JNCIP-ENT JN0-650 practice labs

19 guided labs on advanced Junos enterprise routing and switching for Juniper’s JNCIP-ENT exam: OSPFv2 and OSPFv3 with areas, realms and virtual links, routing policy, BGP path selection, communities, load balancing, route reflection and confederations, IP multicast with real streams through PIM, anycast RP, MSDP and SSM, class of service measured at the receiver, MVRP, IGMP snooping, private VLANs, Q-in-Q, MSTP and VSTP, 802.1X against a RADIUS server, voice VLANs with LLDP-MED, and EVPN-VXLAN with all-active multihoming. A troubleshooting lab and a capstone finish the course. They run on Juniper vJunos-router and vJunos-switch.

Start this courseTry it free for 30 minutes

Professional for a month, £112.50, runs every lab here, with nothing extra to pay for the guided labs. 2 of the 19 labs also run in the free demo.

Guided labs
19
Follows
Juniper JNCIP-ENT (JN0-650)
Runs every lab
Professional
Devices
vJunos-router, EVE-NG GUI server, IOSv, vJunos-switch and IOSvL2

Who these labs are for

For engineers who hold or are studying for JNCIS-ENT and are preparing for JNCIP-ENT (JN0-650), or who run Junos routers and switches in an enterprise network.

The labs follow Juniper’s published objectives. They run Junos 24.2 and 23.4, and the exam is on 25.2. Each lab says where the virtual images stop.

The 19 labs

Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.

JNCIP-ENT course 19 labs

Shared folderJNCIP-ENT JN0-650 guided labs

One exam domain at a time, from IGPs and BGP through multicast, class of service and switching to 802.1X, voice and EVPN, then a troubleshooting lab and a capstone.

  1. 01OSPF areas LSAs stub and NSSA

    Bring two Junos routers into a multi-area OSPF network and read every LSA type, then shrink the branch databases with a totally stubby area, an NSSA and summaries.

    3× IOSv, 2× vJunos-router

    11 vCPU, 11,776 MBFits Standard

  2. 02OSPFv3 realms and virtual links

    Build OSPFv3 across three areas, repair a disconnected area with a virtual link, read the OSPFv3 LSA types, and carry IPv4 in an ipv4-unicast realm.

    2× IOSv, 2× vJunos-router

    10 vCPU, 11,264 MBFits Standard

  3. 03Routing policy in depth

    Control what leaves an OSPF network with match types, prefix lists, policy chains and subroutines, and prove each one with test policy before you apply it.

    2× vJunos-router, 1× IOSv

    9 vCPU, 10,752 MBFits Standard

  4. 04BGP route selection and next hops

    Find why iBGP routes are hidden, fix next hop resolution, read why Junos chose each path, and steer traffic with local preference, prepending and MED.

    3× IOSv, 2× vJunos-router

    11 vCPU, 11,776 MBFits Standard

  5. 05BGP communities and policy

    Stop a network being a free transit by labelling every route with a community at the edge, then control exports, ISP behaviour and AS path filtering from those labels.

    4× IOSv, 2× vJunos-router

    12 vCPU, 12,288 MBFits Standard

  6. 06BGP load balancing and IPv6

    Spread traffic across parallel links, routers and ISPs with multihop, multipath and a forwarding table policy, then add IPv6 to BGP on a new session and on an existing IPv4 one.

    3× IOSv, 2× vJunos-router

    11 vCPU, 11,776 MBFits Standard

  7. 07BGP scaling and advanced options

    Scale iBGP with a route reflector inside a confederation, then handle a merger and a messy edge with local-as, remove-private, prefix limits and damping.

    4× IOSv, 2× vJunos-router

    12 vCPU, 12,288 MBFits Standard

  8. 08IGMP and PIM sparse mode

    Carry a real multicast stream across three Junos routers: join with IGMP, build a shared tree to an RP, find the register tunnel's MTU limit, follow the switch to the source tree, and replace the static RP with BSR.

    3× vJunos-router, 3× EVE-NG GUI server

    15 vCPU, 18,432 MBFits Professional

  9. 09Anycast RP and MSDP

    Make the rendezvous point redundant: give two routers one RP address, share sources between them with anycast-pim, then do the same job with MSDP, while a real stream runs.

    3× vJunos-router, 3× EVE-NG GUI server

    15 vCPU, 18,432 MBFits Professional

  10. 10SSM scoping and multicast policy

    Take control of multicast: receive a channel with SSM and no RP, map an IGMPv2 host onto it, keep a group inside a scope, and refuse joins with IGMP and PIM policy.

    3× vJunos-router, 3× EVE-NG GUI server

    15 vCPU, 18,432 MBFits Professional

  11. 11CoS classification policing and rewrite

    Classify real flows at the edge with a filter, mark them with rewrite rules, hold them to a contract with soft and hard policers, and trust those marks in the core with a BA classifier, reading the proof at the receiver.

    2× vJunos-router, 2× EVE-NG GUI server

    10 vCPU, 12,288 MBFits Standard

  12. 12CoS schedulers shaping and drop profiles

    Shape a port to a 10 Mbps contract and watch real per-queue drops under overload, write the schedulers and drop profiles the exam expects, and measure what a software forwarding plane does with them.

    2× vJunos-router, 2× EVE-NG GUI server

    10 vCPU, 12,288 MBFits Standard

  13. 13MVRP IGMP snooping and private VLANs

    Keep trunks right with MVRP, stop a stream flooding every port with IGMP snooping, keep contractors apart with private VLANs, and find out what a filter-based VLAN does on this image.

    2× vJunos-switch, 3× EVE-NG GUI server

    11 vCPU, 13,312 MBFits Standard

  14. 14Q-in-Q MSTP and VSTP

    Share links between VLAN groups with MSTP, compare VSTP, carry a tenant in a Q-in-Q tunnel, and learn what L2PT does and what this image can show of it.

    3× vJunos-switch, 2× EVE-NG GUI server

    14 vCPU, 17,408 MBFits Professional

  15. 15802-1X MAC RADIUS and fallback VLANs

    Close a port with real 802.1X against a RADIUS server, assign a VLAN from RADIUS, admit a device with MAC RADIUS, and send each kind of failure to a restricted VLAN.

    1× vJunos-switch, 2× EVE-NG GUI server

    6 vCPU, 7,168 MBFits LiteRuns in the free demo

  16. 16Voice VLANs and LLDP-MED

    Put a voice VLAN on a data port, have a simulated phone learn its VLAN from LLDP-MED, send real tagged traffic, and read where PoE fits.

    1× vJunos-switch, 2× EVE-NG GUI server

    6 vCPU, 7,168 MBFits LiteRuns in the free demo

  17. 17EVPN VXLAN and ESI multihoming

    Stretch a VLAN across a routed fabric with EVPN-VXLAN, read route types 1 to 4 as they appear, dual-home a switch with an all-active ESI LAG, and fail a link.

    3× vJunos-switch, 1× IOSvL2, 2× EVE-NG GUI server

    15 vCPU, 18,176 MBFits Professional

  18. 18Troubleshooting OSPF BGP and policy

    A contractor has left a network with six independent faults across OSPF, BGP and policy. Work up from the IGP, find each cause with the right show command, and put the design back.

    3× IOSv, 2× vJunos-router

    11 vCPU, 11,776 MBFits Standard

  19. 19Capstone a new depot

    Open a new depot from an empty configuration: OSPF, BGP to an ISP, 802.1X on the access port, a multicast stream through IGMP snooping, and marked voice.

    2× vJunos-router, 1× IOSv, 1× vJunos-switch, 2× EVE-NG GUI server

    15 vCPU, 17,920 MBFits Professional

Devices and images

The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.

Devices and images in the JNCIP-ENT practice labs, as read on 2 November 2026
DeviceImage in Add NodeSet toLabsNodes
Juniper vJunos-routervjunosrouter-24.2R1-S2.54 vCPU, 5,120 MB1431
EVE-NG GUI server (Docker)eve-gui-server:latest1 vCPU, 1,024 MB1126
Cisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB924
Juniper vJunos-switchvjunosswitch-23.4R2-S2.14 vCPU, 5,120 MB611
Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 768 MB11

Browse every image in the Add Node list

How to open the labs

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder JNCIP-ENT JN0-650 guided labs.

  3. Open a lab and start its nodes, then open Lab Tasks for the steps.

The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.

The Shared folder in the EVE-NG File Manager, recorded on 2 November 2026 with a test account.
The EVE-NG File Manager open on the read-only Shared folder: one folder per guided course, including Arista EOS, BGP in depth, CCIE Enterprise Infrastructure, CCNA, CCNP ENARSI and ENCOR, Check Point, Cisco ASA, Cisco Nexus NX-OS, CompTIA Network Plus and FortiGate
A guided CCNA lab with its Lab Tasks pane, recorded on 1 November 2026 with a test account.
A guided CCNA lab open in EVE-NG with its nodes running: four routers and two PCs on the canvas, and the Lab Tasks pane beside them with the scenario, the addressing plan and the first task

Questions about the JNCIP-ENT labs

Are these JNCIP-ENT labs free?

They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, enough to run 2 of these labs.

Which plan do I need for these labs?

Professional, with 18 vCPU and 32 GB, runs every lab here. Standard runs 13 of the 19, Lite 2. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “IGMP and PIM sparse mode”, needs 15 vCPU and 18,432 MB. Each lab’s Lab Tasks pane names the plan it needs.

Can I change these labs?

You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.

Are these labs from Juniper Networks?

No. CloudLabBox wrote them to follow the topics of Juniper’s JNCIP-ENT exam (JN0-650), on Junos 24.2 and 23.4; the exam is on 25.2. They aren’t training material from Juniper Networks, and CloudLabBox is independent of Cisco and Juniper Networks.

Which plan do I need?

Labs 15 and 16 fit Lite. Labs 08, 09, 10, 14, 17 and 19 need Professional. The other 11 need Standard.

How long do the routers take to start?

Cisco IOSv comes up in a few minutes. vJunos nodes took about 22 minutes in our tests, and the panes allow 15 to 35.

What can’t these labs show?

vJunos forwards in software. Shaping, policers, classifiers and rewrite rules are measured for real, but scheduler rates, priorities and buffers and RED drop profiles are configuration only, because queue number decides who goes first here. Filter-based VLANs and Layer 2 protocol tunnelling commit without changing traffic. Captive portal commits and blocks the port, but the image serves no login page. There’s no PoE hardware.

Try a lab before you choose

The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB: enough to run 2 of these labs. No card and no email.

Try it free for 30 minutesStart this course

Plans from £3 a day or £0.50 an hour, each with every guided lab.