All CCNA labs

CCNP VRF & GRE: Two Tenants, One Router

Two tenants share one edge router. Give each its own routing table, so both can use the same service address.

CCNA & CCNP30 min3 objectives

Free with an account

CCNA L3 Switching Capstone: Building B Came Back Wrong

Building B came back from maintenance broken: staff PCs get no address and the kiosks can't reach their gateway.

CCNA75 min3 objectives

CCNA L3 Switching: A New VLAN, End to End

A new building-systems VLAN has been provisioned. Carry it, route it and advertise it so its controllers reach the edge.

CCNA46 min3 objectives

CCNA L3 Switching: Filters on the VLAN Gateways

Finance must be walled off from general users. Write two filters and put each where its VLAN's traffic enters the switch.

CCNA55 min3 objectives

CCNA L3 Switching: Bring the Switch Into OSPF

The static routes are gone. Bring the distribution switch into OSPF so the campus and the edge learn each other.

CCNA42 min3 objectives

CCNA L3 Switching: DHCP Across the Gateway

Hosts now get their addresses from a server two hops away. Make the switch relay the requests and keep the gateway range out of the pools.

CCNA45 min3 objectives

CCNA L3 Switching: A Routed Uplink to the Edge

Connect the campus to the edge router over a routed link, and give traffic a way out and back.

CCNA35 min3 objectives

CCNA L3 Switching: Retire the Router-on-a-Stick

The router-on-a-stick is gone. Turn the distribution switch into the gateway for both VLANs.

CCNA35 min3 objectives

Free with an account

CCNA Break/Fix Capstone: One Floor, Two Layers, One Ticket

A full-path break/fix capstone for CCNA troubleshooting. A single floor was renumbered and re-cabled. Users on that floor cannot reach anything — not their default gateway, not other subnets, and not the internet. The change record mentions both the access switch and the internet edge. Your job: prove the path hop-by-hop from the client outward and repair every break. Fixing only one side does not change the symptom; both layers must be corrected.

CCNA75 min5 objectives

CCNA Break/Fix: The Adjacency That Forms and Never Finishes

A late-night rollback restored configs from before a WAN carrier change. Since then, both branches report OSPF neighbors that appear, start exchanging, and then reset—never reaching FULL. Users at Branch A cannot reach Branch B. Your task is to observe the partial adjacency behavior, isolate why the database exchange never completes, and restore the carrier’s standard everywhere it applies so reachability returns end-to-end.

CCNA65 min5 objectives

CCNA Break/Fix: Routes Configured, Never Installed

Troubleshoot a dual-stack hub-and-spoke where IPv6 traffic never flowed after go-live. IPv4 works end-to-end, but IPv6 static routes are present in running-config and missing from the RIB. Compare configured vs installed routes, trace next-hop reachability per link, and correct the next-hop so each static becomes active. Validate from the user LAN.

CCNA55 min5 objectives

CCNA Break/Fix: Subnets That Went Dark After Summary Tidy

Two internal subnets behind a branch router stopped working after a summarization tidy-up. Everything else inside the same /16 summary is fine, and the edge still has a discard route for the summary. Your job: trace which route each hop actually matches for those destinations, then restore reachability without removing or weakening the summary.

CCNA65 min6 objectives

CCNA Break/Fix: The Gateway Pair That Only Fails Over by Hand

An office floor’s redundant default gateway pair keeps needing manual intervention. During an uplink outage the active gateway stays active and strands users, and when the repaired router returns it seizes the VIP immediately and the floor bounces. Troubleshoot the pair’s failover behavior by examining what each router monitors and when it is allowed to take the role back. Bring the pair into compliance with the convergence standard without changing anything else.

CCNA55 min5 objectives

CCNA Break/Fix: Published Services Nobody Outside Can Open

A DMZ server was rebuilt onto a new IP last week. Since then, outside users cannot open its three published services, while the server itself can browse out normally. Your job: work from the public address toward the inside, diagnose where the forwarding breaks, and republish all three services on the advertised public IP without disrupting outbound internet access.

CCNA55 min4 objectives

CCNA Break/Fix: Everything Is Crossing the Backup Circuit

Two sites have dual WAN links (primary and backup). Both circuits are up and end-to-end connectivity works, yet every intersite flow rides the slow backup path. Your job: read which routes each router actually installed for the opposite site and why, then restore the intended path preference so traffic uses the primary circuit while keeping the backup standing by.

CCNA50 min4 objectives

CCNA Break/Fix: Both Branches Went Quiet at 02:14

An overnight hardening change reached the core but not the branches. By morning, both OSPF adjacencies to the core were down even though every point-to-point link still pings and no addressing changed. Restore end-to-end reachability by diagnosing what the core and each spoke now disagree about on the carrier-facing transits and finishing the change on the branch ends.

CCNA50 min5 objectives

CCNA Break/Fix: The Renumbering That Left Two Floors Offline

Daily CCNA troubleshooting repair: two branch floors were renumbered and now users report DHCP failures and no Internet access. Work end-to-end from each floor’s client to the WAN: trace DHCP pool-to-interface bindings, validate NAT policy per floor, and restore both floors so leases are issued from the new plan and both can reach the provider loopback.

CCNA47 min5 objectives

CCNA Break/Fix: Three Circuits That Test Clean and Carry Nothing

A replacement branch router came up on three carrier handoffs. All subinterfaces and /30s look correct and line protocols are up, yet no traffic passes. Your job: read what each circuit actually puts on the wire and bring the branch into alignment with the remote ends — including the carrier-published IP MTU on one circuit — without altering addressing or static routes.

CCNA55 min5 objectives

CCNA Break/Fix: The Management Filter That Guards Nothing

A security audit showed that routers accepted SSH from outside the management LAN despite an existing filter. Diagnose how the management ACL is bound to the VTY lines and make it govern which inbound sessions the routers accept, without breaking data-plane reachability.

CCNA40 min5 objectives

CCNA Break/Fix: IPv4 Crosses the WAN and IPv6 Does Not

A dual-stack static routing lab with a subtle IPv6-only failure. IPv4 reaches across the WAN from a branch PC to an HQ server and loopback, while IPv6 to the same destinations fails. The IPv6 addressing on interfaces is correct; the break lies elsewhere. Compare what IPv4 knows versus what IPv6 knows for the same four destinations and make IPv6 match the working IPv4 design.

CCNA45 min5 objectives

CCNA Break/Fix: The Branches the Core Cannot See

Daily CCNA troubleshooting drill: Two branches can ping the core over their transit links, yet the core does not learn any branch routes. Your job is to trace how OSPF is enabled on each device, isolate why the core’s routing table is missing the branch LANs and loopbacks, and bring both branches into the correct OSPF area without changing how the core enables it.

CCNA45 min5 objectives

Free with an account

CCNA Break/Fix Capstone: One Symptom, Two Faults

A branch user in VLAN 10 cannot reach the data center's line-of-business server, stalling the end-of-day batch upload. Two faults sit behind the one complaint, and clearing either alone leaves the user where they started. The client gets no answer from its own gateway either.

CCNA55 min4 objectives

CCNA Break/Fix: The ACL That Blocks Too Much

Branch staff cannot reach the server at 172.16.100.100, and they cannot close a day's tickets without it. Policy also requires Telnet from the user LAN to that server be denied while everything else passes, and the security review cannot confirm it is being enforced. Work the path from a client and find what is wrong.

CCNA65 min4 objectives

CCNA Break/Fix: Translation Happens, Replies Do Not

A branch reaches its provider through one edge router that hides the user LAN behind its upstream address. Since a change window, everyone on 192.168.10.0/24 reports that nothing beyond the branch answers, while the router itself reaches the provider's test address. Find what is wrong.

CCNA45 min4 objectives