350-501 SPCOR Lab Guide 2026: 120 GB Became 14 GB
A six-node XR core used to want 120 GB. The container form factor asks for about a tenth of that, and it landed in the bundled image set in May 2026.
- 350-501Exam
- 120 minTime
- $400Fee
- 5Domains
- CML-PersonalCheapest lab
- 16 GB hostRAM needed
Table of Contents
The minimum lab
For years the honest answer to "can I lab SPCOR at home" was no, because the service-provider operating system was allocated around 20 GB a node - so a six-node core wanted roughly 120 GB, and under-specifying it did not make things slow, it made nodes fail to boot. That changed. The containerised form factor of the same operating system runs at roughly 2 GB an instance, about a tenth of the virtual machine, and it was added to the emulator's bundled image set in May 2026. A seven-node core now fits in 12 to 14 GB. Most advice online predates this, which is why so much of it says this exam is unlabbable.
Two paths through the core is the point: it is what lets you watch segment routing pick one, then fail a link and watch it pick the other. Two provider edges give you somewhere to build a Layer 3 VPN between, and the customer routers at each end make the service real rather than theoretical. This is the smallest topology that is genuinely a service-provider network rather than an enterprise one wearing a costume.
Where to build it
This is the one exam where the paid emulator tier solves the entitlement problem rather than adding to it.
| Platform | Good enough? | Cost | What decides it |
|---|---|---|---|
| CML-Personal | Yes | $199, 20 nodes | The recommendation. Cisco's documentation states the service-provider image runs in demo mode inside the emulator with no additional licensing - no contract conversation, no smart account. |
| containerlab | Yes | $0, open source | The container form factor's natural home, and the lightest way to run it - but you still have to obtain the image, which is where entitlement bites. |
| CML-Free | No | $0, 5 nodes | No service-provider image of any kind on the free tier, and five nodes would not hold a core anyway. |
| EVE-NG / GNS3 | Entitlement | $0 + your own images | Capable, but every image acquisition path outside the emulator ends at an account with software-download privileges. |
| Real hardware | No | - | Service-provider hardware is neither affordable nor necessary. The exam is about protocol behaviour. |
Weigh the two costs honestly. The emulator subscription is a known price that makes the images a non-issue. Every free route is free only if you already have an account entitled to download the software - and for most candidates that is the thing they do not have.
Images and horsepower
One image choice dominates everything else here.
| Component | What it is | Where it comes from |
|---|---|---|
| Containerised IOS-XR | The provider edge and core routers | About 2 GB an instance. Added to the emulator's bundled set in May 2026 - the change that made this exam labbable |
| IOS-XR virtual machine | The older, heavier form of the same thing | Allocated around 20 GB a node by default. Avoid unless you need something the container form factor lacks |
| Any IOS node | The two customer routers at the edges | About 1 GB each - the customer side does not need to run XR |
Twelve to fourteen gigabytes for the whole topology with the container image, so a 16 GB host genuinely works and 32 GB is comfortable. Two cautions worth taking seriously. Boot times are long - twenty to thirty minutes a node is normal for the virtual-machine form - and if you under-provision you do not get a slow lab, you get nodes that never come up, which is what people mistake for the emulator being broken. Also, which variant of the container image the bundled set carries is worth checking: a control-plane-only build gives you protocol behaviour without a meaningful data plane.
The build list
Work top to bottom. Each step is a thing you build and then break on purpose, and each one is tagged with the blueprint domain it covers, so by the end you have touched the parts of the syllabus a lab can reach.
Bring up IS-IS across the coreNetworking 30%
The largest domain, and everything else rides on it. Get adjacencies up across both paths before you add a single service.
Turn on segment routing and watch a path changeMPLS and SR 20%
Enable it, look at the label stack, then fail one core link and watch traffic move. Segment routing rewards being seen far more than being read.
Build a Layer 3 VPN between the two edgesServices 20%
Route distinguishers, route targets, VRFs and a customer route that appears at the far end. This is the service the whole architecture exists to deliver.
Add quality of service at the edgeServices 20%
Classify and mark on ingress at the provider edge, then trust it through the core. Provider QoS is edge-heavy by design and that is what the exam expects you to know.
Secure the control planeArchitecture 15%
Protocol authentication, control-plane protection, and the management access controls. Small domain, quick to cover, easy to skip and regret.
Automate one thing and instrument anotherAutomation and Assurance 15%
Ten sub-objectives sit here. Push one configuration through a model-driven interface and turn on telemetry for one metric - enough to have touched both halves of the domain.
What you can and cannot lab
Cisco publishes the domain weightings but not the number of items or the passing score, so treat the percentages as how the paper is built rather than as a target. The column that matters here is the last one.
| Domain | Weight | Labbable | Notes |
|---|---|---|---|
| Architecture | 15% | Partly | TODO |
| Networking | 30% | Partly | TODO |
| MPLS and Segment Routing | 20% | Partly | TODO |
| Services | 20% | Partly | TODO |
| Automation and Assurance | 15% | Partly | TODO |
The walls you will hit
The walls that remain are about entitlement and fidelity, not memory - which is the opposite of how this exam is usually described.
Cannot be labbed at home
- Image entitlement is the real blocker. Outside the paid emulator, every acquisition route ends at an account with software-download privileges. Memory has workarounds; this does not.
- Boot time and CPU, not just RAM. Long boots are normal, and interrupting a node mid-boot by opening its console is a common way to hang it. Budget cores as carefully as memory.
- A control-plane-only container has no meaningful data plane. Protocol state will be right; anything that depends on forwarding behaviour will not be.
- Scale and timing do not transfer. Convergence timing and real routing-table sizes behave differently in emulation, which matters more in a service-provider context than an enterprise one.
- This blueprint is older than its siblings. The exam-topics document is a couple of years behind the security and enterprise refreshes, so cross-check anything version-specific against the product documentation.
Weigh that against where this exam sat two years ago and it is a genuine change: the thing that made SPCOR unlabbable was memory, and memory is no longer the constraint. If you priced this exam out of your plan before, it is worth pricing again.
A lab proves you can build it. Questions prove you can pass.
The blueprint is only half the exam — the other half is answering under a clock. Start with the free question sets, then $5.99 unlocks the full 350-501 SPCOR bank.
Free 350-501 SPCOR practice test350-501 SPCOR exam pageFAQ
Can I lab IOS-XR at home in 2026?
Yes, and this is recent. The containerised form factor runs at roughly 2 GB an instance rather than the 20 GB the virtual machine is allocated, and it was added to the emulator's bundled image set in May 2026. A six-node service-provider core now fits in 12 to 14 GB rather than 120 GB.
What is the cheapest way to lab 350-501 SPCOR?
Counter-intuitively, the paid emulator tier. Cisco's documentation states the service-provider image runs in demo mode inside the emulator with no additional licensing, which removes the entitlement problem entirely. Every free route requires an account already entitled to download the software.
Why do my IOS-XR nodes never finish booting?
Almost always under-provisioning. Under-specified nodes do not run slowly, they fail to come up or sit queued, and boot times of twenty to thirty minutes are normal for the virtual-machine form. Opening the console mid-boot can also hang it.
What are the 350-501 domains?
Five: Architecture 15%, Networking 30%, MPLS and Segment Routing 20%, Services 20%, and Automation and Assurance 15%. The exam runs 120 minutes and costs $400. Cisco publishes no item count and no passing score.
Sources
Exam facts come from Cisco. Lab guidance is marked as official or as practitioner consensus where the two differ:
- https://learningcontent.cisco.com/documents/marketing/exam-topics/350-501_SPCOR_v.1.1.pdf
- https://www.cisco.com/site/us/en/learn/training-certifications/exams/policies.html
- https://developer.cisco.com/docs/modeling-labs/reference-platforms-and-images/
- https://www.cisco.com/c/en/us/products/cloud-systems-management/modeling-labs/index.html
Checked September 5, 2026. Cisco revises exam topics and changes image licensing without notice — confirm before you spend anything.