Infrastructure Scenario Tests

A WireGuard VPN tunnel between two sites is down because keys were rotated on one end but not the other. Handshake failing.

The secondary DNS server cannot perform zone transfers from the primary. The secondary's zone data is 12 hours stale and SOA serial mismatch detected.

Nginx as a load balancer is timing out on all upstream connections. Backend servers are up but responding too slowly due to a traffic spike.

HAProxy is returning 502 Bad Gateway because all backend servers failed their health checks simultaneously after a coordinated deployment.

The local DNS resolver cannot reach upstream DNS servers. All external DNS queries timing out. Internal zone resolution still working.

A rogue DHCP server on the network begins handing out IP addresses that conflict with statically assigned servers and network equipment, causing widespread connectivity issues as ARP tables become poisoned.

The centralized syslog server is overwhelmed by a log storm from a network event, dropping 80% of incoming messages. Critical security and compliance logs are being lost during an active incident.

The NetFlow collector server runs out of disk space, causing it to stop ingesting flow data from all network devices. Network visibility is lost, and security analytics based on flow data become non-functional.

Both TACACS+ AAA servers become unreachable due to a VLAN misconfiguration, locking all network administrators out of switches, routers, and firewalls. Only console port access remains available.

A 48-port PoE+ switch reaches its PoE power budget after 12 new WiFi 6E APs are connected, causing the switch to cut power to lower-priority devices including phones and security cameras.

An LACP port channel between the core switch and server farm switch loses all member links after a switch firmware bug causes LACP PDU processing to fail, severing connectivity for 50 servers.

IGMP snooping is disabled on a distribution switch after a firmware upgrade, causing all multicast traffic (video surveillance, IPTV, software distribution) to flood to every port on the VLAN, saturating access links.

A Cisco Catalyst SD-WAN vEdge router at a critical branch office goes offline after a control connection failure to all vSmart controllers, isolating the branch from the SD-WAN fabric and dropping all overlay paths.

Cisco Webex Calling cloud service experiences a regional outage affecting all cloud-connected phones and soft clients at the organization, with calls failing to connect and existing calls dropping.

Cisco DNA Center detects a widespread network health issue across 50 managed switches and 200 APs, with AI-driven assurance identifying a misconfigured QoS policy as the root cause.

Both Cisco ISE Policy Service Nodes (PSNs) in an HA pair experience a Java heap exhaustion, causing all RADIUS authentications to fail and locking out 3000 users from wired and wireless networks.

A Ruckus outdoor mesh network loses its primary mesh backhaul link between two T750SE APs during a rainstorm, isolating 8 downstream mesh APs and 150 connected clients in an outdoor venue.

A Ruckus ICX 7650 switch stack of 6 members partitions when a stacking module fails on the middle unit, splitting the stack into two independent 3-member segments with duplicate configurations.

The primary Ruckus SmartZone 300 wireless controller experiences a database corruption, causing all 200 managed APs to lose their management connection and fall back to standalone mode with limited functionality.

A WatchGuard Firebox M690 FireCluster experiences a configuration sync failure between the active and standby units, leaving the standby with an outdated policy that would cause an outage if failover occurs.