JNCIP-ENT JN0-650 practice labs
19 guided labs on advanced Junos enterprise routing and switching for Juniper’s JNCIP-ENT exam: OSPFv2 and OSPFv3 with areas, realms and virtual links, routing policy, BGP path selection, communities, load balancing, route reflection and confederations, IP multicast with real streams through PIM, anycast RP, MSDP and SSM, class of service measured at the receiver, MVRP, IGMP snooping, private VLANs, Q-in-Q, MSTP and VSTP, 802.1X against a RADIUS server, voice VLANs with LLDP-MED, and EVPN-VXLAN with all-active multihoming. A troubleshooting lab and a capstone finish the course. They run on Juniper vJunos-router and vJunos-switch.
- Guided labs
- 19
- Follows
- Juniper JNCIP-ENT (JN0-650)
- Runs every lab
- Professional
- Devices
- vJunos-router, EVE-NG GUI server, IOSv, vJunos-switch and IOSvL2
Who these labs are for
For engineers who hold or are studying for JNCIS-ENT and are preparing for JNCIP-ENT (JN0-650), or who run Junos routers and switches in an enterprise network.
The labs follow Juniper’s published objectives. They run Junos 24.2 and 23.4, and the exam is on 25.2. Each lab says where the virtual images stop.
The 19 labs
Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.
JNCIP-ENT course 19 labs
Shared folderJNCIP-ENT JN0-650 guided labs
One exam domain at a time, from IGPs and BGP through multicast, class of service and switching to 802.1X, voice and EVPN, then a troubleshooting lab and a capstone.
-
01OSPF areas LSAs stub and NSSA
Bring two Junos routers into a multi-area OSPF network and read every LSA type, then shrink the branch databases with a totally stubby area, an NSSA and summaries.
3× IOSv, 2× vJunos-router
11 vCPU, 11,776 MBFits Standard
-
02OSPFv3 realms and virtual links
Build OSPFv3 across three areas, repair a disconnected area with a virtual link, read the OSPFv3 LSA types, and carry IPv4 in an ipv4-unicast realm.
2× IOSv, 2× vJunos-router
10 vCPU, 11,264 MBFits Standard
-
03Routing policy in depth
Control what leaves an OSPF network with match types, prefix lists, policy chains and subroutines, and prove each one with test policy before you apply it.
2× vJunos-router, 1× IOSv
9 vCPU, 10,752 MBFits Standard
-
04BGP route selection and next hops
Find why iBGP routes are hidden, fix next hop resolution, read why Junos chose each path, and steer traffic with local preference, prepending and MED.
3× IOSv, 2× vJunos-router
11 vCPU, 11,776 MBFits Standard
-
05BGP communities and policy
Stop a network being a free transit by labelling every route with a community at the edge, then control exports, ISP behaviour and AS path filtering from those labels.
4× IOSv, 2× vJunos-router
12 vCPU, 12,288 MBFits Standard
-
06BGP load balancing and IPv6
Spread traffic across parallel links, routers and ISPs with multihop, multipath and a forwarding table policy, then add IPv6 to BGP on a new session and on an existing IPv4 one.
3× IOSv, 2× vJunos-router
11 vCPU, 11,776 MBFits Standard
-
07BGP scaling and advanced options
Scale iBGP with a route reflector inside a confederation, then handle a merger and a messy edge with local-as, remove-private, prefix limits and damping.
4× IOSv, 2× vJunos-router
12 vCPU, 12,288 MBFits Standard
-
08IGMP and PIM sparse mode
Carry a real multicast stream across three Junos routers: join with IGMP, build a shared tree to an RP, find the register tunnel's MTU limit, follow the switch to the source tree, and replace the static RP with BSR.
3× vJunos-router, 3× EVE-NG GUI server
15 vCPU, 18,432 MBFits Professional
-
09Anycast RP and MSDP
Make the rendezvous point redundant: give two routers one RP address, share sources between them with anycast-pim, then do the same job with MSDP, while a real stream runs.
3× vJunos-router, 3× EVE-NG GUI server
15 vCPU, 18,432 MBFits Professional
-
10SSM scoping and multicast policy
Take control of multicast: receive a channel with SSM and no RP, map an IGMPv2 host onto it, keep a group inside a scope, and refuse joins with IGMP and PIM policy.
3× vJunos-router, 3× EVE-NG GUI server
15 vCPU, 18,432 MBFits Professional
-
11CoS classification policing and rewrite
Classify real flows at the edge with a filter, mark them with rewrite rules, hold them to a contract with soft and hard policers, and trust those marks in the core with a BA classifier, reading the proof at the receiver.
2× vJunos-router, 2× EVE-NG GUI server
10 vCPU, 12,288 MBFits Standard
-
12CoS schedulers shaping and drop profiles
Shape a port to a 10 Mbps contract and watch real per-queue drops under overload, write the schedulers and drop profiles the exam expects, and measure what a software forwarding plane does with them.
2× vJunos-router, 2× EVE-NG GUI server
10 vCPU, 12,288 MBFits Standard
-
13MVRP IGMP snooping and private VLANs
Keep trunks right with MVRP, stop a stream flooding every port with IGMP snooping, keep contractors apart with private VLANs, and find out what a filter-based VLAN does on this image.
2× vJunos-switch, 3× EVE-NG GUI server
11 vCPU, 13,312 MBFits Standard
-
14Q-in-Q MSTP and VSTP
Share links between VLAN groups with MSTP, compare VSTP, carry a tenant in a Q-in-Q tunnel, and learn what L2PT does and what this image can show of it.
3× vJunos-switch, 2× EVE-NG GUI server
14 vCPU, 17,408 MBFits Professional
-
15802-1X MAC RADIUS and fallback VLANs
Close a port with real 802.1X against a RADIUS server, assign a VLAN from RADIUS, admit a device with MAC RADIUS, and send each kind of failure to a restricted VLAN.
1× vJunos-switch, 2× EVE-NG GUI server
6 vCPU, 7,168 MBFits LiteRuns in the free demo
-
16Voice VLANs and LLDP-MED
Put a voice VLAN on a data port, have a simulated phone learn its VLAN from LLDP-MED, send real tagged traffic, and read where PoE fits.
1× vJunos-switch, 2× EVE-NG GUI server
6 vCPU, 7,168 MBFits LiteRuns in the free demo
-
17EVPN VXLAN and ESI multihoming
Stretch a VLAN across a routed fabric with EVPN-VXLAN, read route types 1 to 4 as they appear, dual-home a switch with an all-active ESI LAG, and fail a link.
3× vJunos-switch, 1× IOSvL2, 2× EVE-NG GUI server
15 vCPU, 18,176 MBFits Professional
-
18Troubleshooting OSPF BGP and policy
A contractor has left a network with six independent faults across OSPF, BGP and policy. Work up from the IGP, find each cause with the right show command, and put the design back.
3× IOSv, 2× vJunos-router
11 vCPU, 11,776 MBFits Standard
-
19Capstone a new depot
Open a new depot from an empty configuration: OSPF, BGP to an ISP, 802.1X on the access port, a multicast stream through IGMP snooping, and marked voice.
2× vJunos-router, 1× IOSv, 1× vJunos-switch, 2× EVE-NG GUI server
15 vCPU, 17,920 MBFits Professional
Devices and images
The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.
| Device | Image in Add Node | Set to | Labs | Nodes |
|---|---|---|---|---|
| Juniper vJunos-router | vjunosrouter-24.2R1-S2.5 | 4 vCPU, 5,120 MB | 14 | 31 |
| EVE-NG GUI server (Docker) | eve-gui-server:latest | 1 vCPU, 1,024 MB | 11 | 26 |
| Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB | 9 | 24 |
| Juniper vJunos-switch | vjunosswitch-23.4R2-S2.1 | 4 vCPU, 5,120 MB | 6 | 11 |
| Cisco IOSvL2 | viosl2-adventerprisek9-m.ssa.high_iron_20200929 | 1 vCPU, 768 MB | 1 | 1 |
How to open the labs
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
JNCIP-ENT JN0-650 guided labs.Open a lab and start its nodes, then open Lab Tasks for the steps.
The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.


Questions about the JNCIP-ENT labs
Are these JNCIP-ENT labs free?
They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, enough to run 2 of these labs.
Which plan do I need for these labs?
Professional, with 18 vCPU and 32 GB, runs every lab here. Standard runs 13 of the 19, Lite 2. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “IGMP and PIM sparse mode”, needs 15 vCPU and 18,432 MB. Each lab’s Lab Tasks pane names the plan it needs.
Can I change these labs?
You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.
Are these labs from Juniper Networks?
No. CloudLabBox wrote them to follow the topics of Juniper’s JNCIP-ENT exam (JN0-650), on Junos 24.2 and 23.4; the exam is on 25.2. They aren’t training material from Juniper Networks, and CloudLabBox is independent of Cisco and Juniper Networks.
Which plan do I need?
Labs 15 and 16 fit Lite. Labs 08, 09, 10, 14, 17 and 19 need Professional. The other 11 need Standard.
How long do the routers take to start?
Cisco IOSv comes up in a few minutes. vJunos nodes took about 22 minutes in our tests, and the panes allow 15 to 35.
What can’t these labs show?
vJunos forwards in software. Shaping, policers, classifiers and rewrite rules are measured for real, but scheduler rates, priorities and buffers and RED drop profiles are configuration only, because queue number decides who goes first here. Filter-based VLANs and Layer 2 protocol tunnelling commit without changing traffic. Captive portal commits and blocks the port, but the image serves no login page. There’s no PoE hardware.
Try a lab before you choose
The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB: enough to run 2 of these labs. No card and no email.
More practice labs
- CCNA practice labs online
- CompTIA Network+ practice labs
- CCNP ENCOR practice labs
- CCNP ENARSI practice labs
- CCNP Service Provider practice labs
- Cisco NX-OS data centre practice labs
- CCIE Enterprise Infrastructure practice labs
- Network automation practice labs
- Cisco ASA firewall practice labs
- Packet analysis labs with Wireshark and tcpdump
- FortiGate practice labs
- FortiGate SD-WAN practice labs
- Cisco Catalyst SD-WAN CLI practice labs
- Palo Alto firewall practice labs
- Check Point CCSA practice labs
- Check Point CCSE practice labs
- Multi-vendor firewall and VPN practice labs
- BGP practice labs across vendors
- Nokia SR OS NRS I practice labs
- MPLS and L3VPN practice labs
- VXLAN EVPN practice labs across vendors
- IPv6 practice labs across vendors
- Linux labs for network engineers
- Multi-vendor troubleshooting practice labs
- JNCIA-Junos practice labs
- JNCIS-ENT practice labs
- JNCIA-SEC and JNCIS-SEC practice labs
- JNCIS-SP JN0-364 practice labs
- Arista EOS practice labs
- HPE Aruba Networking CX switching labs
- Huawei HCIA-Datacom practice labs
- HCIP-Datacom Core practice labs
- MikroTik MTCNA practice labs
- MikroTik MTCRE practice labs
- MikroTik MTCINE practice labs
- MikroTik MTCSE practice labs
- MikroTik MTCTCE practice labs
- MikroTik MTCIPv6E practice labs
- All practice labs
CloudLabBox is independent of Cisco and Juniper Networks. The labs follow exam topics and aren’t vendor training material; vendor names identify the exams and the images in the workspace.