For the CCNA path on equipment, you'll want to consider
a couple of layer 2 switches like a cisco 2950
a layer 3 switch like a 3560
ideally 3 routers (but you could make do with 2)
This will allow you to configure a triangle topology between routers ( 3 routers or 2 routers and layer 3 switch) for the routing protocols.
The switches can be attach as broadcast domain off of each router. You'll also be able to configure for STP and PVSTP+ and make routers as nodes to test for your port security features.
Because you have physical equipment available to you, you can also practice IOS resilence and password recovery.
routers should be running IOS 15.x and later with crypto (k9) features
the switches not as important in terms of the 15x but should have k9 or at least the 3560 should support the crypto
This may add up to a considerable monetary, space, electric bill investment. You may want to look at cisco kits available on ebay. If you the latest and best equipment without having to buy, you can also consider rack rentals in which you'll access them in the cloud.
Don't forget that with your ITProTV subscription you have access to the cisco labs through practice-labs.com too. Having said this, you don't have to do everything I listed, you could just buy a router and switch and configurations that require more you could use practice-labs.