CCNA Certification Study Guide: Exam 200-301

CCNA Certification Study Guide
Acknowledgments
About the Author
Contents at a Glance
Contents
Introduction
	Cisco’s Network Certifications
	What Does This Book Cover?
	Interactive Online Learning Environment and Test Bank
	CCNA Exam Overview
		Are there any prerequisites to take before the CCNA exam can be taken?
	How to Use This Book
	Where Do You Take the Exam?
		Tips for Taking Your Cisco Exams
	CCNA Certification Exam 200-301 Objectives
Assessment Test
Answers to Assessment Test
Chapter 1 Network Fundamentals
	Network Components
	Next-Generation Firewalls and IPS
	Network Topology Architectures
		The Cisco Three-Layer Hierarchical Model (3-Tier)
		Collapsed Core (2-Tier)
		Spine-Leaf
		WAN
		Defining WAN Terms
		WAN Connection Bandwidth
	Physical Interfaces and Cables
	Ethernet Cabling
		Straight-Through Cable
		Crossover Cable
		Fiber Optic
		Power over Ethernet (802.3af, 802.3at)
	Summary
	Exam Essentials
	Review Questions
Chapter 2 TCP/IP
	Introducing TCP/IP
		A Brief History of TCP/IP
	TCP/IP and the DoD Model
		The Process/Application Layer Protocols
		The Host-to-Host or Transport Layer Protocols
		The Internet Layer Protocols
	IP Addressing
		IP Terminology
		The Hierarchical IP Addressing Scheme
		Private IP Addresses (RFC 1918)
	IPv4 Address Types
		Layer 2 Broadcasts
		Layer 3 Broadcasts
		Unicast Address
		Multicast Address
	Summary
	Exam Essentials
	Review Questions
Chapter 3 Easy Subnetting
	Subnetting Basics
		How to Create Subnets
		Subnet Masks
		Classless Inter-Domain Routing (CIDR)
		IP Subnet-Zero
		Subnetting Class C Addresses
		Subnetting Class B Addresses
	Summary
	Exam Essentials
	Review Questions
Chapter 4 Troubleshooting IP Addressing
	Cisco’s Way of Troubleshooting IP
		Verify IP Parameters for Operating Systems (OS)
		Determining IP Address Problems
	Summary
	Exam Essentials
	Review Questions
Chapter 5 IP Routing
	Routing Basics
	The IP Routing Process
		The Cisco Router Internal Process
		Testing Your IP Routing Understanding
	Configuring IP Routing
		Corp Configuration
		SF Configuration
		LA Configuration
	Configuring IP Routing in Our Network
		Static Routing
		Default Routing
	Dynamic Routing
		Routing Protocol Basics
	Routing Information Protocol (RIP)
		Configuring RIP Routing
		Holding Down RIP Propagations
	Summary
	Exam Essentials
	Review Questions
Chapter 6 Open Shortest Path First (OSPF)
	Open Shortest Path First (OSPF) Basics
		OSPF Terminology
		OSPF Operation
	Configuring OSPF
		Enabling OSPF
		Configuring OSPF Areas
		Configuring Our Network with OSPF
	OSPF and Loopback Interfaces
		Configuring Loopback Interfaces
	Verifying OSPF Configuration
		The show ip ospf Command
		The show ip ospf database Command
		The show ip ospf interface Command
		The show ip ospf neighbor Command
		The show ip protocols Command
	Summary
	Exam Essentials
	Review Questions
Chapter 7 Layer 2 Switching
	Switching Services
		Three Switch Functions at Layer 2
		Port Security
	Configuring Catalyst Switches
		Catalyst Switch Configuration
		Verifying Cisco Catalyst Switches
	Summary
	Exam Essentials
	Review Questions
Chapter 8 VLANs and Inter-VLAN Routing
	VLAN Basics
		Broadcast Control
		Security
		Flexibility and Scalability
	Identifying VLANs
		Frame Tagging
		VLAN Identification Methods
	Routing Between VLANs
	Configuring VLANs
		Assigning Switch Ports to VLANs
		Configuring Trunk Ports
		Configuring Inter-VLAN Routing
	Summary
	Exam Essentials
	Review Questions
Chapter 9 Enhanced Switched Technologies
	Spanning Tree Protocol (STP)
		Spanning-Tree Terms
		Spanning-Tree Operations
	Types of Spanning-Tree Protocols
		Common Spanning Tree
		Per-VLAN Spanning Tree+
	Modifying and Verifying the Bridge ID
	Spanning-Tree Failure Consequences
	PortFast and BPDU Guard
		BPDU Guard
	EtherChannel
		Configuring and Verifying Port Channels
		Layer-3 EtherChannel
	Summary
	Exam Essentials
	Review Questions
Chapter 10 Access Lists
	Perimeter, Firewall, and Internal Routers
	Introduction to Access Lists
		Mitigating Security Issues with ACLs
	Standard Access Lists
		Wildcard Masking
		Standard Access List Example
		Controlling VTY (Telnet/SSH) Access
	Extended Access Lists
		Extended Access List Example 1
		Extended Access List Example 2
		Extended Access List Example 3
		Named ACLs
		Remarks
	Monitoring Access Lists
	Summary
	Exam Essentials
	Review Questions
Chapter 11 Network Address Translation (NAT)
	When Do We Use NAT?
	Types of Network Address Translation
	NAT Names
	How NAT Works
		Static NAT Configuration
		Dynamic NAT Configuration
		PAT (Overloading) Configuration
		Simple Verification of NAT
	Testing and Troubleshooting NAT
	Summary
	Exam Essentials
	Review Questions
Chapter 12 IP Services
	Exploring Connected Devices Using CDP and LLDP
		Getting CDP Timers and Holdtime Information
		Gathering Neighbor Information
		Documenting a Network Topology Using CDP
	Network Time Protocol (NTP)
	SNMP
		Management Information Base (MIB)
		Configuring SNMP
	Syslog
		Configuring and Verifying Syslog
	Secure Shell (SSH)
	Summary
	Exam Essentials
	Review Questions
Chapter 13 Security
	Network Security Threats
	Three Primary Network Attacks
	Network Attacks
		Eavesdropping
		Denial-of-Service Attacks
		Unauthorized Access
		WareZ
		Masquerade Attack (IP Spoofing)
		Session Hijacking or Replaying
		Rerouting
		Repudiation
		Smurfing
		Password Attacks
		Man-in-the-Middle Attacks
		Application-Layer Attacks
		Trojan Horse Programs, Viruses, and Worms
		HTML Attacks
	Security Program Elements
		User Awareness
		Training
		Physical Access Control
	Layer 2 Security Features
		Securing Network Access with Cisco AAA
	Authentication Methods
		Windows Authentication
		Security Server Authentication
		External Authentication Options
	Managing User Accounts
		Disabling Accounts
		Setting Up Anonymous Accounts
		Limiting Connections
		Renaming the Maintenance Account
	Security Password Policy Elements
		Password Management
		Managing Passwords
		Single Sign-On
		Local Authentication
		LDAP
		Password Alternatives
	User-Authentication Methods
		Public Key Infrastructure (PKI)
		Kerberos
	Setting Passwords
		Auxiliary Password
	Summary
	Exam Essentials
	Review Questions
Chapter 14 First Hop Redundancy Protocol (HSRP)
	Client Redundancy Issues
	Introducing First Hop Redundancy Protocol (FHRP)
	Hot Standby Router Protocol (HSRP)
		Virtual MAC Address
		HSRP Timers
		Group Roles
		Configuring and Verifying HSRP
	Summary
	Exam Essentials
	Review Questions
Chapter 15 Virtual Private Networks (VPNs)
	Virtual Private Networks
		Benefits of VPNs
		Enterprise- and Provider-Managed VPNs
		Introduction to Cisco IOS IPsec
		IPsec Transforms
	GRE Tunnels
		GRE over IPsec
		Configuring GRE Tunnels
		Verifying GRP Tunnels
	Summary
	Exam Essentials
	Review Questions
Chapter 16 Quality of Service (QoS)
	Quality of Service
		Traffic Characteristics
	Trust Boundary
	QoS Mechanisms
		Classification and Marking
		Policing, Shaping, and Re-marking
		Tools for Managing Congestion
		Tools for Congestion Avoidance
	Summary
	Exam Essentials
	Review Questions
Chapter 17 Internet Protocol Version 6 (IPv6)
	Why Do We Need IPv6?
	The Benefits and Uses of IPv6
	IPv6 Addressing and Expressions
		Shortened Expression
		Address Types
		Special Addresses
	How IPv6 Works in an Internetwork
		Manual Address Assignment
		Stateless Autoconfiguration (eui-64)
		DHCPv6 (Stateful)
		IPv6 Header
		ICMPv6
	IPv6 Routing Protocols
		Static Routing with IPv6
	Configuring IPv6 on Our Internetwork
	Configuring Routing on Our Internetwork
	Summary
	Exam Essentials
	Review Questions
Chapter 18 Troubleshooting IP, IPv6, and VLANs
	Endpoints
		Desktops/Laptops
		Mobile Phones/Tablets
		Access Points
		IP Phones
		Internet of Things
	Servers
		Server Roles
	IP Config
		Windows 10
		macOS
		Ubuntu/Red Hat
	Troubleshooting IP Network Connectivity
		Using SPAN for Troubleshooting
		Configuring and Verifying Extended Access Lists
	Troubleshooting IPv6 Network Connectivity
		ICMPv6
	Troubleshooting VLAN Connectivity
		VLAN Troubleshooting
		Trunk Troubleshooting
	Summary
	Exam Essentials
	Review Questions
Chapter 19 Wireless Technologies
	Wireless Networks
		Wireless Personal Area Network (WPAN)
		Wireless LAN (WLAN)
		Wireless Metro Area Network (WMAN)
		Wireless Wide Area Network (WWAN)
	Basic Wireless Devices
		Wireless Access Points
		Wireless Network Interface Card (NIC)
		Wireless Antennas
	Wireless Principles
		Independent Basic Service Set (Ad Hoc)
		Basic Service Set (BSS)
		Infrastructure Basic Service Set
		Service Set ID
		Extended Service Set
		Repeaters
		Bridging
		Mesh Networks
	Nonoverlapping Wi-Fi channels
		2.4GHz Band
		5GHz Band
	Radio Frequency (RF)
		Radio Frequency Behaviors
		Free Space Path Loss
		Absorption
		Reflection
		Multipath
		Refraction
		Diffraction
		Scattering
		RF Operational Requirements
	Wireless Security
		Authentication and Encryption
		WEP
		WPA and WPA2: An Overview
		WPA3
	Summary
	Exam Essentials
	Review Question
Chapter 20 Configuring Wireless Technologies
	WLAN Deployment Models
		Stand-Alone Model
		Lightweight Model
		Cloud Model
	Setting Up a Wireless LAN Controller (WLC)
		Configuring the Switch
		WLC Initial Setup
	Joining Access Points (APs)
		Manual Method
		DNS Method
		DHCP Method
		Configuring the VLAN
		Configuring the Switchport
	Wireless LAN Controllers (WLC)
	WLC Port Types
	WLC Interface Types
		Management Interface
		Service Port Interface
		Redundancy Management
		Virtual Interface
		Dynamic Interface
		Interface Groups
		Link Aggregation Group (LAG)
		Configuring the AP
	AP Modes
	AP and WLC Management Access Connections
		CDP
		Telnet
		SSH
		HTTP
		HTTPS
		Console
		RADIUS
		TACACS+
		Connecting the Client
	Summary
	Exam Essentials
	Review Questions
Chapter 21 Virtualization, Automation, and Programmability
	Virtual Machine Fundamentals
	Virtualization Components
	Virtualization Features
		Hardware Abstraction
		Snapshots
		Clones
		Migrations
	Virtualization Types
		Type 1
		Type 2
		Hardware Virtualized Machine
		Paravirtualization
	Virtualization Solutions
		VMware ESXi
		Hyper-V
		Xen/KVM
		VMware Workstation/Fusion
		VirtualBox
	Automation Components
		Python
		JSON
		YAML
		REST API
	Summary
	Exam Essentials
	Review Questions
Chapter 22 SDN Controllers
	Traditional Network Monitoring Systems (NMS)
		Configuring SNMP
		Network Health
		Central Syslog
		Central SNMP Traps
		Interface Information
		Hardware Health
		Network Information
	Traditional Network Configuration Managers (NCM)
	Traditional Networking
		Management Plane
		Control Plane
		Data Plane
		Forwarding
	Introduction to SDN
		Northbound Interfaces
		Southbound Interfaces
		SDN Solutions
	Separating the Control Plane
	Controller-Based Architectures
		Campus Architecture
		Spine/Leaf Architecture
	SDN Network Components
		Underlay
		Overlay
		Fabric
	DNA Center Overview
		Discovery
		Network Hierarchy
		Templates
		Topology
		Upgrades
		Command Runner
		Assurance
		Path Trace
		EasyQoS
		LAN Automation
		SD-Access
		Restful API
	Summary
	Exam Essentials
	Review Questions
Chapter 23 Configuration Management
	Team Silos
	DevOps
	Infrastructure as Code (IaC)
	Ansible
		Installation
		Settings
		Inventory
		Lab Setup
		Modules
		Ad-Hoc Example
		Playbook Example
	Ansible Tower/AWX
	Puppet
		Installation
		Lab Setup
		Site Manifest File
		DC Manifest File
		Installing the Puppet Agent
		Verifying the Results
		Puppet Enterprise
	Chef
		Installation – Server
		Installation – Workstation
		Lab Setup
		Verifying the Results
	Summary
	Exam Essentials
	Review Questions
Appendix Answer to Review Questions
	Chapter 1: Network Fundamentals
	Chapter 2: TCP/IP
	Chapter 3: Easy Subnetting
	Chapter 4: Troubleshooting IP Addressing
	Chapter 5: IP Routing
	Chapter 6: Open Shortest Path First (OSPF)
	Chapter 7: Layer 2 Switching
	Chapter 8: VLANs and Inter-VLAN Routing
	Chapter 9: Enhanced Switched Technologies
	Chapter 10: Access Lists
	Chapter 11: Network Address Translation (NAT)
	Chapter 12: IP Services
	Chapter 13: Security
	Chapter 14: First Hop Redundancy Protocol (HSRP)
	Chapter 15: Virtual Private Networks (VPNs)
	Chapter 16: Quality of Service (QoS)
	Chapter 17: Internet Protocol Version 6 (IPv6)
	Chapter 18: Troubleshooting IP, IPv6, and VLANs
	Chapter 19: Wireless Technologies
	Chapter 20: Configuring Wireless Technologies
	Chapter 21: Virtualization, Automation, and Programmability
	Chapter 22: SDN Controllers
	Chapter 23: Configuration Management
Index
Advert
EULA