CCNA Labs: Bridging Simulation (Packet Tracer) and High-Fidelity Reality (CML)

  

  /$$$$$$   /$$$$$$  /$$   /$$  /$$$$$$ 
 /$$__  $$ /$$__  $$| $$$ | $$ /$$__  $$
| $$  \__/| $$  \__/| $$$$| $$| $$  \ $$
| $$      | $$      | $$ $$ $$| $$$$$$$$
| $$      | $$      | $$  $$$$| $$__  $$
| $$    $$| $$    $$| $$\  $$$| $$  | $$
|  $$$$$$/|  $$$$$$/| $$ \  $$| $$  | $$
 \______/  \______/ |__/  \__/|__/  |__/

[ NETWORK & RESEARCH ]
                                    

---

---

🚀 My Lab Philosophy: Quality over Quantity

In my CCNA journey, I utilize two distinct environments to master networking:

1. Cisco Packet Tracer (PT): Used for large-scale Enterprise topologies where I need to practice architectural design and multi-node routing (overcoming the node limits of virtual labs).

2. Cisco Modeling Labs (CML) + VMware: Used for High-Fidelity Labs. When a protocol requires real-world behavior, authentic IOSv commands, or complex OS-to-Network interaction (Linux/Windows), I migrate the core logic to CML.

Important

🛠 Why I transition to CML & Linux VMs?

While Packet Tracer is excellent for learning basic CLI, it has limitations that only real IOS images and Linux Kernels can solve:

• Command Authenticity: CML runs real Cisco IOSv/IOSv-L2 images. Many advanced commands and sub-options missing in PT are fully functional here.
• The 5-Node Challenge: Working with the CML free/community version (limited to 5 nodes) forced me to be strategic. I design "surgical" labs—focusing on the most critical parts of the network to observe real traffic flow and kernel-level reactions.
• Real OS Interaction: By connecting Linux VMs on VMware to CML routers, I troubleshoot real-world issues like Kernel Sysctl parameters, IPv6 RA behavior, and firewall interactions that a simulator simply cannot replicate.

---

📂 Repository Structure

Each folder represents one independent lab and contains:

• Lab Files: Packet Tracer files (.pkt) for large topologies.
• Visual Documentation: High-quality Screenshots of CML topologies and CLI outputs for high-fidelity labs.
• Lab-specific README with:
  • Topology Description: Visual and text breakdown.
  • Goal: What I aim to achieve/verify.
  • Example Configuration: Key CLI snippets.
  • Verification: Proof of connectivity or security enforcement (e.g., show commands, Wireshark captures).
  • Troubleshooting Notes: Real-world issues encountered (e.g., Linux RA acceptance, interface states).

---

📂 Labs Included

[Enterprise Topology Labs - Packet Tracer Focus]

[High-Fidelity Labs - CML/VMware Focus]

• L2 Security: MAC Flooding and DHCP Starvation using Kali Linux against real IOSvL2 images.
• IPv6 SLAAC Deep-Dive: Analyzing Linux host behavior and tuning net.ipv6.conf.all.accept_ra to ensure RA acceptance.
• DHCP Snooping & IP Source Guard: Hardware-level security verification.

LABS LIST:

LAB #	Topic & Objective	(CML)	Status	Difficulty
LAB 01	Basic VLAN Configuration (Access Ports)	❌	✅ Done	⭐
LAB 02A	VLAN Trunking (Default Trunk)	✅	✅ Done	⭐⭐
LAB 02B	VLAN Trunking (Allowed VLAN Restriction)	❌	✅ Done	⭐⭐
LAB 02C	(EXTRA) VLAN Trunking (Native VLAN mismatch)	✅	✅ Done	⭐⭐⭐
LAB 03	Inter-VLAN Routing (Router-on-a-Stick)	✅	✅ Done	⭐⭐
LAB 04	DHCP	✅	✅ Done	⭐⭐
LAB 05(A)	STP	✅	✅ Done	⭐⭐
LAB 05B	STP Root Bridge	✅	✅ Done	⭐⭐
LAB 05C	STP PortFast & BPDU Guard	✅	✅ Done	⭐⭐
LAB 06	Ethernet Channel & ASIC Hashing	✅	✅ Done	⭐⭐⭐
LAB 07	Static Routing	✅	✅ Done	⭐⭐⭐
LAB 08	Dynamic Routing (RIPv2)	✅	✅ Done	⭐⭐⭐
LAB 9A	🏆 Dynamic Routing (EIGRP - Feasible Successor) + BFD	✅	✅ Done	⭐⭐⭐⭐
LAB 9B	Dynamic Routing (EIGRP - Unequal-Cost Load Balancing)	✅	✅ Done	⭐⭐⭐
LAB 10A	Dynamic Routing (OSPF - Single Area)	✅	✅ Done	⭐⭐⭐
LAB 10B	Dynamic Routing (OSPF - DR - BDR - DROTHER Election)	✅	✅ Done	⭐⭐⭐
LAB 10C	Dynamic Routing (OSPF - Multi Area)	✅	✅ Done	⭐⭐⭐
LAB 11A	🏆 HSRP Enterprise Redundancy (PKT Optimized)	❌	✅ Done	⭐⭐⭐⭐
LAB 11B	🏆 HSRP Enterprise-Grade High Availability (CML more Optimized)	✅	✅ Done	⭐⭐⭐⭐⭐
LAB 12A	IPv6 Addressing & Basic Connectivity	❌	✅ Done	⭐⭐
LAB 12B	🏆 IPv6 Basic Connectivity & Windows Stack Deep-Dive	✅	✅ Done	⭐⭐⭐⭐
LAB 12C	🏆 IPv6 SLAAC & Linux Kernel Behavior (CML FOCUSED)	✅	✅ Done	⭐⭐⭐⭐
LAB 13	IPv6 Static Routing	✅	✅ Done	⭐⭐⭐
LAB 14	🏆 OSPFv3	✅	✅ Done	⭐⭐⭐⭐
LAB 15 (15.1 + 15.2)	🏆 DHCPv6 Implement Stateless/Statefull (CML FOCUSED)	✅	✅ Done	⭐⭐⭐⭐
LAB 16	🏆 IPv6 RA GUARD (CML FOCUSED)	✅	✅ Done	⭐⭐⭐⭐
LAB 17	🏆 Hybrid DNS Infrastructure & Kali Linux Server (LINUX FOCUSED)	✅	✅ Done	⭐⭐⭐⭐⭐
LAB 18	Standard ACL - Enterprise Traffic Engineering & Security Baseline	✅	✅ Done	⭐⭐
LAB 19	Comprehensive NAT Architectures - Static, Dynamic & PAT	✅	✅ Done	⭐⭐⭐
LAB 20	🏆 Advanced Network Security - Extended ACL & Service Hardening (LINUX FOCUSED)	✅	✅ Done	⭐⭐⭐⭐⭐
LAB 21	🏆 Enterprise Centralized Logging - Rsyslog, MariaDB & Web UI Hardening (LINUX FOCUSED)	✅	✅ Done	⭐⭐⭐⭐⭐⭐
LAB 22	Infrastructure Hardening: Automated Syslog & Secure NTP Orchestration (LINUX FOCUSED)	✅	✅ Done	⭐⭐⭐
LAB 23	🏆 Full-Stack Enterprise SNMPv3 Monitoring & Control (CML & LINUX FOCUSED)	✅	✅ Done	⭐⭐⭐⭐⭐
LAB 24	Port Security Enforcement & Temporal Authorization Analysis (Research Project)	✅	✅ Done
LAB 25	IEEE 802.1X Control-Plane Integration & Platform Capability Validation (Research Project)	✅	✅ Done

Note: These labs focus on building large-scale networks to understand complex routing propagation and redundancy.

---

🎯 Professional Goal

I don't just "input commands"; I analyze how data moves from the Application Layer of a real Linux OS down to the Cisco Silicon logic. This repository documents my transition from a student using simulators to a technician handling real-world network complexities.

---