Skip to content

CertificationsCisco CCNA 200-301Labs

Cisco CCNA 200-301 hands-on labs

The largest lab set here: VLANs, trunks, routing and troubleshooting across a topology, with in-depth builds for the exam day.

86 labs you run in the browser: 57 guided, 19 assisted, 7 challenge, 3 capstone. About 27 hours of authored lab time. 1 opens to any signed-in account without a lab grant.

86

labs

57

guided

steps in order

10

goal only

challenge and capstone

1

free tasters

signed-in, no grant

What you practise

Exam facts and study plan
VLAN 19access port 19static route 15troubleshooting 15trunk 14allowed VLAN list 13default route 11next hop 11longest prefix match 7802.1Q tag 6administrative state 5broadcast domain 5
  • Cisco-style device console and topology· you type86 labs

Every lab in this set

Title, scenario summary, skills and tool. The steps and the write-up stay in the app.

86 labs
  • Give the new access switch its standard name

    Free taster

    Guided · Quick · 4 min · Cisco-style device console and topology

    A new access switch arrived preconfigured with the factory style name SW7 and was handed straight to the build team. The naming standard for this building is building, role and number…

    hostnamedevice baselineSSH prerequisitesrunning configuration

  • Give the wireless segment its design label

    Pro

    Guided · Quick · 4 min · Cisco-style device console and topology

    SW-3A was staged in a lab and the build script created three segments in a hurry. Segment 30 came out with the placeholder label the switch makes up for itself…

    VLANVLAN labelaccess portwireless segment

  • Put the cage cameras on their own segment

    Pro

    Guided · Quick · 5 min · Cisco-style device console and topology

    Two camera heads were patched into the server cage this morning on Fa0/5 and Fa0/6 of SW-CAGE. Both jacks are still in the default segment…

    VLANaccess portbroadcast domainVLAN database

  • Return a wall jack from the phone segment to the staff segment

    Pro

    Guided · Quick · 5 min · Cisco-style device console and topology

    The desk phone in the second floor east corner was removed in the spring and the desk that replaced it holds a workstation. The jack, Fa0/6 on SW-2B, was left in the phone segment…

    VLANaccess portvoice VLANbroadcast domain

  • Give the edge router a way out

    Pro

    Guided · Quick · 6 min · Cisco-style device console and topology

    Branch users can reach the local file server and nothing else. EDGE-R1 holds two connected networks, an uplink to the provider on 203.0.113.2 and the user LAN on 10.40.0.1…

    static routedefault routenext hopgateway of last resort

  • Put a phone on its own VLAN

    Pro

    Guided · Quick · 6 min · Cisco-style device console and topology

    A desk phone shares a wall port with a workstation. Voice traffic must stay on VLAN 20 and the PC on VLAN 10, but Fa0/2 is still in the default VLAN.

    VLANaccess portvoice traffic

  • Quarantine the spare jacks in the workshop corridor

    Pro

    Guided · Quick · 6 min · Cisco-style device console and topology

    Two jacks in the workshop corridor at SW-PLT1 have nothing plugged into them and the corridor is open to contractors all day…

    VLANadministrative stateunused portsLayer 2 security

  • Read a thirty bit prefix off the depot design sheet

    Pro

    Guided · Quick · 6 min · Cisco-style device console and topology

    The new depot keeps a small transit block of its own, 203.0.113.4 with a thirty bit mask, holding the depot router and its provider…

    routing tableprefix and masknext hopstatic route

  • Route the store to a new plant room on a twenty seven bit mask

    Pro

    Guided · Quick · 6 min · Cisco-style device console and topology

    A plant room was built out over the summer and its controllers were given 10.99.4.64 with a twenty seven bit mask…

    static routesubnet maskprefix lengthnext hop

  • Build a test bench segment on three jacks

    Pro

    Guided · Quick · 7 min · Cisco-style device console and topology

    The hardware test bench in the lab shares a segment with the office floor, and the bench machines broadcast image traffic all day. Three jacks, Fa0/21, Fa0/22 and Fa0/23…

    VLANaccess portbroadcast domain

  • Route the branch to a second site and save it

    Pro

    Guided · Quick · 7 min · Cisco-style device console and topology

    A second site came online at 10.61.0.0/24 and nothing at this branch can reach it. R-SITE holds its own LAN on Gi0/1 and a provider link on Gi0/0 addressed as 192.0.2.10 with mask…

    static routenext hopstartup configuration

  • Route the store to a new wing on a quarter mask

    Pro

    Guided · Quick · 7 min · Cisco-style device console and topology

    A new wing opens next month behind the carrier network and its addresses were split out of the old block. The wing owns 172.25.6.128/25 and nothing else…

    subnet maskprefix lengthstatic routenext hop

  • Build two demo segments for the sales suite

    Pro

    Guided · Quick · 8 min · Cisco-style device console and topology

    The sales suite is being set up for two demonstrations next week and each needs its own network so neither sees the other's traffic…

    VLANaccess portbroadcast domainVLAN label

  • Set a static address on a printer from the address plan

    Pro

    Guided · Quick · 12 min · Cisco-style device console and topology

    Ticket: The new finance floor printer on Fa0/6 still takes a DHCP lease, so its address moves and the print queue breaks…

    IPv4 addressingsubnet maskdefault gatewayDHCP range

  • Baseline a new switch: name, banner and secret

    Pro

    Guided · Quick · 15 min · Cisco-style device console and topology

    Ticket: A new switch arrived named SW7. Give it the standard name SW-FLOOR3-01, an authorized-use banner, an enable secret, and encrypted legacy passwords.

  • Create the staff WLAN on the controller

    Pro

    Guided · Quick · 15 min · Cisco-style device console and topology

    Ticket CCNA-2841: Create the Northline-Staff WLAN on WLC-HQ-1. Map it to the staff controller interface (VLAN 10), use WPA2-Personal with AES and the supplied key, enable the WLAN…

    wireless LAN controllerWLAN profileWPA2-PersonalAES

  • Limit SNMP reads to the monitoring server

    Pro

    Guided · Quick · 15 min · Cisco-style device console and topology

    Ticket: Permit read-only SNMP monitoring of SW-ACC-1A from 10.10.99.0/24. Set the device location and contact, and configure the NMS trap destination.

  • Give the staff gateway a standby router

    Pro

    Guided · In-depth · 20 min · Cisco-style device console and topology

    Ticket: Make the staff default gateway resilient with HSRP group 10 and virtual address 10.10.10.254. SW-DIST-01 is active at priority 110 with preempt; SW-DIST-02 is standby.

  • Add IPv6 gateways to two VLANs

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: We're piloting IPv6. Make SW-DIST-01 the IPv6 gateway for staff (2001:db8:20:10::/64) and voice (2001:db8:20:30::/64), with ::1 on each, and prove the two can talk.

    IPv6 unicast routingIPv6 addresslink and gateway

  • Add a static route to the second site

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Ops (10.10.70.0/24) needs the plant controllers (10.10.60.0/24) behind RTR-CORE-01. The link between the routers is up. Nothing crosses.

    static routenext hopreturn route

  • Block one noisy host with a standard ACL

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Host 10.10.71.66 floods the finance server with junk. Block that one host from finance. Everyone else must still reach it.

    standard ACLimplicit denyACL direction

  • Bring back a desk port that port security shut

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The desk at Fa0/14 went dead after the user docked a second laptop on the same jack. Both devices are approved for this desk now. The port must stay protected.

    port securityerr-disabledmaximum addresses

  • Bring up the first OSPF neighbor

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The two routers are cabled and addressed but exchange nothing. Run single-area OSPF in area 0 on the link, with router IDs 10.255.255.1 (edge) and 10.255.255.2 (core).

    OSPFrouter IDnetwork statementarea 0

  • Bundle two uplinks with LACP and trunk the bundle

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The floor uplink keeps saturating and the second cable sits idle behind spanning tree. Bundle both links with LACP so they carry traffic together. Staff must stay online.

    EtherChannelLACPport-channel

  • Find the LAN OSPF never advertised

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The OSPF neighbors are up but Ops can't reach the plant LAN 10.10.60.0/24.

    OSPFnetwork statementpassive interfacetroubleshooting

  • Find why IPv6 stops at the gateway

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The IPv6 pilot works on each VLAN but the staff PC and the phone can't reach each other over IPv6.

    IPv6 unicast routingtroubleshooting

  • Find why a link is slow and full of errors

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The finance desk on Fa0/5 crawls on big file copies. The cable tests clean. Someone hard-set the port last week.

    duplex mismatchautonegotiationinterface errors

  • Find why a new VLAN gets no address

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The new guest VLAN 40 is wired and trunked. Guest laptops get a self-assigned address. Staff are fine.

    DHCP relayhelper addresstroubleshooting

  • Find why pings reach the far site but get no reply

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Ops pings the plant controllers and gets nothing back. The plant team says they see the pings arrive.

    return routerouting tabletroubleshooting

  • Find why printers on one floor get no address

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Finance desks on this floor lost the network after yesterday's trunk tidy-up. Staff desks are fine.

    trunk allowed listtroubleshooting

  • Find why the guest filter blocks nothing

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: We built the guest filter yesterday and guests still reach staff.

    ACL applicationACL nametroubleshooting

  • Find why the office lost internet after a NAT change

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Ops lost the internet after a maintenance window on the edge router. The ISP link is up.

    NAT rolestroubleshooting

  • Fix a gateway interface with the wrong mask

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: New finance desks numbered above .128 can't reach the gateway. Older desks are fine.

    subnet maskgateway interfacetroubleshooting

  • Fix a moved desk that landed in the wrong VLAN

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The finance analyst moved to the desk wired to Fa0/6 and her PC can't reach anything. Her old port Fa0/5 is unplugged. Other desks are fine.

    access VLANtroubleshooting

  • Fix a pool that hands out the wrong gateway

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: New laptops in the branch get an address but can't leave the subnet.

    DHCP pooldefault routerlease renewal

  • Fix a trunk with mismatched native VLANs

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: After a rebuild, staff on this floor are offline. The log mentions a native VLAN mismatch on Gi0/1. Our standard native VLAN is 999.

    native VLANtrunktroubleshooting

  • Fix an ACL where the permit hides the deny

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Audit says guests can still reach staff and finance even though the filter exists. Guests must keep internet access.

    ACL orderfirst match winstroubleshooting

  • Give a branch router its way out

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Branch staff reach the local network but nothing beyond. All other traffic should leave through RTR-EDGE-01 at 198.51.100.5.

    default routegateway of last resort

  • Give a desk phone its voice VLAN

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The reception phone shares Fa0/9 with the desk PC. Voice must be VLAN 30, the PC stays on VLAN 10. Today the phone gets no address.

    voice VLANaccess port

  • Give a switch a management address and a way out

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The monitoring team can't reach SW-ACC-1A. Give it management address 10.10.99.21/24 on VLAN 99 and a gateway so tools on another subnet can reach it.

    management SVIdefault gatewayVLAN interface

  • Hand out addresses from a router pool

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The branch has no DHCP server. Let RTR-BRANCH-01 hand out addresses on the staff network 10.10.71.0/24. Keep .1 to .10 for gear…

    DHCP poolexcluded addressesdefault routerDNS server

  • Let the office browse out through one public address

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Ops can't browse. The ISP gave us one address, 198.51.100.1 on Gi0/0. Share it with all of 10.10.0.0/16 so staff keep private addresses inside.

    PATNAT inside and outsideoverload

  • Lock a desk port to the device on it

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The front desk port Fa0/1 should only ever carry the desk PC. Limit it to one MAC address that the switch learns by itself, and shut the port if anything else appears.

    port securitysticky MACviolation mode

  • Make the distribution switch the root and the second one its backup

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: An access switch won the spanning-tree election for VLAN 10 and traffic crosses it twice. SW-DIST-01 must be the VLAN 10 root and SW-DIST-02 the backup root.

    spanning treeroot bridgeroot primary and secondary

  • Map an inherited closet with CDP and LLDP

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: We inherited this closet with no documentation. Find what is on Gi0/1 and Gi0/2 of SW-ACC-1A. Label each port's description TO <neighbor name>.

    CDPLLDPneighbor discoveryport description

  • Point a switch at the time and log servers

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Logs from SW-ACC-1A carry the wrong time and never reach the collector. Sync it to our NTP server and send warnings and worse to the log server.

    NTPsyslogtrap level

  • Publish an inside web server on a public address

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Publish the inside web server 10.10.50.10 on public address 203.0.113.10 so outside testers can reach it on 443. Staff browsing already works.

    static NATpublished server

  • Put two finance desks on their own VLAN

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Two finance desks plug into Fa0/5 and Fa0/6 on SW-ACC-1A. They must be on VLAN 20 FINANCE with the other finance staff. The uplink already carries VLAN 20.

    access VLANVLAN membership

  • Relay DHCP to the server on another subnet

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Staff laptops on VLAN 10 get 169.254 addresses. The DHCP server is on the management network. Make the staff gateway forward their requests.

    DHCP relayhelper address

  • Repair a bundle that never forms

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Last night someone bundled the two floor uplinks. Today one link is blocked and show etherchannel summary shows the bundle down. Fix it.

    EtherChannelLACPtroubleshooting

  • Repair an OSPF neighbor stuck on an area mismatch

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The plant LAN dropped off the map after an OSPF change on the edge router. The core says it has no neighbor.

    OSPFarea mismatchtroubleshooting

  • Repair an unintended root bridge

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Staff VLAN traffic takes odd paths since a change last week. Spanning tree should be rooted on SW-DIST-01 for VLAN 10, not on an access switch.

    spanning treeroot bridgetroubleshooting

  • Route two VLANs through one router port

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The branch has one router port and two VLANs. Staff (10) gateway 10.10.71.1/24 and finance (20) gateway 10.10.72.1/24 must live on that port so the two can reach each other.

    router on a sticksubinterface802.1Q encapsulation

  • Send the research subnet over the partner link

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Ops can't reach the research subnet 10.20.8.0/24, which sits behind the partner router at 198.51.100.10. The rest of 10.20.0.0/16 goes to the carrier and works.

    longest prefix matchstatic routenext hoptroubleshooting

  • Shut and park the spare jacks in a corridor

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Contractors use the corridor. Fa0/13 to Fa0/15 are live jacks with nothing plugged in. Shut them and park them in the unused VLAN 999 so a surprise plug-in gets nothing.

    unused portsparking VLANinterface range

  • Stop a rogue DHCP server and forged ARP on the staff VLAN

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Someone plugged a router into Fa0/2 and staff received wrong gateways. Only the real DHCP server may answer on VLAN 10. Turn on DHCP snooping and ARP inspection there.

    DHCP snoopingdynamic ARP inspectiontrusted portrogue DHCP

  • Turn on SSH-only access with a local account

    Pro

    Guided · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Security found Telnet open on SW-ACC-1A. Allow SSH version 2 only, with a local account netops (secret Ops!2026) for logins.

    SSHlocal accountVTY linesdomain name

  • Rebuild the second floor uplink as a trunk

    Pro

    Assisted · Quick · 6 min · Cisco-style device console and topology

    The core port serving the second floor was moved during a weekend cutover. Gi0/2 on SW-2C came back as an ordinary access port…

    trunk802.1Q tagallowed VLAN listaccess port

  • Retire the study room segment without losing its live desk

    Pro

    Assisted · Quick · 6 min · Cisco-style device console and topology

    The study room at SW-LIB was split into two smaller rooms and the segment built for the old layout is now finished. Its two jacks are Fa0/2 and Fa0/3…

    VLAN databaseaccess portbroadcast domaindefault VLAN

  • Shut the spare jacks on an edge switch

    Pro

    Assisted · Quick · 6 min · Cisco-style device console and topology

    A walk of the shared corridor found three live jacks with nothing plugged in. Fa0/13, Fa0/14 and Fa0/15 on SW-EDGE are all in the staff VLAN and all up…

    administrative stateunused portsLayer 2 security

  • Bring the floor uplink permit list back to the design

    Pro

    Assisted · Quick · 7 min · Cisco-style device console and topology

    The uplink on SW-4C has been opened for every request for two years, so Gi0/1 currently permits the native tag, sales, support, an old training segment and a guest tag…

    trunkallowed VLAN list802.1Q tagnative VLAN

  • Give the edge router a default path and a partner subnet

    Pro

    Assisted · Quick · 7 min · Cisco-style device console and topology

    R-EDGE2 was replaced two weeks ago and its table is empty apart from the two connected links. Everything that is not local has to leave through the carrier at 198.51.100.10 on Gi0/1…

    default routegateway of last resortstatic routeprefix length

  • Move reception onto the new jack and close the old one

    Pro

    Assisted · Quick · 7 min · Cisco-style device console and topology

    Reception moved to the other side of the lobby and a new wall plate went in at the counter, patched to Fa0/9 on SW-RECEPTION…

    access portVLANadministrative stateport status

  • Turn the floor uplink into a trunk

    Pro

    Assisted · Quick · 7 min · Cisco-style device console and topology

    Finance moves into two offices on Monday. SW-ACC-1A still reaches SW-DIST-01 on an access port, so every floor segment stops at the access switch…

    trunknative VLANallowed VLAN list802.1Q tag

  • Carry a new printer VLAN past the uplink

    Pro

    Assisted · Quick · 8 min · Cisco-style device console and topology

    Six new label printers arrive on Monday and the facilities team wants them off the staff network. SW1 uplinks to the core…

    VLANaccess porttrunkallowed VLAN list

  • Give the distribution switch a management address and a way out

    Pro

    Assisted · Quick · 8 min · Cisco-style device console and topology

    SW-DIST carries the corporate and server segments for the third floor, and nothing reaches it from the management network. The management segment is VLAN 99 on the uplink…

    switch virtual interfaceconnected routedefault routenext hop

  • Send one campus subnet over the partner link

    Pro

    Assisted · Quick · 8 min · Cisco-style device console and topology

    R-WAN joined two paths this quarter. A carrier link goes to the campus as a whole, and a partner link goes to the campus research subnet, which must not be routed through the carrier…

    longest prefix matchstatic routenext hopprefix length

  • Turn the floor uplink into a trunk

    Pro

    Assisted · Quick · 8 min · Cisco-style device console and topology

    Third floor has three local segments and a single link to the core switch. Gi0/1 on SW-3F is still an ordinary access port in the default VLAN, so the staff…

    trunk802.1Q tagallowed VLAN list

  • Address two LANs and a link from the address plan

    Pro

    Assisted · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Sales needs room for 50 hosts, Ops for 25, and the link to the core router needs two addresses. All three come out of 10.10.80.0/24, largest first…

    VLSMsubnet masksfirst usable address

  • Bring the analytics team's VLAN across two switches

    Pro

    Assisted · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The analytics team (two build servers on Fa0/20 and Fa0/21) move to the third floor next week. Give them VLAN 50 ANALYTICS, 10.10.50.0/24 with gateway .1 on the distribution switch…

    VLANtrunk allowed listSVI gatewayinter-VLAN routing

  • Connect two sites over IPv4 and IPv6

    Pro

    Assisted · In-depth · 25 min · Cisco-style device console and topology

    Ticket: The two sites already talk IPv4. Add IPv6 on the same link and LANs: transit 2001:db8:100::1/64 (edge) and ::2 (branch)…

    dual stackIPv6 static routeIPv6 unicast routing

  • Harden a corridor access switch

    Pro

    Assisted · In-depth · 25 min · Cisco-style device console and topology

    Ticket: Security's walk-through of the corridor switch found four things: spare jacks Fa0/13 to Fa0/15 are live, the desk port Fa0/1 allows any device…

    unused portsport securityDHCP snoopingSSH

  • Bring the branch into OSPF

    Pro

    Assisted · In-depth · 30 min · Cisco-style device console and topology

    Northline opens a branch office. RTR-BRANCH-01 has a WAN link to RTR-EDGE-01 and a trunk to SW-BRANCH-01, but the WAN port has no address and the router runs no OSPF process…

    OSPFarea 0router IDwildcard mask

  • Fit out a branch switch for tills, cameras, and a routed uplink

    Pro

    Assisted · In-depth · 35 min · Cisco-style device console and topology

    A new branch opens on Saturday and the switch arrived with a flat default configuration. Staff and guest segments already exist on the core side…

    VLANaccess porttrunkallowed VLAN list

  • Fit out an exhibition hall switch for a two day conference

    Pro

    Assisted · In-depth · 35 min · Cisco-style device console and topology

    A two day conference opens on Thursday in the exhibition hall. The hall switch arrived with only the lobby and management segments built. The registration desks…

    VLANaccess porttrunkallowed VLAN list

  • Rebuild a swapped records-office switch before the doors open

    Pro

    Assisted · In-depth · 35 min · Cisco-style device console and topology

    The records-office switch died on Friday afternoon. A spare came out of the store room, was patched in, and boots with the configuration it left the lab with: one flat default segment…

    VLANaccess porttrunkallowed VLAN list

  • Reach two partner appliances through two gateways

    Pro

    Challenge · Quick · 7 min · Cisco-style device console and topology

    A partner supplies two appliances that sit on their own addresses, one on each of their two transit links. Their side will not route anything except the two appliance addresses…

    host routestatic routenext hoplongest prefix match

  • Fence the branch guest lounge

    Pro

    Challenge · Quick · 8 min · Cisco-style device console and topology

    The branch guest lounge shares RTR-BRANCH-01 with staff and finance. Guests may browse the internet, but they must not reach the staff or finance subnets…

    extended ACLfirst matchimplicit denyinbound ACL

  • Open the analytics segment and close the spare jack beside it

    Pro

    Challenge · Quick · 8 min · Cisco-style device console and topology

    The analytics team is moving into the third floor next week. Their build server is patched into Fa0/20 on SW-ANL, which is still a staff jack…

    VLANaccess porttrunkallowed VLAN list

  • Address the transit link and route to the operations centre

    Pro

    Challenge · Quick · 9 min · Cisco-style device console and topology

    A new fibre circuit went into the branch last week. R-SITE3 now has a point-to-point link on Gi0/1 that has never been addressed…

    static routenext hopprefix lengthtransit link

  • Close the seasonal kiosk wing for the year

    Pro

    Challenge · Quick · 9 min · Cisco-style device console and topology

    The garden centre wing trades from April to September and its switch stays in the rack all year. Three jacks in that wing are on the kiosk segment, VLAN 95: Fa0/20, Fa0/21 and Fa0/22…

    VLANaccess portadministrative stateallowed VLAN list

  • Give a phone bank its own segment

    Pro

    Challenge · Quick · 9 min · Cisco-style device console and topology

    A call floor of twelve desk phones goes live next week. The cabling lands on Fa0/24 of SW-C5, which is still in the default segment…

    VLANaccess porttrunkallowed VLAN list

  • Finance is offline in the second closet

    Pro

    Challenge · In-depth · 30 min · Cisco-style device console and topology

    Finance moved into the second closet this morning. Nobody there can reach anything and the first closet's finance desk also lost its gateway. The staff VLAN in the first closet is fine…

    VLANtrunk allowed listrouter on a stickdot1Q tag

  • Bring a research glasshouse switch up to the site design

    Pro

    Capstone · In-depth · 34 min · Cisco-style device console and topology

    A horticultural research station has opened a glasshouse wing in a converted packing shed, and the switch that serves it came out of the seed store on the other side of the yard…

    VLANaccess porttrunkallowed VLAN list

  • Turn up a loading bay switch with two transit links

    Pro

    Capstone · In-depth · 38 min · Cisco-style device console and topology

    A distribution switch was pulled from another building and dropped into a new loading bay with the previous site still inside it. The staff desks work…

    VLANaccess porttrunkallowed VLAN list

  • Restore a branch after a failed change

    Pro

    Capstone · In-depth · 40 min · Cisco-style device console and topology

    Ticket: After last night's change window the branch guest lounge has no network, staff can't reach the internet, and the change record says only 'tidy up'. Restore the branch…

    troubleshooting methodtrunk allowed listdefault routeinterface state

200-301 lab questions

There are 86 labs: 57 guided, 19 assisted, 7 challenge, 3 capstone. Together they carry about 27 hours of authored lab time, and 1 free taster lab.

Practise 200-301 the way the exam asks

Open a guided lab first, then work the challenge set with the hints off. Every lab links back to the lesson it tests.

Start studying free

Free tier, no card. Pro starts with a 7-day trial; a card is required and you can cancel before day 7.