Cisco CCNA - 200-301 Complete Course

Understand collision domains: hubs create a single shared conductor, while switches segment collision domains per port, and learn how duplex modes and mac-based forwarding affect broadcast domains.

Explore core network components—routers, switches, and firewalls—and how they interact with traffic across the OSI model layers 1–4, including frames, packets, and segments.

Learn how access points, wireless controllers, and endpoints form centralized and standalone architectures, including lightweight APs, CAPWAP, SSIDs, CSMA/CA, and Cisco DNA management.

Explore common network topologies, including spine and leaf, hub and spoke, full mesh, and partial mesh, and learn how collapsed core and two-tier and three-tier designs enable redundancy and scalability.

Explore copper and fiber cabling basics, including shared media versus point-to-point links, fiber modes (single and multi mode), and PoE standards for powering devices over ethernet.

Explore layer 1 troubleshooting by diagnosing collisions, errors, and duplex mismatches on physical interfaces and cabling. Learn to read interface statistics and CRC errors to pinpoint cable or interface issues.

Explore layer 2 concepts, including mac addresses and ethernet frames, and how switches learn macs with the cam table, segment collision and broadcast domains, and flood unknown destinations via arp.

Explore IPv4 concepts, including 32-bit addresses, dotted decimal and CIDR notation, subnet masks, and how network and host identifiers govern address assignment, broadcast and usable addresses.

Learn IPv6 addressing and configuration, including 128-bit hex addresses, /64 subnets, global unique addresses and unique local spaces, modified eui-64 auto configuration, link-local and multicast concepts, and compression rules.

Compare TCP and UDP at layer 4, noting TCP's connection-oriented design, three-way handshake, sequence and acknowledgment numbers, and windowing, versus UDP's minimal eight-byte header and lack of connection state.

Explore wireless radio frequency principles, including 2.4 and 5 GHz bands, free-path loss, multipath interference, channel planning with non-overlapping 1, 6, 11 channels, and basics of standards, SSID, and encryption.

Understand virtualization fundamentals, including hypervisors and virtual hardware, and explore resource scheduling, memory over-allocation, and network virtualization concepts like virtual LAN and virtual port channel.

Learn vlan fundamentals and configuration to split a switch into multiple broadcast domains, assign access ports, and understand vlan ranges, default vlan, and vtb propagation.

Explore dot1Q fundamentals for inter-switch VLAN traffic, enabling VLAN 50 and 30 across trunk links. Understand trunk encapsulation, native VLAN, DTP, and ISL legacy considerations.

Explore layer 2 discovery protocols, including Cisco Discovery Protocol and the industry standard LDP, to identify directly connected devices and gather topology details.

Learn rapid pvst concepts, original spanning tree limitations, and per-vlan spanning tree benefits, including root and designated port roles, convergence, and topology stability for enterprise networks.

Explore rapid spanning tree protocol in a three-switch topology, detailing port states discarding, learning, and forwarding, and how BPDU exchanges shape root and backup routes.

ether channels bundle multiple links into a single logical interface for redundancy and higher throughput, negotiated via lacp with active/passive modes, load balancing by source/destination hashing, and spanning-tree loop avoidance.

Explore centralized and autonomous wireless architectures with lightweight access points, CAPWAP tunneling, split MAC vs local MAC, and key AP modes including monitor mode, flex connect, and wireless bridge.

Explore the physical WLAN infrastructure and CAPWAP-tunneled AP management via the wireless controller. Review secure management options, including SSH, Telnet, RADIUS, and TACACS+.

Configure a wlan on a Cisco wireless controller GUI, including security settings, SSID broadcast, interface types, and flex connect for local switching.

Learn how to read a routing table, identify protocol sources, prefixes, next hops, and direct connections, and compare administrative distance and metrics across rip, ospf, eigrp, and bgp.

Understand how routers use administrative distance, metric, and prefix length to forward traffic, and how equal or unequal cost multipath and BGP's shortest AS-path influence routing decisions.

Learn how to configure static routing for IPv4 and IPv6, implement floating static routes with route tracking using IP SLA and tracking objects, and use administrative distance to failover.

Explore the theory and operation of OSPFv2, including the area zero backbone, neighbor adjacencies, link-state databases, and ABRs, with practical insights for troubleshooting and configuration.

Explore ospfv2 on broadcast and point-to-point networks, including DR and BDR elections, full vs two-way neighbors, and how link-state updates propagate after topology changes, with a lab walkthrough.

Describe first hop redundancy protocols and how HSRP, VRP, and GBP form a virtual gateway with a virtual IP and MAC, using keepalives to failover between active and standby routers.

Learn how to configure source NAT in Cisco CCNA, including static and dynamic (pool) NAT, source and destination networks, and port address translation for enabling outbound and inbound connectivity.

Configure the network time protocol (ntp) to synchronize clocks by using servers, clients, and master roles, enable md5 authentication, and verify status with show ntp status and show ntp associations.

Learn how dhcp assigns dynamic ip addresses and boot information, and how dns maps names to IPv4/IPv6 addresses using A and AAAA records, MX, TXT, NS, and PTR records.

Learn how to configure dhcp clients and dhcp relay (ip helper) on Cisco devices, relaying discover, offer, request, and ack to a central dhcp server across subnets.

Explore SNMP and syslog for network monitoring, including MIB-based queries, traps, remote configuration, and syslog facilities and levels used by devices to alert and diagnose.

Learn how quality of service prioritizes traffic per hop on Cisco devices, using classification, DSCP marking (EF 46), and actions like policing, shaping, and various queuing methods.

Configure SSH for secure device management, generate RSA keys with a domain name, and enable VTY login to establish encrypted client-server sessions using Diffie-Hellman key exchange.

Explore ftp and tftp protocols for transferring device configurations, startup, and firmware. ftp uses two tcp connections with passive mode; tftp uses udp 69 and is unencrypted, unauthenticated, and unidirectional.

Define threats, vulnerabilities, exploits, malware, and mitigation to show how to reduce risk while addressing ransomware, social engineering, and the threat landscape.

Identify the core elements of an organizational security program, including policies, procedures, and user awareness training, and reinforce phishing and social engineering awareness through robust access control.

Explore the triple-A framework—authentication, authorization, and accounting—through explanations and a hands-on lab configuring Cisco IOS privilege levels, usernames, and per-command access controls.

Explore how site-to-site and remote access VPNs use IPsec to securely connect distant networks and users, covering security associations, IKE phases, and route-based vs policy-based designs.

Explore how ACLs identify traffic and control it with standard and extended ACLs, named or numbered, using wildcard masks, implicit deny, and inbound or outbound filtering.

Learn to secure layer 2 access networks by implementing port security, DHCP snooping, and dynamic ARP inspection, with hands-on labs showing configurations and violations.

Explore wireless security from WEP to WPA3, including TKIP and CCMP, four‑way handshakes, and enterprise vs. personal modes; then configure a Cisco wireless controller SSID with WPA PSK.

Learn how network automation replaces traditional box-by-box management with Cisco DNA Center, enabling scalable provisioning through Cisco DNA Center's identity services engine, security group tags, virtual networks, contracts, and policies.

Explore controller-based networks and software defined networking (SDN) architectures by contrasting data plane, control plane, and management plane roles, and by clarifying underlay versus overlay networks and network fabric.

Explore REST API concepts, including what an API is and how RESTful interfaces enable programmatic access to network controllers. Learn CRUD operations, HTTP verbs, endpoints, headers, and JSON.

Explore centralized configuration management systems—Ansible, Puppet, and Chef—that automate device configurations as code, enable auditing for drift, and enforce consistent, scalable policies across networks.