Browse previously published labs by topic, track, and difficulty. Open any lab to read its objectives and troubleshooting focus. A subscription lets you download and run every daily lab published since you subscribed — the current one and each new drop — while it's active; earlier labs unlock permanently with a bundle.
Prefer to browse by theme? See all practice topics or certification tracks.
Hands-on CCNA ACL practice using standard ACLs and wildcard masks to allow a single host, a contiguous range, and an entire subnet while proving a deny. You will place the ACL near the destination, order statements correctly, verify with end-host pings and ACL counters, and troubleshoot common mistakes.
+3 more objectives · 3 troubleshooting scenarios
Build VLANs across two access switches with an 802.1Q trunk and a router uplink. Verify that hosts in the same VLAN can communicate (even across switches) while hosts in different VLANs cannot. Then troubleshoot a failure caused by a trunk allow-list misconfiguration.
+3 more objectives · 3 troubleshooting scenarios
Hands-on CCNA VLAN and trunking lab: assign access ports by interface range, build and harden 802.1Q trunks, set a dedicated native VLAN, correct a misassigned user port, and verify VLAN membership. Includes a cross-switch path with a router-on-a-stick gateway, tests from real hosts, and troubleshooting of trunk allow-lists and native VLAN mismatches.
+4 more objectives · 3 troubleshooting scenarios
Hands-on CCNA lab to practice creating VLANs on a single Layer-2 switch and assigning access ports. You will segment a flat network into two VLANs, place hosts into the right VLAN, and verify that intra-VLAN pings succeed while inter-VLAN pings fail (no routing present). Includes realistic verification and troubleshooting.
+3 more objectives · 3 troubleshooting scenarios
Configure VLANs and 802.1Q trunks across two access switches with a router-on-a-stick gateway. Intentionally misconfigure the native VLAN and trunk allow-list to observe loss of intra-VLAN connectivity, detect the mismatch using switch warnings and show commands, and then remediate to restore user reachability. Validates VLAN segmentation, trunking symmetry, and troubleshooting skills for CCNA candidates.
+3 more objectives · 3 troubleshooting scenarios
Hands-on CCNA VLAN lab: build VLANs with names, assign access ports, harden and verify 802.1Q trunks, and troubleshoot a broken allow-list that prevents a VLAN from traversing the SW1–SW2 trunk. Includes router-on-a-stick gateways, management VLAN, and end-host validation.
+5 more objectives · 3 troubleshooting scenarios
Advanced CCNA L2 troubleshooting in a compact branch. Some PCs can't reach their default gateway or other departments across two switches and a router-on-a-stick gateway, and your monitoring system has flagged a switching/trunking problem on the path. Validation is performed from the endpoints (Alpine hosts) using pings and ARP, and trunks are hardened with a non-default native VLAN.
+4 more objectives · 4 troubleshooting scenarios
Build and verify an 802.1Q trunk between two access switches that cleanly transports VLAN 10 end-to-end while intentionally pruning VLAN 20. You will configure access ports, create VLANs, set a hardened dot1Q trunk with a non-default native VLAN, and validate host reachability and isolation from endpoints.
+3 more objectives · 3 troubleshooting scenarios
Configure a two-switch access layer with data and voice VLANs on access ports and an 802.1Q trunk between switches. Add a router-on-a-stick gateway for VLAN 10/20. Verify VLAN placement, trunk status, and observe a connectivity failure caused by an allow-list misconfiguration on the inter-switch trunk—then correct it to restore intra-VLAN reachability.
+4 more objectives · 5 troubleshooting scenarios
Hands-on CCNA campus switching lab with two Layer-2 switches and three VLANs (Users 10, Servers 20, Management 99) extended over a single 802.1Q trunk. Learners deploy VLANs and access ports, harden the trunk (native VLAN 999, explicit allow-list, nonegotiate), and validate isolation. The lab ships with a trunk-carried outage: VLAN 10 traffic reaches its gateway successfully, but VLAN 20 traffic does not. You will diagnose from end hosts, confirm switch states, and correct the trunk so that same-VLAN traffic to the gateway SVI succeeds while inter-VLAN forwarding remains absent.
+3 more objectives · 3 troubleshooting scenarios
Configure VLANs and access ports on two Layer-2 switches, build 802.1Q trunks (with hardened native VLAN and an explicit allowed list), validate end-to-end reachability, intentionally prune a VLAN from the inter-switch trunk to observe segmentation, then restore the correct allow-list. Includes realistic router-on-a-stick gateways for VLAN 10/20/99 and switch management on VLAN 99.
+4 more objectives · 3 troubleshooting scenarios
Configure a default route on a branch edge router and a return static route on an upstream core router to enable full bidirectional connectivity between a stub branch LAN and a core server LAN. Verify the S* default route, gateway of last resort, and end-to-end reachability from real hosts. Troubleshoot missing default or return paths.
+3 more objectives · 3 troubleshooting scenarios