GUIDES MEET PRACTICE
Clear networking guides and 68 CCNA browser labs. Learn the concepts, practice IOS-style commands, and check your work as you go.
One lab free. No account, installation, or hardware needed.
A browser simulation of selected IOS behavior. It does not run an IOS image.
EXPLORE THE LIBRARY
Models, addresses, and the basics that connect everything.
↗ 02Switching & VLANsBuild and troubleshoot Layer 2 networks.
↗ 03RoutingUnderstand forwarding decisions and paths.
↗ 04Security & accessExplore controls, authentication, and firewalls.
↗ 05WirelessFrom WLAN fundamentals to controller operations.
↗ 06Linux & toolsDiagnose and verify from the command line.
↗FREE FIELD REFERENCES
A free PingLabz account unlocks the Linux, ASA, BGP, and OSPF PDFs. Choose the guide you need and keep it close while you practice.
GO FURTHER WITH PRO
Pro unlocks 60 build labs, six troubleshooting labs, and the campus Mega Lab. Follow guided exercises, try IOS-style commands, and check your configuration as you go.
SELECTED READING
Keep learning
A server’s inbound static NAT still worked, but its partner API calls reset. In my home lab, broad manual PAT before Auto NAT changed the outbound source to 10.42.20.1. Moving equivalent PAT after Auto NAT restored 10.42.20.5.
A disabled Allow-Web rule broke HTTP after deployment. FMC Deployment History restored traffic, but the saved policy stayed disabled. Follow the rollback, prove recovery, then reconcile FMC before the next deploy.
Curl timed out while FTD packet-tracer and FMC Unified Events said Allow. Inside/outside captures with Trace exposed the missing reply; restoring the server return route brought back the TCP handshake and HTTP 200.
A broad FMC prefilter Fastpath rule let client-b bypass an explicit ACP block and opened port 8080 for both clients. Real HTTP tests, packet-tracer and Unified Events show why Analyze restored access control in this home lab.
FMC deployed the route successfully and Unified Events said Allow, but HTTP timed out. Follow the FTD routing table, unanswered ARP, and packet-tracer drop to an unused next hop, then verify the fix through the real router.
A deliberate registration key mismatch produces FMC’s generic timeout. Follow the FTD tunnel evidence, clean registration, failed first deployment and successful retry, then build and test the FMC-managed forwarding baseline.
Fix an FDM access rule blocked by rule order. Follow real FTD packet-tracer, system support trace and acl-drop evidence, then verify recovery.
Bootstrap local FDM on FTDv 10 in Containerlab, deploy policy through the REST API, and fix unreachable management while verifying traffic still passes.
Reproduce ASA tcp-not-syn and syslog 106015 with asymmetric routing, then verify a routing repair and scoped TCP state bypass with the return ACL.
Follow a captured Cisco ASAv boot in Containerlab, diagnose no-route ASP drops, fix the default route, and verify ping and HTTP under the 100 Kbps limit.
Suricata shows no alerts during a port scan? Trace a SPAN direction fault through missing SYNs and EVE logs, then fix the mirror and verify recovery.
Choose Cisco Containerlab images by lab: IOL, IOSv, ASAv, FTDv, N9Kv and C9800. Compare local tags, RAM, interfaces and verified limits.