JNCIS-SP JN0-364 practice labs
16 guided labs on Junos for Juniper’s JNCIS-SP exam, mapped objective by objective. Work through routing instances, OSPF, IS-IS and BGP with policy, bridging with Q-in-Q, spanning tree, MPLS with RSVP and LDP, segment routing, IPv6 and GRE tunnels and high availability. Then find seven planted faults in each of two troubleshooting labs and build a new provider site in a capstone.
- Guided labs
- 16
- Follows
- Juniper JNCIS-SP (JN0-364)
- Runs every lab
- Standard
- Devices
- vSRX NextGen template, IOSv, vJunos-router, Alpine Linux, IOSvL2 and VPCS
Who these labs are for
For engineers preparing for JNCIS-SP or working on Junos in provider networks. You should already know Junos at JNCIA level and basic routing.
The labs run Junos 24.4 and 24.2, the newest we host, and the exam is on 25.2. With one Routing Engine there’s no real GRES or NSR switchover, and segment routing uses the default label block. Each lab says where the virtual routers stop.
The 16 labs
Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.
JNCIS-SP course 16 labs
Shared folderJNCIS-SP JN0-364 guided labs
One exam domain at a time, from routing through MPLS to high availability, then two troubleshooting labs and a capstone.
-
01Protocol-independent routes and martians
Build the routes no protocol owns on Junos: a static route with a floating backup, recursive next hops, aggregates, a conditional default from a generated route, and martian handling.
2× vSRX NextGen template, 1× IOSv
5 vCPU, 7,680 MBFits LiteRuns in the free demo
-
02Routing instances and RIB groups with load balancing and FBF
Separate a guest network in a virtual router, leak exactly one route with RIB groups, balance traffic over two links, and steer one flow against the routing table.
2× vSRX NextGen template, 3× VPCS
7 vCPU, 11,264 MBFits Standard
-
03OSPF in a provider core with policy
Join a router to a working OSPF core, take over the DR role, read every LSA type, build stub and NSSA areas, and apply OSPF's limited but useful policy tools.
3× vSRX NextGen template, 2× IOSv, 2× VPCS
10 vCPU, 15,360 MBFits Standard
-
04IS-IS levels and metrics with policy
Add a new area to a working IS-IS network, read LSPs and TLVs, make a router the DIS, steer traffic with metrics and leak Level 2 routes into Level 1.
3× vSRX NextGen template, 1× IOSv, 1× VPCS
8 vCPU, 13,824 MBFits Standard
-
05BGP groups and attributes with policy
Build IBGP and EBGP groups for a small provider, fix hidden routes with next-hop self, steer traffic with attributes, and use communities to carry the customer without becoming a free transit.
3× IOSv, 3× vSRX NextGen template
9 vCPU, 13,824 MBFits Standard
-
06Bridging and VLANs with IRB and Q-in-Q
Do Layer 2 the MX way: bridge domains, access ports, trunks and IRB, then separate a customer in a virtual switch, and carry another's tags untouched with Q-in-Q.
2× IOSv, 2× vJunos-router, 2× VPCS
12 vCPU, 13,312 MBFits Standard
-
07Spanning tree from RSTP to VSTP with protection
Close a ring of bridges safely with RSTP, choose the root, watch an alternate take over, test all three protections, then give each VLAN its own tree with MSTP and VSTP.
3× vJunos-router
12 vCPU, 15,360 MBFits Standard
-
08MPLS with RSVP-signalled LSPs
Carry customer traffic across a core that has no customer routes. Build RSVP LSPs, read the labels hop by hop, then add a standby path and a bandwidth constraint.
4× vSRX NextGen template, 2× IOSv
10 vCPU, 15,360 MBFits Standard
-
09MPLS with LDP-signalled LSPs
Solve the same BGP-free core problem with LDP. Read how labels spread, see that LSPs follow the IGP, and advertise extra FECs with an egress policy.
4× vSRX NextGen template, 2× IOSv
10 vCPU, 15,360 MBFits Standard
-
10Segment routing with IS-IS
Solve the BGP-free core problem a third way: with no label protocol, just a number for each router in IS-IS. See the same label on every hop, and no per-LSP state.
4× vSRX NextGen template, 2× IOSv
10 vCPU, 15,360 MBFits Standard
-
11IPv6 routing and IPv6 over IPv4 tunnels
Roll IPv6 across a provider path with static routes, OSPFv3, IS-IS and BGP, then keep two sites connected over an IPv4-only router with a tunnel.
3× vSRX NextGen template, 2× Alpine Linux, 1× IOSv
9 vCPU, 13,824 MBFits Standard
-
12GRE tunnels
Join two offices over a network that won't route their addresses, with a GRE tunnel, run OSPF through it, and find the tunnel's MTU limit.
2× vSRX NextGen template, 1× IOSv
5 vCPU, 7,680 MBFits LiteRuns in the free demo
-
13High availability from LAG to NSR
Harden a two-router site: bundle links with LACP, detect failures in under a second with BFD, give hosts a gateway that survives with VRRP, and restart routing gracefully. GRES and NSR are configured and read, and the lab says plainly what one Routing Engine can't show.
2× vJunos-router, 1× IOSv, 1× VPCS
10 vCPU, 11,776 MBFits Standard
-
14Troubleshooting IGP and BGP
Seven faults stand between a customer and the internet, in OSPF, IS-IS and BGP. Work up from the link, using the evidence, and fix only what's wrong.
3× vSRX NextGen template, 1× IOSv, 1× VPCS
8 vCPU, 13,824 MBFits Standard
-
15Troubleshooting MPLS and Layer 2
Seven faults between a customer VLAN and a far site: a blocked port, a missing VLAN, a misplaced gateway, then LSPs that fail for four different reasons.
2× vSRX NextGen template, 1× IOSvL2, 1× vJunos-router, 2× VPCS
11 vCPU, 15,104 MBFits Standard
-
16Capstone - a new provider site
Build a customer service from a design sheet: dual-stack IS-IS, RSVP LSPs with a standby, a LACP bundle to the customer's switch with IRB, and BGP with aggregates, a conditional default and communities. Then fail the core and prove it survives.
2× vSRX NextGen template, 1× IOSv, 1× IOSvL2, 1× vJunos-router, 1× VPCS
11 vCPU, 14,592 MBFits Standard
Devices and images
The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.
| Device | Image in Add Node | Set to | Labs | Nodes |
|---|---|---|---|---|
| Juniper vSRX NextGen template | vsrxng-24.4R1.9 | 2 vCPU, 3,584 MB; 2 vCPU, 4,096 MB | 13 | 37 |
| Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB | 13 | 20 |
| Juniper vJunos-router | vjunosrouter-24.2R1-S2.5 | 4 vCPU, 5,120 MB | 5 | 9 |
| Alpine Linux | clbalpinebase-alpine-base-3-20-3 | 1 vCPU, 512 MB | 1 | 2 |
| Cisco IOSvL2 | viosl2-adventerprisek9-m.ssa.high_iron_20200929 | 1 vCPU, 768 MB | 2 | 2 |
| VPCS host | Built in to EVE-NG | counted as 1 vCPU, 1,024 MB | 8 | 13 |
How to open the labs
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
JNCIS-SP JN0-364 guided labs.Open a lab and start its nodes, then open Lab Tasks for the steps.
The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.


Questions about the JNCIS-SP labs
Are these JNCIS-SP labs free?
They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, enough to run 2 of these labs.
Which plan do I need for these labs?
Standard, with 12 vCPU and 16 GB, runs every lab here. Lite runs 2 of the 16. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “Spanning tree from RSTP to VSTP with protection”, needs 12 vCPU and 15,360 MB. Each lab’s Lab Tasks pane names the plan it needs.
Can I change these labs?
You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.
Are these labs from Juniper Networks?
No. CloudLabBox wrote them to follow the topics of Juniper’s JNCIS-SP exam (JN0-364), on Junos 24.4 and 24.2, the newest we host; the exam is on 25.2. They aren’t training material from Juniper Networks, and CloudLabBox is independent of Cisco and Juniper Networks.
Which plan do I need?
Labs 01 and 12 fit Lite. The other 14 need Standard.
How long do the routers take to start?
vSRX nodes are ready in about 5 to 8 minutes. vJunos-router nodes, used in labs 06, 07, 13, 15 and 16, can take 20 to 30 minutes on a busy host.
Try a lab before you choose
The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB: enough to run 2 of these labs. No card and no email.
More practice labs
- CCNA practice labs online
- CompTIA Network+ practice labs
- CCNP ENCOR practice labs
- CCNP ENARSI practice labs
- CCNP Service Provider practice labs
- Cisco NX-OS data centre practice labs
- CCIE Enterprise Infrastructure practice labs
- Network automation practice labs
- Cisco ASA firewall practice labs
- Packet analysis labs with Wireshark and tcpdump
- FortiGate practice labs
- FortiGate SD-WAN practice labs
- Cisco Catalyst SD-WAN CLI practice labs
- Palo Alto firewall practice labs
- Check Point CCSA practice labs
- Check Point CCSE practice labs
- Multi-vendor firewall and VPN practice labs
- BGP practice labs across vendors
- Nokia SR OS NRS I practice labs
- MPLS and L3VPN practice labs
- VXLAN EVPN practice labs across vendors
- IPv6 practice labs across vendors
- Linux labs for network engineers
- Multi-vendor troubleshooting practice labs
- JNCIA-Junos practice labs
- JNCIS-ENT practice labs
- JNCIA-SEC and JNCIS-SEC practice labs
- JNCIP-ENT JN0-650 practice labs
- Arista EOS practice labs
- HPE Aruba Networking CX switching labs
- Huawei HCIA-Datacom practice labs
- HCIP-Datacom Core practice labs
- MikroTik MTCNA practice labs
- MikroTik MTCRE practice labs
- MikroTik MTCINE practice labs
- MikroTik MTCSE practice labs
- MikroTik MTCTCE practice labs
- MikroTik MTCIPv6E practice labs
- All practice labs
CloudLabBox is independent of Cisco and Juniper Networks. The labs follow exam topics and aren’t vendor training material; vendor names identify the exams and the images in the workspace.