CredenTrek
Blog / CCNA / Article 04 of 10
CCNA · Prepare

Build a CCNA lab in Packet Tracer, then break it on purpose

By Mustafa K. Al-Dori · Checked against official documents on 11 October 2026 · 7 min read

The short answer

Cisco recommends Packet Tracer or Cisco Modeling Labs for hands-on practice, and Packet Tracer is free through a Cisco Networking Academy account. Build two switches, two routers, VLANs, a trunk, OSPF and a few hosts. Then break it on purpose and fix it from the show commands, because v2.0 rewards troubleshooting.

Reading about a trunk and finding out why one is not passing VLAN 20 are different skills. Only one of them appears in the simulation.

Why the lab is half the course

CCNA simulations ask you to type commands on virtual devices. Someone who has only read the material can describe a trunk, yet may never have looked at the output of show interfaces trunk. At least a third of every week should be in the lab, and more if you are on the light track.

Cisco recommends Packet Tracer or Cisco Modeling Labs. Packet Tracer is free through a Cisco Networking Academy account and covers most exam topics.

The starter network

Build this once, early, and keep extending it.

Part Quantity Purpose
Switches 2 VLANs, trunk, access ports
Routers 2 Routing, OSPF, NAT later
Hosts 4 Two per VLAN, to test connectivity
Link between switches 1 The trunk
Link between routers 1 A routed point-to-point link

Give each VLAN its own subnet, and make the router the gateway. Once everything pings, save a copy of the file. That copy is your clean baseline.

Faults worth introducing

Break one thing at a time, then find it using only show commands and ping.

  1. Put a host's switch port in the wrong VLAN.
  2. Remove a VLAN from the trunk's allowed list.
  3. Set a different native VLAN on each end of the trunk.
  4. Give a host the wrong subnet mask.
  5. Delete the default gateway on a host.
  6. Use a different OSPF area or hello timer on one router.
  7. Apply an access list in the wrong direction.
  8. Mismatch the duplex setting on a link.

A late-collision count on a point-to-point link is the classic sign of the last one.

A troubleshooting order

Work from the bottom up.

  1. Interface. Is it up and up? Check show ip interface brief.
  2. Address. Does the host have the right address, mask and gateway?
  3. VLAN and trunk. Is the port in the right VLAN, and is that VLAN allowed across the trunk?
  4. Routing. Does the routing table have a route to the destination?
  5. Services and filters. Is an access list or NAT rule interfering?

Say the layer out loud before you type anything. It stops you changing three things at once.

A weekly rhythm

  • One lab for every topic you cover.
  • One fault introduced and fixed per week.
  • Five minutes of subnetting drills most days.
  • A written line each time: the fault, the clue that revealed it and the command that confirmed it.

Keep the written lines. After ten weeks you will have a record of faults that reads like a short troubleshooting guide, and it makes a strong CV project later.

When to stop reading and start typing

If your plan slips, cut from the reading in the first coverage stage, not from the lab. The book's practice stage, which takes about 30 per cent of your hours, is built from troubleshooting labs, subnetting drills and question sets by domain.

Where to find the plan

Break something small this weekend, and write down how you found it.

Questions readers ask

Is Packet Tracer enough for CCNA?
Cisco says Packet Tracer covers most exam topics. It is free through a Networking Academy account. Some candidates add Cisco Modeling Labs or real equipment for features Packet Tracer lacks.
How much of my study should be lab time?
At least a third of every week, and more on the light track. Practice and simulation take almost half of the whole plan.
Do I need real Cisco hardware?
No. Many candidates pass using only simulators. Second-hand equipment is optional and worth buying only after you outgrow the simulator.
Sources

This article is independent and is not endorsed by Cisco. Facts change: confirm them on the official page before you act.