Cisco labs on real hardware.

What you get

• 17 live Cisco labs, each 60–90 minutes on 3–6 nodes.
• Real firmware, not a simulator. Genuine Cisco equipment racked in Navi Mumbai.
• Nothing to install. The topology and every console run in your browser over HTML5.
• Aimed at CCNA 200-301, CCNP ENCOR and ENARSI — and at the work those certifications describe.
• 8 free on the demo. 48 hours, no card, no install.

Free on the 48-hour demo

Choose Cisco on the demo request form — you can pick up to two platforms — and these open immediately:

• VLANs and Trunking — Two IOSv-L2 switches joined by an 802.1Q trunk carrying VLAN 10 and VLAN 20. Same-VLAN hosts must reach each other across both switches; different VLANs must not.
• Spanning Tree — Three IOSv-L2 switches cabled in a physical loop. Configure Rapid-PVST, force a specific root bridge, and confirm one link goes to blocking so the loop is broken while hosts stay reachable.
• EtherChannel — Two IOSv-L2 switches with a two-link LACP EtherChannel between them. Bundle the links into a port-channel, trunk it, and confirm both member links are bundled and forwarding.
• Inter-VLAN Routing — Router-on-a-stick. One IOSv router trunked to an IOSv-L2 switch carrying two VLANs. Configure 802.1Q sub-interfaces so the VLANs route between each other, and set the host default gateways.
• Static Routing — Three IOSv routers in a chain. Give every network a reachable path using only static routes, then prove end-to-end connectivity from PC1 to PC2.
• OSPF Single Area — Three IOSv routers in a triangle. Bring up OSPF area 0 on every link so each router learns all networks dynamically, then verify PC1 can reach PC2.
• EIGRP Routing — Three IOSv routers in a chain running EIGRP AS 100. Advertise every connected network, confirm neighbour adjacencies form and prove edge-to-edge reachability.
• ACLs and NAT — An IOSv edge router between an inside LAN and a simulated ISP. Configure NAT overload for the inside network and an extended ACL that permits only the required outbound traffic. Prove the policy with pings.

The full Cisco catalogue

Associate · 13 labs

• VLANs and Trunking Fundamentals
  Two switches carrying two VLANs over a trunk. Hosts in the same VLAN must reach each other across both switches; hosts in different VLANs must not.
  6 nodes · 45 min
• VLANs and Trunking
  Two IOSv-L2 switches joined by an 802.1Q trunk carrying VLAN 10 and VLAN 20. Same-VLAN hosts must reach each other across both switches; different VLANs must not.
  6 nodes · 90 min · free on demo
• VLAN Segmentation Showcase
  Fully pre-configured switching demo: same-VLAN traffic crosses the trunk, cross-VLAN traffic is isolated. The simplest 'aha moment' in networking.
  5 nodes · 90 min
• Spanning Tree
  Three IOSv-L2 switches cabled in a physical loop. Configure Rapid-PVST, force a specific root bridge, and confirm one link goes to blocking so the loop is broken while hosts stay reachable.
  5 nodes · 90 min · free on demo
• EtherChannel
  Two IOSv-L2 switches with a two-link LACP EtherChannel between them. Bundle the links into a port-channel, trunk it, and confirm both member links are bundled and forwarding.
  4 nodes · 90 min · free on demo
• Inter-VLAN Routing
  Router-on-a-stick. One IOSv router trunked to an IOSv-L2 switch carrying two VLANs. Configure 802.1Q sub-interfaces so the VLANs route between each other, and set the host default gateways.
  4 nodes · 90 min · free on demo
• Enterprise OSPF Live Failover
  Fully pre-configured - just start all nodes and present. OSPF triangle with live failover: ping end-to-end, kill a link, watch OSPF reroute in seconds.
  5 nodes · 90 min
• Static Routing
  Three IOSv routers in a chain. Give every network a reachable path using only static routes, then prove end-to-end connectivity from PC1 to PC2.
  5 nodes · 90 min · free on demo
• OSPF Single Area
  Three IOSv routers in a triangle. Bring up OSPF area 0 on every link so each router learns all networks dynamically, then verify PC1 can reach PC2.
  5 nodes · 90 min · free on demo
• EIGRP Routing
  Three IOSv routers in a chain running EIGRP AS 100. Advertise every connected network, confirm neighbour adjacencies form and prove edge-to-edge reachability.
  5 nodes · 90 min · free on demo
• ACLs and NAT
  An IOSv edge router between an inside LAN and a simulated ISP. Configure NAT overload for the inside network and an extended ACL that permits only the required outbound traffic. Prove the policy with pings.
  5 nodes · 90 min · free on demo
• InterVLAN Routing and DHCP
  Route between VLAN 10/20/30 with router-on-a-stick subinterfaces, then serve each VLAN from a central DHCP pool.
  5 nodes · 60 min
• EtherChannel and Port Security
  Bundle two links into an LACP EtherChannel and watch it survive a cable pull, then lock access ports to known MACs and trigger a violation on purpose.
  5 nodes · 75 min

Professional · 2 labs

• OSPF Multi-Area Enterprise
  Multi-area OSPF: Area 1 - ABR - Area 0 - ABR - Area 2 with summarization.
  4 nodes · 90 min
• EIGRP and Route Redistribution
  EIGRP AS100 and OSPF two-way redistribution with route-maps and tags on R3.
  4 nodes · 75 min

Expert · 2 labs

• BGP for the Enterprise Edge
  Dual-homed eBGP edge: LOCAL_PREF outbound, AS-path prepend inbound, prefix-list filtering.
  5 nodes · 120 min
• SD-WAN Dual-Transport Data Plane
  SCAFFOLD - upload /opt/unetlab/addons/qemu/ (vtedge - Viptela 18.4.x) to boot.
  6 nodes · 120 min

Start free

Request the demo, pick Cisco and one more platform, and credentials are emailed to you. 48 hours, no payment method, nothing to cancel.

Request a free Cisco lab →

Already have an account? Sign in. Want the whole catalogue, timed exam labs and certificates? See the plans.

NexusSec vLabs · Navi Mumbai, Maharashtra, India · vlabs@nxsvl.com