Full syllabusWeek 1Day 3

Network Foundations and the Packet Journey

Campus, WAN, SOHO, cloud, and spine-leaf topologies

You will understand and compare five common network designs: campus, wide area network (WAN), small office/home office (SOHO), cloud, and spine-leaf topologies. You will learn how data travels through each design (traffic paths) and what parts might be impacted if something stops working (failure domains).

Exam map
Current v1.1
1.2
Announced v2.0
1.0
Domain
Network fundamentals

First, the essential ideas

Topology
A topology is a plan of network devices and the connections between them. A physical plan shows cables; a logical plan shows communication relationships.
Campus, WAN and SOHO
A campus connects a site's buildings or work areas. Its access layer connects user devices; distribution joins access networks; a core joins distribution areas. Smaller designs can combine the last two roles. A wide area network, or WAN, joins separate sites. SOHO means small office or home office, where fewer users share a smaller network.
Cloud
Cloud computing provides computing services, such as servers, over a network. A provider manages underlying resources; a cloud symbol alone does not prove that a service has backup capacity or isolation.
Spine and leaf
A leaf switch connects endpoint devices. A spine switch connects leaves to one another. Each leaf connects to both spines in this drawing. Between its two leaves, a path crosses one spine and two fabric links. Devices on the same leaf need not cross a spine; this is not an always-two-hops rule for every design.
Traffic path
A traffic path is the ordered route that a message follows from its sending device to its receiving device.
Failure domain
A failure domain is the set of devices or services affected when a particular component stops working. Its size depends on the design.
Redundancy
Redundancy means providing another component or path for the same job. Recovery also needs working configuration; an extra cable alone is not a guarantee.
Gateway
A gateway is the router a computer uses to reach another IP network. Local traffic does not need to pass through that router.
ECMP
Equal-cost multipath, or ECMP, lets a router use multiple eligible routes with the same routing cost. A flow is related traffic, such as one download. Its packets commonly use one selected path instead of being copied onto every path.
VPCS
Virtual PC Simulator, or VPCS, is a small computer simulator included with the network-lab application GNS3. It supports address settings and connectivity tests without a Cisco software image.
Interface and console
An interface is a device's network connection, such as the Ethernet0 cable port in this lab. A console is a text window for a named device. Type a command there and press Enter to ask that device to perform an action.
Ping and ICMP
Ping tests whether a destination replies. It sends an echo request, a message asking for a response, using Internet Control Message Protocol (ICMP). An echo reply is the destination's response. Replies show that the tested exchange worked, not that every application works or that the network uses a particular topology.

We compare five designs using separate drawings. Only the campus access example is a live GNS3 exercise. WAN, SOHO, cloud and spine-leaf are paper models with named destinations and limits. A paper prediction is not measured device output. Everyday comparisons are memory aids, not literal network rules: roads do not select routes using device addresses and routing configuration.

See the idea

Five topology comparisons

This small access-network example has one switch. Real campus designs can add redundant switches and paths.

CampusPC1 sends through CampusSwitch to CampusPC2. The path ends at CampusPC2; losing the only switch breaks this example's connection.CampusPC1Sends the testCampusSwitchJoins local devicesCampusPC2Receives and replies
CampusPC1 sends through CampusSwitch to CampusPC2. The path ends at CampusPC2; losing the only switch breaks this example's connection.CampusPC1Sends the testCampusSwitchJoins local devicesCampusPC2Receives and replies
Step 1 of 3

Trace the local request

CampusPC1 sends the test through CampusSwitch to CampusPC2. Both computers are in one local network, so this path needs no router.

What this model leaves out: This lab models one campus access segment. It omits redundant campus switches and paths to isolate one failure; their recovery behaviour is not tested.

Full visual explanation and references

Campus access

CampusPC1 sends through CampusSwitch to CampusPC2. The path ends at CampusPC2; losing the only switch breaks this example's connection.

This lab models one campus access segment. It omits redundant campus switches and paths to isolate one failure; their recovery behaviour is not tested.

  1. Trace the local request

    CampusPC1 sends the test through CampusSwitch to CampusPC2. Both computers are in one local network, so this path needs no router.

    docs.gns3.com
  2. Observe the reply

    CampusPC2 replies through CampusSwitch to CampusPC1. A reply verifies this test path, not every application or every campus service.

    docs.gns3.com
  3. Limit the failure claim

    Removing the CampusPC2 cable breaks this sole path. A real campus may use redundant switches and links; this small lab cannot demonstrate their recovery.

    www.cisco.comdocs.gns3.com

WAN between sites

BranchPC sends through BranchRouter and RemoteRouter to RemoteServer. The diagram ends at RemoteServer; the middle link represents an inter-site WAN service.

This paper model omits the provider's internal routers, latency and failover. The WAN service is one logical link, not a measured or emulated carrier network.

  1. Follow the remote path

    BranchPC sends through BranchRouter, the logical WAN link and RemoteRouter to RemoteServer. The return route must also work for a reply.

    www.rfc-editor.org
  2. Separate local and remote

    Cover the middle link on paper. BranchPC cannot reach RemoteServer along this path, but that does not prove that every device at the branch has stopped working.

    www.rfc-editor.org
  3. Restore the connection

    Uncover the middle link and trace BranchPC to RemoteServer again. This restores the drawn path only; it is not a carrier failover or latency measurement.

    www.rfc-editor.org

SOHO gateway

SOHO PC sends through SOHORouter to SOHO Server on another network. The diagram ends at SOHO Server and shows only the gateway's routing role.

This paper example omits Wi-Fi, NAT, DHCP and firewall policy to focus on routing. SOHORouter is a conceptual role, not an installed GNS3 template.

  1. Follow the gateway

    SOHO PC sends through SOHORouter to SOHO Server on another network. A gateway is the next router a host uses to reach a remote network.

    www.rfc-editor.org
  2. Find the dependency

    Cover SOHORouter on paper. This example loses its only route to SOHO Server. Do not infer that every real small-office design lacks a backup gateway.

    www.rfc-editor.org
  3. Separate bundled roles

    Uncover SOHORouter and trace the route to SOHO Server. This drawing tests no wireless or firewall feature, even if a real home appliance includes both.

    www.rfc-editor.org

Cloud service

CloudDevice sends through CloudGateway to Cloud Server. The logical service path ends at Cloud Server; the provider's internal network is not depicted.

This paper model omits provider failover and logical isolation because GNS3 does not reproduce a public cloud. Its Cloud node connects networks; it does not create provider services.

  1. Trace the service path

    CloudDevice reaches Cloud Server through CloudGateway, a logical entry in this paper example. The arrows are dependencies, not an inventory of a provider's routers.

    nvlpubs.nist.gov
  2. Distinguish the failures

    Cover the client link, then cover Cloud Server separately. Either interrupts this drawn service path; neither observation proves whether a provider has failover or tenant isolation.

    nvlpubs.nist.gov
  3. Compare a local test

    Uncover the path to Cloud Server. Compare it with the campus cable-removal lab: that lab tests local connectivity, not cloud availability, scaling or logical isolation.

    nvlpubs.nist.govdocs.gns3.com

Spine-leaf fabric

Spine PC reaches LeafSwitch1, SpineSwitch1 or SpineSwitch2, LeafSwitch2, then Spine Server. Both alternatives are drawn; the destination is Spine Server.

This paper fabric omits routing setup and convergence timing. Built-in GNS3 Ethernet switches can have multiple links but do not demonstrate routed ECMP; a capable, licensed platform is required.

  1. Trace the first path

    Spine PC reaches LeafSwitch1, SpineSwitch1, LeafSwitch2 and Spine Server. ECMP means equal-cost multipath: eligible routes can share traffic, commonly by flow.

    www.cisco.com
  2. Trace the alternative

    Spine PC can instead reach Spine Server through LeafSwitch1, SpineSwitch2 and LeafSwitch2 when routing permits. Two drawn uplinks alone do not enable ECMP.

    www.cisco.com
  3. Compare failure domains

    Cover SpineSwitch1 and trace the surviving route to Spine Server through SpineSwitch2. Cover LeafSwitch2 instead: this single-attached server loses both paths. Recovery timing is not simulated.

    www.cisco.com

One idea at a time

Start with something familiar.

You have basic knowledge of computers and simple networks from Day 1 and Day 2 lessons, including an understanding of devices like PCs, switches, routers, and the concept of connections.

Why learn this?

Understanding different network designs helps you know how data moves and how networks handle failures. This is key to designing or troubleshooting networks efficiently.

An everyday comparison

Think of cities linked by roads: local streets connect houses (campus), highways connect cities (WAN), small neighborhoods have fewer streets (SOHO), clouds are like large shared bus hubs with many routes, and some large complexes have special road layouts to balance traffic (spine-leaf).

What happens in a network

Local streets resemble campus networks, linking devices close together. Highways are like WANs connecting different locations. Small neighborhoods show SOHO’s simplicity. Bus hubs as clouds emphasize shared, provider-managed resources. Complex road layouts match spine-leaf’s multiple equal routes.

Where the comparison stops

Unlike real roads where traffic signs and drivers decide routes, networks use protocols and device addresses to route data. Also, physical cables have electronic characteristics unlike paved roads.

Follow one worked example

  1. Connect two virtual PCs to a virtual switch in GNS3.

    They share a common network segment and can exchange data directly.

    Why: Switches forward data between connected devices on the same local network.

  2. Assign IP addresses within the same subnet to both PCs.

    The PCs recognize they are on the same local network and can communicate without a router.

    Why: IP addresses grouped by subnet allow devices to identify local devices and decide when to send traffic locally or to a router.

  3. Use the ping command on one PC to test connectivity to the other.

    The PC sends echo requests and waits for echo replies; a response confirms connectivity.

    Why: ICMP ping tests if the destination device can receive and respond to network messages.

  4. Disconnect the cable for one PC and ping again.

    The ping fails, showing no connectivity due to broken physical connection.

    Why: Without a physical connection, data packets cannot reach the other PC.

  5. Reconnect the cable and repeat ping.

    Ping succeeds, confirming restored connectivity and network function.

    Why: The physical connection restored allows data flow between devices again.

Your first small task

In your GNS3 campus lab, assign IP addresses, connect devices, and ping between the two PCs.

Show a hint

Make sure to type the full IP address and subnet mask correctly. Use 'ip 192.168.1.X 255.255.255.0' on each PC console.

Check the expected result

You should see successful ping replies when cables are connected and no replies when a cable is disconnected.

Pause and explain it in your own words

In the campus lab, why does disconnecting the cable between CampusPC2 and CampusSwitch cause pings to fail?

Show a hint

Consider what physical and logical connections are needed for data to reach the other PC.

Show the explanation

Because the cable physically connects CampusPC2 to the switch, removing it breaks the network path. Without a physical connection, the ping messages cannot reach CampusPC2, so no replies are received. This shows the failure domain is limited to that cable and device connection.

Short answer

What should you understand today?

This lesson explains five common network topologies: campus, wide area network (WAN), small office/home office (SOHO), cloud, and spine-leaf. Each has its own design shaping how data travels (traffic paths) and how failures affect parts of the network (failure domains). You will set up a live campus network with two simulated PCs connected through a switch in GNS3. WAN, SOHO, cloud, and spine-leaf topologies are explored through guided paper exercises to compare their paths and failure impact. This knowledge helps understand network design choices and resilience.

Before you begin

Learning targets

Prerequisites
  • Day 1: Your first network: a step-by-step CCNA beginner lesson - introduces basic network device and connection concepts.
  • Day 2: Routers, switches, firewalls, access points, and endpoints - covers main devices used in networks and their roles.
By the end
  • Define and describe five common network topologies: campus, WAN, SOHO, cloud, and spine-leaf.
  • Explain the typical traffic paths for data traveling between devices in each topology.
  • Identify failure domains and how limitations in design affect network availability.
  • Understand how redundancy and equal-cost multipath (ECMP) influence traffic and fault tolerance.
  • Perform a basic live lab connecting two simulated PCs through a switch in a campus network.
  • Compare and contrast the physical and logical structure of each topology using paper-based exercises.

Words you will meet

Open a word when you need its meaning. You do not need to memorize the whole list before reading.

Topology

A plan showing how network devices connect and communicate, either physically or logically.

Campus network

A network design that connects devices within a site using structured layers like access and distribution.

Wide area network (WAN)

A network connecting multiple sites over long distances using routers and links.

Small office/home office (SOHO)

A small network for a few users, often using one router to connect devices.

Cloud computing

Services like servers accessed over a network, managed by a provider with shared resources.

Spine-leaf topology

A data center design where leaf switches connect devices and spines connect leaves, offering multiple equal-cost paths.

Failure domain

The area or devices impacted when a network component fails.

Redundancy

Having extra components or paths to keep a network working if one fails.

Equal-cost multipath (ECMP)

A routing method that uses multiple paths with the same cost to send traffic.

Interface

A physical or logical network connection point on a device.

Console

A text window used to enter commands on a network device.

Ping

A test sending messages (ICMP echo requests) to a device and awaiting replies to check connectivity.

Echo request and echo reply

Special messages used by ping to test communication between devices.

01

Campus topology: local access and failure domains

A campus network connects buildings or work areas within a single site. It uses a hierarchical design with three main layers: access, distribution, and core. The access layer connects user devices like computers and phones. The distribution layer joins several access areas and separates their failure domains, meaning a problem in one access area usually does not affect others. The core layer connects distributions and provides fast data routing across the campus. Campus networks often use redundant links and fast protocols to restore service rapidly after failures. This redundancy limits the impact of failures to smaller sections, enhancing reliability.

  • Campus networks use hierarchical layers: access, distribution, and core.
  • Failure domains are limited by design layers, reducing impact from device or link failure.
  • Redundancy and fast protocols help restore connectivity quickly after failures.
  • Access layer connects user devices; distribution separates failure domains.
  • In the lab, campus PCs communicate directly via the switch when connected and properly configured.
02

Wide Area Network (WAN): connecting multiple sites over distance

A wide area network connects separate locations or branch offices over long distances. It typically uses routers to join smaller networks at each site through point-to-point or multipoint links, often using public or private data carriers. Traffic paths in a WAN flow from a device at one site to a branch router, then possibly through intermediate routers to a remote router and server. Failure domains in a basic WAN depend on the path shown; if a key link or router fails and no alternate is shown or configured, communication between sites is lost. Redundant WAN designs with extra paths can allow for rerouting, but in a single-path WAN like the example, a failure along that path stops traffic.

  • WAN connects separate geographic sites using routers and long-distance links.
  • Traffic travels through multiple routers between sites.
  • Failure of a link or router in the shown path stops communication unless redundancy is built and configured.
  • Routing protocols help reroute only when alternate configured paths exist.
  • This paper exercise follows only the main depicted path; alternate paths are outside of this example.
03

SOHO topology: simple network for small or home offices

SOHO means small office/home office networks with fewer users and simpler devices than enterprise networks. Typically, a single SOHO router connects multiple devices in a small area and handles routing for different local networks. In these networks, traffic between a PC and a server passes through the SOHO router, which also provides Internet access. If the SOHO router stops working, devices on different local networks shown in the diagram lose communication with each other. This centralized, simple layout offers ease of setup but creates a single point of failure at the router.

  • SOHO networks serve a small number of users with simple, central routers.
  • Devices on different local networks communicate through one router acting as a gateway.
  • Failure of the single SOHO router disrupts communication between the shown devices.
  • The traffic path in this example relies exclusively on the router shown.
  • SOHO networks prioritize simplicity, but this design increases vulnerability to single-device failure.
04

Cloud topology: provider-managed services accessed over a network

Cloud computing delivers services like servers and storage over a network, usually the Internet. The provider manages the infrastructure, including hidden details of redundancy and network isolation. Each device uses a gateway to reach the cloud server; what happens inside the cloud is not shown to users. In these diagrams, failure domains cover the user device, gateway, and path to the visible cloud server. Internal failover or redundancy mechanisms that a provider may use are not shown or tested in these paper exercises. Users cannot observe how a failure within the provider infrastructure is handled or if traffic reroutes.

  • Cloud services use provider-managed infrastructure that is abstracted from users.
  • Traffic path in this model is from user device to gateway to cloud server.
  • Users have no control or visibility into the provider's internal redundancy.
  • Paper exercises do not observe or test cloud failover or internal logic.
  • Failure is visible only in the drawn part of the network—provider response is outside this model.
05

Spine-leaf topology: equal-cost paths on paper

Leaf switches connect endpoint devices. Spine switches connect the leaves to one another. In this drawing, each leaf connects to both spines. Equal-cost multipath (ECMP) allows a routing device to use multiple eligible routes to the same destination when those routes have the same routing cost. Cost is a route-selection value, not a money price. Traffic is commonly assigned by flow, meaning related packets such as one download. ECMP does not duplicate each packet across every spine or guarantee an even split of traffic.

Lab boundary: This spine-leaf comparison is a paper exercise. It does not measure routed ECMP in GNS3, load distribution, failure-detection time or routing convergence. Convergence means updating forwarding choices after the network changes. GNS3's built-in Ethernet switch provides switching, not the routed ECMP implementation needed for this experiment. A routed test needs capable, properly licensed devices and a separate configuration. The live campus ping exercise tests only its local path.

  • Equal-cost routes are eligible routes to the same destination with the same routing cost; extra cables alone do not enable ECMP.
  • A flow commonly uses one selected path. Multiple eligible paths do not guarantee equal traffic shares or copy every packet to every spine.
  • Both drawn paths end at Spine Server. Losing its only leaf removes this server's paths, not necessarily those of every server in a real fabric.
  • The illustrated inter-leaf path crosses one spine and two fabric links. Same-leaf traffic need not cross a spine; this is not a universal IP hop-count rule.
  • This paper comparison does not measure routed ECMP in GNS3. Load balancing, routing convergence and recovery timing remain untested.

Real-world walkthrough

Testing local connectivity and cable failure in a campus lab

You simulate a campus network with two virtual PCs connected through one virtual switch in GNS3. Each PC is assigned an IP address on the same network, and the cables connect each PC to the switch's Ethernet ports.

  1. Start the GNS3 simulation with two VPCS devices named CampusPC1 and CampusPC2 and one built-in Ethernet switch named CampusSwitch.
  2. Connect the Ethernet0 interface of CampusPC1 to Ethernet0 of CampusSwitch. Connect Ethernet1 of CampusSwitch to Ethernet0 of CampusPC2.
  3. Open the console of CampusPC1, assign IP address 192.168.1.10 with subnet mask 255.255.255.0 by typing 'ip 192.168.1.10 255.255.255.0'. Press Enter.
  4. Open the console of CampusPC2, assign IP address 192.168.1.20 with subnet mask 255.255.255.0 by typing 'ip 192.168.1.20 255.255.255.0'. Press Enter.
  5. From CampusPC1, type 'ping 192.168.1.20' and press Enter. The ping command sends echo requests; you should receive echo replies indicating successful communication.
  6. Disconnect the cable connecting CampusPC2 to CampusSwitch. From CampusPC1, try 'ping 192.168.1.20' again. The ping will fail, showing no replies, confirming loss of local connectivity due to cable removal.
  7. Reconnect the cable between CampusPC2 and CampusSwitch. Repeat 'ping 192.168.1.20' from CampusPC1. Echo replies resume, confirming restored connectivity.
The simple lab demonstrates how data travels between devices in a local campus topology via a switch. It also shows how network failures, like disconnected cables, impact communication and define a failure domain within the network.

Guided GNS3 lab

One live access network, four paper comparisons

Build a small local network, record a working test, remove one cable and observe the failure, then restore it. Compare that measured result with four separate paper designs without claiming to emulate their advanced features.

CampusPC1 Ethernet0 connects to CampusSwitch Ethernet0. CampusPC2 Ethernet0 connects to CampusSwitch Ethernet1. No other node is installed. WAN, SOHO, cloud and spine-leaf use the separate labelled paper diagrams.
CampusPC1: built-in VPCSCampusSwitch: built-in Ethernet switchCampusPC2: a second, separate built-in VPCS

Addressing plan

DeviceInterfaceAddressPurpose
CampusPC1Ethernet0192.168.1.10/24First local host; no default gateway is required.
CampusPC2Ethernet0192.168.1.20/24Second local host; no default gateway is required.

Set up the lab

  1. Install and open GNS3, then create a new, isolated project named Day3-Topologies. Use an available local or GNS3 VM server for the built-in nodes; do not attach this project to a real network.
  2. In the device list, choose VPCS under End devices and drag two separate copies into the workspace. Use the built-in Ethernet switch under Switches for CampusSwitch. These are included node types, not Cisco IOS templates.
  3. Right-click each node, open Configure, and set its Name to the exact label in the topology. Keep the Ethernet switch ports in their default shared access mode. Do not add extra uplinks or type Cisco commands into the built-in switch.
  4. SOHORouter, CloudDevice, the WAN routers and the spine-leaf devices exist only in the paper comparisons. There is no SOHORouter or CloudDevice template to install. In particular, GNS3's Cloud node connects to external networks; it does not supply public-cloud services.
  5. Use one address per VPCS instance. CampusPC1 and CampusPC2 are different computers, each with Ethernet0; do not assign a SOHO subnet to either. The /24 suffix means subnet mask 255.255.255.0. Both hosts belong to the same local network.
01

Build the named nodes

Create the isolated project and add the three built-in nodes from Setup. Check each visible label against CampusPC1, CampusSwitch and CampusPC2 before adding links.

What you should see
The workspace contains exactly two separate VPCS instances and one built-in Ethernet switch, with no cloud or physical-network connection.
Why this step matters
Stable names let you match the diagram to the console and prevent configuring a different computer by mistake.
02

Connect and start

Select Add a link. Connect CampusPC1 Ethernet0 to CampusSwitch Ethernet0, then CampusPC2 Ethernet0 to CampusSwitch Ethernet1. Leave link mode and click Start all devices.

What you should see
Two links connect the three named nodes. The running endpoints show green link indicators; no link leaves the isolated project.
Why this step matters
Each endpoint has its own switch connection. Link indicators show device or link state, not proof of successful IP communication.
03

Address CampusPC1

In GNS3, right-click CampusPC1 and choose Console before typing. Enter the address command, then inspect and save this host's settings. Press Enter after each command.

ip 192.168.1.10/24
show ip
save

What each command means

ip 192.168.1.10/24
ip sets CampusPC1 to host address 192.168.1.10; /24 selects mask 255.255.255.0 on its only Ethernet interface.
show ip
show ip displays this VPCS instance's address settings so you can check the exact host and mask.
save
save writes this VPCS instance's settings to its startup file; it does not save another device.
What you should see
CampusPC1 reports 192.168.1.10 and mask 255.255.255.0. No remote-network gateway is needed for this local test.
Why this step matters
Reading the settings immediately catches a wrong host address before it can be mistaken for a network failure.
04

Address CampusPC2

In GNS3, right-click CampusPC2 and choose Console before typing. Set the second host's different address, then inspect and save its settings. Press Enter after each command.

ip 192.168.1.20/24
show ip
save

What each command means

ip 192.168.1.20/24
ip sets CampusPC2, not CampusPC1, to 192.168.1.20 with mask 255.255.255.0.
show ip
show ip lets you confirm the destination host's settings in its own console.
save
save preserves CampusPC2's settings for a later start of this isolated project.
What you should see
CampusPC2 reports 192.168.1.20 and mask 255.255.255.0. The two computers have different host addresses on the same subnet.
Why this step matters
A destination address must identify the other host; configuring both computers identically would invalidate the test.
05

Record a working baseline

In GNS3, right-click CampusPC1 and choose Console before typing. Test the other host, not this computer's own address. Record the destination and whether replies arrive. Press Enter after each command.

ping 192.168.1.20

What each command means

ping 192.168.1.20
ping sends test requests from CampusPC1 to CampusPC2 at 192.168.1.20 and reports the replies it receives.
What you should see
Replies from 192.168.1.20 establish a working baseline. If there are none, check both addresses and links before introducing the fault.
Why this step matters
You need evidence that this exact path worked before attributing a later failure to the cable you remove.
06

Remove one known cable

In the workspace, right-click only the link between CampusSwitch Ethernet1 and CampusPC2 Ethernet0, then choose Delete. Leave both computers running and do not change their addresses.

What you should see
The CampusPC2 cable is absent. CampusPC1 remains linked to CampusSwitch, with no alternate cable to CampusPC2.
Why this step matters
Changing only one component makes the experiment interpretable. This demonstrates the example's single path, not every campus architecture.
07

Observe the broken path

In GNS3, right-click CampusPC1 and choose Console before typing. Repeat the exact baseline test while the CampusPC2 cable is absent. Press Enter after each command.

ping 192.168.1.20

What each command means

ping 192.168.1.20
The same ping destination keeps the experiment comparable; only the connection to CampusPC2 has changed.
What you should see
No echo replies arrive from 192.168.1.20. A timeout or unreachable result is expected because the destination's only cable is absent.
Why this step matters
A failed test shows this path is broken; it does not show that unrelated campus devices or all applications have failed.
08

Restore the original cable

Use Add a link to reconnect CampusSwitch Ethernet1 to CampusPC2 Ethernet0. Leave link mode, confirm the two original links, and keep both hosts running with their original addresses.

What you should see
The drawing again matches the initial topology. The restored cable uses the same two interface endpoints as before.
Why this step matters
Restoring the original change makes the recovery test meaningful; adding an unrelated path would test a different design.
09

Verify recovery

In GNS3, right-click CampusPC1 and choose Console before typing. Retest the same destination after restoring the cable. Compare this result with the baseline and the failed test. Press Enter after each command.

ping 192.168.1.20

What each command means

ping 192.168.1.20
ping again checks CampusPC2 at the same address, so restored replies can be compared with the recorded failure.
What you should see
Replies from 192.168.1.20 resume. If they do not, verify the restored cable endpoints, running nodes and saved host settings.
Why this step matters
Failure followed by recovery supports the cable explanation; it is not a measurement of automatic campus failover.
10

Compare WAN, SOHO and cloud

On paper, copy the three corresponding diagrams with every labelled endpoint. Trace each complete route, cover its middle link or gateway, and record which destination becomes unreachable. For cloud, cover the server separately too.

What you should see
The paths end at RemoteServer, SOHO Server and Cloud Server. The cloud exercise distinguishes client access from service failure but cannot observe provider failover or isolation.
Why this step matters
Compare these predictions with the campus cable experiment. Only the campus result is measured in GNS3; the other observations describe the drawn models.
11

Compare both spine paths

Copy the six-node spine-leaf diagram on paper. Trace the route through each spine to Spine Server. Cover SpineSwitch1 and trace the remaining route; then uncover it and cover LeafSwitch2 instead.

What you should see
With one spine covered, another drawn route remains. With LeafSwitch2 covered, this single-attached server has none. ECMP eligibility and recovery timing are not measured.
Why this step matters
The built-in switch can connect multiple links but is not a routed ECMP appliance. Do not wire a loop of built-in switches to claim ECMP; a later routed lab needs a suitable, licensed platform.
12

Record and close safely

Write down the baseline, failed and recovered ping results. Label the other four exercises as paper predictions. Click Stop all devices and save the isolated project before closing GNS3.

What you should see
Your notes distinguish measured local connectivity from the untested WAN, SOHO, cloud and spine-leaf properties.
Why this step matters
An honest record states what each experiment proves and avoids presenting a classroom prediction as a production guarantee.

Verify

  • Confirm each computer has its own address and one Ethernet0 connection. No host has both a campus and SOHO address.
  • Record replies before cable removal, no replies while it is absent, and replies after the exact cable is restored.
  • For each paper design, name the source, every drawn forwarding role, the destination and the component you cover.
  • State that the single-switch campus example lacks redundancy; real campuses may have multiple switches and redundant paths.
  • Do not report cloud failover, tenant isolation or routed ECMP as a GNS3 observation. Those features are not tested here.

Troubleshoot

  • If the baseline fails, check that both VPCS instances are running, have different addresses with the same /24 mask, and connect to the specified default access switch ports.
  • If a console will not open, verify that you right-clicked CampusPC1 or CampusPC2 and started that VPCS instance. CampusSwitch is a built-in switch, not a Cisco IOS console.
  • If the failure test still replies, confirm that you removed the cable to CampusPC2 and are pinging 192.168.1.20, not CampusPC1's own address.
  • If recovery fails, reconnect the original interfaces and inspect each host's settings in its own console. Do not add a cloud node or change the addressing to hide the fault.
Licensing and cleanup

GNS3 does not provide Cisco software images. Use a Cisco image only when the applicable Cisco license or entitlement legally permits that use, and do not share or redistribute Cisco image files. Cisco CML reference-platform images are licensed for use within CML unless a separate license permits outside use. Cisco Modeling Labs is the official alternative; built-in VPCS and Ethernet switch nodes do not require a Cisco image.

  • Stop all devices and retain the isolated project with the original two links restored.
  • Keep paper diagrams separate from test results. Never attach this teaching project to an employer's or public network.

Practice set

Answer before you reveal

01In the campus lab, what layer does the single switch represent, and why?
The switch represents the access layer, as it connects end-user devices like PCs directly.

In a campus topology, the access layer links user devices to the network. The switch in this simple lab performs this connecting function for PCs.

02If the cable between BranchRouter and RemoteRouter in the WAN example is removed, what is the result?
Communication between BranchPC and RemoteServer stops, as the only shown WAN path is broken.

Without another configured route or physical link, devices on either side of the break cannot send or receive data over the WAN.

03Why do SOHO networks shown in this lesson rely on a single router for device communication?
Because SOHO networks are designed for simplicity and cost-efficiency, typically using one router as their sole network gateway.

A SOHO network usually serves a few users, and a single router handles all device communication and routing functions, centralizing network management but creating a single point of failure for the traffic path shown.

04In the cloud example, what is the visible effect of breaking the link between CloudDevice and CloudGateway?
CloudDevice cannot reach CloudServer, as the only depicted path in the diagram is broken.

The modeled path shows communication stops when any segment or node in the visible chain from device to server is interrupted.

05Why does spine-leaf topology offer eligible multiple paths between endpoints but not guarantee an even split of traffic or automatic recovery?
Because ECMP allows routing devices to select among equal-cost paths, but does not duplicate packets or ensure perfect load distribution or tested recovery.

Each flow usually takes one selected path, and loss-free recovery depends on configuration, detection, and available alternatives, which are not measured or guaranteed by merely tracing paths on paper.

06How does the failure domain in the campus lab illustrate the boundary of a localized network problem?
A disconnected cable at the switch only affects the PC attached to that port, not all network devices.

This shows that local failures in the access layer are limited in scope, leaving the rest of the network potentially unaffected.

Knowledge check

Quiz: prove the reasoning

0/5 answered
01Which of these describes a direct effect of removing the cable between CampusSwitch and CampusPC2 in the hands-on lab?
02If there is only one shown link between BranchRouter and RemoteRouter in a WAN drawing, what happens if that link fails?
03In a SOHO example, what network function stops if the only router fails, based on the diagram presented?
04Which statement about cloud networking in the lesson's model is correct?
05What does the paper spine-leaf example show about paths between the two leaves?

Keep these

Technical takeaways

  • Campus networks use hierarchical design to separate failure domains and quickly recover from issues.
  • WAN connects sites over distance using routers; redundancy helps maintain connectivity.
  • SOHO networks are simple and less redundant, making them vulnerable to single points of failure.
  • Cloud networks provide managed resources invisible to users, with hidden redundancy and failure handling.
  • Spine-leaf topology shows multiple eligible paths between endpoints, but redundancy alone does not guarantee traffic balancing or recovery.
  • Live lab with virtual PCs and switch in GNS3 shows real-time local network connectivity and failure impact.
  • Paper-based exercises for WAN, SOHO, cloud, and spine-leaf help understand traffic paths and failure domains conceptually.
  • Redundancy in cables or paths alone does not guarantee failover; configuration and routing are critical for recovery.