How to Obtain Cisco Virtual Network Device Images for Labbing

Cisco Packet Tracer is an excellent network simulator to use when studying for the Cisco CCNA certification. However, advanced Cisco certifications like the CCNP or CCIE cover topics, technologies, and protocols that are not supported in Cisco Packet Tracer. Luckily, virtual network devices usually support CCNP or CCIE-level topics, so learners often graduate from Packet Tracer to learn with virtual network devices running in a network emulation platform.

There is a lot of misinformation and ambiguity on the Internet regarding the legality of obtaining and using Cisco virtual network devices. In this blog post, we will clear the air by reviewing legal options for obtaining and using binary images of Cisco’s virtual network devices. These virtual network devices can be used in one or more network emulation platforms while pursuing your CCNP or CCIE-level certifications without fear of legal action from Cisco or running software with malicious content injected.

Network Emulation Platforms & Cisco Virtual Network Devices

First, let’s review the most common network emulation platforms currently available on the market and the various Cisco virtual network devices you will most likely need while studying for various CCNP or CCIE certifications.

The current most popular network emulation platforms include:

• GNS3: A free, open-source network software emulator.

• EVE-NG: A “freemium” proprietary network software emulator offering a basic set of features for free sufficient for learners working with small topologies.

• Cisco Modeling Labs (CML): Cisco’s official proprietary network software emulator licensed to individuals through an annual subscription.

While studying CCNP or CCIE-level topics, you may want to use the following virtual network devices:

• Cloud Services Router (CSR) 1000v router, also simply called “CSR1000v”

• Catalyst 8000v router

• Catalyst 9000v switch

• Nexus 9000v, 9300v, or 9500v switches

• IOS XRv 9000 router

• ASAv firewall

• IOSv router

• IOSv L2 switch

Legal Options to Obtain Cisco Virtual Network Device Images

You have one of two options to legally obtain Cisco virtual network device images for use in a network emulation platform.

Valid Cisco Support Contract Association

If you want to use Cisco virtual network device images within the GNS3 or EVE-NG network emulation platforms, you will need your Cisco account to be associated with a valid support contract that grants you the entitlement to download these images. This is most likely if your employer is a Cisco customer. Once done, you can download them like any other Cisco software from Cisco’s Software Download website.

The Cisco software downloaded from Cisco’s website can be used in any network emulation platform, including EVE-NG or GNS3. They can also be deployed on hypervisors, such as VMware’s ESXi through vCenter, Microsoft’s Hyper-V, or Linux’s KVM. This is different from the virtual network device images obtained through a Cisco Modeling Labs Personal subscription, which can only be used within the Cisco Modeling Labs network emulation platform.

Cisco Modeling Labs Personal Subscription

If your employer does not have a valid support contract with Cisco, or you are a student, the only legal way of obtaining Cisco virtual network device images is by purchasing a Cisco Modeling Labs (CML) Personal (sometimes also called CML-P) subscription directly from Cisco through the Cisco Learning Network Store. 

Through this subscription, you are entitled to the CML network emulation platform itself, as well as many Cisco virtual network device images called “reference platforms.” These are provided through a “refplat ISO” file that is downloaded separately from the network emulation platform. The refplat ISO file contains all the virtual network device images provided as part of a Cisco Modeling Labs subscription.

A significant advantage of a CML-P subscription is the continuous updates provided to the virtual network device images available in the CML refplat ISO. These images are regularly updated with nearly every update to CML, which ensures you have access to the most up-to-date virtual network device versions. Moreover, as Cisco introduces new virtual network devices, they are promptly integrated into the CML refplat ISO. 

This allows you to leverage the latest advancements and features during your studying, such as the Catalyst 9000v router incorporated into CML v2.5 and the Catalyst 8000v router introduced through CML v2.3.

The table below shows how Cisco regularly updates the virtual network devices included in the CML refplat ISO.

An annual Cisco Modeling Labs Personal subscription typically costs $199.00 United States Dollars. However, Cisco has been known to run Black Friday deals on the Cisco Modeling Labs Personal subscription, bringing the price down to $149.00 USD (and sometimes even lower!)

According to Cisco’s terms and conditions for CML, the virtual network device images provided through the refplat ISO file cannot be extracted and used in other network emulation platforms (such as GNS3 and EVE-NG). Don’t take our word for it - here is a direct quote from Cisco’s documentation:

“Attention: The Cisco VM images that are provided for download with Cisco Modeling Labs or as part of the CML refplat ISO file are only licensed for use within Cisco Modeling Labs. Downloading these VM images and using them outside Cisco Modeling Labs without a proper license is prohibited.”

Conclusion

If you’re used to Cisco Packet Tracer, leveraging Cisco virtual network devices can be a powerful way to level up your Cisco certification studying. However, it’s important to prioritize legality and security when obtaining virtual network device images to protect yourself from legal complications and the risks of malicious code. 

Using the legal methods described in this article to obtain Cisco virtual network device images for studying purposes will set you up for success, growth, and the ability to effectively learn CCNP or CCIE-level topics.