Key Takeaways
- You don’t need a rack full of gear to start. A single used Cisco switch, a small server running EVE-NG, and some clever cabling will get you further than most people think.
- Virtualisation is the force multiplier. EVE-NG or GNS3 on a modest server runs more devices than you could physically fit in a 42U rack — and uses a fraction of the power.
- Start with what you’re studying. CCNP Security? ISE VM + a couple of switches + AnyConnect. CCIE? Bigger topology, more virtual routers. Don’t build a lab and then find a cert to match it.
Why build a home lab?
If you’re a network engineer studying for a certification, you already know the answer: you can’t learn networking by reading about it. You need to break things. You need OSPF neighbour flapping at 2am because you fat-fingered a timer. You need to watch a spanning-tree topology change propagate while you hold your breath. That doesn’t happen in a simulator and it definitely doesn’t happen in a video course.
A home lab gives you:
- Real hardware, real behaviour. Virtualised IOS/XE/Junos images are 99% identical to physical, but the 1% that isn’t — timing, buffering, hardware forwarding — is sometimes the 1% that matters.
- Freedom to break everything. No change window, no CAB approval, no “please don’t reboot the core.” Just you and a console cable.
- A test environment that’s always available. Want to lab up a BGP scenario at 11pm on a Saturday? Your lab is right there. No booking, no shared resources, no waiting.
The gear: start small, add as you need
Here’s what I started with and what I’d recommend:
The core: a virtualisation server
This is the most important piece. An old desktop or a refurbished 1U server running ESXi or Proxmox. EVE-NG runs beautifully as a VM on either. Look for:
- 32GB RAM minimum (IOSv images are ~512MB each, ISE needs 16GB+ alone)
- An SSD — spinning rust makes lab boot times painful
- Intel NICs if you can — fewer driver headaches than Realtek
- Something quiet if it’s in your house. A Dell R630 at full tilt in the spare room will not make you popular
Physical switching
One managed L3 switch is enough to start. A used Cisco 3750X or 3850 runs you $100-200 on eBay. It gives you real VLANs, real STP, real QoS behaviour. Juniper EX series if you’re a Junos shop. Don’t buy 10 switches — one good one will tell you everything you need to know about switching at this scale.
Routing
Virtualised, mostly. CSR1000v images in EVE-NG cover 99% of what you’d encounter on physical ISRs. If you want physical routers, a couple of 1921s or 2911s are cheap and run IOS 15.x — fine for lab work.
Cabling and power
Don’t overlook this. A couple of console cables (USB-to-RJ45), a small 8-port power strip, and enough patch leads to go between your switch and server. A USB hub for console connections to multiple devices saves you constantly swapping cables.
What to virtualise vs what to buy physical
| Device | Virtualise | Physical | Why |
|---|---|---|---|
| Router (IOS/IOS-XE) | ✅ CSR1000v | Optional | Virtual images are 99% feature-complete |
| Switch (L2/L3) | Partial (IOSvL2) | ✅ Get one | Virtual switches have limitations — real hardware shows you TCAM, buffer behaviour, stacking |
| Firewall (ASA/FTD) | ✅ ASAv | Skip | ASAv is fully functional for lab purposes |
| ISE | ✅ ISE VM | Skip | ISE VM is the same code as the physical appliance |
| Wireless Controller | ✅ vWLC | Skip (unless you need APs) | vWLC handles most config scenarios |
The software stack
- Hypervisor: ESXi (free license) or Proxmox. Both work. ESXi is more common in enterprise; Proxmox has a better web UI and no license shenanigans.
- Emulation: EVE-NG Community Edition. GNS3 is the alternative — both do the same thing. EVE-NG’s web UI wins for me.
- Images: You’ll need to source these yourself. Cisco’s CML (Cisco Modeling Labs) is ~$200/year and gives you legal access to current IOSv, IOSvL2, IOS-XE, ASAv, and NX-OSv images. Worth it for the licensing peace of mind alone.
Power consumption reality check
A small home lab with one server, one switch, and a small NAS draws 150-250W continuous. At Australian electricity prices (~30c/kWh), that’s about $30-50/month. Factor it in before you buy a rack full of gear you’ll run twice and then leave powered off.
What’s next
This is Part 1 — the hardware and platform setup. Future posts will cover:
- EVE-NG topology design for CCNP Security labs
- ISE deployment in a home lab (including the gotchas with licensing and VM specs)
- Connecting your virtual lab to your physical switch (bridge domains, trunking, the works)
Related: Telnet on macOS for EVE-NG: What Actually Works, How to make a private VPN server in 10 minutes, Making home FreeBSD torrent+NAS server, Juniper SRX Cheat Sheet, Pushing Routes with DHCP Option 121 and 249, NBN FTTP Connection Box Status Lights