Start Here

Find your path through PingLabz networking guides and CCNA browser labs. Start with free IOS Essentials; paid membership unlocks the remaining 67 labs.

Start Here: your map to every PingLabz guide, lab, and cheat sheet, with real ping and traceroute output

PingLabz brings together networking guides, practical reference articles, and CCNA browser labs. This page helps you choose a starting point and work through the material in order. The browser lab app replaces our retired CML lab libraries: start with free IOS Essentials, then use a paid membership to unlock the remaining labs. No CML installation or device images are needed for the app.

Last updated: September 22, 2026.

New Here? Read These 5 First

Start with these five resources: try the browser lab app, then build your understanding with the networking fundamentals and command reference.

1Start with IOS Essentials - try the free introductory lab in your browser, with no CML setup.
2How Ping Works: The ICMP Echo Exchange Explained - the tool you will use every day, explained packet by packet.
3What Is a VLAN? - the Layer 2 concept every other switching topic builds on.
4OSI vs TCP/IP Model Explained - the mental model that makes troubleshooting systematic instead of random.
5Essential Cisco Commands: 50 Proven Commands - the CLI reference readers keep coming back to.

Choose Your Path

Most readers fall into one of five groups. Find yours and follow the steps in order - each path is sequenced so every article builds on the one before it.

Path 1: I'm New to Networking

Start with the fundamentals cluster. These articles assume zero background and build the vocabulary and mental models everything else depends on.

1Introduction to TCP/IP Networking - how data actually moves across a network.
2The 7 OSI Model Layers - the framework every troubleshooting conversation uses.
3Routers, Switches, and Firewalls Explained - what each box actually does.
4Understanding IP Routing - how packets find their way between networks.
5What Is a VLAN? - your first Layer 2 design concept.
6Ping: The Complete Guide - master the first tool you will reach for, every time.

Path 2: I'm Studying for the CCNA

Pair the CCNA study articles with hands-on practice in the browser app. The library includes 68 labs covering IOS essentials, network fundamentals, switching, routing, IP services, security, troubleshooting, and a campus capstone. IOS Essentials is free; the other 67 labs require paid membership.

  1. Is the CCNA Worth It in 2026? — decide how the certification fits your goals.
  2. Start with free IOS Essentials — learn your first commands in the browser.
  3. Explore the CCNA browser labs — work through the topics alongside the matching study guides.
  4. Use the complete guides — review a topic when a lab exposes a gap in your understanding.

Path 3: I'm a Working Engineer Going Deeper

Skip the basics and go straight to the complete guides. Each one is a full reference for its protocol, from fundamentals through enterprise design, hardening, and troubleshooting, with a reading-order index of every deep-dive article in that cluster.

1OSPF Complete Guide - the enterprise IGP, from adjacencies to multi-area design.
2BGP Complete Guide - path attributes, best-path selection, route reflectors, and design.
3Spanning Tree Complete Guide - from the bridge loop problem to enterprise hardening.
4Cisco Wireless Complete Guide - the Catalyst 9800 platform end to end, including a 40+ article deep-dive series.
5CCIE Enterprise Infrastructure Study Hub - the expert-level track: route control, overlays, transports, and automation.
6Packet Analysis Complete Guide - capture and read the packets themselves, on a Linux host or on the router, when show output has run out of answers.
7Data Center Fabric Complete Guide - spine-leaf, VXLAN and BGP EVPN on Nexus, the direction enterprise switching is heading.
8Linux Networking Commands Complete Guide - the host side of the network: ip, ss, traceroute, mtr, dig, curl, netcat, SSH tunneling, tshark, ngrep, the live bandwidth monitors and host firewalling with iptables, nftables and ufw, captured on a real Debian box wired into a lab topology. Start with the field reference if you want the whole toolkit on one page.

Path 4: I Want Hands-On Practice

Start in the browser app: open the labs page, try IOS Essentials, and choose your next topic. If you also maintain your own home lab, the independent setup and tooling articles below remain useful references; they are not prerequisites for the app.

Open the browser labs →

1CML Is Now Free - what you get with the free tier and why it changed the home lab game.
2Install CML 2.10 on VMware ESXi - step-by-step with screenshots.
3Install the Missing Docker Container Images - the gotcha almost everyone hits in CML 2.10.
4The PingLabz Lab IP Scheme - the addressing convention every lab on this site uses.
5Network Automation Guide - learn the concepts and tools for automating network devices.
6Catalyst 9800-CL in CML: What You Can and Can't Lab - know the limits of a virtual wireless controller before you build around it.
7Netmiko vs NAPALM vs pyATS - the three Python libraries that automate Cisco gear, run against the same lab so you can pick one.
8tcpdump for Network Engineers - the capture tool you will reach for constantly once you have a Linux host on the lab segment.
9Linux Networking Commands Complete Guide - everything else that Linux host can tell you: addressing, routes, neighbors, path testing, MTU discovery, socket state, DNS resolution, the curl, netcat, socat and SSH tunneling toolkit, reading the traffic itself with tshark, ngrep and the bandwidth monitors, filtering it with iptables, nftables and ufw, and the free ten-page printable field reference that condenses all of it.
10Install Grafana Enterprise on Ubuntu Server - give the lab a dashboard host: APT repo, systemd, and the twenty second wait that makes people think the install failed.
11Install Zabbix 7.0 LTS in Docker Alongside Grafana - add the polling and alerting engine underneath it, on the same box, without the two fighting over ports.

Path 5: I'm Focused on Network Security

Three clusters cover the security side of the house: port-based access control, the ASA firewall, and network reconnaissance.

1802.1X Complete Guide - port-based network access control with Cisco ISE, from EAPOL to deployment modes.
2Cisco ASA Complete Guide - 40+ articles covering NAT, VPNs, failover, and packet-tracer troubleshooting.
3Nmap Complete Guide - scanning, host discovery, NSE scripts, and firewall evasion, all captured against real lab targets.
4Network Infrastructure Security Complete Guide - hardening the devices themselves: CoPP, uRPF, AAA, MACsec, and IPv6 first-hop security.
5DNS Enumeration Complete Guide - reconnaissance against a real BIND9 zone with dnsrecon, dnsenum, massdns, and friends.
6CCIE Security Study Hub - the expert security track: IPsec and FlexVPN, zone-based firewall, ASA at depth, and control-plane defense.
7802.1X with FreeRADIUS: the Full Lab - the whole supplicant, authenticator and RADIUS chain on open-source software, no ISE license required.

The Complete Guides: Every Topic Pillar

Each guide below is the hub for its topic cluster. It explains the protocol end to end, shows a minimum viable configuration on Cisco IOS XE with real show output, and indexes every deep-dive article in reading order. Bookmark the ones you work with. If you would rather browse by subject than by cluster, the Topics index lists every tag on the site, ordered by how much has been written about it.

Fundamentals

Network Fundamentals

OSI and TCP/IP, subnetting and VLSM, switching concepts, architectures, PoE, and virtualization.

Routing and WAN

IP Routing

The routing table, administrative distance, longest prefix match, and static routes.

OSPF

Link-state routing: LSAs, areas, DR/BDR, cost tuning, and enterprise design.

BGP

The internet's routing protocol: attributes, best path, filtering, and RPKI.

EIGRP

DUAL, feasible successors, K values, and named vs classic mode.

MPLS

Labels, LDP, L3VPN with MP-BGP, and segment routing.

SD-WAN

Overlay/underlay, OMP, Catalyst SD-WAN architecture, and MPLS migration.

GRE Tunnels

Tunnel config, MTU pitfalls, GRE over IPsec vs IPsec over GRE, and DMVPN intro.

IPv6

Address types, the header, and IOS XE configuration.

QoS

Classification, marking, queueing, and MQC on Cisco IOS XE.

IP Multicast

PIM sparse mode, IGMP, RPF checks, SSM, and multicast troubleshooting.

DMVPN

mGRE plus NHRP, Phase 1 / 2 / 3 behavior, IPsec profiles, and dual-hub design.

IPsec VPN

IKEv1 and IKEv2, crypto maps vs VTI, NAT traversal, and phase-by-phase troubleshooting.

Switching and Campus

VLANs & Layer 2 Switching

Tagging, trunking, inter-VLAN routing, VXLAN, and L2 security.

Spanning Tree Protocol

Root bridges, RSTP, MST, guards, and campus hardening.

FHRP

HSRP, VRRP, and GLBP: first-hop redundancy compared and configured.

Network Virtualization and Overlays

VXLAN and BGP EVPN, LISP, SD-Access fabric roles, and choosing a segmentation layer.

Data Center

Data Center Fabric

Spine-leaf on NX-OS: vPC, the OSPF underlay, BGP EVPN route types, VXLAN L2VNI and L3VNI, and anycast gateways.

Services and Automation

IP Services

NAT, NTP, SNMP, syslog, DHCP relay, and TFTP/FTP with real IOS XE output.

Network Automation

SDN, REST APIs and JSON, Ansible, and AI in network operations.

Security, Wireless, and Tools

Network Infrastructure Security

CoPP, uRPF, AAA with TACACS+ and RADIUS, MACsec, IPv6 first-hop security, and management-plane hardening.

802.1X

Port-based NAC with Cisco ISE: EAP methods, dACLs, CoA, and deployment.

Cisco ASA Firewall

Security levels, NAT, site-to-site and AnyConnect VPNs, and failover.

Cisco Wireless (Catalyst 9800)

The full 9800 series: architecture, config model, RRM, roaming, and troubleshooting.

Nmap

Host discovery, scan types, version detection, NSE, and evasion.

iPerf

TCP and UDP throughput testing, jitter and loss, window tuning, and slow-path troubleshooting.

Ping

ICMP mechanics, every failure message decoded, MTU testing, and sweeps.

DNS Enumeration

Zone transfers, subdomain brute forcing, and the Kali DNS recon toolset against a live zone.

Packet Capture and Analysis

tcpdump and Wireshark, capture and display filters, reading a handshake, and proving where the packets stop.

Linux Networking Commands

ip, ethtool, ss, traceroute, mtr, dig, curl, netcat, socat, SSH, tshark and ngrep for network engineers: the 2026 field reference and free printable cheat sheet, routing and neighbor tables, NIC offloads, DNS resolution, path and MTU testing, socket state, port checks, tunnels, packet analysis and host firewalling from the terminal.

CCNA Browser Labs

Practice directly in your browser with guided exercises and an interactive command line. The new app replaces the retired CML build, troubleshooting, automation, Mega Lab, CCIE Super Lab, and 9800 lab libraries. The old flashcards offering has also been retired.

Start with free IOS Essentials

Explore 68 browser labs. IOS Essentials is free; paid membership unlocks the other 67 labs. No CML installation or device images required.

Explore the browser labs

Free Cheat Sheets and References

Printable field references built from the same cluster content, designed to sit next to your keyboard.

1BGP Field Reference - a 9-page printable cheat sheet covering attributes, states, and commands.
2OSPF Field Reference - 9 pages of LSA types, states, timers, and troubleshooting flows.
3Cisco ASA Field Reference - NAT order of operations, packet flow, and packet-tracer, condensed.
450 Essential Cisco Commands - the day-to-day CLI survival list.

How PingLabz Is Different

Our networking reference articles explain concepts through configurations, packet analysis, and captured device output. The browser lab app adds an interactive simulator for practicing supported commands and completing guided exercises without running your own CML environment.

Use the articles to understand the mechanisms and the app to practice. The app simulates networking behavior; it does not run a Cisco IOS image or replace every capability of a physical or virtual device.

New guides are added across topic clusters as they are ready. For free field references and the option to receive occasional updates, create a free account.

Frequently Asked Questions

Where should I start if I know nothing about networking?

Follow Path 1 above, in order. It starts with TCP/IP and the OSI model, then moves through devices, routing, and VLANs. After those six pieces you will be ready for the CCNA track or any of the complete guides.

Are the labs free?

IOS Essentials is free. The other 67 browser labs require a paid PingLabz membership. Open the labs page to choose an exercise and connect your membership when prompted.

What do I need to run the labs myself?

A browser and an internet connection. You do not need CML, device images, or a home-lab server to use the browser app. Lab progress is saved in your browser and does not sync between devices.

In what order should I study for the CCNA?

Follow Path 2: begin with IOS Essentials, then work through network fundamentals, network access, IP connectivity, IP services, and security. Use the matching reference articles to understand the commands and revisit exercises to check your understanding.

How often is new content published?

Weekly. New articles are added to their cluster's complete guide and to this page, so checking here (or subscribing) is enough to stay current.

Key Takeaways

Choose a path, use the complete guides as references, and practice in the CCNA browser labs. Start with free IOS Essentials and build from there.