CCIE Enterprise Infrastructure practice labs
8 large practice labs built from Cisco’s published CCIE Enterprise Infrastructure topic list: campus Layer 2 at scale, OSPF and EIGRP redistribution, BGP design, a DMVPN fault hunt, MPLS L3VPN, multicast and IPv6, security and automation, and a full mock that scores itself out of 100.
- Guided labs
- 8
- Follows
- Independent practice for topics in Cisco's CCIE Enterprise Infrastructure v1.1 list
- Runs every lab
- Professional
- Devices
- IOSv, IOSvL2, Alpine Linux, CSR 1000v and EVE-NG GUI server
Who these labs are for
For engineers working towards CCIE Enterprise Infrastructure who want long, interlocking labs. Each runs 3.5 to 8 hours, with a one-page design, hints and a full reasoned solution behind them.
This is independent practice. It doesn’t match the real exam, the images aren’t the versions Cisco lists, and each pane says what’s left out.
The 8 labs
Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.
CCIE EI practice course 8 labs
Shared folderCCIE Enterprise Infrastructure practice guided labs
Seven 3.5 to 4 hour labs, then an 8-hour full mock that scores itself out of 100.
-
01Campus Layer 2 at scale
Build a dual-stack campus on six virtual switches: pruned trunks, LACP, static and Layer 3 channels, MST meeting a Rapid-PVST+ switch at its boundary, HSRP aligned with spanning tree, DHCP with option 82, and DAI, VACLs and PACLs. A rogue switch and a fault injector prove the protection. A 3 to 4 hour practice lab.
6× IOSvL2, 5× Alpine Linux, 1× IOSv
12 vCPU, 7,680 MBFits Standard
-
02OSPF meets EIGRP with redistribution and filtering
Join an OSPF enterprise to an acquired EIGRP network at two points, dual stack: area types, named-mode EIGRP with unequal-cost paths and stub leak maps, two-way redistribution that cannot loop, policy routing and BFD. Three fault injectors prove each failover. A 3 to 4 hour practice lab.
11× IOSv
11 vCPU, 5,632 MBFits Standard
-
03BGP design and routing policy
Build a dual-stack enterprise BGP edge with two ISPs: route reflectors, peer templates, dynamic neighbours, multipath, inbound and outbound policy, conditional advertisement, ORF, aggregation with AS sets, and a merger handled with local-as. A fault injector proves the failover. A 3 to 4 hour practice lab.
12× IOSv
12 vCPU, 6,144 MBFits Standard
-
04DMVPN Phase 3 dual-hub fault hunt
You inherit a dual-hub DMVPN with front-door VRFs, IKEv2 and EIGRP that has never worked properly. Find and fix nine faults, layer by layer, prove shortcuts and hub failover with a fault injector, then add a static GRE tunnel and an IPv6 overlay. A 3 to 4 hour practice lab that starts broken.
9× IOSv
9 vCPU, 4,608 MBFits Standard
-
05MPLS L3VPN and VRF services
Build a dual-stack enterprise MPLS WAN for two merged business units with overlapping addresses: LDP tuned to host routes, a VPNv4 and VPNv6 route reflector pair, PE-CE routing in BGP, OSPF, EIGRP and static, an extranet with selective route leaking, and Internet access through VRF-aware NAT and a VASI pair. A 3 to 4 hour practice lab.
11× IOSv, 1× CSR 1000v
12 vCPU, 9,728 MBFits Standard
-
06Multicast and IPv6 services
Build two multicast domains: an anycast RP pair with MSDP and BSR in one, Auto-RP with a rogue to filter in the other, joined by MSDP with scoped boundaries, an RPF fix and SSM. Then add PIM for IPv6 with anycast RP, RA-based gateway redundancy, DHCPv6 and prefix delegation. A 3 to 4 hour practice lab.
10× IOSv, 1× Alpine Linux, 1× IOSvL2
12 vCPU, 6,400 MBFits Standard
-
07Security services and automation
Harden and instrument an IOS XE edge router: AAA with fallback, CoPP tested under a real flood, uRPF, SNMPv3, config-change logging, Flexible NetFlow, IP SLA with tracked failover on a brownout that routing can't see, hierarchical QoS, packet tracing, and automation with YAML, Jinja, NETCONF, RESTCONF, EEM, guest shell Python and telemetry. A 3 to 4 hour practice lab.
4× IOSv, 1× CSR 1000v, 1× EVE-NG GUI server
7 vCPU, 7,168 MBFits Standard
-
08Full mock with a scoring report
An 8-hour practice run across a whole enterprise: build a campus, routing and a BGP edge, repair an inherited DMVPN and MPLS VPN, then add multicast, security, services and automation. A scoring script on GRADER tests the network by outcome and prints a report out of 100.
11× IOSv, 3× IOSvL2, 1× Alpine Linux, 1× CSR 1000v, 1× EVE-NG GUI server
18 vCPU, 13,568 MBFits Professional
Devices and images
The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.
| Device | Image in Add Node | Set to | Labs | Nodes |
|---|---|---|---|---|
| Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB | 8 | 69 |
| Cisco IOSvL2 | viosl2-adventerprisek9-m.ssa.high_iron_20200929 | 1 vCPU, 768 MB | 3 | 10 |
| Alpine Linux | clbalpinebase-alpine-base-3-20-3 | 1 vCPU, 512 MB | 3 | 7 |
| Cisco CSR 1000v | csr1000vng-universalk9.17.03.08a-serial | 1 vCPU, 4,096 MB; 2 vCPU, 4,096 MB | 3 | 3 |
| EVE-NG GUI server (Docker) | eve-gui-server:latest | 1 vCPU, 1,024 MB | 2 | 2 |
How to open the labs
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
CCIE Enterprise Infrastructure practice guided labs.Open a lab and start its nodes, then open Lab Tasks for the steps.
The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.


Questions about the CCIE Enterprise Infrastructure practice labs
Are these CCIE Enterprise Infrastructure practice labs free?
They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, which is too small for these labs, so use it to look around the workspace.
Which plan do I need for these labs?
Professional, with 18 vCPU and 32 GB, runs every lab here. Standard runs 7 of the 8. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “Full mock with a scoring report”, needs 18 vCPU and 13,568 MB. Each lab’s Lab Tasks pane names the plan it needs.
Can I change these labs?
You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.
Are these labs from Cisco?
No. CloudLabBox wrote them to follow the topics of Cisco’s CCIE Enterprise Infrastructure v1.1 topic list. This is independent practice and doesn’t match the real exam. They aren’t training material from Cisco, and CloudLabBox is independent of Cisco.
Is this the real CCIE lab?
No. It’s independent practice built from Cisco’s published topic list, and it doesn’t match the real exam.
What’s left out?
SD-Access and SD-WAN (section 2.0, 25% of Cisco’s list), the vManage and DNA Center APIs, IPv6 first-hop security, storm control, IP Source Guard, L2 MTU and PTP. PIMv6 anycast RP is scored on state, because IOSv forwarded no IPv6 multicast data here.
Which plan do I need?
Seven of the eight labs fit Standard. The full mock needs Professional.
Look around the workspace before you choose
The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB. These labs need more than that, so use it to look around. No card and no email.
More practice labs
- CCNA practice labs online
- CompTIA Network+ practice labs
- CCNP ENCOR practice labs
- CCNP ENARSI practice labs
- CCNP Service Provider practice labs
- Cisco NX-OS data centre practice labs
- Network automation practice labs
- Cisco ASA firewall practice labs
- Packet analysis labs with Wireshark and tcpdump
- FortiGate practice labs
- FortiGate SD-WAN practice labs
- Cisco Catalyst SD-WAN CLI practice labs
- Palo Alto firewall practice labs
- Check Point CCSA practice labs
- Check Point CCSE practice labs
- Multi-vendor firewall and VPN practice labs
- BGP practice labs across vendors
- Nokia SR OS NRS I practice labs
- MPLS and L3VPN practice labs
- VXLAN EVPN practice labs across vendors
- IPv6 practice labs across vendors
- Linux labs for network engineers
- Multi-vendor troubleshooting practice labs
- JNCIA-Junos practice labs
- JNCIS-ENT practice labs
- JNCIA-SEC and JNCIS-SEC practice labs
- JNCIS-SP JN0-364 practice labs
- JNCIP-ENT JN0-650 practice labs
- Arista EOS practice labs
- HPE Aruba Networking CX switching labs
- Huawei HCIA-Datacom practice labs
- HCIP-Datacom Core practice labs
- MikroTik MTCNA practice labs
- MikroTik MTCRE practice labs
- MikroTik MTCINE practice labs
- MikroTik MTCSE practice labs
- MikroTik MTCTCE practice labs
- MikroTik MTCIPv6E practice labs
- All practice labs
CloudLabBox is independent of Cisco. The labs follow exam topics and aren’t vendor training material; vendor names identify the exams and the images in the workspace.