Cyber Security Bootkamp - Cisco Packet Tracer Labs

A collection of 26 hands-on Cisco Packet Tracer labs covering basic device configuration, switching, VLANs, routing, WAN technologies, DHCP, ACLs, NAT, EtherChannel, FHRP, and GRE VPN.

Repository Structure

• before/ - 26 original lab files, preserved without modification.
• fixed/ - 26 repaired lab files with _FIXED appended to each filename.
• Each original/repaired pair uses the same topology, making it easy to compare the configuration before and after repair.

Open the _FIXED.pkt files with Cisco Packet Tracer 9.x and follow the Verification steps for each lab below.

Learning Path

The 26 labs fall into 8 topic groups. Work through them roughly in this order:

Basics -> Layer 2 -> Inter-VLAN -> Routing -> WAN/VPN -> Services & Security -> Redundancy

Group	Labs	What you practice
Basics	1, 2	Hostname, passwords, console/VTY, banners, interface IPs, switch SVI
Layer 2 Switching	3, 4, 5, 22	STP loop prevention, VLANs and trunks, LACP EtherChannel
Inter-VLAN	6, 7	Router-on-a-Stick (802.1Q subinterfaces), Layer 3 switch SVIs
Switch Security	8, 9	Port Security, sticky MAC, recovering err-disabled ports
Routing	14, 15, 20, 21, 25	Static and default routes, dynamic routing, OSPF DR/BDR election
WAN and VPN	10, 11, 12, 13, 26	Serial leased lines, Frame Relay hub-and-spoke with OSPF, GRE tunnel
Services and Security	16, 17, 18, 19, 24	DHCP server, standard/extended ACLs, NAT/PAT overload
Redundancy	23	HSRP gateway failover with virtual IP 192.168.1.254

Numbers refer to the # column in the Lab Index below.

An interactive overview with topology thumbnails and a category filter is in docs/summary/index.html. Open it in a browser after cloning.

Lab Index

#	Lab	Main Topic	Original File	Repaired File
1	Basic Config	Basic router configuration	Before	Fixed
2	Basic Switch	Basic switch configuration	Before	Fixed
3	STP	Spanning Tree Protocol	Before	Fixed
4	STP Variant	Root and secondary bridges	Before	Fixed
5	VLAN	VLANs and trunks	Before	Fixed
6	Inter-VLAN Router	Router-on-a-Stick	Before	Fixed
7	Inter-VLAN L3 Switch	Multilayer switching	Before	Fixed
8	Port Security	Limiting MAC addresses on access ports	Before	Fixed
9	Port Security Variant	Sticky MAC and violations	Before	Fixed
10	WAN Leased Line	Serial WAN and OSPF	Before	Fixed
11	Frame Relay 1	Frame Relay fundamentals	Before	Fixed
12	Frame Relay 2	Hub-and-spoke WAN	Before	Fixed
13	Frame Relay 3	Subinterfaces and OSPF	Before	Fixed
14	Static Routing	Manually configured routes	Before	Fixed
15	Dynamic Routing	Automatic route exchange	Before	Fixed
16	DHCP	Automatic IP address assignment	Before	Fixed
17	ACL	Network access control	Before	Fixed
18	NAT	Private/public address translation	Before	Fixed
19	ACL Practice	Additional extended ACL practice	Before	Fixed
20	OSPF DR/BDR	DR and BDR election	Before	Fixed
21	Dynamic Route Practice	Additional dynamic routing practice	Before	Fixed
22	EtherChannel	Link aggregation with LACP	Before	Fixed
23	FHRP	Gateway redundancy with HSRP	Before	Fixed
24	NAT Practice	Additional NAT/PAT practice	Before	Fixed
25	Static Route Practice	Additional static routing practice	Before	Fixed
26	VPN GRE	GRE tunnel between two networks	Before	Fixed

Detailed Lab Descriptions

1. Jodoi_Lab1_Basic_Config

An introductory lab for preparing a router for operation. It covers hostnames, privileged EXEC passwords, console and VTY access, banners, and interface IP addressing.

• Learning objectives: Understand the Cisco IOS command structure and save device configurations.
• Key configuration: Basic security, IP addresses and masks, no shutdown, and host default gateways.
• Verification: Run show running-config and show ip interface brief, then ping between the two LANs through the router.

2. Jodoi_Lab2_Basic_Switch

Covers basic Layer 2 switch administration, including the device name, management IP on an SVI, default gateway, and secure administrative access.

• Learning objectives: Understand the difference between physical switch ports and a Switch Virtual Interface.
• Key configuration: Management VLAN, console and VTY access, and access-port status.
• Verification: Run show interfaces status and show ip interface brief, then ping the management IP.

3. Jodoi_Lab3_STP

Demonstrates how Spanning Tree Protocol prevents Layer 2 loops when switches have redundant links. STP selects an active path and blocks redundant ports.

• Learning objectives: Understand the Root Bridge, Root Port, Designated Port, and blocking/discarding states.
• Key configuration: Assign deterministic primary and secondary root bridges.
• Verification: Run show spanning-tree and inspect the Root ID, Bridge ID, port roles, and port states.

4. Jodoi_Lab3_STP1

Uses another STP topology to show how bridge priority affects root selection and how a backup link takes over when the primary link fails.

• Learning objectives: Understand STP path cost and the Root Bridge election process.
• Key configuration: Root primary/secondary settings and PortFast only on end-device ports.
• Verification: Disable the primary link temporarily and confirm that the backup port transitions to forwarding.

5. Jodoi_Lab4_VLAN

Separates the broadcast domain into VLANs 20, 30, and 40, with access ports for end devices and trunk links between switches.

• Learning objectives: Understand logical network segmentation over shared physical infrastructure.
• Key configuration: Create and name VLANs, assign access VLANs, and allow the required VLANs on trunks.
• Verification: Run show vlan brief and show interfaces trunk, then ping hosts in the same VLAN.

6. Jodoi_Lab5_InterVLAN_Router

Implements Inter-VLAN Routing using Router-on-a-Stick. One router interface is divided into multiple 802.1Q subinterfaces.

• Learning objectives: Understand 802.1Q tagging and the router's role as each VLAN's default gateway.
• Key configuration: Subinterfaces, encapsulation dot1Q, gateway IPs, and the trunk toward the router.
• Verification: Run show ip interface brief and show interfaces trunk, then ping between VLANs.

7. Jodoi_Lab6_InterVLAN_SWL3

Implements Inter-VLAN Routing on a multilayer switch through SVIs, avoiding the need to send local inter-VLAN traffic through an external router.

• Learning objectives: Understand the functional difference between Layer 2 and Layer 3 switches.
• Key configuration: An SVI for each VLAN, ip routing, access ports, and trunks.
• Verification: Run show ip route and show ip interface brief, then ping between VLANs.

8. Jodoi_Lab7_port_security

Protects access ports from unauthorized devices by limiting the number of MAC addresses that each port may learn.

• Learning objectives: Understand secure MAC addresses, violation modes, and edge-port security.
• Key configuration: Port Security, maximum of one MAC address, sticky learning, and shutdown violation mode.
• Verification: Run show port-security interface and test the port by connecting a different endpoint.

9. Jodoi_Lab7_port_security1

Provides another Port Security scenario that demonstrates sticky MAC learning and the secure-shutdown state after a violation.

• Learning objectives: Understand sticky MAC learning and the port recovery process.
• Key configuration: Access mode, PortFast, sticky MAC, and the violation policy.
• Verification: Run show port-security address. If the port is err-disabled, correct the cause and issue shutdown followed by no shutdown.

10. Jodoi_Lab8_WAN_leasedline

Connects multiple LANs through serial leased lines and uses OSPF to exchange routes between routers.

• Learning objectives: Understand point-to-point WAN links, DCE/DTE roles, and dynamic routing over a WAN.
• Key configuration: Serial IP addressing, clock rate on the DCE side, no shutdown, and OSPF networks.
• Verification: Run show controllers serial, show ip ospf neighbor, and show ip route, followed by an end-to-end ping.

11. Jodoi_Lab9_WAN_frame-relay1

Introduces Frame Relay and traffic forwarding through virtual circuits provided by a WAN service provider.

• Learning objectives: Understand DLCIs, LMI, and Layer 3-to-virtual-circuit mappings.
• Key configuration: Frame Relay encapsulation, DLCI mappings, and serial interface addressing.
• Verification: Run show frame-relay pvc and show frame-relay map, then ping between routers.

12. Jodoi_Lab10_WAN_frame-relay2

Builds a Frame Relay hub-and-spoke network in which a central router connects to multiple branch routers.

• Learning objectives: Understand NBMA limitations and hub-and-spoke design.
• Key configuration: Point-to-point subinterfaces, per-circuit DLCIs, and a separate IP subnet for each spoke.
• Verification: Inspect every PVC at the hub and ping from the hub to each spoke.

13. Jodoi_Lab11_WAN_frame-relay3

Extends the Frame Relay hub-and-spoke design with point-to-point subinterfaces and OSPF so every branch can learn routes automatically.

• Learning objectives: Understand how virtual circuits and a routing protocol work together.
• Key configuration: Subinterface/DLCI mappings and OSPF on each WAN subnet.
• Verification: Run show frame-relay pvc and show ip ospf neighbor, then ping between branch LANs.

14. Jodoi_Lab12_Routing Static

Adds paths to remote networks with static routes whose next hop or exit interface is specified by the administrator.

• Learning objectives: Understand the routing table, next hops, and longest-prefix matching.
• Key configuration: Connected networks, static routes, and a default route where appropriate.
• Verification: Run show ip route static, traceroute, and pings across multiple routers.

15. Jodoi_Lab13_Routing Dynamic

Uses dynamic routing so routers can exchange route information and adapt when the topology changes.

• Learning objectives: Understand neighbor relationships, advertised networks, and routing metrics.
• Key configuration: Enable the routing process and advertise only the relevant networks.
• Verification: Inspect protocol and neighbor information, run show ip route, and test convergence by disabling a link.

16. Jodoi_Lab14_DHCP

Configures a router as a DHCP server that provides IP addresses, subnet masks, default gateways, and DNS information to clients on two LANs.

• Learning objectives: Understand the DHCP DORA process and address-pool management.
• Key configuration: Excluded addresses, DHCP pools, network, and default-router statements.
• Verification: Set PCs to DHCP and run ipconfig; on the router, run show ip dhcp binding.

17. Jodoi_Lab15_ACL

Uses Access Control Lists to filter traffic by source, destination, and protocol, enforcing a network security policy.

• Learning objectives: Understand ACL processing order, wildcard masks, and the implicit deny rule.
• Key configuration: Extended ACL entries, an explicit permit fallback where required, and the correct interface/direction assignment.
• Verification: Run show access-lists and show ip interface, then test both permitted and denied traffic.

18. Jodoi_Lab16_NAT

Translates inside private addresses to an outside address. NAT/PAT overload allows multiple internal hosts to share a single external address.

• Learning objectives: Understand inside local, inside global, and Port Address Translation terminology.
• Key configuration: Inside/outside interface roles, an ACL matching private subnets, and NAT overload.
• Verification: Generate outbound traffic, then run show ip nat translations and show ip nat statistics.

19. Lab_ACL_1

Provides additional ACL practice focused on placing standard or extended ACLs near the appropriate source or destination.

• Learning objectives: Compare standard and extended ACLs and understand the effect of rule order.
• Key configuration: Place specific entries before broad entries and include required permit statements after deny rules.
• Verification: Test a source/destination/service matrix and compare the results with hit counters in show access-lists.

20. Lab_DR&BDR

Explores OSPF on a multi-access network, where a Designated Router and Backup Designated Router reduce the number of required adjacencies.

• Learning objectives: Understand OSPF router IDs, priorities, and DR/BDR election.
• Key configuration: OSPF process, network statements, router IDs, and interface priorities.
• Verification: Run show ip ospf neighbor and show ip ospf interface; confirm the FULL/DR and FULL/BDR states.

21. Lab_dynamic-route_1

Provides additional dynamic routing practice in a multi-router topology. Every remote network should appear in the routing table without individual static routes.

• Learning objectives: Understand route propagation and convergence.
• Key configuration: Advertise all required connected networks while avoiding incorrect subnet statements.
• Verification: Inspect protocol-learned routes and run pings and traceroutes between every LAN.

22. Lab_EtherChannel

Combines multiple physical links into a single logical Port-Channel using LACP. This increases bandwidth and redundancy while STP treats the bundle as one link.

• Learning objectives: Understand link aggregation, LACP active/passive modes, and member-port consistency.
• Key configuration: Match VLAN and trunk parameters on all members, then create the channel group with LACP.
• Verification: Run show etherchannel summary and show interfaces port-channel, then disable one member link to confirm continuity.

23. Lab_FHRP

Provides default-gateway redundancy with HSRP. Two routers or multilayer switches share the virtual IP address 192.168.1.254.

• Learning objectives: Understand active/standby gateways, virtual IPs, priorities, and preemption.
• Key configuration: HSRP group, virtual IP, priority, and preempt.
• Verification: Run show standby brief, then disable the active device's uplink and confirm failover to the standby device.

24. Lab_NAT_1

Provides additional NAT/PAT practice focused on inside/outside boundaries and selecting internal subnets with an ACL.

• Learning objectives: Understand how translation entries are created and aged out.
• Key configuration: NAT ACL, interface roles, the public/exit interface, and overload.
• Verification: Clear old translations if necessary, generate fresh traffic, and run show ip nat translations.

25. Lab_static-route_1

Provides additional static routing practice in a multi-path topology, including a default route for unknown destinations.

• Learning objectives: Understand recursive lookup, next-hop reachability, and default routes.
• Key configuration: Configure complete forward and return paths on every router; otherwise ping replies cannot return.
• Verification: Run show ip route, ping one hop at a time, and use traceroute to locate missing routes.

26. Lab_VPN-GRE

Builds a GRE tunnel between two LANs across an intermediate network, creating a logical point-to-point overlay interface.

• Learning objectives: Understand tunnel sources/destinations, overlay versus underlay networks, and routing through a tunnel.
• Key configuration: Ensure the underlay can reach the tunnel destination, then configure tunnel IPs and remote-LAN routes through the tunnel.
• Verification: Run show interfaces tunnel, ping the remote tunnel IP, and then ping a host on the remote LAN.

General Verification Workflow

1. Wait for all expected links to turn green after opening a file.
2. Check interface addressing and status with show ip interface brief.
3. Inspect the routing table with show ip route.
4. From each endpoint, ping the local default gateway first.
5. Test end-to-end connectivity and use traceroute when a ping fails.
6. Run the lab-specific commands listed in each Verification section above.
7. Save future changes under a new filename to preserve the supplied _FIXED file as a baseline.

File Validation Status

• All 26 repaired files decoded successfully after re-encoding.
• Required configuration markers were checked for each lab category.
• Original files were not overwritten.
• Repairs and structural validation were performed offline, in accordance with the request not to control the Cisco Packet Tracer application.

Note: The files were structurally validated but have not been opened and tested in the Cisco Packet Tracer simulator. Complete the verification workflow above before using them for instruction or submission.