Huawei HCIA-Datacom practice labs
22 guided labs that follow HCIA-Datacom V2.0: VRP basics, subnetting, static routing and OSPF, VLANs and hybrid ports, STP, RSTP and MSTP, Eth-Trunk, inter-VLAN routing, DHCP, ACLs, AAA and SSH, NAT, IPv6 with OSPFv3, SNMP and NETCONF, and Python automation, ending in a campus capstone.
- Guided labs
- 22
- Follows
- Huawei HCIA-Datacom V2.0 (H12-811)
- Runs every lab
- Standard
- Devices
- AR1000V router, CloudEngine CE6800, EVE-NG GUI server and VPCS
Who these labs are for
For anyone preparing for Huawei’s HCIA-Datacom V2.0 (H12-811), and engineers who need to work on Huawei VRP.
The routers are AR1000V and the switches CloudEngine CE6800, not the exam’s S-series, and the labs point out every place the syntax differs. EVE-NG can’t apply start-up configs to these images, so each lab starts with a short block you paste. WLAN and data-centre topics are concept notes only.
The 22 labs
Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.
HCIA-Datacom course 22 labs
Shared folderHCIA-Datacom H12-811 guided labs
One HCIA-Datacom topic per lab, then two troubleshooting labs and a small campus capstone.
-
01VRP first steps on a router and a switch
Meet the Huawei VRP command line on an AR router (VRP5) and a CloudEngine switch (VRP8). You move between views, use help and completion, name and address the devices, read display output, undo mistakes, and save a configuration you can prove will survive a restart.
1× AR1000V router, 1× CloudEngine CE6800
3 vCPU, 4,096 MBFits LiteRuns in the free demo
-
02IPv4 subnetting with ARP and ICMP
Carve one /24 into right-sized subnets with VLSM, address two routers and two hosts, then use ARP and ICMP to prove what works and to explain what doesn't, including the classic missing return route.
2× AR1000V router, 2× VPCS
4 vCPU, 6,144 MBFits LiteRuns in the free demo
-
03Static and default routes with floating backups
Route between an HQ LAN and a branch LAN through a core router with static routes, send everything else to a default route, then add a floating static route over a backup link and prove it takes over when the primary link fails.
3× AR1000V router, 1× VPCS
4 vCPU, 7,168 MBFits LiteRuns in the free demo
-
04OSPF in a single area
Replace static routes with OSPF in area 0. You form adjacencies on a shared segment and on a point-to-point link, control the DR election, tune costs to steer traffic, silence a user-facing interface, and fix the classic "loopback advertised as /32" surprise.
3× AR1000V router, 1× VPCS
4 vCPU, 7,168 MBFits LiteRuns in the free demo
-
05Multi-area OSPF with default routes and authentication
Split the network into a backbone and a branch area joined by an ABR, read the link-state database to see how routes cross areas, inject a default route from the internet edge, and protect adjacencies with area and interface authentication.
3× AR1000V router, 1× VPCS
4 vCPU, 7,168 MBFits LiteRuns in the free demo
-
06VLANs with access and trunk ports
Split one switched network into Finance, Sales and Management VLANs across two CloudEngine switches. You build access ports and an 802.1Q trunk, watch MAC learning happen, and prove which hosts can and cannot reach each other.
2× CloudEngine CE6800, 4× VPCS
8 vCPU, 8,192 MBFits Standard
-
07Hybrid ports for shared resources
Use Huawei hybrid ports to let two isolated teams share one server in the same subnet without a router. You decide, per VLAN and per port, which frames leave tagged and which untagged, then trace a frame and its reply through both switches.
2× CloudEngine CE6800, 3× VPCS
7 vCPU, 7,168 MBFits Standard
-
08STP and RSTP
Close a loop of three CloudEngine switches safely: turn spanning tree on before the redundant link comes up, predict the root bridge and every port role, move the root and the blocked port on purpose, then upgrade to RSTP with edge ports and BPDU protection and watch a failover.
3× CloudEngine CE6800, 2× VPCS
8 vCPU, 8,192 MBFits Standard
-
09MSTP regions and instances for load sharing
Fix the wasted bandwidth of a single spanning tree. You build an MSTP region with two instances, give each instance its own root, and prove that two VLAN groups now use different uplinks while both stay protected from loops.
3× CloudEngine CE6800, 2× VPCS
8 vCPU, 8,192 MBFits Standard
-
10Eth-Trunk link aggregation with LACP
Bundle parallel links between two switches into one logical Eth-Trunk. You start in manual mode, move to LACP, keep a third link on standby with priorities and an active-link limit, and watch it take over when a member fails.
2× CloudEngine CE6800, 2× VPCS
6 vCPU, 6,144 MBFits LiteRuns in the free demo
-
11Inter-VLAN routing with sub-interfaces and VLANIF
Route between VLANs two ways. First a router-on-a-stick with dot1q termination sub-interfaces, then a migration of the internal VLANs to VLANIF gateways on the CloudEngine switch, without touching a single PC. The guest VLAN stays on the router, and a transit VLAN with static routes ties the two together.
1× AR1000V router, 1× CloudEngine CE6800, 3× VPCS
6 vCPU, 7,168 MBFits LiteRuns in the free demo
-
12DHCP server with address pools and relay
Run DHCP on a Huawei router the two ways VRP offers: an interface address pool for a local LAN, with exclusions and a fixed reservation, and a global pool that serves a remote LAN through a DHCP relay agent. You follow DORA and the relay's giaddr from both ends.
3× AR1000V router
3 vCPU, 6,144 MBFits LiteRuns in the free demo
-
13Basic and advanced ACLs
Turn three security requirements into ACLs. You use a basic ACL near the destination to keep guests out of the server farm, an advanced ACL near the source to wall off Finance from Sales, and a VTY ACL to lock down remote logins, while learning how VRP matches rules and what happens to unmatched traffic.
3× AR1000V router, 1× VPCS
4 vCPU, 7,168 MBFits LiteRuns in the free demo
-
14Secure remote access with AAA and SSH
Secure remote management the Huawei way. You create local AAA users with the right privilege levels and service types, compare Telnet with SSH (STelnet), get past the router's factory restriction on which interfaces accept logins, transfer files with FTP, and secure the CloudEngine switch with SSH.
2× AR1000V router, 1× CloudEngine CE6800
4 vCPU, 6,144 MBFits LiteRuns in the free demo
-
15NAT from Easy IP to NAT server
Connect a private network to the internet through an AR edge router. You start with Easy IP, move to NAPT with a public address pool, give one PC a one-to-one static mapping, and publish an inside server's service on a public address and port with NAT server, reading the NAT session table at every step.
3× AR1000V router, 1× VPCS
4 vCPU, 7,168 MBFits LiteRuns in the free demo
-
16IPv6 addressing with SLAAC and DHCPv6
Bring IPv6 up on two routers and two LANs. You read link-local and global addresses and the neighbour table, let a PC configure itself with SLAAC, hand out DNS with stateless DHCPv6 and whole addresses with stateful DHCPv6, and join the LANs with IPv6 static routes.
3× AR1000V router, 1× VPCS
4 vCPU, 7,168 MBFits LiteRuns in the free demo
-
17Dual stack with OSPFv3
Add IPv6 to a working IPv4 OSPF network and route it with OSPFv3. You run the two protocols side by side, compare how OSPFv3 forms neighbours and builds routes over link-local addresses, read its new LSA types, and originate an IPv6 default route.
3× AR1000V router, 1× VPCS
4 vCPU, 7,168 MBFits LiteRuns in the free demo
-
18Network management with SNMP and NETCONF
Manage a router and a switch from a Linux management station. You enable SNMP v2c and query both devices with snmpget and snmpwalk, then switch on NETCONF on the CloudEngine switch and pull its configuration as XML with Python's ncclient.
1× AR1000V router, 1× CloudEngine CE6800, 1× EVE-NG GUI server
4 vCPU, 5,120 MBFits LiteRuns in the free demo
-
19Python automation with Paramiko and Netmiko
Automate a Huawei router and switch from Python. You write a Paramiko script that logs in over SSH, runs display commands and pushes a change, then use Netmiko to back up both devices in a loop and to push VLANs to the VRP8 switch with a proper commit.
1× AR1000V router, 1× CloudEngine CE6800, 1× EVE-NG GUI server
4 vCPU, 5,120 MBFits LiteRuns in the free demo
-
20Troubleshooting a switched network
A colleague's change left the Northwind floor half broken. Three tickets, four hidden faults: you work from symptoms to causes with a layered method, using display commands rather than guesses, and fix each fault without breaking anything else.
3× CloudEngine CE6800, 3× VPCS
9 vCPU, 9,216 MBFits Standard
-
21Troubleshooting routing and services
HQ has lost the branch and the internet after a weekend change. Five faults hide across OSPF adjacencies, route advertisement, an ACL and NAT. You follow the packet hop by hop, prove each cause with display output, and restore the documented design.
4× AR1000V router, 1× VPCS
5 vCPU, 9,216 MBFits Standard
-
22Capstone - build a small campus network
Design and build Northwind's new office from factory defaults, following the campus method of requirements, design, implementation, verification and operations. Access and core switching, VLANIF gateways, OSPF, internet access with NAT, secure management and monitoring all come together, with design checkpoints for WLAN and the data centre.
2× AR1000V router, 2× CloudEngine CE6800, 2× VPCS
8 vCPU, 10,240 MBFits Standard
Devices and images
The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.
| Device | Image in Add Node | Set to | Labs | Nodes |
|---|---|---|---|---|
| Huawei AR1000V router | huaweiar1k-5.170-V300R022C00SPC100-Auto-update-esn | 1 vCPU, 2,048 MB | 16 | 38 |
| Huawei CloudEngine CE6800 | huaweice6800-bundled | 2 vCPU, 2,048 MB | 12 | 22 |
| EVE-NG GUI server (Docker) | eve-gui-server:latest | 1 vCPU, 1,024 MB | 2 | 2 |
| VPCS host | Built in to EVE-NG | counted as 1 vCPU, 1,024 MB | 17 | 31 |
How to open the labs
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
HCIA-Datacom H12-811 guided labs.Open a lab and start its nodes, then open Lab Tasks for the steps.
The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.


Questions about the HCIA-Datacom labs
Are these HCIA-Datacom labs free?
They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, enough to run 15 of these labs.
Which plan do I need for these labs?
Standard, with 12 vCPU and 16 GB, runs every lab here. Lite runs 15 of the 22. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “Capstone - build a small campus network”, needs 8 vCPU and 10,240 MB. Each lab’s Lab Tasks pane names the plan it needs.
Can I change these labs?
You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.
Are these labs from Huawei?
No. CloudLabBox wrote them to follow the topics of Huawei’s HCIA-Datacom V2.0 exam (H12-811). They aren’t training material from Huawei, and CloudLabBox is independent of Huawei.
Try a lab before you choose
The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB: enough to run 15 of these labs. No card and no email.
More practice labs
- CCNA practice labs online
- CompTIA Network+ practice labs
- CCNP ENCOR practice labs
- CCNP ENARSI practice labs
- CCNP Service Provider practice labs
- Cisco NX-OS data centre practice labs
- CCIE Enterprise Infrastructure practice labs
- Network automation practice labs
- Cisco ASA firewall practice labs
- Packet analysis labs with Wireshark and tcpdump
- FortiGate practice labs
- FortiGate SD-WAN practice labs
- Cisco Catalyst SD-WAN CLI practice labs
- Palo Alto firewall practice labs
- Check Point CCSA practice labs
- Check Point CCSE practice labs
- Multi-vendor firewall and VPN practice labs
- BGP practice labs across vendors
- Nokia SR OS NRS I practice labs
- MPLS and L3VPN practice labs
- VXLAN EVPN practice labs across vendors
- IPv6 practice labs across vendors
- Linux labs for network engineers
- Multi-vendor troubleshooting practice labs
- JNCIA-Junos practice labs
- JNCIS-ENT practice labs
- JNCIA-SEC and JNCIS-SEC practice labs
- JNCIS-SP JN0-364 practice labs
- JNCIP-ENT JN0-650 practice labs
- Arista EOS practice labs
- HPE Aruba Networking CX switching labs
- HCIP-Datacom Core practice labs
- MikroTik MTCNA practice labs
- MikroTik MTCRE practice labs
- MikroTik MTCINE practice labs
- MikroTik MTCSE practice labs
- MikroTik MTCTCE practice labs
- MikroTik MTCIPv6E practice labs
- All practice labs
CloudLabBox is independent of Huawei. The labs follow exam topics and aren’t vendor training material; vendor names identify the exams and the images in the workspace.