Get an old laptop or desktop pc. Install Proxmox Virtual Environment. Get a bunch of ISO’s like pentest OS, router OS and such server OS to host vulnerable services on it. Configure everything in a dedicated network and ensure that no traffic is leaving the network.