRP Operation and Failover
50m · medium
End-to-End IPv4 Connectivity Verification
45m · easy
End-to-End IPv6 Connectivity Verification
45m · easy
Deploy a Dual-Stack Routed Network
55m · medium
IP Connectivity Capstone
100m · expert
Configure Device Access Control with Local Passwords
50m · easy
Compare AAA: Authentication, Authorization, Accounting
40m · easy
Configure AAA Client Authentication (TACACS+ / RADIUS)
50m · medium
Password Policy and Alternatives
40m · easy
Configure Remote Access Using SSH
50m · medium
Secure File Transfer with SFTP/SCP
45m · medium
Configure Inside Source Static NAT
50m · easy
Configure Inside Source NAT with Pools and PAT
60m · medium
Diagnose DNS Record Types (A, AAAA, CNAME, MX, NS, PTR)
40m · easy
Describe IPsec Remote-Access and Site-to-Site VPNs
45m · easy
Configure Standard IPv4 ACLs
50m · easy
Configure Extended IPv4 ACLs
60m · medium
Configure Named ACLs
55m · medium
Configure DHCP Snooping
55m · medium
Configure Dynamic ARP Inspection
55m · medium
Configure Port Security
55m · medium
Configure Storm Control
40m · easy
Security Concepts: Threats, Vulnerabilities, Exploits, Mitigation
40m · easy
Security Program Elements
35m · easy
Layer 2 Security Capstone
90m · expert
Configure a WLAN with WPA2-PSK in the GUI
50m · medium
Agentic AI in Network Operations
40m · easy
Generative-AI Prompting for Network Operations
35m · easy
How Automation Impacts Network Management
35m · easy
Compare Traditional and Controller-Based Networking
40m · easy
Network Device Management Access Methods
45m · medium
The Function of SNMP
40m · easy
Ansible: Execute Commands
45m · easy
Syslog Facilities and Severity Levels
45m · easy
Automation and Programmability Capstone
60m · medium
Multi-Area OSPF and Inter-Area Routes
40m · medium
OSPF Multi-Area with an ABR
35m · medium
OSPF Stub Area
30m · medium
OSPF Totally-Stubby Area
30m · medium
OSPF MD5 Authentication
30m · medium
OSPF Inter-Area Summarization (area range)
35m · hard
OSPF Path Selection by Cost across Two Areas
35m · hard
4-Router Multi-Area OSPF Convergence
45m · hard
ENCOR EIGRP Neighbors and D Routes
30m · medium
ENCOR EIGRP Stub Routing
35m · medium
ENCOR eBGP Peering Between Two AS
35m · medium
ENCOR iBGP Peering Within One AS
35m · medium
ENCOR EIGRP Composite Metric Verification
35m · hard
ENCOR BGP Best-Path Influence with Weight
40m · hard
ENCOR BGP Inbound Prefix Filtering
40m · hard
ENCOR iBGP next-hop-self
40m · hard
ENCOR BGP-DEEP: Communities via Route-Map
40m · hard
ENCOR BGP-DEEP: AS-Path Prepend
40m · hard
ENCOR BGP-DEEP: MED (Multi-Exit Discriminator)
40m · hard
ENCOR BGP-DEEP: LOCAL_PREF across iBGP
45m · hard
ENCOR BGP-DEEP: Route Reflector
45m · hard
ENCOR BGP-DEEP: Confederation
45m · hard
ENCOR BGP-DEEP: Aggregate-Address Summary-Only
40m · hard
ENCOR BGP-DEEP: Advertisement Filtering (Route-Map Out)
40m · hard
OSPF NSSA — Type-7 Externals and ABR Translation
40m · hard
Redistribute EIGRP into OSPF (O E2 Externals)
35m · hard
Redistribute OSPF into EIGRP (D EX Externals)
35m · hard
Selective Redistribution with a Route-Map Prefix Filter
45m · hard
EIGRP Variance (Unequal-Cost Load Balancing)
35m · hard
EIGRP MD5 Authentication (Key-Chain)
35m · hard
OSPF Route Filtering at the Redistribution Point
40m · hard
Redistribute Static with Metric, Metric-Type, and Tag
35m · hard
OSPF Virtual Link Across a Transit Area
45m · hard
OSPF 5-Router Multi-Area Convergence
45m · hard
Policy-Based Routing (PBR)
40m · hard
Floating Static Route with Object Tracking
40m · hard
Mutual Redistribution with Tag-Based Loop Prevention
45m · hard
iBGP Peer-Group Template
40m · hard
BGP Best-Path Control with Weight
40m · hard
Multi-Protocol Edge: OSPF Core + eBGP + Redistribution
50m · hard
MST Region and Instance-to-VLAN Mapping
30m · medium
Rapid-PVST+ Primary and Secondary Root
30m · medium
HSRPv2 with Priority, Preempt, and Version 2
30m · medium
VRRP Group with Priority
30m · medium
LACP EtherChannel and Spanning-Tree Interaction
30m · medium
MST Root Bridge Per Instance
30m · hard
GLBP with Weighting and Load Balancing
35m · hard
FHRP with Interface Tracking
35m · hard
GRE Tunnel Protected by IKEv2 IPsec
50m · hard
Static Routing Across a GRE Overlay
30m · hard
GRE Point-to-Point Tunnel Overlay
30m · hard
Inter-VRF Route Leaking with Route-Targets
45m · hard
IKEv2 IPsec-Protected Site-to-Site Tunnel
50m · hard
MPLS L3VPN Basics: PE-CE VPNv4
60m · hard
VRF-lite: Isolating Two Customers on One Router
35m · hard
Overlapping Addresses in Separate VRFs
40m · hard
VRF-Aware Static Routing
25m · hard
Three-VRF Shared-Services Extranet (RT Import/Export)
55m · expert
MPLS L3VPN: Two Customers on Shared PEs
75m · expert
PIM Sparse-Mode with a Static RP
40m · medium
IGMP Group Membership
30m · medium
Dynamic RP with Auto-RP
45m · medium
Local SPAN Port Mirroring
25m · medium
Flexible NetFlow Configuration
35m · medium
IP SLA ICMP Echo with Object Tracking
30m · medium
SNMP Monitoring
30m · medium
Syslog and NTP Time Sync
30m · medium
PIM Sparse-Mode Over a Multi-Hop Core
55m · hard
Anycast-RP Redundancy with MSDP
60m · expert
AAA with TACACS+
30m · medium
Dynamic ARP Inspection (DAI)
30m · medium
Advanced Port Security — Violation Modes
30m · medium
Infrastructure Protection ACL (Bogon Filtering)
35m · medium
Device Hardening Bundle
35m · medium
Storm Control — Broadcast Suppression
20m · medium
Err-Disable Auto-Recovery
20m · medium
Private VLANs — Isolated and Community Secondaries
25m · medium
DHCP Snooping — Trust Boundary and Rate-Limit
25m · medium
NTP Hierarchy with MD5 Authentication
30m · medium
SNMPv3 — Groups and Users
25m · medium
Management-Plane Hardening — VTY, SSH, and Banner
30m · medium
802.1X Port Authentication
35m · hard
DHCP Snooping + Dynamic ARP Inspection
35m · hard
CBWFQ Bandwidth Allocation by Percent
20m · medium
Low-Latency Queuing (LLQ) for Voice
25m · medium
QoS Marking with a Policy-Map (set dscp)
25m · medium
MQC Traffic Classification with Class-Maps
25m · medium
Traffic Policing with the police Command
25m · medium
Applying a QoS Policy with service-policy
20m · medium
Traffic Shaping with shape average
20m · medium
QoS Trust Boundary with mls qos trust
20m · medium
Control-Plane Policing (CoPP)
40m · hard
OSPFv3 for IPv6
30m · medium
OSPFv3 Multi-Area (IPv6): O and O IA
35m · hard
OSPFv3 (IPv6): Router-ID and Interface Enablement
30m · hard
EIGRP for IPv6 — Process and Interface Enablement
30m · hard
IPv6 Static and Default Routes
25m · hard
Dual-Stack OSPFv2 + OSPFv3
35m · hard
IPv6 First-Hop Addressing + Link-Local Next-Hop Static
25m · hard
Capstone TS: VLAN + Trunk Break
40m · hard
Capstone TS: Inter-VLAN Down — L3 Switch Not Routing
35m · hard
Capstone TS: OSPF Area Mismatch in a Multi-Router Path
40m · hard
Capstone TS: Static Route Black-Holing an EIGRP Path
40m · hard
Capstone TS: BGP Edge Filter Drops a Provider Prefix
45m · hard
Capstone TS: One-Way Redistribution Gap at the Boundary
45m · hard
Capstone TS: ACL Blocking the Server Tier
40m · hard
Capstone TS: HSRP Wrong Priority and Missing Tracking
40m · hard
Capstone: Campus Access/Distribution — SVIs, HSRP, EtherChannel, STP
90m · expert
Capstone: Enterprise Routed Core — OSPF + EIGRP + Redistribution + NAT
90m · expert
Capstone: SP Edge — Dual-Homed eBGP + iBGP Route-Reflector
90m · expert
Capstone: WAN + Services — OSPF WAN, NAT, HSRP, Management
95m · expert
Capstone: MPLS L3VPN Provider — PE/P/CE, Two Isolated Customers
100m · expert
Capstone: Dual-Datacenter OSPF Multi-Area + BGP Interconnect + VRRP
95m · expert
Capstone: Retail Multi-Site EIGRP WAN + Inter-VLAN + HSRP + DHCP + ACL
90m · expert
Capstone: Campus MST + RPVST + EtherChannel + L3 Core (OSPF/HSRP)
95m · expert
Capstone: IS-IS Backbone + BGP Edge + PIM-SM Multicast
95m · expert
Capstone TS: Two Independent Faults on the Path
45m · expert
Capstone TS: End-to-End Enterprise Path — Two Faults
50m · expert
Edge Capstone: L3VPN Primary + Static-over-GRE Backup
80m · expert
ENARSI EIGRP Manual Summarization
30m · medium
ENARSI EIGRP Equal-Cost Load Balancing (Diamond)
30m · medium
ENARSI EIGRP: Successor and Feasible Successor
30m · medium
ENARSI EIGRP MD5 Authentication (Key-Chain)
35m · hard
ENARSI EIGRP Metric Tuning (Bandwidth)
35m · hard
EIGRP Summarization to a /21 with a Feasible Successor
35m · hard
ENARSI EIGRP Stub Routing
35m · medium
OSPF Interface MD5 Authentication
30m · medium
OSPF Path Manipulation by Interface Cost
30m · medium
ENARSI OSPF: Inter-Area Route Advertisement
30m · medium
OSPF Virtual Link to Rejoin a Partitioned Backbone
45m · hard
OSPF ABR Summarization + Reachability to the Supernet
35m · hard
Multi-Area OSPF Stub Area + Reachability Across
35m · hard
ENARSI BGP: eBGP + iBGP Full Mesh
45m · hard
ENARSI BGP: LOCAL_PREF Outbound Steering
45m · hard
ENARSI BGP: Route Reflector with Two Clients
45m · hard
ENARSI BGP: Best-Path Tie-Break (WEIGHT beats AS_PATH)
40m · hard
OSPF LSA Types Walk-through (1/2/3/5)
40m · medium
ENARSI: Static Routing + Policy-Based Routing
35m · medium
Mutual OSPF ↔ EIGRP Redistribution with Loop Prevention
50m · hard
OSPF NSSA with N2 Externals
45m · hard
ENARSI BGP: AS-Path Prepend Inbound Steering
40m · hard
ENARSI BGP: Communities + Community-List
45m · hard
ENARSI BGP: Route-Map + Prefix-List Filtering
45m · hard
Mutual EIGRP ↔ OSPF Redistribution with a Route-Map Filter
50m · hard
Redistribution Loop Prevention with Route Tags
55m · hard
Redistributing Connected & Static with Metric-Type Control
45m · hard
Route-Map with Multiple Match / Set Clauses
55m · hard
Prefix-List Filtering on Redistribution (Ranged le)
45m · hard
Administrative-Distance Arbitration Between Redistribution Sources
50m · hard
Policy-Based Routing with ip policy route-map
40m · hard
OSPF + EIGRP Dual-Protocol Domain (Redistribution Boundary)
45m · hard
OSPF Core + eBGP Edge (Redistribution Both Ways)
50m · hard
PBR + Backup Floating Static Combined
45m · hard
DHCP Server Pool with Cross-Subnet Relay
30m · medium
NTP Hierarchy with Authentication
30m · medium
Infrastructure ACL — Deny Bogons, Permit Management
30m · medium
Standard ACLs — Numbered and Named
30m · medium
Extended ACL with Layer-4 Matching
35m · medium
Unicast RPF (Strict Mode) at the Edge
25m · medium
AAA with RADIUS Method Lists
30m · medium
Device Hardening Bundle with a Management ACL
40m · medium
Flexible NetFlow: Record, Exporter, Monitor, Bind
35m · medium
DHCP: Multiple Pools with Cross-Subnet Relay
35m · medium
SNMPv3 and Centralized Syslog
35m · hard
IP SLA, Object Tracking, and Floating Static Failover
40m · hard
Stateful Edge Filtering with an established ACL
35m · hard
Control-Plane Policing (CoPP)
40m · hard
IP SLA, Tracking, and Floating-Static Reroute
40m · hard
Management Bundle: NTP, Syslog, and SNMPv3
40m · hard
GRE Tunnel with Static Routing Over the Overlay
35m · medium
Site-to-Site VPN — GRE Protected by IKEv2 IPsec
55m · hard
DMVPN Phase 1 — Register a Spoke to the Hub (mGRE + NHRP)
45m · hard
MPLS L3VPN — Two Customers, VPNv4 Isolation
80m · expert
Inter-VRF Route Leaking via Route-Target (Extranet)
55m · expert
L3VPN PE-CE: VRF Static + BGP in One VPN
60m · expert
Static-VTI Hub-Spoke VPN (DMVPN Fallback)
60m · expert
OSPFv3 Router-ID Stability (IPv6)
25m · easy
IPv6 First-Hop and Static Routing
30m · medium
OSPFv3 Single-Area Adjacency (IPv6)
30m · medium
OSPFv3 Multi-Area ABR (IPv6)
35m · medium
OSPFv3 Cost-Based Path Selection (IPv6)
30m · medium
IPv6 Floating Static (Backup Path)
25m · medium
IPv6 Static Summarization (Aggregate Route)
25m · medium
IPv6 ACL Traffic Filter (Block Telnet)
30m · medium
IPv6 ACL Traffic Filtering
35m · medium
IPv6 Edge Hardening (ACL + uRPF)
35m · hard
ENARSI Troubleshoot: EIGRP AS Mismatch
30m · medium
ENARSI Troubleshoot: passive-interface on the Wrong Link
30m · medium
ENARSI Troubleshoot: Wrong EIGRP network Statement
30m · medium
Troubleshoot: OSPF Adjacency Down on a Transit Link
30m · medium
Troubleshoot: OSPF Wrong network / area Statement
35m · medium
Troubleshoot: ACL Blocking Legitimate Traffic
30m · medium
ENARSI TS: EIGRP Wrong AS on One Router
30m · medium
ENARSI TS: EIGRP Passive Interface on the Transit Link
30m · medium
ENARSI TS: EIGRP Missing network Statement
30m · medium
ENARSI TS: Shutdown Interface on the EIGRP Path
25m · medium
ENARSI TS: OSPF Area Mismatch on the Transit Link
35m · medium
ENARSI TS: OSPF Passive Interface on the Transit Link
30m · medium
TS: OSPFv3 Area Mismatch (IPv6)
25m · medium
TS: OSPFv3 Interface Not Enabled (IPv6)
25m · medium
Troubleshoot: Too-Narrow Static Mask Black-Holes the LAN
30m · medium
Troubleshoot: Missing Default Route on the Stub
25m · medium
Troubleshoot: Inbound ACL Denies the Client Subnet
30m · medium
ENARSI TS: EIGRP Network Wildcard Excludes the Transit
30m · medium
ENARSI TS: OSPF Area Mismatch on the Transit
30m · medium
ENARSI TS: Static Route Mask Too Narrow (Black-Hole)
25m · medium
ENARSI TS: Missing Default Route on a Stub Router
25m · medium
ENARSI TS: Inbound ACL Blocks the Management Subnet
30m · medium
Troubleshoot: OSPF Hello / MTU Parameter Mismatch
35m · hard
ENARSI BGP TS: Neighbor Wrong remote-as
35m · hard
ENARSI BGP TS: Missing network / Prefix Not Originated
35m · hard
Troubleshooting: Redistribution Blocked by a Route-Map Deny
40m · hard
Troubleshoot: Broken Return Route Behind the DHCP Relay
30m · hard
ENARSI TS: OSPF Wrong network Statement (Route Missing)
35m · hard
ENARSI TS: Missing Redistribution at the Boundary
40m · hard
ENARSI BGP TS: eBGP Wrong remote-as (Session Down)
35m · hard
ENARSI BGP TS: Missing network (Prefix Not Originated)
35m · hard
ENARSI BGP TS: Inbound Filter Drops a Needed Prefix
40m · hard
ENARSI BGP TS: Route Reflector Missing a Client
45m · hard
ENARSI Redistribution TS: External Dropped by Route-Map Deny
40m · hard
ENARSI Redistribution TS: Loop Guard Drops a Legit Route
45m · hard
ENARSI Redistribution TS: Wrong-AD Path Installed
50m · hard
ENARSI Mixed TS: BGP-into-OSPF Edge Not Redistributing
50m · hard
Troubleshoot: Two Faults on the Path (Shutdown + Wrong Next-Hop)
35m · hard
TS: One-Way Redistribution Boundary (External Missing)
40m · hard
TS: Discontiguous OSPF Backbone (Virtual Link)
45m · hard
ENARSI BGP TS: Inbound Route-Map Drops a Needed Prefix
40m · hard
ENARSI TS: One-Way Redistribution Gap (OSPF into EIGRP)
40m · hard
ENARSI TS: Three Faults on the Path
40m · hard
Troubleshoot: L3VPN Prefix Stuck in BGP (Missing RT Import)
45m · expert
CCIE Campus L2 Core: MST + EtherChannel + STP Hardening + UDLD
60m · hard
CCIE EIGRP Integration: Wide Metrics + Auth + Stub + Summarization
55m · hard
CCIE OSPF Integration: Multi-Area + Stub + Auth + Summarization
55m · hard
CCIE BGP Integration: eBGP + iBGP RR + LOCAL_PREF + Communities
60m · hard
CCIE Mutual Redistribution: EIGRP ⇄ OSPF ⇄ BGP, Loop-Free with Tags
60m · hard
CCIE VRF-Aware Routing: VRF-Lite + Static + BGP PE-CE + Route Leaking
60m · hard
CCIE PBR + Multi-VRF Edge: Policy Routing over Isolated Customer VRFs
55m · hard
CCIE Dual-Stack Routed Core: OSPFv2 + OSPFv3 over One Fabric
50m · hard
MP-BGP MPLS L3VPN PE-CE-PE Round Trip
75m · expert
CCIE Transport: MPLS L3VPN Multi-Customer (RT Isolation, PE-CE BGP + Static)
80m · hard
CCIE Transport: DMVPN Phase 1 Hub-and-Spoke (mGRE + NHRP + Tunnel Key)
70m · hard
CCIE Transport: Static VTI with IKEv2/IPsec Protection + Routing Over It
60m · hard
CCIE Transport: GRE Primary + Floating-Static Backup (AD Arbitration)
60m · hard
Control-Plane Policing and Protection (CoPP + Hardening)
55m · hard
AAA with TACACS+ (Method Lists + SSH VTY)
45m · hard
Infrastructure ACL + uRPF Anti-Spoofing
45m · hard
PIM Sparse-Mode + Static RP + IGMP
50m · hard
Services Bundle: Authenticated NTP + SNMPv3 + Syslog
45m · hard
SD-Access Fabric: Roles, LISP + VXLAN, Host Onboarding
55m · hard
SD-WAN Architecture: Controllers, OMP, and TLOCs
55m · hard
NETCONF vs RESTCONF: Transports, Operations, HTTP Verbs
55m · hard
YANG Data Modeling: Modules, Nodes, Native vs OpenConfig
50m · hard
Python for Network Ops + JSON Encoding
50m · hard
Ansible: Agentless Orchestration, Playbooks, Idempotency
50m · hard
YAML Syntax + Jinja2 Templating for Config Generation
50m · hard
OSPF Router-ID from Highest Loopback
25m · easy
OSPF Cost and Reference-Bandwidth Tuning
25m · medium
OSPF DR/BDR Election by Priority
30m · medium
OSPF Single Area — Three Routers
35m · medium
Troubleshoot: OSPF Adjacency Down (Passive Transit Link)
30m · medium
OSPF Hello/Dead Timer Match
30m · medium
Troubleshoot OSPF Hello-Parameter Mismatch
35m · medium
OSPF Single-Area Convergence (4 Routers)
35m · medium
OSPF Path Selection by Interface Cost
30m · medium
OSPF Point-to-Point Network Type
30m · medium
Troubleshoot OSPF Adjacency Down (Passive Transit)
30m · medium
Troubleshoot: OSPF Transit Link Left Passive
30m · medium
OSPF Router-ID, Loopback, and Passive Interface
35m · medium
OSPFv2 Single Area Adjacency and Routes
30m · medium
OSPF Default-Route Origination
30m · medium
OSPF Passive-Interface and Injected Default
35m · medium
Route Selection by Administrative Distance
35m · hard
Capstone (CCIE): MPLS L3VPN Two Customers + Shared-Services VRF Leak
110m · expert
Trunk Native VLAN Configuration
20m · easy
Switch Management SVI + Default Gateway
20m · easy
802.1Q Trunk Between Two Switches
25m · easy
VLANs and Access Ports
20m · easy
L3-Switch Inter-VLAN Routing with 3 SVIs
35m · medium
Multi-VLAN Router-on-a-Stick (3 VLANs)
35m · medium
Trunk Allowed-VLAN List Pruning
30m · medium
Troubleshoot: Access-Port VLAN Misassignment
25m · medium
Inter-VLAN Routing on a Layer-3 Switch (SVIs)
35m · medium
Trunk + Access Integration Across Two Switches
30m · medium
Four-VLAN Access Design on One Switch
30m · medium
Troubleshoot: VLAN Missing from the Trunk Allowed List
30m · medium
Troubleshoot: Access Port in the Wrong VLAN
25m · medium
Router-on-a-Stick Inter-VLAN Routing
30m · medium
PortFast and BPDU Guard on Access Ports
20m · easy
LACP EtherChannel Bundle
25m · medium
PAgP EtherChannel Bundle
25m · medium
Rapid-PVST+ Mode with Root Placement
25m · medium
Troubleshoot: EtherChannel LACP Mode Mismatch
25m · medium
Per-VLAN STP Root Load-Balancing
25m · medium
Influencing the STP Root Bridge
20m · medium
Layer-3 (Routed) EtherChannel
30m · hard
Standard Numbered ACL — Permit One LAN, Deny Another
25m · easy
Extended ACL — Protocol and Port Filtering
35m · medium
Extended ACL with Port Matching (HTTP/SSH)
35m · medium
Named Standard ACL — Permit One Subnet, Deny Another
30m · medium
Restrict VTY Access with an access-class
25m · medium
Troubleshoot: ACL Blocking Legitimate Traffic
30m · medium
Extended ACL — Permit Web + SSH, Deny the Rest
30m · medium
Troubleshoot ACL Placement
30m · medium
Editing a Standard Named ACL by Sequence Number
25m · medium
Troubleshoot: Standard ACL Permits the Wrong Source
30m · medium
Standard ACL — Permit One Host, Deny the Rest
30m · medium
Baseline Device Hardening — Banners, Hostname, Domain
25m · easy
Port Security on Access Ports
25m · easy
DHCP Snooping — Trust the Uplink
25m · medium
AAA Local Authentication
25m · medium
Device Hardening — SSH-Only Management
30m · medium
Troubleshoot: Static Route with the Wrong Next-Hop
25m · medium
Troubleshoot: Interface Down / Wrong Mask
25m · medium
Addressing Troubleshooting: Wrong Mask
25m · medium
Troubleshoot: EIGRP AS Mismatch
25m · medium
Troubleshoot: Transit Interface Administratively Shut
25m · medium
Troubleshoot: EIGRP AS-Number Mismatch
30m · medium
Troubleshoot: Static Route with the Wrong Mask
25m · medium
Troubleshoot: Missing Default Route on a Stub Router
25m · medium