VLAN Segmentation Showcase
Fully pre-configured switching demo: same-VLAN traffic crosses the trunk, cross-VLAN traffic is isolated. The simplest 'aha moment' in networking.
- 1 hr 30 min · 5 nodes
- Associate level
- Available on the free demo
NSVL / Catalogue What you actually get
Every lab,
listed in full.
Real Cisco, Fortinet, Sophos, Palo Alto and MikroTik equipment in our racks in Navi Mumbai, reached from your browser. Below is the whole catalogue — duration, node count and the certification each one maps to. No login needed to read it.
NSVL / 01 The catalogue
40 labs —
and what each one costs you in time.
Every lab runs on physical equipment, not a simulator. Convergence timing, licensing states and hardware failure modes are the real ones. 5 of them are open on the free 48-hour demo.
Cisco 6Fortinet 19MikroTik 4Mixed 1Palo Alto 4Sophos 6
Practice labs 40 Built to a published exam blueprint. Start it, break it, reset it, start again.
Enterprise OSPF Live Failover
Fully pre-configured - just start all nodes and present. OSPF triangle with live failover: ping end-to-end, kill a link, watch OSPF reroute in seconds.
- 1 hr 30 min · 5 nodes
- Associate level
- Available on the free demo
OSPF Multi-Area Enterprise
Multi-area OSPF: Area 1 - ABR - Area 0 - ABR - Area 2 with summarization.
- 1 hr 30 min · 4 nodes
- Professional level
- Available on the free demo
EIGRP and Route Redistribution
EIGRP AS100 and OSPF two-way redistribution with route-maps and tags on R3.
- 1 hr 15 min · 4 nodes
- Professional level
- Available on the free demo
BGP for the Enterprise Edge
Dual-homed eBGP edge: LOCAL_PREF outbound, AS-path prepend inbound, prefix-list filtering.
- 2 hr · 5 nodes
- Expert level
- Available on the free demo
START HERE - Firewall Lab Guide
START HERE. A visual guide to all 32 firewall & SD-WAN labs on this server - what each folder covers, logins, difficulty, and a suggested learning path. Includes a 4-vendor sandbox row (unconnected) to quickly explore any firewall.
- 1 hr 30 min · 4 nodes
- Associate level
- Plan or booking required
Initial Setup and Interfaces
edge
- 1 hr 30 min · 4 nodes
- Associate level
- Plan or booking required
Firewall Policies and NAT
3-zone + DMZ
- 1 hr 30 min · 6 nodes
- Associate level
- Plan or booking required
Web Filtering and DNS Filter
multi-user browsing
- 1 hr 30 min · 6 nodes
- Professional level
- Plan or booking required
Application Control and DPI
DPI classification
- 1 hr 30 min · 6 nodes
- Professional level
- Plan or booking required
IPS Intrusion Prevention
attack + protect
- 1 hr 30 min · 6 nodes
- Professional level
- Plan or booking required
Antivirus and SSL Deep Inspection
malware scan
- 1 hr 30 min · 5 nodes
- Professional level
- Plan or booking required
Site-to-Site IPsec VPN FGT to FGT
two sites
- 1 hr 30 min · 6 nodes
- Expert level
- Plan or booking required
SSL VPN Remote Access
remote client
- 1 hr 30 min · 5 nodes
- Expert level
- Plan or booking required
Traffic Shaping and QoS
traffic classes
- 1 hr 30 min · 6 nodes
- Professional level
- Plan or booking required
High Availability Active-Passive
HA cluster
- 1 hr 30 min · 6 nodes
- Expert level
- Plan or booking required
Explicit Web Proxy
forward proxy
- 1 hr 30 min · 5 nodes
- Professional level
- Plan or booking required
Enterprise Edge Capstone
full edge
- 1 hr 30 min · 6 nodes
- Expert level
- Plan or booking required
Site-to-Site IPsec VPN
two sites
- 1 hr 30 min · 6 nodes
- Professional level
- Plan or booking required
QoS and Queue Trees
traffic classes
- 1 hr 30 min · 6 nodes
- Professional level
- Plan or booking required
PPPoE Server and Client Isolation
access concentrator
- 1 hr 30 min · 5 nodes
- Expert level
- Plan or booking required
Palo Alto Content-ID AV-IPS-URL
attacker
- 1 hr 30 min · 6 nodes
- Professional level
- Plan or booking required
Palo Alto Decryption SSL Forward Proxy
HTTPS inspect
- 1 hr 30 min · 5 nodes
- Expert level
- Plan or booking required
Palo Alto GlobalProtect VPN
remote client
- 1 hr 30 min · 5 nodes
- Expert level
- Plan or booking required
Sophos XG Initial Setup and Zones
edge
- 1 hr 30 min · 4 nodes
- Associate level
- Plan or booking required
Sophos NAT and DNAT Publishing
+DMZ server
- 1 hr 30 min · 5 nodes
- Associate level
- Plan or booking required
Sophos Web Protection and App Control
multi-user
- 1 hr 30 min · 6 nodes
- Professional level
- Plan or booking required
Sophos IPS and Advanced Threat Protection
attacker
- 1 hr 30 min · 6 nodes
- Professional level
- Plan or booking required
Sophos SSL VPN Remote Access
remote client
- 1 hr 30 min · 5 nodes
- Expert level
- Plan or booking required
Sophos Site-to-Site IPsec VPN
two sites
- 1 hr 30 min · 6 nodes
- Expert level
- Plan or booking required
FortiGate Policies and NAT
FortiGate NGFW: interface roles, LAN-to-WAN policy with SNAT, DMZ isolation, VIP port-forward.
- 1 hr 30 min · 5 nodes
- Professional level
- Plan or booking required
Site-to-Site IPsec VPN Cisco-FortiGate
IKEv2 tunnel between a Cisco HQ router and a FortiGate branch across a simulated internet.
- 1 hr 15 min · 5 nodes
- Professional level
- Plan or booking required
MikroTik RouterOS Essentials
RouterOS basics: addressing, default route, masquerade NAT, DHCP server, WAN firewall.
- 1 hr · 3 nodes
- Associate level
- Plan or booking required
Enterprise Build Capstone
Full mini-enterprise: WAN edge, FortiGate security layer, collapsed L3 core, user VLANs.
- 4 hr · 7 nodes
- Expert level
- Plan or booking required
FortiGate Security Gateway
Cisco side pre-configured; paste the on-canvas FortiGate config block (60 seconds) and show live NGFW: NAT, policies, real-time session table.
- 1 hr 30 min · 4 nodes
- Associate level
- Plan or booking required
Palo Alto-NW
No description set on the topology.
- 1 hr 30 min · 1 nodes
- Associate level
- Plan or booking required
SD-WAN Dual-Transport Data Plane
SCAFFOLD - upload /opt/unetlab/addons/qemu/ (vtedge - Viptela 18.4.x) to boot.
- 2 hr · 6 nodes
- Expert level
- Plan or booking required
Dual-WAN SD-WAN with Load Balancing
FGT native SD-WAN, dual WAN (port1=ISP-A, port2=ISP-B).
- 1 hr 30 min · 5 nodes
- Professional level
- Plan or booking required
SD-WAN SLA Health Checks and Steering
FGT native SD-WAN, dual WAN (port1=ISP-A, port2=ISP-B).
- 1 hr 30 min · 5 nodes
- Expert level
- Plan or booking required
FortiGate to Cisco IOS Site-to-Site VPN
Interop IPsec: FortiGate HQ to Cisco IOS branch. Cisco side + PCs pre-configured; paste the FGT block.
- 1 hr 30 min · 6 nodes
- Expert level
- Plan or booking required
Nothing here matching what you need? Custom topologies are built to a syllabus, a course outline, or a specific migration that needs rehearsing before it touches production — including mixed-vendor environments.
Discuss a custom labNSVL / 02 Try it first
48 hours on real kit.
No card, no call.
Tell us who you are and we issue lab credentials to your inbox. If every seat is busy you go in the queue and we email the moment one frees — we would rather queue you than send a login that does not work.