All certifications / CCNA / Lessons
CCNA 200-301 v2.0 lessons
Study CCNA for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the CCNA study planA week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Domain 1: Network infrastructure & connectivity
- Diagnose interface and cable issues (copper and fiber): collisions, CRC/input errors, duplex and speed mismatch, distance limits, cable types
- Hypervisors (type 1 vs type 2), virtual machines and containers
- Network topology architectures: two-tier, three-tier, spine-leaf, WAN, SOHO, on-premises vs cloud
- IPv4 addressing and subnetting, including VLSM and private (RFC 1918) ranges
- Troubleshoot IPv4 addressing: wrong mask, gateway outside the subnet, duplicate addresses, APIPA
- IPv6 address types and prefixes: global unicast, unique local, link-local, multicast, anycast
- IPv6 address configuration: static, EUI-64, SLAAC and RA messages; troubleshoot IPv6 addressing
- Wireless principles: 2.4, 5 and 6 GHz bands, non-overlapping channels, SSID, RF interference
- Troubleshoot wired and wireless client connectivity (verify IP settings on Windows, macOS and Linux)
- DHCPv4 on IOS: server pools, excluded addresses, relay with ip helper-address, troubleshooting leases
Domain 2: Switching & network access
- Switching concepts: MAC learning and aging, frame forwarding, flooding of unknown unicast and broadcast
- VLANs (normal range) across multiple switches: access ports, data and voice VLANs, default VLAN
- Layer 2 edge-port attributes: VLAN, Power over Ethernet (PoE), port channel and LACP
- 802.1Q trunking: native VLAN, allowed VLAN lists, DTP modes
- Layer 2 discovery protocols: CDP and LLDP
- EtherChannel (LACP and static), Layer 2 and Layer 3, and member-port consistency rules
- Rapid PVST+: root bridge election, root/designated/alternate ports, port states, PortFast, BPDU guard
- Inter-VLAN routing: router-on-a-stick subinterfaces and multilayer switch SVIs
- Wireless architectures and AP modes: autonomous, lightweight (CAPWAP), cloud-managed
- Troubleshoot VLAN, trunk, EtherChannel and spanning tree problems from show command output
Domain 3: IP routing
- Routing table components: protocol code, prefix and mask, next hop, administrative distance, metric, gateway of last resort
- Forwarding decisions: longest prefix match first, then administrative distance, then metric
- IPv4 and IPv6 static routing: default, network, host and floating static routes
- Single-area OSPFv2: neighbors and adjacencies, point-to-point vs broadcast networks, DR/BDR election
- OSPF router ID selection and configuration (network statements vs interface commands, passive interfaces)
- OSPF cost and reference bandwidth
- OSPF adjacency requirements: area, subnet, hello/dead timers, MTU, authentication, unique router ID
- First hop redundancy: HSRP and VRRP virtual IP, priority, preemption
- Troubleshoot IP connectivity with ping, extended ping and traceroute
- Troubleshoot OSPF neighbor and route problems from show ip ospf output
Domain 4: Network services & security
- AAA for device access: local usernames, TACACS+ and RADIUS clients
- Secure management access: SSH version 2, enable secret, VTY access-class, login banners
- Standard and extended IPv4 ACLs: wildcard masks, sequence and first match, implicit deny, placement
- Layer 2 security: port security (maximum, sticky, violation modes), DHCP snooping, dynamic ARP inspection
- NAT and PAT: static, dynamic pool, overload; inside local/global and outside local/global
- DHCP and DNS roles in the network; troubleshoot name resolution and DHCP client issues
- NTP role in keeping logs and certificates consistent
- Wireless security: WPA2 and WPA3, Personal (PSK/SAE) vs Enterprise (802.1X)
- VPNs: site-to-site IPsec vs remote-access
- Security fundamentals: threats, vulnerabilities, exploits, mitigation and user awareness
Domain 5: AI & network operations/management
- AI in network operations: predictive AI and machine learning (anomaly detection, predictive analytics) vs generative AI
- Agentic AI in network operations: agents that plan steps and call tools, with guardrails and human approval
- Writing prompts for a generative AI system: persona, instructions, data classification, output format
- Network management approaches: device-by-device CLI, cloud-managed, controller-based, automation, infrastructure as code
- Controller-based networking: management, control and data planes; northbound and southbound APIs
- SNMP: manager, agent, MIB, get/set/trap/inform, v2c communities vs v3 security levels
- Configuration management with Ansible: agentless, SSH, YAML playbooks, inventory, idempotency
- Syslog: message format, severity levels 0–7, facilities, logging to a server
- Telemetry and AIOps: streaming telemetry vs polling, baselines and event correlation