Cisco CCNA guideStudy & preparation

CCNA Lab Practice: Packet Tracer, Cisco Modeling Labs or Cisco Learning Labs, and What to Build First

Cisco says you can't pass the CCNA by reading alone. Compare the three lab options Cisco offers, learn the IOS modes and show commands the v2.0 objectives rely on, and follow a six-block build-and-break lab plan.

Short answer

Cisco's CCNA FAQ says you can't pass by just reading a book and points to labs in Cisco Packet Tracer or Cisco Modeling Labs. Packet Tracer is a free simulator from Cisco Networking Academy. Cisco Modeling Labs runs real Cisco software images and has a free tier with five nodes and no expiration date. Cisco Learning Labs for CCNA are 31 guided labs on real IOS, sold through Cisco U. For v2.0, where 8 objectives start with Configure and 8 with Troubleshoot or Diagnose, practice both building a configuration and finding a fault someone else planted.

You don't need a rack of used routers to prepare for the CCNA. You do need hours at a command line, and the right tool depends on your budget, your computer and how much guidance you want. Cisco publishes enough about its three options to make the choice in an evening.

Why CCNA preparation needs lab time

Cisco is direct about this. Its CCNA FAQ, checked October 27, 2026, says "You can't pass the CCNA by just reading a book," recommends time in labs using Cisco Packet Tracer or Cisco Modeling Labs to practice configuring routers and switches, and names the command line as one of the hardest topics for people without IT experience.

The exam itself expects hands-on skill. Cisco's exam tutorial page lists labs among the question types. For v2.0, Cisco's Learning Network post Steps to the Future says hands-on, practical skill assessments are part of the new exam, and the v2.0 exam topics open 8 of 29 objectives with Configure and 8 with Troubleshoot or Diagnose. What a lab item looks like on test day is covered in the CCNA exam format guide.

Packet Tracer, Cisco Modeling Labs and Cisco Learning Labs compared

Cisco's Learning Network page Packet Tracer and Alternative Lab Solutions compares the three, and the product pages add prices and limits:

FeaturePacket TracerCisco Modeling Labs (CML)Cisco Learning Labs for CCNA
What it isFree network simulator from Cisco Networking AcademySimulation on your own computer using real Cisco software imagesGuided labs on a topology hosted by Cisco
CostFreeFree tier: five nodes, no expiration. Personal: $199 or 2 Cisco Learning Credits. Personal Plus: $349 or 4 creditsShown after sign-in on Cisco U.
Real Cisco IOS and full CLINot checked in Cisco's comparisonYesYes
Build your own labsYesYesNo, guided tasks
Guided labs with solutionsNot checkedYesYes, 31 labs
Internet connection requiredNot required, per Cisco's tableNot required, per Cisco's tableYes, the labs are hosted

Details worth knowing before you choose:

  • Packet Tracer: Cisco's page says you download it by signing up for the free Introduction to Packet Tracer course on Networking Academy. Because Cisco's comparison doesn't check "Real Cisco IOS" or "Full CLI commands" for it, expect some commands and outputs to be missing or to differ from real devices.
  • CML Free: Cisco's Modeling Labs page describes five nodes and a selection of reference platforms, including open-source host nodes, with as many unmanaged switches and external connectors as you need. The paid Personal editions are single-user, with 20 or 40 Cisco nodes and community support only.
  • Cisco Learning Labs: the Cisco U. product page lists 31 guided labs, from basic switch configuration to OSPF, NAT, ACLs, port security and a WPA2 PSK WLAN, using Cisco IOS with a CLI on version 15 releases, and 180-day access. The Learning Network comparison page still says three months, so check the product page when you buy. None of the 31 lab titles, checked October 27, 2026, names OSPFv3, HSRP or Ansible, so plan to cover those v2.0 topics with another tool.

Cisco's 200-301 exam page also points to CML with "you can get started for free."

Choosing a CCNA lab tool for your situation

Passy's suggestions, based on Cisco's comparison rather than any Cisco rule:

  • New to networking: start in Packet Tracer. It costs nothing, and the command line habits you build there carry over.
  • Ready for real device behavior: move to CML Free when you want genuine IOS output, or when a command you need isn't in Packet Tracer. Five nodes cover many CCNA topologies, such as three routers and two switches.
  • Want structure: Cisco Learning Labs give you tasks with objectives and solutions, which suits people who stall in front of a blank topology.
  • Operations topics: objective 5.5, using Ansible to execute commands, needs a separate host that reaches your devices over the network. That's easier in CML, with host nodes and external connectors, than in a self-contained simulator.

Labs build configuration skill, but the exam also asks you to recognize the same ideas in written questions. Question practice by v2.0 domain, planned for full CCNA prep, is meant for checking the theory behind each lab block.

The IOS command line: modes and the show commands to know

Four modes cover almost everything at CCNA level:

PromptModeHow you get there
R1>User EXECLog in
R1#Privileged EXECenable
R1(config)#Global configurationconfigure terminal
R1(config-if)#Interface configurationinterface GigabitEthernet0/1

exit goes back one level, end returns to privileged EXEC, ? lists what you can type next, and do runs a show command from configuration mode. copy running-config startup-config saves your work.

Objective 2.4 asks you to troubleshoot with "show commands (including show logs), ping, extended ping, trace route, and packet capture output." These show commands line up with the v2.0 objectives:

CommandWhat it tells youObjectives
show ip interface briefEach interface's address and up/down status1.3, 2.4
show interfaces GigabitEthernet0/1Errors, collisions, duplex and speed1.1
show vlan brief and show interfaces trunkAccess VLANs, trunks, allowed and native VLANs2.1, 2.2
show etherchannel summaryPort-channel members and state2.1
show cdp neighbors and show lldp neighborsWhat's connected to each port2.3
show spanning-tree vlan 10Root, port roles and states2.5
show ip route and show ipv6 routeRoutes, distance and metric3.1, 3.2
show ip ospf neighborOSPF adjacency states3.3
show standby brief and show vrrp briefHSRP and VRRP status3.4
show ip nat translationsActive NAT entries4.3
show access-listsACL entries and match counts4.6
show loggingRecent log messages, with severity2.4, 5.6

For packet capture output, Cisco's Modeling Labs page says CML version 2.10 can stream captures into Wireshark.

A six-block CCNA lab plan mapped to the v2.0 objectives

Each block builds one small topology, then breaks it. The plan is Passy's; the objective numbers come from Cisco's v2.0 outline.

BlockBuildObjectives
1. AddressingTwo VLANs with IPv4 and IPv6 gateways (including a modified EUI-64 address), a DHCP server on another subnet with ip helper-address, and client checks on Windows, macOS or Linux1.3, 1.4, 1.6, 1.7
2. Switch edgeAccess ports with a voice VLAN, an 802.1Q trunk, an LACP EtherChannel, SVIs, then check CDP and LLDP against your diagram2.1, 2.2, 2.3
3. Spanning treeRoot primary and secondary, PortFast, BPDU guard and root guard2.5
4. RoutingDefault, network, host and floating static routes in IPv4 and IPv6, then single-area OSPFv2 and OSPFv3, then HSRP3.1–3.4
5. Services and securityLocal users, SSH and AAA client settings, an SFTP or SCP file copy, NAT and PAT, a DNS server with records to check by name, ACLs, DHCP snooping, dynamic ARP inspection and port security4.1–4.4, 4.6, 4.7
6. OperationsSyslog to a server at a chosen severity, SNMP, and an Ansible task that runs show commands5.4–5.6

Packet Tracer may not support every command in blocks 5 and 6. That's the point where CML's real images earn their setup time. The topic guides go deeper on block 3 (Rapid PVST+) and block 4 (OSPF).

Turning CCNA labs into troubleshooting practice

Building a working lab proves you can configure. Eight v2.0 objectives ask you to troubleshoot or diagnose, which is a different skill: starting from a symptom. Cisco's Steps to the Future post says employers told Cisco they value someone who can isolate an issue faster than someone who can recite a configuration from memory.

After each block, have a study partner, or a saved configuration you load blind, plant one fault:

  • A duplex or speed mismatch (1.1)
  • A wrong mask or gateway on a client (1.3)
  • A missing ip helper-address (1.7)
  • A VLAN missing from a trunk's allowed list, or mismatched native VLANs (2.1)
  • Two LACP ports both set to passive (2.1)
  • Mismatched OSPF hello timers or MTU (3.3)
  • A floating static route with too low a distance (3.2)
  • An ACL entry in the wrong order (4.6)
  • NAT inside and outside swapped on two interfaces (4.3)

Then work from the symptom, using only show commands, ping and traceroute, and time yourself. Cisco doesn't publish how lab items are scored, so a sensible exam habit is to read every requirement before typing and to verify with show commands before moving on. To practice the same reasoning on written scenarios, original troubleshooting items are planned for the CCNA question bank at launch.

Keeping CCNA lab practice clear of exam content

Cisco's exam policies treat exam questions, answers and diagrams as Cisco's confidential property, with penalties up to a lifetime ban and the nullification of earlier certifications. Lab files shared in community forums are written by members, so judge them as practice material, and avoid anything that claims to reproduce real exam labs.

Your first CCNA lab session

Install Packet Tracer or CML Free, build block 1 with two VLANs and a DHCP server, and check yourself against the 20 free CCNA practice questions, which include a DHCP relay item built on the same kind of topology. Then schedule the remaining blocks with the free CCNA study planner. Between lab sessions, short mixed review keeps older blocks fresh, and a daily goal, planned for launch, keeps a streak going on the days you can't lab. Checkout isn't open yet.

Trust the source

Official sources

Exam policies can change. Use these primary sources for the most current details.