Lab Index — itnetworking

This index catalogs the educational Packet Tracer lab guides available in this repository.

Foundation Guides#

• Getting Started — How to use this repository and navigate Packet Tracer.
• Packet Tracer Installation — Official download and setup instructions.
• Cisco IOS Cheatsheet — Command modes, shortcuts, and core syntax.
• Troubleshooting Guide — Layered diagnostic model and common error resolutions.
• Provenance and Licensing — Content taxonomy, rights boundaries, and simulation testing standards.
• Migration Map — Mapping from legacy course folders to the topical library.

Active Published and Reviewed Labs#

1. Network Fundamentals (network-fundamentals)#

• PTL-0008: Cisco IOS Navigation and Initial Device Configuration — CLI modes, shortcuts, password encryption, banners, and NVRAM saving (reviewed, beginner).
• PTL-0014: Default Gateway Operation and Troubleshooting — Intra-subnet vs. inter-subnet delivery, host routing decisions, and systematic gateway troubleshooting (reviewed, beginner).
• PTL-0016: MAC Address Learning and ARP Operation — Dynamic switch CAM table learning, ARP cache resolution, unknown unicast flooding, and table aging (reviewed, beginner).
• PTL-0024: CDP Neighbor Discovery and Topology Audit — Layer 2 discovery protocol mechanics, neighbor mapping, TLV inspection, and edge port hardening (reviewed, beginner).

2. IP Addressing (ip-addressing)#

• PTL-0002: Configuring Cisco Router Interfaces — Dual-stack IPv4/IPv6 interface setup on Cisco ISR routers (reviewed, beginner).
• PTL-0005: Verifying Directly Connected Networks — Interpreting routing table C and L codes and interface states (reviewed, beginner).
• PTL-0015: IPv4 Subnetting and VLSM Network Design — Variable length subnet masking (/26, /27, /28, /30), addressing tables, and point-to-point routing (reviewed, beginner).
• PTL-0047: VLSM Address Plan Fault Investigation — Variable Length Subnet Masking audit, broadcast host assignment remediation, gateway capacity deficit resolution, and transit prefix optimization (reviewed, intermediate).
• PTL-0026: IPv6 SLAAC and Neighbor Discovery — Stateless address autoconfiguration, ICMPv6 router advertisements, host prefix derivation, and neighbor discovery table audit (reviewed, intermediate).

3. Switching (switching)#

• PTL-0009: VLAN Segmentation and Access Port Configuration — Broadcast domain isolation, access port assignment, and VLAN verification (reviewed, beginner).
• PTL-0006: Configuring Layer 2 EtherChannel with LACP — Link aggregation, IEEE 802.3ad LACP bundling, and trunking over Port-channel interfaces (reviewed, intermediate).
• PTL-0017: Rapid Spanning Tree Protocol, PortFast, and BPDU Guard — IEEE 802.1w Rapid PVST+ deployment, deterministic root bridge election, port role mapping, edge PortFast, and BPDU Guard protection (reviewed, intermediate).
• PTL-0044: VLAN Trunk Allowed-List Troubleshooting — Multi-VLAN trunk pruning diagnosis, allowed list remediation with add modifier, and Native VLAN alignment (reviewed, intermediate).
• PTL-0045: Spanning Tree Root and Blocked-Port Investigation — Spanning tree root inversion diagnosis, deterministic bridge priority calculation, and core transit link unblocking (reviewed, intermediate).
• PTL-0046: LACP EtherChannel Member Mismatch Diagnosis — Link aggregation member parameter mismatch diagnosis, port suspension resolution, and multi-VLAN trunk aggregation (reviewed, intermediate).
• PTL-0049: Campus Distribution and Access VLAN Design — Multilayer campus distribution switching, 802.1Q trunking, SVI inter-VLAN routing, and end-to-end multi-VLAN service reachability (reviewed, advanced).

4. Routing (routing)#

• PTL-0001: Dual-Stack IPv4 and IPv6 Static Routing — End-to-end static routing with ipv6 unicast-routing across multi-router transit links (reviewed, intermediate).
• PTL-0010: Router-on-a-Stick Inter-VLAN Routing — 802.1Q trunking and subinterface gateway routing between VLANs (reviewed, intermediate).
• PTL-0011: Single-Area OSPFv2 Configuration and Verification — Dynamic link-state routing in Area 0, wildcard masks, router IDs, and passive interfaces (reviewed, intermediate).
• PTL-0019: Layer 3 Switch SVIs and Routed Ports — Multilayer switching, hardware CEF inter-VLAN routing with SVIs, Layer 3 routed ports (no switchport), and default gateway routing (reviewed, intermediate).
• PTL-0027: IPv6 Static and Default Route Troubleshooting — Recursive and fully specified static routing, default routes (::/0), next-hop debugging, and return path validation across a multi-router topology (reviewed, intermediate).
• PTL-0028: Floating Static Routes and Administrative Distance — Primary and backup route configuration with elevated administrative distance, dynamic link failover, and automatic preemption (reviewed, intermediate).
• PTL-0048: Multi-Site Routing with Branch Networks — Hub-and-spoke multi-site static routing, spoke default gateway egress, recursive next-hop debugging, and symmetric return route configuration (reviewed, intermediate).
• PTL-0029: OSPFv2 DR and BDR Elections — Multi-access broadcast OSPF networks, interface priority configuration, DR/BDR election hierarchy, failover, and non-preemption (reviewed, intermediate).
• PTL-0030: OSPFv2 Passive Interfaces and Neighbor Control — OSPF Hello suppression on access LANs, selective and default passive configuration, stub network advertisement, and transit neighbor control (reviewed, intermediate).
• PTL-0031: OSPFv2 Neighbor Adjacency Troubleshooting — Diagnosis and remediation of OSPF Hello/Dead timer mismatches, Area ID errors, missing network statements, and passive interface placement (reviewed, intermediate).
• PTL-0032: HSRP First-Hop Gateway Failover — Configuration and verification of Cisco Hot Standby Router Protocol (HSRPv2) priority, preemption, VIP ARP resolution, and deliberate gateway failover (reviewed, advanced).
• PTL-0034: Single-Area OSPFv3 for IPv6 — Single-area OSPFv3 for IPv6 configuration, 32-bit Router IDs, point-to-point transit networks, passive interfaces, and multi-hop route propagation (reviewed, advanced).
• PTL-0054: Dual-Stack IPv4 and IPv6 Branch Network — Dual-stack enterprise branch routing architecture, IPv4 and IPv6 static routes across hub-and-spoke transit links, loopback service reachability, and next-hop fault isolation (reviewed, advanced).
• PTL-0055: Integrated Branch Network Troubleshooting Challenge — Diagnose and resolve multi-domain branch office faults spanning 802.1Q trunk allowed-VLAN pruning, DHCP relay, static return routing, and perimeter access control lists (reviewed, advanced).

5. Network Services (network-services)#

• PTL-0012: Configuring Cisco IOS DHCPv4 Server and Relay Agent — Cisco IOS dynamic address allocation, pool exclusions, and IP helper-address relaying (reviewed, intermediate).
• PTL-0020: IPv4 Dynamic PAT at the Edge — Port Address Translation (NAT Overload), standard ACL matching, inside/outside boundaries, and dynamic translation verification (reviewed, intermediate).
• PTL-0021: Static NAT and Inside Server Publishing — One-to-one inside static NAT, public IP publishing, translation table analysis, and host security isolation (reviewed, intermediate).
• PTL-0022: DNS Records and HTTP Web Services — Authoritative DNS server, A and CNAME records, HTTP portal hosting, and client name resolution (reviewed, beginner).
• PTL-0023: NTP and Syslog Network Monitoring — Network Time Protocol (NTP) clock synchronization, millisecond log timestamping, centralized remote Syslog forwarding, and real-time fault notification (reviewed, intermediate).
• PTL-0025: TFTP Configuration Backup and Restore — Centralized configuration archiving over UDP port 69, simulated disaster alteration, and complete state restoration (reviewed, intermediate).
• PTL-0033: Stateful DHCPv6 Address Assignment — Cisco IOS Stateful DHCPv6 server pools, ICMPv6 Router Advertisement Managed-config flags, client DUID lease tracking, and end-to-end IPv6 routing (reviewed, advanced).
• PTL-0037: DNS Resolution Failure Troubleshooting — Diagnosis and remediation of client resolver misconfigurations, disabled DNS services, and missing A/CNAME records across routed subnets (reviewed, beginner).
• PTL-0043: NAT and PAT Troubleshooting Challenge — Diagnosis and remediation of NAT inside/outside interface errors, translation ACL mismatches, and dynamic PAT overload verification (reviewed, intermediate).
• PTL-0052: DHCP Helper-Address Multi-Subnet Troubleshooting — Multi-subnet DHCP helper-address forwarding diagnosis, subinterface helper-address misdirection remediation, and central server scope mismatch resolution (reviewed, intermediate).

6. Network Security (network-security)#

• PTL-0003: Securing Switch Management with SSH — SSHv2 configuration, RSA key generation, and Telnet disabling on Catalyst switches (reviewed, intermediate).
• PTL-0004: Implementing Switchport Port Security — MAC limiting, dynamic sticky learning, violation modes, and err-disable recovery (reviewed, intermediate).
• PTL-0007: Cisco Switch Security Hardening Best Practices — DTP disabling, blackhole parking-lot VLAN, native VLAN hopping defense, PortFast, and BPDU Guard (reviewed, intermediate).
• PTL-0013: Configuring Standard and Extended IPv4 Access Control Lists — Numbered standard and named extended packet filtering with traffic matrices (reviewed, intermediate).
• PTL-0018: Dynamic Trunking Protocol and Native VLAN Security — DTP negotiation analysis, switchport nonegotiate, Native VLAN 999 isolation, and allowed VLAN pruning (reviewed, intermediate).
• PTL-0038: DHCP Snooping and Rogue DHCP Detection — Layer 2 DHCP snooping configuration, Option 82 handling, trusted/untrusted port boundaries, rate limiting, and rogue DHCP containment (reviewed, advanced).
• PTL-0039: Dynamic ARP Inspection and Spoofing Defense — Dynamic ARP Inspection (DAI) deployment, trusted uplink boundaries, rate limiting, multi-attribute validation checks (src-mac, dst-mac, ip), and ARP spoofing defense (reviewed, advanced).
• PTL-0040: Port Security Violation Troubleshooting — Port security troubleshooting, stale sticky MAC conflict resolution, err-disabled administrative recovery without disabling security, and violation mode alignment (reviewed, intermediate).
• PTL-0041: IPv4 ACL Troubleshooting with Traffic Matrix — IPv4 ACL troubleshooting, shadowed rule remediation, directional application corrections, and wildcard mask auditing across routed departmental subnets (reviewed, intermediate).
• PTL-0042: Named Extended IPv4 ACL for Server Access — Named extended ACLs, DMZ server farm perimeter security, DNS and HTTP/HTTPS access control, and least privilege traffic filtering (reviewed, intermediate).
• PTL-0050: Guest Network Segmentation with ACLs — Enterprise guest network perimeter isolation, named extended IPv4 ACLs, least privilege service access, and unauthorized internal subnet blocking (reviewed, intermediate).
• PTL-0051: DMZ Services with Edge ACL Policy — Three-legged perimeter DMZ architecture, edge router extended ACLs, outside inbound service filtering, and strict DMZ-to-corporate isolation (reviewed, advanced).
• PTL-0053: Secure Management Network Design — Dedicated management VLAN segmentation, cryptographic SSHv2 access, VTY access-class filtering, and data-plane boundary defense (reviewed, advanced).

7. Wireless and WAN Technologies (wireless-wan)#

• PTL-0035: WPA2 Wireless LAN Fundamentals — Autonomous access point deployment, WPA2-Personal (Pre-Shared Key with AES encryption), Cisco IOS DHCP services, and client association verification (reviewed, beginner).
• PTL-0036: Wireless VLAN Separation and Guest Access — Multilayer switch SVIs, corporate vs guest VLAN isolation, multi-pool DHCP, WPA2-PSK security, and Extended ACL traffic restriction (reviewed, intermediate).

Comprehensive Capstone Projects#

• PTL Capstone: Small Office Multi-VLAN Network Design — Comprehensive network integration combining VLANs, 802.1Q trunking, Router-on-a-Stick, OSPF routing, DHCP relay, SSH hardening, and ACL perimeter security (reviewed, intermediate).

Lab Expansion Roadmap#

Additional capstone labs (including enterprise multi-area OSPF and WLAN controller topologies) are slated for ongoing expansion per AI_AGENT_GUIDE/12_CONTENT_ROADMAP.md.