CCNA 200-301 v1.1 reference library
Network reference
Searchable exam-aligned articles with Quick Reference and Handbook views — plus the supplemental operations appendix for monitoring and NMS platforms.
Loading networking reference...
60 articles across six domains
What routers, Layer 2 and Layer 3 switches, next-generation firewalls, access points, controllers, endpoints, servers and PoE each do in an enterprise network.
Two-tier, three-tier and spine-leaf campus designs, WAN and SOHO topologies, and how on-premises and cloud deployments differ.
Copper UTP categories, single-mode versus multimode fiber, Ethernet shared media and point-to-point connections, and Power over Ethernet.
Read interface status codes and counters, and isolate collisions, CRC errors, duplex and speed mismatches, and cabling faults.
How TCP provides reliable, ordered delivery and how UDP trades that for low overhead, with port numbers and protocol numbers used across the CCNA.
IPv4 address and prefix structure, public versus private ranges, address classes and the role of NAT for RFC 1918 space.
Convert prefix lengths and masks, find network, broadcast and usable ranges, and handle /31 and /32 boundary cases correctly.
Allocate variable-length subnets inside a parent block without overlap, verify capacity and alignment, and keep space for growth.
IPv6 address structure and compression rules, /64 prefixes, and how to configure and verify IPv6 addressing on Cisco routers.
Global unicast, unique-local and link-local addresses, anycast and multicast groups, and modified EUI-64 interface identifiers.
Router and neighbor solicitation/advertisement, SLAAC address formation, and how to verify the IPv6 neighbor table.
Verify address, mask, gateway, DNS and reachability on Windows, macOS and Linux with the commands each platform actually provides.
RF behavior, SSIDs and BSSIDs, nonoverlapping 2.4 GHz and 5/6 GHz channels, and what wireless encryption protects.
Hypervisors, virtual machines and containers, and how VRFs create separate routing instances on one physical device.
MAC address learning and aging, frame switching and flooding decisions, and how to read the MAC address table.
Follow a packet hop by hop: switching inside a VLAN, routing between subnets, ARP, MAC rewrites and longest-prefix forwarding.
Normal-range VLANs, data and voice access ports, the default VLAN, and how VLANs segment a switch into broadcast domains.
802.1Q tagging, native VLAN behavior, allowed VLAN lists, and how to configure and verify trunk links between switches.
Router-on-a-stick subinterfaces and Layer 3 switch SVIs, with the trunk and routing configuration each design needs.
Layer 2 discovery protocols: enable and scope CDP and LLDP, read neighbor tables, and use detail output safely.
Layer 2 and Layer 3 bundles, LACP negotiation modes, member-link compatibility rules, and interpreting EtherChannel flags.
Root bridge election, port roles and states, path cost and tie-breaking, and how Rapid PVST+ converges faster than classic STP.
PortFast, BPDU guard and BPDU filter, root guard and loop guard: what each protects and where to apply it.
Autonomous, lightweight (CAPWAP) and cloud-based AP architectures, split-MAC operation, and AP modes such as local, monitor and FlexConnect.
Physical connections between APs and wireless LAN controllers: access versus trunk switch ports, CAPWAP tunnels and LAG.
Console, Telnet, SSH, HTTP and HTTPS management access, TACACS+/RADIUS integration and cloud-managed alternatives.
Interpret the controller GUI for WLAN creation, security settings, QoS profiles and advanced options for client connectivity.
Diagnose client connectivity failures from controller and client configuration evidence: security, VLAN, band and RF causes.
Read every component of a routing table entry: protocol codes, prefix and mask, next hop, administrative distance, metric and the gateway of last resort.
How a router installs routes (administrative distance, metric) versus how it forwards packets (longest-prefix match, then next hop).
Network and host static routes, next-hop versus exit-interface forms, and how to verify static routes in the table.
IPv6 static routes with global unicast and link-local next hops, the interface argument link-local requires, and verification.
Default routes and the gateway of last resort, host routes, and floating statics that appear only when the primary route fails.
Configure single-area OSPFv2: process ID, router ID, network statements or interface OSPF, passive interfaces, and adjacency verification.
Point-to-point and broadcast network types, DR/BDR election behavior and non-preemption, and their timer and next-hop differences.
Evidence-led OSPF diagnosis: neighbor states, mismatched parameters and passive interfaces, separating symptoms from confirmed causes.
Why hosts need a redundant default gateway and how HSRP, VRRP and GLBP provide virtual gateway failover at concept level.
Static NAT and dynamic pools for inside source translation, PAT overload behavior, and how to verify translations.
NTP strata and peering, configure a device as client and server, and verify synchronization state and associations.
Name resolution roles, common record types, iterative and recursive queries, and basic verification of client and device DNS.
The DORA exchange, lease lifecycle, IOS DHCP server pools, client addressing and the relay agent that forwards broadcasts across subnets.
Managers, agents, MIBs and OIDs; polling versus traps and informs; and what the SNMP versions add for security.
Severity levels and inclusive logging thresholds, facilities, destinations and message format, with configuration and verification.
Classification, marking, queuing, congestion management and policing versus shaping — the per-hop forwarding behaviors QoS defines.
Configure devices for secure remote access: hostname, domain, keys and vty restrictions, plus verification of SSH sessions.
What TFTP and FTP provide for image and configuration transfers, transport differences, and operational caveats.
Threats, vulnerabilities, exploits and mitigation techniques, plus user awareness, training and physical access control.
Local passwords and line-level access control, password policy elements, and alternatives such as MFA, certificates and biometrics.
Remote-access versus site-to-site VPNs, what IPsec protects, and where each design fits at CCNA concept depth.
Source-only matching, wildcard masks, rule order and the implicit deny, with correct placement and verification.
Protocol, source, destination and port matching, named ACLs, direction and placement, and evidence-based verification.
Port security, DHCP snooping and Dynamic ARP Inspection: trust boundaries, violation actions and verification.
The three AAA functions and how RADIUS and TACACS+ differ in transport, encryption scope and use cases.
WPA, WPA2 and WPA3 compared, and the structured WLAN settings a WPA2-PSK network requires in the controller GUI.
How automation changes network management and how controller-based networking differs from device-by-device management.
Controller-based software-defined architecture: underlay, overlay and fabric, control/data-plane separation, and northbound/southbound APIs.
Generative and predictive AI use cases in network operations, and the limits and validation discipline these tools require.
Authentication types, CRUD and HTTP verbs, status codes and data encoding for REST-based network APIs.
What Ansible and Terraform provide: declarative intent, idempotence, and push versus pull orchestration at CCNA depth.
JSON objects, arrays and primitive types, nesting and syntax rules, and how to recognize valid versus invalid structures.
The retained SNMP, syslog, NTP/CDP/LLDP sheets and Zabbix, SolarWinds, PRTG and Prometheus/Grafana guides live here as optional operations material.
Polling vs Notifications, Versions v1/v2c/v3, MIBs & Essential OIDs
8 Severity Levels (0–7), Message Structure, Facilities & Buffer vs Remote Logging
Time Synchronization, L2 Topology Discovery, Flow Telemetry & Synthetic Probes
Enterprise Open-Source Monitoring
Commercial Network Management Suite
Sensor-Based Unified Monitoring
Cloud-Native Observability Stack