Cisco CCNA 200-301 Definitive Study Guide

TCP/IP and OSI Networking Models

Networking models provide a structure for communication between devices. While the CCNA 200-301 exam references the RFC 1122 four-layer TCP/IP model, a five-layer variant is commonly used to separate physical and data-link functions.

Layer Comparison and Protocol Data Units (PDUs)

Ethernet LAN Fundamentals

Ethernet standards define physical cabling and speed. Media include Unshielded Twisted Pair ($UTP$) and fiber optic cables (Single-mode or Multimode).

Physical Layer Standards

• $10BASE\text{-}T$: $10\,Mb/s$, $100\,m$ range, $UTP\,Cat\,3$.
• $100BASE\text{-}T$: $100\,Mb/s$, $100\,m$ range, $UTP\,Cat\,5$.
• $1000BASE\text{-}T$: $1\,Gb/s$, $100\,m$ range, $UTP\,Cat\,5e$.
• $10GBASE\text{-}T$: $10\,Gb/s$, $100\,m$ range, $UTP\,Cat\,6a$.
• Fiber Standards: $10GBASE\text{-}SR$ ($300\,m$, Multimode), $10GBASE\text{-}LR$ ($10\,km$, Singlemode), $10GBASE\text{-}ER$ ($30\,km$, Singlemode).

Media Access and MAC Addressing

A Media Access Control ($MAC$) address is a $48\text{-}bit$ identifier written in hexadecimal. It consists of a $24\text{-}bit$ Organizationally Unique Identifier ($OUI$) and a $24\text{-}bit$ vendor-assigned ID.

$CSMA/CD$ (Carrier Sense Multiple Access with Collision Detection): Legacy mechanism where nodes listen for silence before transmitting. If a collision is detected, stations send a jamming signal and wait a random backoff time before retrying. Full-duplex Ethernet eliminates the need for $CSMA/CD$.

Ethernet II Frame Structure

1. Preamble ($7\,bytes$): Synchronization.
2. $SFD$ ($1\,byte$): Start Frame Delimiter.
3. Destination MAC ($6\,bytes$).
4. Source MAC ($6\,bytes$).
5. Type ($2\,bytes$): Defines the encapsulated protocol or an $802.1Q$ tag.
6. Data ($46\text{-}1500\,bytes$): Padded to $46\,bytes$ minimum.
7. $FCS$ ($4\,bytes$): Frame Check Sequence (Cyclical Redundancy Check).

Switching and Command-Line Interface (CLI)

Basic Configuration Commands

• Console Password: line console 0 password <pass> login &nbsp;&nbsp;&nbsp;&nbsp;
• Enable Secret: enable secret <pass> (Hashed, takes precedence over enable password).
• Save Configuration: copy running-config startup-config or legacy write.
• Erase Configuration: erase startup-config or write erase.

Switch IP Management

Layer 2 switches use a Switch Virtual Interface ($SVI$) for management.

• Set IP Address: interface vlan 1 followed by ip address <address> <mask>.
• Default Gateway: ip default-gateway <address>.
• $SSH$ Configuration: Requires a hostname, ip domain-name, and generated keys via crypto key generate rsa with a modulus length (e.g., $1024$ or $2048$).

Interface Status and Errors

• $Runts$: Frames smaller than $64\,bytes$ (often collision-related).
• $Giants$: Frames larger than $1518\,bytes$.
• $CRC$ Errors: Failed checksums, often due to faulty cabling or interference.
• Late Collisions: Collisions occurring after the $64th\,byte$, typically indicating a duplex mismatch.

VLANs and Trunking

Virtual LANs ($VLANs$) segment broadcast domains. VLAN IDs range from $1\text{-}1001$ (Normal) and $1006\text{-}4094$ (Extended).

Trunking and DTP

Trunk links carry traffic for multiple VLANs using the $802.1Q$ encapsulation. Dynamic Trunking Protocol ($DTP$) modes include:

• $Access$: Never trunks.
• $Trunk$: Forces trunking.
• $Dynamic\,Auto$: Trunks if the other side is set to $Trunk$ or $Desirable$.
• $Dynamic\,Desirable$: Actively attempts to trunk.

Voice VLAN

Designed for IP phones with a built-in switch. Configured on an access port via switchport voice vlan <id>. The data traffic remains in the configured switchport access vlan.

VLAN Trunking Protocol (VTP)

Syncs VLAN databases across switches. Modes include Server, Client, and Transparent. $VTP\,version\,3$ supports primary servers and extended VLAN ranges.

Spanning Tree Protocol (STP)

$STP$ ($802.1D$) prevents Layer 2 loops by blocking redundant paths. Components include Bridge Protocol Data Units ($BPDUs$) and the Bridge ID ($BID$).

The Spanning Tree Process

1. Elect Root Bridge: Lowest Bridge Priority wins ($default\,32768$). In a tie, the lowest MAC address wins.
2. Elect Root Ports ($RP$): The port on a non-root switch with the lowest root path cost.
3. Elect Designated Ports ($DP$): The port on a segment with the lowest cost to the root. All ports on the Root Bridge are $DPs$.
4. Blocking Ports: All other ports are placed in a blocking state to break loops.

Rapid STP (RSTP)

$RSTP$ ($802.1w$) provides faster convergence ($seconds$ vs $50\,seconds$). Port states are simplified to Discarding, Learning, and Forwarding.

• $PortFast$: Transitions access ports immediately to forwarding.
• $BPDU\,Guard$: Disables a port if it receives a $BPDU$, preventing unauthorized switches from joining.

EtherChannel

Bundles up to $8\,links$ into a single logical channel for increased bandwidth and redundancy.

Protocols and Modes

• $LACP$ ($802.3ad$): Active and Passive modes.
• $PAgP$ (Cisco): Desirable and Auto modes.
• Static: Mode set to on (must be on at both ends).

IPv4 Addressing and Subnetting

IPv4 addresses are $32\text{-}bit$ values often shown in Dotted Decimal Notation ($DDN$).

Classful Addressing

• Class A: $1.x.x.x\text{-}126.x.x.x$ ($/8$ mask).
• Class B: $127.x.x.x\text{-}191.x.x.x$ ($/16$ mask).
• Class C: $192.x.x.x\text{-}223.x.x.x$ ($/24$ mask).
• Class D: $224.x.x.x\text{-}239.x.x.x$ ($Multicast$).
• Class E: $240.x.x.x\text{-}255.x.x.x$ ($Reserved$).

Subnetting Formulas

• Number of Subnets: $2^N$, where $N = \text{borrowed bits}$.
• Usable Hosts per Subnet: $2^H \text{-} 2$, where $H = \text{remaining host bits}$.

IPv4 Routing

Routers forward packets based on the destination IP using the Routing Table.

Route Selection Logic

1. Longest Prefix Match: The most specific route (highest prefix length) is chosen first.
2. Administrative Distance ($AD$): Reliability of the route source. Lower is better.
   • Connected: $0$
   • Static: $1$
   • $EIGRP$ Summary: $5$
   • $OSPF$: $110$
   • $RIP$: $120$
3. Metric: Protocol-specific value (e.g., $OSPF$ cost, $RIP$ hop count).

Static Routes

Defined manually. A "floating static route" has a higher $AD$ than the dynamic protocol and acts as a backup.

• Standard: ip route <network> <mask> <next-hop>
• Default: ip route 0.0.0.0 0.0.0.0 <next-hop>

OSPF (Open Shortest Path First)

$OSPF$ is a Link-State routing protocol that uses the Shortest Path First ($SPF$) algorithm. It builds a Link-State Database ($LSDB$) through Link-State Advertisements ($LSAs$).

Concepts

• Areas: Multi-area design requires Area 0 (Backbone). All other areas must connect to Area 0.
• Router ID ($RID$): A unique $32\text{-}bit$ value identifying the router.
• $DR/BDR$: Designated and Backup Designated Routers are elected on multi-access (Ethernet) segments to reduce flooding.
• Neighbor States: Down, Init, 2-Way, Exstart, Exchange, Loading, Full.
• Cost Calculation:     $\text{Cost} = \frac{\text{Reference Bandwidth (default 100 Mbps)}}{\text{Interface Bandwidth}}$

IPv6 Fundamentals

IPv6 addresses are $128\,bits$ long, represented by eight quartets of four hex digits.

Address Types

• Global Unicast: Publicly routable (starts with $2$ or $3$).
• Unique Local: Private range ($FD00::/8$).
• Link-Local: Non-routable, used for local communications ($FE80::/10$).
• Multicast: ($FF00::/8$).
• Loopback: ($::1$).

Neighbor Discovery Protocol (NDP)

Replaces $ARP$ in IPv6. Functions include Neighbor Solicitation ($NS$), Neighbor Advertisement ($NA$), Router Solicitation ($RS$), and Router Advertisement ($RA$).

$EUI\text{-}64$ Interface ID Generation

1. Take the $48\text{-}bit$ MAC address.
2. Insert FFFE in the middle.
3. Flip the $7th\,bit$ (inverted bit).

Wireless LANs (WLANs)

Wireless communication uses half-duplex radio waves over $2.4\,GHz$ and $5\,GHz$ frequency bands.

Terminology

• $BSSID$: MAC address of the Access Point ($AP$) radio.
• $SSID$: Service Set Identifier (human-readable name).
• $WLC$: Wireless LAN Controller used for centralized management.
• $CAPWAP$: Tunneling protocol for communication between Lightweight APs ($LAPs$) and $WLCs$ ($UDP\,5246\,Control, 5247\,Data$).

Security Standards

• $WPA2$: Uses $AES/CCMP$ encryption.
• $WPA3$: Uses $AES/GCMP$ and Simultaneous Authentication of Equals ($SAE$).
• $EAP$: Extensible Authentication Protocol used for Enterprise authentication (requires a $RADIUS$ server).

Security Services and ACLs

Access Control Lists (ACLs)

• Standard: Filters based on source IP only ($1\text{-}99$, $1300\text{-}1999$).
• Extended: Filters based on source/destination IP, protocol, and port ($100\text{-}199$, $2000\text{-}2699$).
• Implicit Deny: Every $ACL$ ends with an invisible deny any statement.

Device Hardening and Port Security

• Port Security Modes:
  • shutdown: Disables port (default).
  • restrict: Drops traffic, logs violation.
  • protect: Drops traffic silently.
• $DHCP\,Snooping$: Prevents rogue DHCP servers by labeling ports as trusted or untrusted.
• $DAI$ (Dynamic ARP Inspection): Mitigates ARP poisoning using the DHCP Snooping binding table.

IP Services

NAT (Network Address Translation)

• Static: $1\text{:}1$ mapping.
• Dynamic: Uses a pool of addresses.
• $PAT$ (Port Address Translation / Overload): Maps many internal addresses to a single public IP using ports.

Quality of Service (QoS)

• Classification & Marking: Uses Differentiated Services Code Point ($DSCP$) ($Layer\,3$, $6\,bits$) or Class of Service ($CoS$) ($Layer\,2$, $3\,bits$).
• Queueing: $LLQ$ (Low Latency Queueing) provides a priority queue for real-time voice ($EF\,DSCP\,46$).
• Shaping vs. Policing: Shaping buffers excess traffic; Policing drops it.

FHRP (First Hop Redundancy Protocols)

Redundancy for default gateways.

• $HSRP$ (Cisco Proprietary): Active and Standby routers share a Virtual IP/MAC.
• $VRRP$: Open standard similar to $HSRP$.
• $GLBP$: Provides per-host load balancing.

Network Architecture and Cloud

Design Models

• Three-Tier: Core, Distribution, Access.
• Two-Tier (Collapsed Core): Core and Distribution functions are combined.
• $PoE$ ($802.3af/at/bt$): Delivers power over Ethernet cabling up to $100\,W$.

Cloud and Virtualization

Services models include Software as a Service ($SaaS$), Platform as a Service ($PaaS$), and Infrastructure as a Service ($IaaS$). Hypervisors manage Virtual Machines ($VMs$) that share physical server hardware.

Network Automation

Automation moves from manual CLI configuration to programmatic control.

Planes of Operation

1. Management Plane: Configuration and monitoring ($SSH$, $HTTPS$, $APIs$).
2. Control Plane: Routing logic and intelligence ($OSPF$, $STP$).
3. Data Plane: High-speed forwarding ($ASICs$).

Controllers and Tools

• $SDA$ (Software-Defined Access): Cisco's campus fabric solution using $DNA\,Center, LISP,$ and $VXLAN$.
• $JSON$: Data serialization format used in $APIs$.
• Configuration Management:
  • $Ansible$: Push-based, agentless, uses YAML Playbooks.
  • $Puppet$: Pull-based, uses agents and Manifests.
  • $Chef$: Pull-based, uses agents and Recipes.

Questions & Discussion

Question: What is the difference between a static route with a next-hop IP and one with an outbound interface? Response: The first option is preferred as it avoids unnecessary encapsulation issues on multi-access links, but the second option is useful when the next-hop IP address is dynamic (e.g., provided via DHCP).

Question: Why use a loopback interface for NTP or OSPF? Response: Loopback interfaces are virtual and never go down unless manually shut. They provide a stable IP address for management and routing even if a specific physical link fails.