You do not need a rack of switches to pass CCNA. You need a place where you can break a network, read the output, and fix it without spending an evening installing images. The options below range from a browser tab to a used two-switch lab under the desk. We make SecLern, so it is first; the honest trade-offs are in every entry, including ours.
| Platform | Setup | Best for | Skip it if |
|---|---|---|---|
| SecLern | Browser, no install | Guided labs graded on the end state | You want an open sandbox |
| Cisco Packet Tracer | Free install, Cisco account | Free visual topology building | You need exam-mapped grading |
| Boson NetSim | Browser, paid | Guided exam-focused labs | You are on a tight budget |
| GNS3 | Free, VM and images | A free lab with real images | You have little setup time |
| EVE-NG | Free base, paid for full features | Multi-vendor emulation | You want a supported free edition |
| Cisco Modeling Labs | Install or cloud, paid tiers | Real Cisco images with support | You only need guided tasks |
| Used hardware | Cabling, space, power | Physical console and cable practice | You have no space or deadline |
What the CCNA lab actually has to teach
CCNA 200-301 is a 120-minute exam. Cisco does not publish a fixed item count, so any "90 questions" figure you see is a simulation default, not a fact. The current blueprint is v1.1, which retires on 2 February 2027; v2.0 takes effect on 3 February 2027. That date matters when you buy a lab course: a lab library mapped to v1.1 may not cover the new blueprint.
The skills are concrete: VLANs, trunks, EtherChannel, spanning tree, static and OSPF routing, NAT, DHCP, DNS, ACLs, port security, SSH, wireless, and a little automation. Every one of them is learned by doing, then proved by reading show output. The VLAN objective sits in the IP connectivity domain: start there, because trunks and routing sit on top of it. The CCNA exam page has the current domain weights and the v2.0 note.
The short answer
If you want zero setup and grading, use a browser lab. If you want a free sandbox and do not mind installing software, use Packet Tracer. If you want the closest thing to real Cisco images on your own machine, use CML, GNS3 or EVE-NG and accept the setup cost. The table is ordered by how much work you do before your first lab.
1. SecLern: our pick for guided, graded labs
The CCNA path holds 740 questions, 8 performance-based questions, 86 labs and 28 lessons. The labs are Cisco-style console tasks in a browser over a small topology: rebuild a floor uplink as a trunk, find the LAN OSPF never advertised, let the office browse out through one public address, repair a bundle that never forms, stop a rogue DHCP server. There is nothing to install, no image to license, and the grade reads the state you left behind. The interfaces objective covers the cabling vocabulary every task assumes.
The free tier gives you 30 study questions a day, three labs and unlimited flashcards; Pro is 15 dollars a month or 99 dollars a year, and the 29 dollar Exam Sprint covers 90 days. The honest limit is scope: 86 guided labs are not a sandbox. You cannot invent an arbitrary topology and keep it; you work the tasks we wrote.
Good for: structured practice with a grade at the end, especially if you have limited evenings. Skip it if you want to design your own networks for fun, or if you need CCNP-level depth.
2. Cisco Packet Tracer: free, capable, and a little off-target
Packet Tracer is free from Cisco, but you need a Cisco Networking Academy or Skills for All account and you install it on Windows, macOS or Linux. It does a lot: drag routers and switches, cable them, configure VLANs and routing, and watch packets move in simulation mode.
The catch is purpose. Packet Tracer is a teaching tool for Cisco's own courses, not a product mapped to the 200-301 blueprint. It is excellent for understanding how a network behaves and for building topologies you invent yourself. It is weaker as an exam mirror, because nothing grades you against the objectives and some commands behave differently from real IOS.
Good for: free, visual, unlimited sandbox building. Skip it if you want graded tasks or if you cannot install software on your machine.
3. Boson NetSim: the paid exam-focused simulator
NetSim for CCNA is a browser-based simulator with 85 guided labs, IOS images included and no installation. It is priced at 179 dollars for a year or 59 dollars for three months, and the labs are written around the exam topics rather than around a general networking course.
The strength is focus and convenience: a guided lab, a task list, and a device that behaves close enough to IOS for exam practice. The limit is price and repetition: it is a lab library, not an infinite sandbox, and three months is enough for most people if they are consistent.
Good for: people who want guided, exam-shaped labs and will pay to skip setup. Skip it if you are on a tight budget or want to keep labbing after the exam.
4. GNS3: free, powerful, and yours to maintain
GNS3 is free to download and runs on Windows, macOS and Linux, with a VM option for better performance. It can emulate more than 20 vendors and it is the closest free thing to a real lab, because it runs actual device images rather than a simplified model.
The cost is invisible until you start: you supply the images, and the licensing question for Cisco images is yours to answer. You also maintain the VM, the images and the connections. A first lab can take an evening before you configure a single VLAN.
Good for: people who enjoy building the lab as much as using it, and who want a free path to real images. Skip it if your study time is scarce or you are not comfortable with virtual machines.
5. EVE-NG: capable, but check the edition
EVE-NG is a network emulator with a free Community edition and a paid Professional edition. The download page currently marks Community Edition 6.2.0-4 as end of support and end of life in June 2026, and the current 7.2 line is a freemium base that needs a paid licence for full features.
That does not make it bad. It makes the edition and the licence the first thing to check, because a tutorial written for the old Community edition may not match what you can download today. Like GNS3, it runs images you supply and expects you to maintain the host.
Good for: people who want a multi-vendor emulator and are willing to pay for the supported edition. Skip it if you want a free, supported, install-and-go product.
6. Cisco Modeling Labs: the official emulator
Cisco Modeling Labs runs on-premise with an HTML5 interface and an API, using real Cisco images. It has a free tier, a Personal edition at 199 dollars and a Personal Plus edition at 349 dollars. Cisco positions Personal for CCNA and DevNet Associate study, and Personal Plus for heavier topologies.
The strength is fidelity: real images, real CLI, a vendor-supported product. The limit is that it is a lab environment, not a course. You still need tasks to work through, and the free tier has capacity limits.
Good for: people who want real Cisco images without building a server themselves, and who may continue to CCNP. Skip it if you only need guided exam practice and do not want another subscription.
7. A used hardware lab: the real thing, with real costs
Two used switches and a router from an auction site will teach you more about cables, link lights and console connections than any simulator. They also cost space, power and noise, and older hardware may run an IOS version that differs from the exam.
The hidden cost is time: cabling, resetting, recovering a lost password, and finding a console cable. If you already have the gear, use it. If you are buying, do the arithmetic against a year of a simulator.
Good for: people who learn from physical hardware and have a desk to spare. Skip it if you live in a small flat, move often, or are on a deadline.
How we chose
We ranked on five things: setup time, grading, exam mapping, fidelity to Cisco CLI, and price. We did not rank by the number of labs alone, because 500 unstructured labs are worse than 50 that map to the blueprint. We checked every competitor fact on the vendor's page on 28 October 2026 and linked it below.
One omission: we did not include a bootcamp or a live class. The format is different enough that it belongs in a different comparison, and the good ones are usually employer-funded.
What to practise, in order
Start with VLANs and trunks, because everything else sits on top of them. Then static routing, then OSPF, then NAT and ACLs. Add DHCP, DNS and NTP once the routing works. Finish with port security, SSH and a little automation.
For every lab, use the same loop: read the goal, check the current state with show commands, make one change, verify with the same show command, then write one sentence about what you changed. That sentence is what you will remember in the exam.
What "exam-mapped" has to mean
Every platform on this page claims alignment, and the claim is worth checking in three ways before you pay.
First, does it name the blueprint version? CCNA moves from v1.1 to v2.0 on 3 February 2027, so a library that says "CCNA" with no version is either current or abandoned, and you cannot tell which from the landing page. Second, does each lab name the objective it checks? A topic tag is not a mapping; an objective number is the thing you can cross off against Cisco's blueprint. Third, does the grade read the device state, or your answers? A lab that asks you to type commands into a box is a quiz with a prompt drawn in front of it.
Our own answer, in the same terms: the CCNA lab catalogue lists each task against its objective, the grade reads the running state you leave, and the pack is written for the current blueprint, so the v2.0 cutover is a re-check rather than a surprise. That is also why the pack holds 86 labs rather than 500: coverage we can map is worth more than volume we cannot.
Apply the same three questions to Packet Tracer and the answer is different but honest. It is free, capable, and mapped to nothing, which is fine if you know it before you plan a month around it.
A four-week lab plan
Week one: VLANs, trunks and access ports, one lab a night. Week two: routing, static and OSPF, plus one troubleshooting lab every second night. Week three: NAT, ACLs, DHCP and DNS. Week four: mixed troubleshooting under time, then revisit every lab you failed.
If you are also watching a video course, do the video for a topic in the morning and the lab for that topic the same evening. The CCNA study plan has a week-by-week version of this rhythm. A week between them is a week of forgetting.
What to do this week
Pick one platform and do one lab today, not after you finish comparing. The best lab platform is the one you will actually open on a Tuesday night; the labs hub shows what else is available if you study more than one exam. If you choose SecLern, start with the free tier; if you choose Packet Tracer, download it and build two VLANs and a trunk before the weekend.
Book the exam when you can complete a trunk, a static route, an OSPF adjacency and a NAT translation without notes, and when a timed mixed set lands above 80 percent. The blueprint date is the other deadline: if you are booking after 2 February 2027, study the v2.0 topics, not the v1.1 ones. The exam-day checklist covers the logistics once the date is booked.