JNCIS-SP JN0-364 practice labs

16 guided labs on Junos for Juniper’s JNCIS-SP exam, mapped objective by objective. Work through routing instances, OSPF, IS-IS and BGP with policy, bridging with Q-in-Q, spanning tree, MPLS with RSVP and LDP, segment routing, IPv6 and GRE tunnels and high availability. Then find seven planted faults in each of two troubleshooting labs and build a new provider site in a capstone.

Start this courseTry it free for 30 minutes

Standard for a month, £75.00, runs every lab here, with nothing extra to pay for the guided labs. 2 of the 16 labs also run in the free demo.

Guided labs
16
Follows
Juniper JNCIS-SP (JN0-364)
Runs every lab
Standard
Devices
vSRX NextGen template, IOSv, vJunos-router, Alpine Linux, IOSvL2 and VPCS

Who these labs are for

For engineers preparing for JNCIS-SP or working on Junos in provider networks. You should already know Junos at JNCIA level and basic routing.

The labs run Junos 24.4 and 24.2, the newest we host, and the exam is on 25.2. With one Routing Engine there’s no real GRES or NSR switchover, and segment routing uses the default label block. Each lab says where the virtual routers stop.

The 16 labs

Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.

JNCIS-SP course 16 labs

Shared folderJNCIS-SP JN0-364 guided labs

One exam domain at a time, from routing through MPLS to high availability, then two troubleshooting labs and a capstone.

  1. 01Protocol-independent routes and martians

    Build the routes no protocol owns on Junos: a static route with a floating backup, recursive next hops, aggregates, a conditional default from a generated route, and martian handling.

    2× vSRX NextGen template, 1× IOSv

    5 vCPU, 7,680 MBFits LiteRuns in the free demo

  2. 02Routing instances and RIB groups with load balancing and FBF

    Separate a guest network in a virtual router, leak exactly one route with RIB groups, balance traffic over two links, and steer one flow against the routing table.

    2× vSRX NextGen template, 3× VPCS

    7 vCPU, 11,264 MBFits Standard

  3. 03OSPF in a provider core with policy

    Join a router to a working OSPF core, take over the DR role, read every LSA type, build stub and NSSA areas, and apply OSPF's limited but useful policy tools.

    3× vSRX NextGen template, 2× IOSv, 2× VPCS

    10 vCPU, 15,360 MBFits Standard

  4. 04IS-IS levels and metrics with policy

    Add a new area to a working IS-IS network, read LSPs and TLVs, make a router the DIS, steer traffic with metrics and leak Level 2 routes into Level 1.

    3× vSRX NextGen template, 1× IOSv, 1× VPCS

    8 vCPU, 13,824 MBFits Standard

  5. 05BGP groups and attributes with policy

    Build IBGP and EBGP groups for a small provider, fix hidden routes with next-hop self, steer traffic with attributes, and use communities to carry the customer without becoming a free transit.

    3× IOSv, 3× vSRX NextGen template

    9 vCPU, 13,824 MBFits Standard

  6. 06Bridging and VLANs with IRB and Q-in-Q

    Do Layer 2 the MX way: bridge domains, access ports, trunks and IRB, then separate a customer in a virtual switch, and carry another's tags untouched with Q-in-Q.

    2× IOSv, 2× vJunos-router, 2× VPCS

    12 vCPU, 13,312 MBFits Standard

  7. 07Spanning tree from RSTP to VSTP with protection

    Close a ring of bridges safely with RSTP, choose the root, watch an alternate take over, test all three protections, then give each VLAN its own tree with MSTP and VSTP.

    3× vJunos-router

    12 vCPU, 15,360 MBFits Standard

  8. 08MPLS with RSVP-signalled LSPs

    Carry customer traffic across a core that has no customer routes. Build RSVP LSPs, read the labels hop by hop, then add a standby path and a bandwidth constraint.

    4× vSRX NextGen template, 2× IOSv

    10 vCPU, 15,360 MBFits Standard

  9. 09MPLS with LDP-signalled LSPs

    Solve the same BGP-free core problem with LDP. Read how labels spread, see that LSPs follow the IGP, and advertise extra FECs with an egress policy.

    4× vSRX NextGen template, 2× IOSv

    10 vCPU, 15,360 MBFits Standard

  10. 10Segment routing with IS-IS

    Solve the BGP-free core problem a third way: with no label protocol, just a number for each router in IS-IS. See the same label on every hop, and no per-LSP state.

    4× vSRX NextGen template, 2× IOSv

    10 vCPU, 15,360 MBFits Standard

  11. 11IPv6 routing and IPv6 over IPv4 tunnels

    Roll IPv6 across a provider path with static routes, OSPFv3, IS-IS and BGP, then keep two sites connected over an IPv4-only router with a tunnel.

    3× vSRX NextGen template, 2× Alpine Linux, 1× IOSv

    9 vCPU, 13,824 MBFits Standard

  12. 12GRE tunnels

    Join two offices over a network that won't route their addresses, with a GRE tunnel, run OSPF through it, and find the tunnel's MTU limit.

    2× vSRX NextGen template, 1× IOSv

    5 vCPU, 7,680 MBFits LiteRuns in the free demo

  13. 13High availability from LAG to NSR

    Harden a two-router site: bundle links with LACP, detect failures in under a second with BFD, give hosts a gateway that survives with VRRP, and restart routing gracefully. GRES and NSR are configured and read, and the lab says plainly what one Routing Engine can't show.

    2× vJunos-router, 1× IOSv, 1× VPCS

    10 vCPU, 11,776 MBFits Standard

  14. 14Troubleshooting IGP and BGP

    Seven faults stand between a customer and the internet, in OSPF, IS-IS and BGP. Work up from the link, using the evidence, and fix only what's wrong.

    3× vSRX NextGen template, 1× IOSv, 1× VPCS

    8 vCPU, 13,824 MBFits Standard

  15. 15Troubleshooting MPLS and Layer 2

    Seven faults between a customer VLAN and a far site: a blocked port, a missing VLAN, a misplaced gateway, then LSPs that fail for four different reasons.

    2× vSRX NextGen template, 1× IOSvL2, 1× vJunos-router, 2× VPCS

    11 vCPU, 15,104 MBFits Standard

  16. 16Capstone - a new provider site

    Build a customer service from a design sheet: dual-stack IS-IS, RSVP LSPs with a standby, a LACP bundle to the customer's switch with IRB, and BGP with aggregates, a conditional default and communities. Then fail the core and prove it survives.

    2× vSRX NextGen template, 1× IOSv, 1× IOSvL2, 1× vJunos-router, 1× VPCS

    11 vCPU, 14,592 MBFits Standard

Devices and images

The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.

Devices and images in the JNCIS-SP practice labs, as read on 2 November 2026
DeviceImage in Add NodeSet toLabsNodes
Juniper vSRX NextGen templatevsrxng-24.4R1.92 vCPU, 3,584 MB; 2 vCPU, 4,096 MB1337
Cisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB1320
Juniper vJunos-routervjunosrouter-24.2R1-S2.54 vCPU, 5,120 MB59
Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB12
Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 768 MB22
VPCS hostBuilt in to EVE-NGcounted as 1 vCPU, 1,024 MB813

Browse every image in the Add Node list

How to open the labs

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder JNCIS-SP JN0-364 guided labs.

  3. Open a lab and start its nodes, then open Lab Tasks for the steps.

The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.

The Shared folder in the EVE-NG File Manager, recorded on 2 November 2026 with a test account.
The EVE-NG File Manager open on the read-only Shared folder: one folder per guided course, including Arista EOS, BGP in depth, CCIE Enterprise Infrastructure, CCNA, CCNP ENARSI and ENCOR, Check Point, Cisco ASA, Cisco Nexus NX-OS, CompTIA Network Plus and FortiGate
A guided CCNA lab with its Lab Tasks pane, recorded on 1 November 2026 with a test account.
A guided CCNA lab open in EVE-NG with its nodes running: four routers and two PCs on the canvas, and the Lab Tasks pane beside them with the scenario, the addressing plan and the first task

Questions about the JNCIS-SP labs

Are these JNCIS-SP labs free?

They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, enough to run 2 of these labs.

Which plan do I need for these labs?

Standard, with 12 vCPU and 16 GB, runs every lab here. Lite runs 2 of the 16. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “Spanning tree from RSTP to VSTP with protection”, needs 12 vCPU and 15,360 MB. Each lab’s Lab Tasks pane names the plan it needs.

Can I change these labs?

You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.

Are these labs from Juniper Networks?

No. CloudLabBox wrote them to follow the topics of Juniper’s JNCIS-SP exam (JN0-364), on Junos 24.4 and 24.2, the newest we host; the exam is on 25.2. They aren’t training material from Juniper Networks, and CloudLabBox is independent of Cisco and Juniper Networks.

Which plan do I need?

Labs 01 and 12 fit Lite. The other 14 need Standard.

How long do the routers take to start?

vSRX nodes are ready in about 5 to 8 minutes. vJunos-router nodes, used in labs 06, 07, 13, 15 and 16, can take 20 to 30 minutes on a busy host.

Try a lab before you choose

The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB: enough to run 2 of these labs. No card and no email.

Try it free for 30 minutesStart this course

Plans from £3 a day or £0.50 an hour, each with every guided lab.