All labs

PTL-0008 Network Fundamentals

Cisco IOS Navigation and Initial Device Configuration

Master Cisco IOS CLI command mode navigation, context-sensitive help, line configuration, administrative password protection, banners, and NVRAM configuration saving.

Cisco IOS
IOS Navigation
Device Hardening
CLI Shortcuts
Network Fundamentals

Level: Beginner
Time: 30 min
Simulator: Tested in Packet Tracer

PTL-0002 IP Addressing

Configuring Cisco Router Interfaces

Configure IPv4 and IPv6 dual-stack addressing on multiple router GigabitEthernet interfaces, verify interface status, and test LAN connectivity.

Router Interfaces
IPv4 Addressing
IPv6 Addressing
Dual Stack
Cisco IOS

Level: Beginner
Time: 30 min
Simulator: Tested in Packet Tracer

PTL-0005 IP Addressing

Verifying Directly Connected Networks

Investigate how Cisco IOS routers dynamically populate the routing table with directly connected networks (C) and local host routes (L) for both IPv4 and IPv6.

Routing Table
Directly Connected Routes
IPv4 Addressing
IPv6 Addressing
Cisco IOS

Level: Beginner
Time: 30 min
Simulator: Tested in Packet Tracer

PTL-0015 IP Addressing

IPv4 Subnetting and VLSM Network Design

Design, calculate, and implement a Variable Length Subnet Masking (VLSM) addressing scheme to efficiently allocate subnets of /26, /27, /28, and /30 without address waste.

VLSM
Subnetting
IPv4 Addressing
Prefix Lengths
Static Routing

Level: Beginner
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0016 Network Fundamentals

MAC Address Learning and ARP Operation

Examine how Layer 2 switches build their MAC address table dynamically from incoming frame source MACs, and how Layer 3 hosts map IPv4 addresses to MAC addresses using ARP.

MAC Address
ARP
Switching
Frame Forwarding
Network Fundamentals

Level: Beginner
Time: 30 min
Simulator: Tested in Packet Tracer

PTL-0009 Switching

VLAN Segmentation and Access Port Configuration

Create multiple Virtual LANs (VLANs) on a Cisco Catalyst switch, assign static access ports, and demonstrate Layer 2 broadcast domain isolation between departmental subnets.

Switching
VLANs
Access Ports
Broadcast Domains
Cisco IOS

Level: Beginner
Time: 35 min
Simulator: Tested in Packet Tracer

PTL-0014 Network Fundamentals

Default Gateway Operation and Troubleshooting

Master the role of the default gateway in local versus remote packet forwarding, and systematically diagnose missing, incorrect, and unreachable gateway configurations.

Default Gateway
ARP
IPv4 Addressing
Troubleshooting
Packet Flow

Level: Beginner
Time: 30 min
Simulator: Tested in Packet Tracer

PTL-0003 Network Security

Securing Switch Management with SSH

Configure secure administrative access to a Cisco Catalyst switch using SSHv2, RSA key generation, local user authentication, and disabled Telnet transport.

Network Security
SSH
Switch Security
Cisco IOS

Level: Intermediate
Time: 30 min
Simulator: Tested in Packet Tracer

PTL-0024 Network Fundamentals

CDP Neighbor Discovery and Topology Audit

Discover network topology, verify physical interconnects, and audit device capabilities using Cisco Discovery Protocol (CDP) commands, followed by security hardening on edge interfaces.

Network Fundamentals
CDP
Discovery Protocols
Layer 2
Cisco IOS

Level: Beginner
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0004 Network Security

Implementing Switchport Port Security

Configure Cisco Catalyst switch port security to restrict unauthorized MAC addresses, learn dynamic sticky MAC addresses, and configure violation shutdown and recovery.

Port Security
Switch Security
Sticky MAC
Err Disable
Cisco IOS

Level: Intermediate
Time: 35 min
Simulator: Tested in Packet Tracer

PTL-0018 Network Security

Dynamic Trunking Protocol and Native VLAN Security

Investigate Cisco Dynamic Trunking Protocol (DTP) operational modes, mitigate trunk negotiation risks with switchport nonegotiate, secure untagged traffic with an isolated Native VLAN 999, and prune unauthorized traffic with explicit allowed VLAN lists.

DTP
Trunking
Native VLAN
VLAN Hopping
Switchport Security

Level: Intermediate
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0044 Switching

VLAN Trunk Allowed-List Troubleshooting

Diagnose and resolve multi-VLAN trunking failures across an enterprise dual-switch infrastructure. Investigate trunk allowed list omissions, identify and align native VLAN mismatches, and verify end-to-end Layer 2 trunk transport without impacting existing operational VLANs or unrelated access ports.

Switching
VLAN
802.1Q
Trunking
Allowed List

Level: Intermediate
Time: 50 min
Simulator: Tested in Packet Tracer

PTL-0017 Switching

Rapid Spanning Tree Protocol, PortFast, and BPDU Guard

Configure IEEE 802.1w Rapid Spanning Tree Protocol (Rapid PVST+), tune bridge priorities for deterministic root bridge election, and secure edge access switchports with PortFast and BPDU Guard.

STP
Rstp
Rapid Pvst
PortFast
BPDU Guard

Level: Intermediate
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0045 Switching

Spanning Tree Root and Blocked-Port Investigation

Investigate and resolve unexpected Spanning Tree Protocol (STP) root bridge elections and suboptimal blocked-port placement in a redundant multi-switch campus network. Diagnose root path costs, bridge IDs, and port states using Cisco IOS commands, deterministically configure primary and secondary root bridges, and ensure high-capacity distribution links remain unblocked while access uplinks safely absorb loop-prevention blocking.

Switching
STP
Spanning Tree
Root Bridge
Blocked Port

Level: Intermediate
Time: 55 min
Simulator: Tested in Packet Tracer

PTL-0007 Network Security

Cisco Switch Security Hardening Best Practices

Implement enterprise switchport hardening: mitigate VLAN hopping by changing the native VLAN, disable DTP negotiation, shut down unused ports in a parking-lot VLAN, and enable STP PortFast and BPDU Guard.

Switch Hardening
VLAN Hopping
BPDU Guard
PortFast
DTP

Level: Intermediate
Time: 40 min
Simulator: Tested in Packet Tracer

PTL-0006 Switching

Configuring Layer 2 EtherChannel with LACP

Bundle multiple physical Ethernet links into a single logical channel using standard Link Aggregation Control Protocol (LACP) to increase bandwidth and provide link redundancy.

Switching
EtherChannel
LACP
Spanning Tree
Cisco IOS

Level: Intermediate
Time: 40 min
Simulator: Tested in Packet Tracer

PTL-0046 Switching

LACP EtherChannel Member Mismatch Diagnosis

Diagnose and resolve link aggregation member configuration mismatches in an IEEE 802.3ad LACP EtherChannel bundle between Catalyst switches. Investigate port mode and trunk inconsistencies that cause member interfaces to be suspended, remediate bundle parameters to achieve full bundling, and verify high-availability multi-VLAN trunking.

Switching
EtherChannel
LACP
802.3ad
Trunking

Level: Intermediate
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0049 Switching

Campus Distribution and Access VLAN Design

Implement and troubleshoot an enterprise campus network utilizing a Cisco Catalyst 3560 multilayer distribution switch and dual Catalyst 2960 access switches. Configure Switch Virtual Interfaces (SVIs), activate hardware CEF routing, enforce 802.1Q trunking with custom Native VLAN 99, diagnose trunk pruning omissions and disabled IP routing, and verify end-to-end inter-VLAN data plane delivery.

Switching
Multilayer Switching
VLANs
802.1Q
SVI

Level: Advanced
Time: 75 min
Simulator: Tested in Packet Tracer

PTL-0047 IP Addressing

VLSM Address Plan Fault Investigation

Investigate and resolve Variable Length Subnet Masking (VLSM) address plan discrepancies across an enterprise multi-subnet branch network. Diagnose broadcast address host assignment errors, correct default gateway and transit subnet mask mismatches, and verify end-to-end multi-subnet reachability with minimal non-disruptive configuration adjustments.

IP Addressing
VLSM
Subnetting
IPv4
Troubleshooting

Level: Intermediate
Time: 50 min
Simulator: Tested in Packet Tracer

PTL-0026 IP Addressing

IPv6 SLAAC and Neighbor Discovery

Configure IPv6 Stateless Address Autoconfiguration (SLAAC) on Cisco IOS, observe ICMPv6 Router Advertisements, verify host prefix autoconfiguration, and audit the IPv6 Neighbor Discovery cache.

IP Addressing
IPv6
Slaac
Neighbor Discovery
Icmpv6

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0010 Routing

Router-on-a-Stick Inter-VLAN Routing

Configure a router-on-a-stick topology using IEEE 802.1Q trunking and Cisco IOS logical subinterfaces to route traffic between isolated departmental VLANs.

Inter VLAN Routing
Router on a Stick
Subinterfaces
802.1Q Trunking
Cisco IOS

Level: Intermediate
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0019 Routing

Layer 3 Switch SVIs and Routed Ports

Configure multilayer switch inter-VLAN routing with Switched Virtual Interfaces (SVIs), convert physical interfaces to Layer 3 routed ports using no switchport, and establish static default routing to an upstream router.

Multilayer Switching
SVI
Routed Ports
Inter VLAN Routing
Static Routing

Level: Intermediate
Time: 50 min
Simulator: Tested in Packet Tracer

PTL-0001 Routing

Dual-Stack IPv4 and IPv6 Static Routing

Configure dual-stack IPv4 and IPv6 addressing, enable IPv6 unicast routing, configure static routes, and verify end-to-end reachability across two routers and switches.

IPv4 Addressing
IPv6 Addressing
Static Routing
Dual Stack
Cisco IOS

Level: Intermediate
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0027 Routing

IPv6 Static and Default Route Troubleshooting

Diagnose and resolve IPv6 static routing faults, next-hop errors, and missing default routes across a multi-router hub-and-spoke enterprise topology.

Routing
IPv6
Static Routing
Default Routes
Troubleshooting

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0028 Routing

Floating Static Routes and Administrative Distance

Configure and verify primary and floating static routes with deliberate administrative distance separation, validating real-time link failover and preemption.

Routing
Static Routing
Floating Static Routes
Administrative Distance
Failover

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0048 Routing

Multi-Site Routing with Branch Networks

Design and troubleshoot multi-site hub-and-spoke enterprise WAN routing interconnecting corporate headquarters with two regional branch offices. Audit static routes, diagnose recursive next-hop failures and missing return paths, remediate endpoint default gateways, and verify end-to-end spoke-to-hub and spoke-to-spoke data plane reachability.

Routing
Static Routing
Hub and Spoke
WAN
Default Routes

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0011 Routing

Single-Area OSPFv2 Configuration and Verification

Configure dynamic link-state routing using single-area OSPFv2 in Area 0, configure 32-bit Router IDs, calculate wildcard masks, suppress unnecessary hello broadcasts with passive interfaces, and verify neighbor adjacencies.

Routing
OSPF
OSPFv2
Dynamic Routing
Wildcard Masks

Level: Intermediate
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0029 Routing

OSPFv2 DR and BDR Elections

Configure and verify OSPFv2 Designated Router (DR) and Backup Designated Router (BDR) election mechanics on multi-access broadcast networks using interface priorities.

Routing
OSPF
OSPFv2
Dr Bdr Election
Interface Priority

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0030 Routing

OSPFv2 Passive Interfaces and Neighbor Control

Suppress unnecessary OSPFv2 Hello transmissions on access LAN segments while maintaining link-state route advertisements and transit neighbor adjacencies.

Routing
OSPF
OSPFv2
Passive Interface
Neighbor Control

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0031 Routing

OSPFv2 Neighbor Adjacency Troubleshooting

Diagnose, isolate, and repair common OSPFv2 neighbor adjacency failures including Hello and Dead timer mismatches, Area ID errors, and missing network advertisements.

Routing
OSPF
OSPFv2
Troubleshooting
Neighbor Adjacency

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0032 Routing

HSRP First-Hop Gateway Failover

Configure Hot Standby Router Protocol (HSRPv2) priority and preemption across redundant gateway routers to provide high-availability default gateway services and verify failover.

Routing
Hsrp
Fhrp
High Availability
Preemption

Level: Advanced
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0034 Routing

Single-Area OSPFv3 for IPv6

Implement and verify single-area Open Shortest Path First version 3 (OSPFv3) for IPv6 across a three-router enterprise topology, establish router IDs, configure point-to-point transit adjacencies, apply passive interfaces, and verify route convergence.

IPv6
Ospfv3
Routing
Dynamic Routing
Router Id

Level: Advanced
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0054 Routing

Dual-Stack IPv4 and IPv6 Branch Network

Design, deploy, and verify dual-stack IPv4 and IPv6 enterprise branch connectivity using static and default routing across a hub-and-spoke transit topology. Configure simultaneous IPv4 and IPv6 addressing, establish dual-stack default gateways, and isolate routing misconfigurations in Cisco IOS environments.

Routing
Dual Stack
IPv6 Routing
Static Routing
Branch Network

Level: Advanced
Time: 75 min
Simulator: Tested in Packet Tracer

PTL-0055 Routing

Integrated Branch Network Troubleshooting Challenge

Diagnose and resolve multi-domain branch office faults spanning 802.1Q trunk allowed-VLAN pruning, IP helper forwarding, static return routing, and perimeter access control lists in a multi-tier Cisco IOS environment.

Troubleshooting
VLAN Trunking
IP Helper Address
Static Routing
ACLs

Level: Advanced
Time: 75 min
Simulator: Tested in Packet Tracer

PTL-0012 Network Services

Configuring Cisco IOS DHCPv4 Server and Relay Agent

Configure an enterprise Cisco router as a DHCPv4 server with excluded addresses, network pools, default routers, and DNS parameters, and configure an IP helper-address relay agent across routed interfaces.

Network Services
DHCP
DHCP Relay
IP Helper Address
Cisco IOS

Level: Intermediate
Time: 40 min
Simulator: Tested in Packet Tracer

PTL-0020 Network Services

IPv4 Dynamic PAT at the Edge

Configure and verify Port Address Translation (NAT Overload) on a Cisco ISR 4321 edge router, translating private RFC 1918 branch LAN traffic to a single public IP address to access external services.

Network Services
NAT
Pat
NAT Overload
Cisco IOS

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0021 Network Services

Static NAT and Inside Server Publishing

Configure and verify one-to-one Static NAT on a Cisco edge router to publish an internal enterprise server to external internet clients via a dedicated public IPv4 address, while preserving private host isolation.

Network Services
NAT
Static NAT
Server Publishing
Cisco IOS

Level: Intermediate
Time: 50 min
Simulator: Tested in Packet Tracer

PTL-0022 Network Services

DNS Records and HTTP Web Services

Configure and verify an authoritative Domain Name System (DNS) server and an HTTP web server in Cisco Packet Tracer, managing Address (A) and Canonical Name (CNAME) resource records, validating endpoint name resolution via nslookup, and troubleshooting DNS record faults.

Network Services
DNS
Http
Name Resolution
Cisco Packet Tracer

Level: Beginner
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0023 Network Services

NTP and Syslog Network Monitoring

Configure and verify Network Time Protocol (NTP) client synchronization and centralized Syslog logging on a Cisco IOS router, establishing synchronized clock timestamps, configuring message severity traps, forwarding system logs to a dedicated Syslog server, and observing real-time fault notifications.

Network Services
Ntp
Syslog
Network Monitoring
Cisco IOS

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0025 Network Services

TFTP Configuration Backup and Restore

Back up Cisco IOS running configuration to a centralized TFTP server over UDP port 69, simulate a catastrophic router configuration loss, and execute full disaster recovery and state restoration.

Network Services
Tftp
Backup and Restore
Disaster Recovery
Cisco IOS

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0033 Network Services

Stateful DHCPv6 Address Assignment

Configure and verify a Cisco router as a Stateful DHCPv6 server and examine ICMPv6 Router Advertisement Managed configuration flags, client lease bindings, and end-to-end IPv6 routing.

IPv6
Dhcpv6
Stateful Dhcpv6
Slaac
Icmpv6

Level: Advanced
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0037 Network Services

DNS Resolution Failure Troubleshooting

Diagnose and resolve common Domain Name System (DNS) failures in Cisco Packet Tracer, including misconfigured client DNS server addresses, disabled DNS daemon services, and missing A/CNAME resource records, verifying systematic remediation using ipconfig, nslookup, ping, and web browsers.

Network Services
DNS
Troubleshooting
Nslookup
Ipconfig

Level: Beginner
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0043 Network Services

NAT and PAT Troubleshooting Challenge

Diagnose and resolve common Port Address Translation (PAT / NAT Overload) misconfigurations on an enterprise edge router. Identify and correct translation ACL subnet mismatches, interface boundary role errors (ip nat inside/outside), and verify end-to-end outbound Internet connectivity for multiple internal subnets using active translation tables and statistical counters.

Network Services
NAT
Pat
NAT Overload
Troubleshooting

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0052 Network Services

DHCP Helper-Address Multi-Subnet Troubleshooting

Diagnose and resolve multi-subnet DHCPv4 helper-address forwarding failures across routed subinterfaces and a central Cisco IOS DHCP server. Troubleshoot helper-address configuration faults, 802.1Q subinterface gateway mappings, and DHCP pool scope mismatches preventing remote branch clients from obtaining dynamic IP leases.

Network Services
DHCP
IP Helper Address
Helper Address
VLANs

Level: Intermediate
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0035 Wireless WAN

WPA2 Wireless LAN Fundamentals

Design, deploy, and verify a standalone 802.11 wireless local area network using an autonomous access point, WPA2-Personal (Pre-Shared Key with AES encryption), Cisco IOS DHCP services on an edge router, and client host association verification.

Wireless
Wpa2 Psk
Access Point
DHCP
LAN Switching

Level: Beginner
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0036 Wireless WAN

Wireless VLAN Separation and Guest Access

Implement and verify wireless VLAN segmentation and isolated guest Wi-Fi access using a Cisco Catalyst 3560 multilayer switch, autonomous wireless access point, Switched Virtual Interfaces (SVIs), native DHCP pooling, and Extended Access Control Lists (ACLs) to strictly isolate guest stations from corporate staff assets while allowing DMZ web reachability.

Wireless
VLAN
Guest Wifi
DHCP
SVI

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0013 Network Security

Configuring Standard and Extended IPv4 Access Control Lists

Design, configure, and verify numbered standard and named extended IPv4 Access Control Lists (ACLs) to filter traffic based on source, destination, protocol, and port numbers.

Network Security
ACLs
Packet Filtering
Traffic Filtering
Cisco IOS

Level: Intermediate
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0038 Network Security

DHCP Snooping and Rogue DHCP Detection

Configure and verify Cisco IOS DHCP Snooping on Catalyst switches to mitigate rogue DHCP server attacks, establish trusted and untrusted port boundaries, enforce Option 82 handling policies, apply DHCP rate limiting, and validate dynamic DHCP snooping binding database population.

Network Security
DHCP Snooping
Layer 2 Security
Rogue DHCP
Option 82

Level: Advanced
Time: 50 min
Simulator: Tested in Packet Tracer

PTL-0039 Network Security

Dynamic ARP Inspection and Spoofing Defense

Configure and verify Dynamic ARP Inspection (DAI) on Cisco Catalyst switches, establish trusted and untrusted port boundaries, configure ARP inspection rate limiting, activate multi-attribute validation checks (src-mac, dst-mac, ip), integrate with DHCP snooping bindings, and observe Layer 2 ARP security behavior.

Network Security
Dynamic ARP Inspection
ARP Spoofing
Man in the Middle
DHCP Snooping

Level: Advanced
Time: 50 min
Simulator: Tested in Packet Tracer

PTL-0040 Network Security

Port Security Violation Troubleshooting

Diagnose and resolve Layer 2 switchport port security faults across Cisco Catalyst access switches. Analyze stale sticky MAC address conflicts, recover interfaces latched in err-disabled state without disabling security, and reconfigure violation modes from silent drop (protect) to audit-compliant (restrict/shutdown).

Network Security
Port Security
Switch Security
Sticky MAC
Err Disable

Level: Intermediate
Time: 45 min
Simulator: Tested in Packet Tracer

PTL-0041 Network Security

IPv4 ACL Troubleshooting with Traffic Matrix

Troubleshoot and remediate IPv4 standard and extended Access Control Lists using a structured traffic matrix. Identify and correct common ACL design and implementation faults including shadowed rules, directional misplacement (inbound vs. outbound), and inverted wildcard masks on Cisco IOS routers.

Network Security
Access Control Lists
Extended ACL
Standard ACL
Wildcard Mask

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0042 Network Security

Named Extended IPv4 ACL for Server Access

Design, implement, and verify named extended IPv4 Access Control Lists to control traffic flow between corporate network zones. Enforce the principle of least privilege by selectively permitting DNS (UDP 53) and web services (TCP 80/443) to public DMZ resources while isolating sensitive internal database servers and departmental subnets.

Network Security
Access Control Lists
Named Extended ACL
Packet Filtering
Dmz Security

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0050 Network Security

Guest Network Segmentation with ACLs

Implement and troubleshoot enterprise guest network segmentation using named extended IPv4 Access Control Lists on a Cisco edge router. Enforce least privilege access by permitting essential public DNS, HTTP, and HTTPS services to external servers while strictly isolating and dropping untrusted guest traffic destined for sensitive corporate intranet subnets.

Network Security
Access Control Lists
ACLs
Extended ACLs
Guest Segmentation

Level: Intermediate
Time: 60 min
Simulator: Tested in Packet Tracer

PTL-0051 Network Security

DMZ Services with Edge ACL Policy

Architect, deploy, and verify enterprise perimeter security using named extended IPv4 Access Control Lists on a Cisco three-legged edge router. Isolate an untrusted Demilitarized Zone hosting public web services from the private corporate intranet, while permitting controlled database access and public reachability conforming to the principle of least privilege.

Network Security
Dmz
Access Control Lists
ACLs
Extended ACLs

Level: Advanced
Time: 75 min
Simulator: Tested in Packet Tracer

PTL-0053 Network Security

Secure Management Network Design

Design, implement, and verify enterprise management plane security using dedicated management VLAN segmentation, cryptographic SSHv2 access, and VTY access-class filtering on Cisco IOS routers and switches. Isolate infrastructure management interfaces from user data subnets and enforce strict administrative access controls.

Network Security
Management Plane
SSH
VTY Hardening
Access Control Lists

Level: Advanced
Time: 75 min
Simulator: Tested in Packet Tracer

All labs

Labs