CloudLabBox
Try the free demo

CCNP Service Provider practice labs

23 guided labs for Cisco’s SPCOR 350-501 exam, with topics from SPRI and SPVI, built mostly on IOS XR routers. Commit and roll back, run IS-IS, OSPF and BGP at provider scale, build SR-MPLS with TI-LFA, SR-TE and RSVP-TE, deliver L3VPN, inter-AS and L2VPN services, add multicast, QoS and telemetry, then fix planted faults and build a small provider in a capstone.

Start this courseTry it free for 30 minutes

Standard for a month, £75.00, runs every lab here, with nothing extra to pay for the guided labs. 9 of the 23 labs also run in the free demo.

Guided labs
23
Follows
Cisco SPCOR 350-501 (v1.1), with SPRI 300-510 and SPVI 300-515 topics
Runs every lab
Standard
Devices
IOS XRv, IOSv, CSR 1000v, Alpine Linux, IOSvL2 and EVE-NG GUI server

Who these labs are for

For engineers preparing for SPCOR 350-501 or moving into service-provider work. You should already be comfortable with OSPF, BGP and basic MPLS.

XRv 6.3.1 doesn’t forward everything. Where it can’t, as with L2VPN, multicast, QoS policies and NetFlow, those labs use IOS or IOS XE nodes and say so.

The 23 labs

Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.

CCNP Service Provider course 23 labs

Shared folderCCNP Service Provider guided labs

From IOS XR basics through routing, MPLS and segment routing to VPN services, QoS and automation, then troubleshooting and a capstone.

  1. 01IOS XR operations - commit rollback and groups

    Learn how IOS XR changes differ from IOS. Use the target configuration and commit, read the commit list, roll back a mistake, deal with a failed commit, use configuration groups, and make a confirmed commit.

    2× IOS XRv

    2 vCPU, 5,120 MBFits LiteRuns in the free demo

  2. 02IS-IS levels wide metrics and IPv6 topologies

    Build a two-area IS-IS network on IOS XR. Plan NETs and levels, use wide metrics, run IPv6 in its own topology, steer traffic with metrics, and leak loopbacks from Level 2 into Level 1.

    4× IOS XRv

    4 vCPU, 10,240 MBFits Standard

  3. 03OSPFv2 and OSPFv3 in a provider core

    Tidy up an acquired OSPF network on IOS XR. Use a totally stubby area and an NSSA, summarise at the ABR, filter what enters an area, and repeat the layout in OSPFv3.

    4× IOS XRv

    4 vCPU, 10,240 MBFits Standard

  4. 04Route policy language and route maps

    Filter and tag exchange routes with a route map on IOS and route policy language on IOS XR, then redistribute both ways between IS-IS and BGP without a loop.

    2× IOS XRv, 2× IOSv

    4 vCPU, 6,144 MBFits LiteRuns in the free demo

  5. 05BGP route reflectors add-path and PIC

    Build dual-stack BGP on IOS XR with route reflection and neighbour templates. Follow the best-path decision, then add best-external, add-path and PIC so a failed transit moves at once.

    3× IOS XRv, 2× IOSv

    5 vCPU, 8,704 MBFits Standard

  6. 06BGP security and DDoS tools

    Harden an eBGP edge on IOS XR with TTL security, a password and prefix limits. Suppress specifics, block spoofed sources with uRPF, protect the infrastructure with an ACL, and drop an attack with RTBH.

    2× IOS XRv, 2× IOSv

    4 vCPU, 6,144 MBFits LiteRuns in the free demo

  7. 07Control-plane protection - LPTS MPP and CoPP

    See how IOS XR's LPTS decides what reaches the route processor, limit management to the NOC with MPP, then build Control Plane Policing on IOS XE and compare the two approaches.

    2× Alpine Linux, 1× CSR 1000v, 1× IOS XRv

    4 vCPU, 7,680 MBFits LiteRuns in the free demo

  8. 08High availability - graceful restart BFD and link aggregation

    Layer high availability on a provider network. Restart routing processes on IOS XR under graceful restart, bundle links with LACP, and catch a far-end failure in under a second with BFD.

    2× IOS XRv, 2× IOSv, 2× IOSvL2

    6 vCPU, 7,680 MBFits LiteRuns in the free demo

  9. 09MPLS LDP - protection security and label filtering

    Run LDP on an IOS XR core and make it safe: verify the label path with LSP ping, add an MD5 key, filter label allocation, and use IGP sync and session protection against failures.

    4× IOS XRv

    4 vCPU, 10,240 MBFits Standard

  10. 10SR-MPLS with IS-IS and SR to LDP interworking

    Move a core from LDP to segment routing. Set the SRGB, give routers prefix SIDs, read adjacency SIDs, remove LDP from one router, and reach an LDP-only router through a mapping server.

    4× IOS XRv

    4 vCPU, 10,240 MBFits Standard

  11. 11TI-LFA - link and node protection

    Protect a five-router ring with TI-LFA. Work out P-space and Q-space, read the repair path and its label stack, fail a link, and add node protection.

    5× IOS XRv

    5 vCPU, 12,800 MBFits Standard

  12. 12SR-TE policies explicit paths and binding SIDs

    Send traffic off the IGP path with segment routing. Build an SR policy with an explicit segment list and a binding SID, steer with a tunnel, and use the binding SID from another router.

    4× IOS XRv

    4 vCPU, 10,240 MBFits Standard

  13. 13RSVP-TE and fast reroute

    Build classic MPLS traffic engineering on IOS XR. Extend IS-IS, signal a tunnel with RSVP and a bandwidth reservation, protect a link with a backup tunnel, and fail it.

    4× IOS XRv

    4 vCPU, 10,240 MBFits Standard

  14. 14L3VPN - VRFs MP-BGP and three PE-CE protocols

    Build an MPLS L3VPN on IOS XR for two customers with overlapping addresses. Create VRFs, run MP-BGP, and connect sites with eBGP, OSPF and static routing.

    4× IOSv, 3× IOS XRv

    7 vCPU, 9,728 MBFits Standard

  15. 15L3VPN shared services and Internet access

    Give two VPN customers shared services without letting them see each other, using route targets and an export policy on IOS XR. Then leak a default and a public block for Internet access from a VRF.

    4× IOSv, 2× IOS XRv

    6 vCPU, 7,168 MBFits LiteRuns in the free demo

  16. 16Inter-AS L3VPN - options A and B

    Join a VPN across two autonomous systems on IOS XR. Build back-to-back VRFs first, then replace them with eBGP VPNv4 and follow the label swaps at each ASBR.

    4× IOS XRv, 2× IOSv

    6 vCPU, 11,264 MBFits Standard

  17. 17L2VPN - EoMPLS pseudowires and VLAN rewrites

    Carry Ethernet across an MPLS core on IOS XE. Build a port-based pseudowire, then a VLAN service with tag rewrites that joins VLAN 200 to VLAN 300, with an IOS XR router switching labels in the middle.

    2× CSR 1000v, 2× IOSv, 1× IOS XRv

    5 vCPU, 11,776 MBFits Standard

  18. 18Multicast - PIM-SM SSM BIDIR IGMP and MLD

    Build an IPTV-style multicast core. Run PIM sparse mode with an RP, move to SSM with IGMPv3, try BIDIR and PIMv6 with MLD, and see the same control plane on IOS XR.

    5× IOSv, 1× IOS XRv

    6 vCPU, 5,120 MBFits LiteRuns in the free demo

  19. 19QoS services - marking policing queuing and MPLS models

    Mark a customer's voice traffic at the edge, police it to the contract, prove the EXP value in the core, give it priority towards the core, and compare the MPLS QoS models.

    4× IOSv, 1× CSR 1000v

    5 vCPU, 6,144 MBFits LiteRuns in the free demo

  20. 20Assurance and automation - NETCONF RESTCONF SNMPv3 IPFIX and telemetry

    Manage an IOS XE router through its APIs. Use NETCONF with Python and RESTCONF with curl, poll with SNMPv3, export flows with IPFIX, and build a dial-out telemetry subscription over gRPC.

    1× CSR 1000v, 1× IOSv, 1× EVE-NG GUI server

    3 vCPU, 5,632 MBFits LiteRuns in the free demo

  21. 21Troubleshooting - IS-IS and LDP

    Work a night-shift ticket: PE1 can't reach PE2. Find four small faults in IS-IS and LDP from the bottom of the stack upwards, fix them, and prove the label path.

    4× IOS XRv

    4 vCPU, 10,240 MBFits Standard

  22. 22Troubleshooting - BGP and L3VPN

    Fix a newly built VPN that has never worked. Follow one route from CE to CE, and find five faults across iBGP, route reflection, route targets and PE-CE policy.

    3× IOS XRv, 2× IOSv

    5 vCPU, 8,704 MBFits Standard

  23. 23Capstone - build a small service provider

    Build a provider from bare interfaces: IS-IS with SR and TI-LFA, a route reflector, two L3VPN customers, and an Internet service with a protected upstream, then pass eight acceptance tests.

    4× IOS XRv, 4× IOSv

    8 vCPU, 12,288 MBFits Standard

Devices and images

The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.

Devices and images in the CCNP Service Provider practice labs, as read on 2 November 2026
DeviceImage in Add NodeSet toLabsNodes
Cisco IOS XRvxrv-k9-demo-6.3.11 vCPU, 2,560 MB2163
Cisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB1336
Cisco CSR 1000vcsr1000vng-universalk9.17.03.08a-serial1 vCPU, 4,096 MB45
Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB12
Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 768 MB12
EVE-NG GUI server (Docker)eve-gui-server:latest1 vCPU, 1,024 MB11

Browse every image in the Add Node list

How to open the labs

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder CCNP Service Provider guided labs.

  3. Open a lab and start its nodes, then open Lab Tasks for the steps.

The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.

The Shared folder in the EVE-NG File Manager, recorded on 2 November 2026 with a test account.
The EVE-NG File Manager open on the read-only Shared folder: one folder per guided course, including Arista EOS, BGP in depth, CCIE Enterprise Infrastructure, CCNA, CCNP ENARSI and ENCOR, Check Point, Cisco ASA, Cisco Nexus NX-OS, CompTIA Network Plus and FortiGate
A guided CCNA lab with its Lab Tasks pane, recorded on 1 November 2026 with a test account.
A guided CCNA lab open in EVE-NG with its nodes running: four routers and two PCs on the canvas, and the Lab Tasks pane beside them with the scenario, the addressing plan and the first task

Questions about the CCNP Service Provider labs

Are these CCNP Service Provider labs free?

They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, enough to run 9 of these labs.

Which plan do I need for these labs?

Standard, with 12 vCPU and 16 GB, runs every lab here. Lite runs 9 of the 23. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “TI-LFA - link and node protection”, needs 5 vCPU and 12,800 MB. Each lab’s Lab Tasks pane names the plan it needs.

Can I change these labs?

You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.

Are these labs from Cisco?

No. CloudLabBox wrote them to follow the topics of SPCOR, Cisco’s CCNP Service Provider core exam (350-501 v1.1), with topics from the SPRI 300-510 and SPVI 300-515 concentrations. They aren’t training material from Cisco, and CloudLabBox is independent of Cisco.

Which plan do I need?

9 of the 23 labs fit Lite. The other 14 need Standard.

How long do the IOS XR routers take to start?

About 4 to 7 minutes. Wait for CONFIG_DONE before you press Enter, because pressing it earlier starts a first-boot dialog. Each lab explains this, and what to do in the rare case that CONFIG_ERROR appears instead.

Is anything in the exam missing?

Lab 12 steers traffic with tunnel-te and a binding SID, because this image has no BGP colour steering, and the lab says so. Topics that XRv 6.3.1 can’t forward run on IOS or IOS XE nodes instead.

Try a lab before you choose

The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB: enough to run 9 of these labs. No card and no email.

Try it free for 30 minutesStart this course

Plans from £3 a day or £0.50 an hour, each with every guided lab.

More practice labs

CloudLabBox is independent of Cisco. The labs follow exam topics and aren’t vendor training material; vendor names identify the exams and the images in the workspace.