
Explore the ultimate Cisco CCNA Packet Tracer Project with course introduction and overview, offering hands-on labs that showcase how trunking, routing, and security technologies interrelate.
Explore network topology across four sites—Sanaa, Aden, Taiz, Mukalla—covering vlan 1 it, vlan 2 hr, vlan 3 sales, vlan 4 marketing, vlan 7 servers, frame-relay and ppp, collapse core.
Configure passwords and console settings on routers and switches, set history to 30, encrypt passwords, and apply exec-timeout 0 0 with logging synchronous across devices.
Configure VLANs across switches in Packet Tracer, creating VLAN 2 HR, 3 Sales, 4 Marketing, and 7 Servers, then assign access ports and verify with show vlan brief.
Learn to configure static etherchannel trunks between access and distribution switches, using dot1q encapsulation and trunk mode, with multiple channel groups and VLAN verification.
Configure EtherChannel trunks on layer 2 and 3 switches by setting trunk mode on interface ranges, assigning channel-group numbers with mode on, and verify with show EtherChannel and trunk commands.
Configure vlan interfaces on layer 3 switches, assign ip addresses to vlan 1, 2, 3, 5, and 7, enable them, and verify with show ip interfaces brief.
Configure each server in the packet tracer project with a class c subnet mask, ip address, default gateway, and dns 192.168.1.2, starting with the dhcp server at 192.168.7.1.
Configure spanning tree root roles and hsrp-based default gateways on two layer 3 switches across IT, HR, servers, sales, and marketing VLANs, establishing primary and secondary gateways for each VLAN.
Configure an EtherChannel trunk between the layer 3 switches with dot1q encapsulation and trunk mode, enable ip routing, and remove HSRP; then set the servers' default gateway to 192.168.7.100.
Configure DHCP on the CCNA Packet Tracer project by using IP helper-address on VLAN interfaces 1-4 and creating pools that assign addresses, masks, gateways, and DNS to hosts.
Verify IP configuration and confirm DHCP configuration works across the Sanaa site by pinging hosts in HR VLAN 2.1, 2.3, 3.2, and 4.6 to demonstrate full connectivity.
Configure routed ports on three switches and the main router by assigning IP addresses to switch and router interfaces, using no switchport commands to establish inter-device routing.
Configure VLANs on switches and access ports for VLANs 8 and 9 in Aden, 10 and 11 in Taiz, 15 and 16 in Mukalla; verify with show vlan brief.
Configure router subinterfaces with dot1q encapsulation for vlan 8 and 9, assign default gateway addresses, and set trunk connections on switches to support vlan routing.
Configure frame-relay with point-to-point subinterfaces and PVC 102 and 103 to connect Sanaa with Aden and Taiz, assign the proper /24 IPs, and verify connectivity with pings.
Configure hostnames for all routers and switches in the topology, naming devices such as Sanaa router, Aden router, Aden switch, MLS1, and Layer2-switch1 in this Cisco CCNA packet tracer project.
Configure ppp with chap authentication between Sanaa and Mukalla routers in Packet Tracer, assigning 192.168.14.1/24 and 192.168.14.2/24, enabling encapsulation, and verifying connectivity with ping.
Configure dhcp to distribute ip addresses, masks, gateways, and dns via dhcp relay ip helper-address on branch routers; create pools for vlans 9, 10, 11, 15, 16 and assign hosts.
Configure a DNS server to resolve www.ultimate-stc.com, www.google.com, and www.yahoo.com to their respective IPs, then enable the DNS service for internet name resolution.
Configure port security on all layer 2 switch access ports, allowing one device per port with shutdown for non IT VLANs and two devices for IT VLAN with sticky learning.
Change the spanning tree mode on layer 3 switches to rapid-pvst, copying the command to the other switch in the Cisco CCNA Packet Tracer project.
Configure portfast and bpduguard on all access ports across layer 2 switches, apply spanning-tree portfast and bpduguard, and propagate commands to branch switches.
Configure an extended ACL SERVERS-ACL to permit http, dns, dhcp to servers and icmp echo from the IT subnet, apply it on VLAN 7, and verify cross-VLAN access.
Configure a dhcp pool named isp on the isp router for the 100.1.1.0/24 network, then obtain an ip on the main router's interface via dhcp and verify 100.1.1.1.
Configure a default static route on the main router to the internet, advertise it with OSPF using default-information originate, and verify propagation across layer 3 switches and routers.
Configure a default static route on the ISP router to reach the main router, using ip route 0.0.0.0 0.0.0.0, then verify with show ip route.
Configure an extended acl web-access to allow IT VLAN access to Yahoo and Google, enable telnet, apply outbound, and deny all other traffic except return traffic from servers and pings.
Configure web access ACLs for branch VLANs by updating WEB-ACCESS, applying inbound on subinterfaces, and adding icmp and ospf allowances on the main router to ensure branch access to servers.
Configure a standard access-list named NAT-ACL to permit the 192.168.0.0 0.0.255.255 network for all VLANs, enabling NAT across the topology.
Configure the main router to set interfaces as inside (fastethernet 0/0, 0/1, serial 0/0/1, 0/0/0.1, 0/0/0.2) and Ethernet 0/1/0 as outside, then verify with nat statistics.
Configure pat for internal users using the outside interface and overload with nat inside source list nat-acl, then verify with show ip nat translation across vlans accessing google.
Configure a DNS server at 200.1.1.3, set its gateway to 200.1.1.254, enable DNS, create a resolution for ultimate-STC.com to 100.1.1.2, and configure the internal user to use this DNS server.
Configure static pat to expose the internal web server 192.168.7.3 on port 80 via external 100.1.1.2, enabling access to www.ultimate-stc.com.
Configure cross-vlan connectivity in a Cisco CCNA packet tracer project. Enforce security rules so IT vlan users can reach required hosts and the internet, while prohibited destinations remain unreachable.
***The only complete CCNA project course using packet tracer on Udemy.***
Whenever I finished teaching CCNA in a classroom, my students ask me to give them a full project to apply their knowledge and master their practical skills. And from there, the idea of this course came. Usually, when students study CCNA, they practice technologies in separate labs for each technology. Therefore, they feel that they are lacking practicing labs where multiple technologies interact, and depend on each other. For example, if your layer 2 technologies such as trunking and EtherChannel do not work, then your layer 3 technologies such as routing will not work. Furthermore, students want to practice labs that simulates real networks in production as much as possible. For these mentioned reasons, I have created this course so that students:
You can use this course to refresh or complement your CCNA studies. Please do not depend on it alone for your CCNA studies. It is assumed that you are either finished CCNA currently or long ago, or are studying for it currently.
This course contains articles, videos, the network topology in packet tracer, files of the required tasks and complete solutions. Each task is solved in a separated video that is preceded by an article that contains a brief explanation of technology in the task, its configuration and verification. I strongly recommend reading each article before watching the companion video. Also, try to solve each task yourself first before watching the solution in the video or reading it in the solution file.
This course consists of six sections: