Build a Strong Foundation in Networking – Prepare for the CCNA 200-301 Exam
The Cisco Certified Network Associate (CCNA) is one of the most respected entry-level certifications in the IT industry. It validates your ability to install, configure, operate, and troubleshoot medium-sized routed and switched networks . This course outline follows the official CCNA v7 curriculum and maps directly to the 200-301 exam topics .
The CCNA curriculum is delivered through three courses that align with the CCNA certification exam :
This course introduces the architectures, models, protocols, and networking elements that connect users, devices, applications, and data through the internet and across modern computer networks . It covers the OSI and TCP/IP models, IP addressing, Ethernet fundamentals, and basic router and switch configuration .
Learning Objectives: Upon completion, students can build simple LANs that integrate IP addressing schemes and foundational network security . They gain hands-on experience with Cisco Packet Tracer and physical lab equipment .
This course focuses on how to securely configure routers and switches to enable traffic between networked systems . It covers VLANs, trunking, Spanning Tree Protocol (STP), EtherChannel, static routing, OSPF, and wireless LAN controllers .
Learning Objectives: By the end of this course, students will be able to configure and troubleshoot VLANs, spanning tree, routing protocols, and wireless networks .
This course covers the architectures and considerations involved in designing, securing, operating, and troubleshooting enterprise networks . It explores WAN technologies, Quality of Service (QoS), network automation, and SDN concepts .
Learning Objectives: Students will be able to implement security features, configure NAT and ACLs, troubleshoot enterprise networks, and understand automation principles .
The CCNA certification exam covers six domains. The following table outlines the topics and their approximate weight on the exam :
| Domain | Weight | Key Topics |
|---|---|---|
| 1. Network Fundamentals | 20% | OSI and TCP/IP models, IPv4/IPv6 addressing, subnetting, switching concepts, TCP vs UDP, wireless principles, virtualization |
| 2. Network Access | 20% | VLANs, trunking (802.1Q), EtherChannel, STP/RSTP, CDP/LLDP, wireless LAN components and configuration |
| 3. IP Connectivity | 25% | Routing table interpretation, static routing, single-area OSPFv2, first-hop redundancy protocols (HSRP) |
| 4. IP Services | 10% | NAT, NTP, DHCP, DNS, SNMP, Syslog, QoS, SSH, TFTP/FTP |
| 5. Security Fundamentals | 15% | Security concepts, device access control, password policies, ACLs, wireless security protocols (WPA/WPA2/WPA3), VPN concepts |
| 6. Automation and Programmability | 10% | SDN architectures, RESTful APIs, JSON, configuration management tools (Ansible, Puppet, Chef), Cisco DNA Center |
The CCNA exam tests both conceptual understanding and factual knowledge. Here's a practical breakdown :
show, configure, and verify commands The full CCNA curriculum typically requires 70–80 hours of instructor-led training and approximately 216 total student learning hours . A typical schedule might be:
| Feature | Details |
|---|---|
| Certification Name | Cisco Certified Network Associate (CCNA) |
| Exam Code | 200-301 |
| Exam Format | Multiple-choice, drag-and-drop, simulation-based questions |
| Number of Questions | Approximately 100–120 |
| Time Allowed | 120 minutes |
| Passing Score | Varies – set by Cisco (usually 800–850 out of 1000) |
| Certification Validity | 3 years – renewable through continuing education or recertification exams |
| Official Resources | Cisco Networking Academy, Cisco Press, Cisco Learning Network |
This CCNA course provides a complete pathway from networking fundamentals to advanced enterprise technologies. Students will learn:
🎯 Upon completion, you will be prepared for the CCNA 200-301 exam and ready for roles as a Network Engineer, Administrator, or Support Specialist.
🚀 Next Step: Part 1 – Introduction to Networks (ITN)
Welcome, young network explorer! Have you ever wondered how the internet works? How does a message from your phone reach your friend's phone on the other side of the world? The answer is networks. A network is a group of connected devices that can share information. In this module, we will learn what a network is, why it's important, and how devices talk to each other. We will use stories, examples, and lots of pictures (in text) to make everything clear. By the end, you will be ready to start your journey as a Cisco Certified Network Associate!
By the end of this module, you will be able to:
Long ago, in a small village called Cyberville, people sent messages using carrier pigeons. If you wanted to send a message to your friend in another village, you would write a letter, put it in a small bottle, and attach it to a pigeon's leg. The pigeon would fly to the other village and deliver the message. But there were problems. Sometimes the pigeon got lost. Sometimes it rained and the message got wet. Sometimes the pigeon was eaten by a hawk!
Today, we have computer networks – much faster and more reliable. Instead of pigeons, we use routers and switches. Instead of bottles, we use packets. And instead of getting lost, our messages reach their destination in milliseconds. In this module, we will learn how these modern "carrier pigeons" work.
Definition: A network is a group of computers and devices connected together to share information.
Why it's important: Networks allow us to communicate, share files, and access the internet.
Simple explanation: A network is like a web that connects all your devices.
Real-life example: The internet is one big network.
School example: A school network connects all computers in the lab.
Home example: Your home Wi-Fi connects your phone, laptop, and TV.
Nigerian example: A Nigerian office has a network connecting all employees.
Illustration:
+--------+ +--------+ +--------+
|Computer|-----|Computer|-----|Computer|
+--------+ +--------+ +--------+
| | |
+--------------+--------------+
|
+--------+
| Router |
+--------+
✅ Mini summary: A network is a group of connected devices.
Definition: A host is any device that sends or receives data. A server provides services. A client requests services.
Why it's important: These are the basic roles in a network.
Simple explanation: The server is like a restaurant kitchen (it makes food). The client is like a customer (they order food).
Real-life example: A web server hosts a website; your browser (client) requests the page.
School example: A school server stores files; students (clients) access them.
Home example: Your computer (client) requests a video from a streaming server.
Nigerian example: A Nigerian bank has servers that clients (tellers) access.
Illustration:
Client (Requests) <------> Server (Provides) (Your computer) (Web server)
✅ Mini summary: Servers provide services; clients request them.
Definition: The OSI model is a way of thinking about how networks work. It has 7 layers.
Why it's important: It helps us understand how data travels from one computer to another.
Simple explanation: Like a building with different floors, each floor does a different job.
Real-life example: A hotel has different floors for rooms, restaurants, and offices.
School example: A school has different grades for different ages.
Home example: Your house has different rooms for different activities.
Nigerian example: Nigerian networks follow the same OSI model.
Illustration:
Layer 7: Application (HTTP, DNS) Layer 6: Presentation Layer 5: Session Layer 4: Transport (TCP, UDP) Layer 3: Network (IP) Layer 2: Data Link (Ethernet) Layer 1: Physical (cables, signals)
✅ Mini summary: The OSI model has 7 layers that describe how networks work.
Definition: The TCP/IP model is a simpler, 4-layer model used for the internet.
Why it's important: It's the model the internet actually uses.
Simple explanation: Like a recipe with 4 steps instead of 7.
Real-life example: The internet uses TCP/IP to send data.
School example: A teacher uses a simplified lesson plan.
Home example: You use a simplified recipe to cook.
Nigerian example: Nigerian ISPs use TCP/IP.
Illustration:
Layer 4: Application (HTTP, DNS) Layer 3: Transport (TCP, UDP) Layer 2: Internet (IP) Layer 1: Network Access (Ethernet)
✅ Mini summary: The TCP/IP model has 4 layers and is used by the internet.
Definition: A protocol is a set of rules that devices follow to communicate.
Why it's important: Without protocols, devices wouldn't understand each other.
Simple explanation: Like a language that everyone agrees to speak.
Real-life example: English is a language – protocols are languages for computers.
School example: Students raise their hands to speak – that's a protocol.
Home example: You knock before entering a room – that's a protocol.
Nigerian example: Nigerian networks use protocols like HTTP and DNS.
Illustration:
Protocol = Set of rules Example: HTTP for web browsing, DNS for domain names
✅ Mini summary: Protocols are rules that devices follow to communicate.
Definition: A switch connects devices on the same network.
Why it's important: It allows devices to talk to each other within a network.
Simple explanation: Like a telephone operator who connects calls.
Real-life example: A switch connects computers in an office.
School example: A switch connects computers in a computer lab.
Home example: A switch connects your devices to your router.
Nigerian example: Nigerian companies use switches in their offices.
Illustration:
Computer1 ---> Switch <--- Computer2
|
Computer3
✅ Mini summary: A switch connects devices on the same network.
Definition: A router connects different networks.
Why it's important: It allows devices from different networks to communicate.
Simple explanation: Like a postal worker who delivers mail between cities.
Real-life example: A router connects your home network to the internet.
School example: A school router connects the school network to the internet.
Home example: Your Wi-Fi router connects your devices to the internet.
Nigerian example: Nigerian ISPs use routers to connect customers.
Illustration:
Network A ---> Router <--- Network B
✅ Mini summary: A router connects different networks.
Definition: An IP address is a unique number that identifies a device on a network.
Why it's important: It's like a phone number for your device.
Simple explanation: Like a house address for your computer.
Real-life example: Your home has a street address.
School example: Each student has a seat number.
Home example: Your room has a number.
Nigerian example: Nigerian internet uses IP addresses.
Illustration:
IPv4 Address: 192.168.1.1 IPv6 Address: 2001:0db8:85a3::8a2e:0370:7334
✅ Mini summary: An IP address is a unique number for a device.
Definition: A MAC address is a unique hardware identifier for a network interface.
Why it's important: It identifies the physical hardware of a device.
Simple explanation: Like a fingerprint for your device's network card.
Real-life example: Your phone's Wi-Fi adapter has a MAC address.
School example: Each computer has a unique MAC address.
Home example: Your router uses MAC addresses to identify devices.
Nigerian example: Nigerian networks use MAC addresses.
Illustration:
MAC Address: AA:BB:CC:DD:EE:FF
✅ Mini summary: A MAC address is a unique hardware identifier.
Definition: A packet is a small piece of data sent over a network.
Why it's important: All data is split into packets for transmission.
Simple explanation: Like a letter in an envelope with an address.
Real-life example: The postal service delivers letters.
School example: You pass a note to a friend.
Home example: You send a text message.
Nigerian example: Nigerian e-commerce uses packets.
Illustration:
+-------------------+ | Packet | | +-------------+ | | | Source IP | | | | Dest IP | | | | Data | | | +-------------+ | +-------------------+
✅ Mini summary: A packet is a small piece of data with an address.
Definition: LAN (Local Area Network) is a small network. WAN (Wide Area Network) is a large network.
Why it's important: Different networks have different purposes.
Simple explanation: LAN is like a neighborhood; WAN is like a country.
Real-life example: Your home Wi-Fi is a LAN. The internet is a WAN.
School example: A school's network is a LAN.
Home example: Your home network is a LAN.
Nigerian example: A Nigerian bank's branch network is a LAN; the bank's nationwide network is a WAN.
Illustration:
LAN (Small) <---> WAN (Large)
✅ Mini summary: LAN is small; WAN is large.
Definition: A topology is the way devices are connected in a network.
Why it's important: Different topologies have different advantages.
Simple explanation: Like different ways to arrange chairs in a room.
Real-life example: A star topology has all devices connected to a central switch.
School example: A classroom has desks arranged in rows.
Home example: Your devices are connected to a central router.
Nigerian example: Nigerian networks use different topologies.
Illustration:
Star Topology: All devices connected to a central switch Mesh Topology: All devices connected to each other
✅ Mini summary: Topologies describe how devices are connected.
Definition: Network security protects data from unauthorized access.
Why it's important: Without security, hackers can steal information.
Simple explanation: Like locking your doors to keep your house safe.
Real-life example: A bank uses firewalls to protect customer data.
School example: A school uses passwords to protect student records.
Home example: You use a password to protect your Wi-Fi.
Nigerian example: Nigerian companies use firewalls and encryption.
Illustration:
Security Measures: ------------------ - Firewalls - Passwords - Encryption - VPNs
✅ Mini summary: Network security protects data from attackers.
Definition: Hierarchical design organizes a network into layers for scalability.
Why it's important: It makes networks easier to manage and troubleshoot.
Simple explanation: Like a company with different levels of management.
Real-life example: A large company has executives, managers, and employees.
School example: A school has principals, teachers, and students.
Home example: Your family has parents, older siblings, and younger siblings.
Nigerian example: Nigerian ISPs use hierarchical design.
Illustration:
Core Layer (Routers) Distribution Layer (Switches) Access Layer (Devices)
✅ Mini summary: Hierarchical design organizes networks into layers.
Definition: You have learned the basics of networking.
Why it's important: You are now ready to start your journey.
Simple explanation: You have learned the alphabet of networking.
Real-life example: A pilot learns the basics of flying.
School example: A student learns the basics of math.
Home example: You learn the basics of cooking.
Nigerian example: A Nigerian student starts their CCNA journey.
Illustration:
What You Learned: ----------------- - What a network is - Hosts, servers, clients - OSI and TCP/IP models - Protocols - Switches and routers - IP and MAC addresses - Packets - LAN vs WAN - Topologies - Network security - Hierarchical design
✅ Mini summary: You have learned the basics of networking.
+--------+ +--------+ +--------+
|Computer|-----| Switch |-----|Computer|
+--------+ +--------+ +--------+
|
+--------+
| Router |
+--------+
Application (7) <---> Provides services Presentation (6) <---> Formats data Session (5) <---> Manages sessions Transport (4) <---> Reliable delivery (TCP) Network (3) <---> Addressing (IP) Data Link (2) <---> Ethernet frames Physical (1) <---> Cables, signals
| OSI Layer | TCP/IP Layer | Example Protocol |
|---|---|---|
| Application (7) | Application (4) | HTTP, DNS |
| Presentation (6) | Application (4) | SSL/TLS |
| Session (5) | Application (4) | NetBIOS |
| Transport (4) | Transport (3) | TCP, UDP |
| Network (3) | Internet (2) | IP |
| Data Link (2) | Network Access (1) | Ethernet |
| Physical (1) | Network Access (1) | Copper, Fiber |
1969: ARPANET (first network) 1983: TCP/IP becomes standard 1984: OSI model created 1990: Internet becomes public 2000s: Broadband internet 2024: Networks are everywhere
You have completed Module 1 of the CCNA course. You have learned what a network is, the difference between hosts, servers, and clients, and the OSI and TCP/IP models. You also learned about protocols, switches, routers, IP and MAC addresses, packets, LAN vs WAN, topologies, and network security. You are now ready to move on to Module 2, where you will learn about Ethernet and switching.
Match the term to its description:
| Term | Description |
|---|---|
| 1. Network | A. A set of rules |
| 2. Protocol | B. Connects devices on the same network |
| 3. Switch | C. Connects different networks |
| 4. Router | D. A group of connected devices |
| 5. Packet | E. A small piece of data |
Answers: 1-D, 2-A, 3-B, 4-C, 5-E
Scenario 1: Your friend says they want to connect two computers in their home. What device would you recommend and why?
Scenario 2: Your school wants to connect to the internet. What device would you recommend and why?
In groups of 3-4, create a poster showing the OSI model. Include examples of each layer. Present your poster to the class.
Draw a simple network diagram showing a switch, a router, and three computers. Label each device.
Create a simple network diagram for a small office. Include a switch, a router, and three computers. Label the IP addresses and MAC addresses.
Use Cisco Packet Tracer to create a simple network with a switch and two computers. Connect them and test connectivity. Write a short report on what you did.
Research the history of the internet. Write a one-page summary of how it evolved from ARPANET to today.
Multiple choice answers are provided above. Fill-in-the-blank answers:
In Module 2, we will learn about Ethernet and switching. You will learn how switches work, what MAC addresses are, and how data moves within a network. Get ready to dive deeper into networking!
🎉 Congratulations! You have completed Module 1 of the CCNA course. 🎉
You are now ready to move on to Module 2 – Ethernet and Switching.
Welcome back, young network explorer! In Module 1, we learned about the basics of networking – what a network is, the OSI model, IP addresses, and more. Now, in Module 2, we are going to focus on the most common way computers connect to networks: Ethernet and switches. Think of Ethernet as the "language" that computers use to talk to each other on a local network. And think of a switch as the "post office" that delivers messages to the right computer. By the end of this module, you will understand how devices communicate on a local network. Let's begin!
By the end of this module, you will be able to:
In the village of Cyberville, there was a very efficient post office. Every day, letters arrived from all over. The post office had a clever system. When a letter came in, the postmaster looked at the address. If he had a note saying "this address lives on Street A," he sent the letter that way. If he didn't know, he sent it to all streets. But soon, there were too many letters, and the postmaster got confused. So he started keeping a table that showed which address was on which street. This table helped him deliver letters faster and without confusion. This is exactly how a switch works in a network!
Definition: Ethernet is the most common protocol used for local area networks (LANs).
Why it's important: Almost all wired networks use Ethernet.
Simple explanation: Ethernet is like the roads that cars (packets) travel on.
Real-life example: The cable that connects your computer to the router uses Ethernet.
School example: The computers in the lab use Ethernet cables.
Home example: Your desktop computer uses an Ethernet cable to connect to the internet.
Nigerian example: Nigerian offices use Ethernet for their networks.
Illustration:
+--------+ Ethernet Cable +--------+ |Computer|------------------------|Switch | +--------+ +--------+
✅ Mini summary: Ethernet is the most common protocol for local networks.
Definition: An Ethernet frame is the structure of data sent over Ethernet.
Why it's important: It's like the envelope for your data.
Simple explanation: Like a letter with an envelope, address, and stamp.
Real-life example: A letter has a sender, receiver, and message.
School example: A note passed in class has a sender, receiver, and message.
Home example: A letter you send has a return address and recipient address.
Nigerian example: Nigerian networks use Ethernet frames.
Illustration:
+---------------------------------------------+ | Destination MAC | Source MAC | Type | Data | +---------------------------------------------+
✅ Mini summary: An Ethernet frame is the structure of data on an Ethernet network.
Definition: A MAC address is a unique 48-bit address burned into every network card.
Why it's important: It identifies the physical hardware of a device.
Simple explanation: Like a fingerprint for your network card.
Real-life example: Your phone's Wi-Fi adapter has a MAC address.
School example: Each computer has a unique MAC address.
Home example: Your router uses MAC addresses to identify devices.
Nigerian example: Nigerian networks use MAC addresses.
Illustration:
MAC Address Format: AA:BB:CC:DD:EE:FF
✅ Mini summary: A MAC address is a unique hardware identifier.
Definition: A switch learns MAC addresses by looking at the source address of incoming frames.
Why it's important: This is how the switch knows where to send frames.
Simple explanation: Like a postmaster who remembers which house is on which street.
Real-life example: A mail carrier remembers which houses are on a route.
School example: A teacher remembers which student sits where.
Home example: You remember which drawer has your socks.
Nigerian example: Nigerian switches learn MAC addresses.
Illustration:
Switch MAC Address Table: +------------------+------------------+ | MAC Address | Port | +------------------+------------------+ | AA:BB:CC:DD:EE:01| Port 1 | | AA:BB:CC:DD:EE:02| Port 2 | +------------------+------------------+
✅ Mini summary: Switches learn MAC addresses to forward frames efficiently.
Definition: A switch looks at the destination MAC address and sends the frame out the correct port.
Why it's important: This makes communication efficient.
Simple explanation: Like a post office delivering mail to the right house.
Real-life example: A mail carrier delivers mail based on the address.
School example: A teacher sends a note to the right student.
Home example: You send a letter to the right person.
Nigerian example: Nigerian switches forward frames.
Illustration:
Frame arrives with Dest MAC: AA:BB:CC:DD:EE:02 Switch looks up MAC in table Finds it on Port 2 Sends frame out Port 2
✅ Mini summary: Switches forward frames based on the destination MAC address.
Definition: A collision domain is a network segment where collisions can occur.
Why it's important: Collisions happen when two devices send at the same time.
Simple explanation: Like two people trying to talk at the same time.
Real-life example: On a shared cable, only one device can send at a time.
School example: When two students talk at once, no one can hear.
Home example: When you and your sibling talk at the same time.
Nigerian example: Nigerian networks avoid collisions.
Illustration:
Collision Domain (Hub) +--------+ | Hub | All devices share the same collision domain +--------+
✅ Mini summary: A collision domain is where collisions can occur.
Definition: A broadcast domain is a network segment where broadcast frames are sent to all devices.
Why it's important: Broadcasts can cause network congestion.
Simple explanation: Like a loudspeaker announcement in a building.
Real-life example: A school announcement over the PA system.
School example: A teacher tells the whole class.
Home example: You shout to everyone in the house.
Nigerian example: Nigerian networks manage broadcast domains.
Illustration:
Broadcast Domain (Switch) +--------+ | Switch | All devices receive the broadcast +--------+
✅ Mini summary: A broadcast domain is where broadcasts are sent to all devices.
Definition: STP prevents loops in a network by blocking redundant links.
Why it's important: Loops can cause broadcast storms and network failure.
Simple explanation: Like having backup routes but only using one at a time.
Real-life example: A city has multiple bridges but only uses one.
School example: A school has multiple exits but only uses one.
Home example: You have multiple ways to get to school but choose one.
Nigerian example: Nigerian networks use STP.
Illustration:
Switch 1 ----- Switch 2
\ /
Switch 3
(STP blocks one link to prevent loops)
✅ Mini summary: STP prevents loops in a network.
Definition: A VLAN is a logical partition of a network.
Why it's important: VLANs improve security and performance.
Simple explanation: Like having different rooms in a house.
Real-life example: A company has different departments separated by VLANs.
School example: A school has different classrooms.
Home example: Your house has different rooms.
Nigerian example: Nigerian companies use VLANs.
Illustration:
VLAN 10 (Accounting) VLAN 20 (Engineering) +---------+ +---------+ | Computer| | Computer| +---------+ +---------+
✅ Mini summary: VLANs logically separate networks.
Definition: Trunking allows a single link to carry traffic for multiple VLANs.
Why it's important: It simplifies connections between switches.
Simple explanation: Like a highway that carries multiple lanes.
Real-life example: A highway with multiple lanes.
School example: A hallway with multiple classrooms.
Home example: A cable that carries multiple channels.
Nigerian example: Nigerian networks use trunking.
Illustration:
Trunk Link (802.1Q) +---------+ +---------+ | Switch |==========| Switch | | VLAN 10 | | VLAN 10 | | VLAN 20 | | VLAN 20 | +---------+ +---------+
✅ Mini summary: Trunking carries multiple VLANs over one link.
Definition: Configuring a switch involves setting an IP address, enabling ports, and setting VLANs.
Why it's important: You need to configure switches for them to work.
Simple explanation: Like setting up a new device.
Real-life example: You set up a new Wi-Fi router.
School example: A teacher sets up a projector.
Home example: You set up a new game console.
Nigerian example: Nigerian admins configure switches.
Illustration:
Cisco IOS Commands: ------------------- enable configure terminal interface vlan 1 ip address 192.168.1.10 255.255.255.0 no shutdown
✅ Mini summary: Configuring a switch is like setting up a new device.
Definition: Verification means checking the switch settings.
Why it's important: You need to make sure it's working correctly.
Simple explanation: Like checking your work after solving a problem.
Real-life example: A pilot checks the instruments.
School example: A student checks their answers.
Home example: You check if the light is on.
Nigerian example: Nigerian admins verify configurations.
Illustration:
Verification Commands: ---------------------- show running-config show interface status show vlan brief show mac address-table
✅ Mini summary: Verification checks that the switch is working correctly.
Definition: Switch security includes features like port security and access control lists.
Why it's important: It protects the network from unauthorized access.
Simple explanation: Like locking the doors of your house.
Real-life example: A security guard at a building entrance.
School example: A teacher locks the classroom door.
Home example: You lock your front door.
Nigerian example: Nigerian networks use switch security.
Illustration:
Port Security: -------------- switchport port-security switchport port-security maximum 1 switchport port-security violation shutdown
✅ Mini summary: Switch security protects the network.
Definition: Troubleshooting involves identifying and fixing common switch problems.
Why it's important: Problems can cause network outages.
Simple explanation: Like fixing a broken toy.
Real-life example: A mechanic fixes a car.
School example: A student fixes a broken pencil.
Home example: You fix a broken lamp.
Nigerian example: Nigerian admins troubleshoot switches.
Illustration:
Common Issues: -------------- - Link down (cable disconnected) - Speed mismatch - VLAN misconfiguration - STP blocking
✅ Mini summary: Troubleshooting fixes common switch problems.
Definition: You have learned about Ethernet and switching.
Why it's important: These are essential skills for networking.
Simple explanation: You have learned the basics of local networks.
Real-life example: A builder who knows how to build a foundation.
School example: A student who knows the basics of math.
Home example: A cook who knows the basics of cooking.
Nigerian example: A Nigerian network admin can now configure switches.
Illustration:
What You Learned: ----------------- - Ethernet and Ethernet frames - MAC addresses - How switches learn and forward - Collision and broadcast domains - STP and VLANs - Trunking - Basic switch configuration - Switch security - Troubleshooting
✅ Mini summary: You have learned the essentials of Ethernet and switching.
+------------------------------------------------------+ | Preamble | Dest MAC | Source MAC | Type | Data | FCS | +------------------------------------------------------+
Frame arrives on port
|
V
Learn source MAC
|
V
Look up dest MAC in table
|
+-----+-----+
| Found | Not Found
V V
Forward Flood
to port to all ports
| Feature | Switch | Hub |
|---|---|---|
| Intelligent | Yes | No |
| Learns MAC addresses | Yes | No |
| Collision domains | Each port is its own | All ports share one |
| Performance | High | Low |
| Cost | Higher | Lower |
1973: Ethernet invented (2.94 Mbps) 1985: Ethernet becomes IEEE standard (10 Mbps) 1995: Fast Ethernet (100 Mbps) 1998: Gigabit Ethernet (1000 Mbps) 2002: 10 Gigabit Ethernet 2024: 100 Gigabit Ethernet
You have completed Module 2 of the CCNA course. You have learned about Ethernet and switching – the foundation of local area networks. You now understand Ethernet frames, MAC addresses, how switches learn and forward, collision and broadcast domains, STP, VLANs, trunking, basic switch configuration, security, and troubleshooting. You are now ready to move on to Module 3, where you will learn about routing.
Match the term to its description:
| Term | Description |
|---|---|
| 1. Ethernet | A. A unique hardware address |
| 2. MAC Address | B. The most common LAN protocol |
| 3. Switch | C. Connects devices on a LAN |
| 4. VLAN | D. A logical partition of a network |
| 5. STP | E. Prevents loops |
Answers: 1-B, 2-A, 3-C, 4-D, 5-E
Scenario 1: Your company has two departments: Sales and Engineering. You want to separate their traffic. What would you use?
Scenario 2: You connect two switches together and notice that the network is very slow. What could be the problem and how would you fix it?
In groups of 3-4, use Packet Tracer to create a network with two switches and four computers. Configure VLANs to separate the computers into two groups. Test connectivity.
Use Packet Tracer to configure a switch with an IP address and VLAN. Verify the configuration with show commands. Write a short report on what you did.
Design a network for a small office with 30 computers. Include switches and VLANs. Draw a diagram and explain your design choices.
Use Packet Tracer to configure a switch with a management IP address, enable SSH, and configure port security. Verify your configuration.
Set up a network with two switches connected via a trunk link. Configure VLANs on both switches and ensure hosts in the same VLAN can communicate across switches.
Multiple choice answers are provided above. Fill-in-the-blank answers:
In Module 3, we will learn about routing – how data travels between different networks. You will learn about IP addressing, subnetting, and how routers work. Get ready to take your networking skills to the next level!
🎉 Congratulations! You have completed Module 2 of the CCNA course. 🎉
You are now ready to move on to Module 3 – Routing and IP Addressing.
Welcome back, young network explorer! In Modules 1 and 2, we learned about networking basics and how switches work on a local network. Now, in Module 3, we are going to learn about routing – how data travels between different networks. Imagine you want to send a letter from your city to another city. You need a postal system to get it there. In networking, that postal system is called routing. We will also learn about IP addressing and subnetting – the address system that makes routing possible. By the end of this module, you will understand how data moves across the internet. Let's begin!
By the end of this module, you will be able to:
In the country of Cyberland, there was a huge postal system. Every house had a unique address. The post office had a big routing table – a map that showed which road led to which neighborhood. When a letter arrived, the postmaster looked at the address, found the right neighborhood, and sent the letter along the best road. Sometimes, he would send letters directly. Other times, he would send them through other post offices. This is exactly how routing works in computer networks. IP addresses are like house addresses, and routers are like post offices that use routing tables to deliver packets.
Definition: An IP address is a unique number that identifies a device on a network.
Why it's important: It's like a phone number for your device.
Simple explanation: Like a house address for your computer.
Real-life example: Your home has a street address.
School example: Each student has a seat number.
Home example: Your room has a number.
Nigerian example: Nigerian internet uses IP addresses.
Illustration:
IPv4 Address: 192.168.1.1 IPv6 Address: 2001:0db8:85a3::8a2e:0370:7334
✅ Mini summary: An IP address is a unique number for a device.
Definition: IPv4 has 32-bit addresses (4 numbers). IPv6 has 128-bit addresses (8 groups).
Why it's important: IPv6 was created because we ran out of IPv4 addresses.
Simple explanation: IPv4 is like a small phone book; IPv6 is like a huge phone book.
Real-life example: IPv4 has about 4 billion addresses; IPv6 has almost unlimited.
School example: A small school has 100 students; a large school has 10,000 students.
Home example: A small apartment vs a large building.
Nigerian example: Nigerian ISPs are adopting IPv6.
Illustration:
IPv4: 192.168.1.1 (4 numbers) IPv6: 2001:0db8:85a3:0000:0000:8a2e:0370:7334 (8 groups)
✅ Mini summary: IPv4 has 32-bit addresses; IPv6 has 128-bit addresses.
Definition: A subnet mask tells you which part of an IP address is the network and which part is the host.
Why it's important: It helps routers find the right network.
Simple explanation: Like a zip code that tells you which city you're in.
Real-life example: A zip code tells the post office which city to deliver to.
School example: A grade level tells you which class a student is in.
Home example: A street name tells you which area you're in.
Nigerian example: Nigerian networks use subnet masks.
Illustration:
IP Address: 192.168.1.10 Subnet Mask: 255.255.255.0 Network: 192.168.1.0 Host: 10
✅ Mini summary: A subnet mask tells you which part is the network.
Definition: Subnetting is dividing a large network into smaller networks.
Why it's important: It improves performance and security.
Simple explanation: Like dividing a large city into smaller neighborhoods.
Real-life example: A city is divided into districts.
School example: A school is divided into classes.
Home example: Your house is divided into rooms.
Nigerian example: Nigerian networks use subnetting.
Illustration:
Original Network: 192.168.1.0/24 Subnetted: - 192.168.1.0/25 (Hosts 1-126) - 192.168.1.128/25 (Hosts 129-254)
✅ Mini summary: Subnetting divides a large network into smaller ones.
Definition: VLSM allows different subnets to have different sizes.
Why it's important: It saves IP addresses.
Simple explanation: Like having different sized rooms for different needs.
Real-life example: A building has small offices and large conference rooms.
School example: A school has small classrooms and a large auditorium.
Home example: Your house has small closets and large rooms.
Nigerian example: Nigerian networks use VLSM.
Illustration:
VLSM Example: - 192.168.1.0/26 (62 hosts) - 192.168.1.64/28 (14 hosts) - 192.168.1.80/29 (6 hosts)
✅ Mini summary: VLSM allows different subnets to have different sizes.
Definition: A router is a device that connects different networks.
Why it's important: It sends data between networks.
Simple explanation: Like a post office that sends mail to other cities.
Real-life example: Your home router connects your network to the internet.
School example: A school router connects the school to the internet.
Home example: Your Wi-Fi router connects your devices to the internet.
Nigerian example: Nigerian ISPs use routers.
Illustration:
Network A ---> Router <--- Network B
✅ Mini summary: A router connects different networks.
Definition: A routing table is a map that tells a router where to send data.
Why it's important: It helps routers make forwarding decisions.
Simple explanation: Like a map that shows which road to take.
Real-life example: A GPS map shows the best route.
School example: A school map shows where classrooms are.
Home example: A floor plan shows where rooms are.
Nigerian example: Nigerian routers use routing tables.
Illustration:
Routing Table: +----------------+----------------+----------------+ | Destination | Next Hop | Interface | +----------------+----------------+----------------+ | 192.168.1.0/24 | 192.168.1.1 | Gig0/0 | | 10.0.0.0/8 | 10.0.0.1 | Gig0/1 | +----------------+----------------+----------------+
✅ Mini summary: A routing table tells a router where to send data.
Definition: Static routing is when an administrator manually configures routes.
Why it's important: It's simple and secure for small networks.
Simple explanation: Like writing down directions on a piece of paper.
Real-life example: You write down directions to a friend's house.
School example: A teacher writes instructions on the board.
Home example: You write a shopping list.
Nigerian example: Nigerian admins use static routes for small networks.
Illustration:
Static Route Command: ip route 10.0.0.0 255.0.0.0 192.168.1.2
✅ Mini summary: Static routing is manually configured.
Definition: Dynamic routing uses protocols to share routing information automatically.
Why it's important: It's more efficient for large networks.
Simple explanation: Like a GPS that updates automatically.
Real-life example: A GPS updates the route if there is traffic.
School example: A school schedule that changes automatically.
Home example: Your phone updates apps automatically.
Nigerian example: Nigerian ISPs use dynamic routing.
Illustration:
Dynamic Routing Protocols: - OSPF (Open Shortest Path First) - EIGRP (Enhanced Interior Gateway Routing Protocol) - RIP (Routing Information Protocol)
✅ Mini summary: Dynamic routing protocols share routing information automatically.
Definition: OSPF is a dynamic routing protocol that uses cost to find the best path.
Why it's important: It's widely used in enterprise networks.
Simple explanation: Like a GPS that finds the fastest route.
Real-life example: A GPS finds the shortest path to your destination.
School example: A student finds the fastest way to the cafeteria.
Home example: You find the fastest route to the grocery store.
Nigerian example: Nigerian enterprises use OSPF.
Illustration:
OSPF Configuration: router ospf 1 network 192.168.1.0 0.0.0.255 area 0
✅ Mini summary: OSPF uses cost to find the best path.
Definition: EIGRP is a Cisco proprietary dynamic routing protocol.
Why it's important: It's fast and efficient for Cisco networks.
Simple explanation: Like a GPS that learns and improves over time.
Real-life example: A GPS learns the driver's habits and suggests better routes.
School example: A teacher learns which teaching methods work best.
Home example: You learn the best time to leave for work.
Nigerian example: Nigerian Cisco networks use EIGRP.
Illustration:
EIGRP Configuration: router eigrp 10 network 192.168.1.0
✅ Mini summary: EIGRP is a fast, Cisco proprietary protocol.
Definition: NAT translates private IP addresses to public IP addresses.
Why it's important: It allows many devices to share one public IP address.
Simple explanation: Like a secretary who takes messages for a whole office.
Real-life example: Your router uses NAT to share one IP address with all your devices.
School example: A school uses one phone number for the entire school.
Home example: Your family uses one phone number for everyone.
Nigerian example: Nigerian ISPs use NAT.
Illustration:
Private IP (192.168.1.10) -> NAT -> Public IP (1.2.3.4)
✅ Mini summary: NAT translates private IPs to public IPs.
Definition: A default gateway is the router that a device uses to send traffic outside its network.
Why it's important: Without a default gateway, devices can't reach the internet.
Simple explanation: Like a door you use to leave your house.
Real-life example: Your home router is your default gateway.
School example: The school's main entrance is like a default gateway.
Home example: Your front door is the default gateway to your house.
Nigerian example: Nigerian networks use default gateways.
Illustration:
Default Gateway: 192.168.1.1 (Your router's IP address)
✅ Mini summary: A default gateway is the router a device uses to leave its network.
Definition: Troubleshooting involves checking IP configurations for errors.
Why it's important: IP misconfigurations can cause connectivity issues.
Simple explanation: Like checking if you wrote the right address on an envelope.
Real-life example: You check if you wrote the correct address.
School example: A student checks their answers.
Home example: You check if you locked the door.
Nigerian example: Nigerian admins troubleshoot IP issues.
Illustration:
Troubleshooting Commands: - ipconfig (Windows) - ifconfig (Linux) - ping (Test connectivity) - traceroute (Find the path)
✅ Mini summary: Troubleshooting checks IP configurations for errors.
Definition: You have learned about routing and IP addressing.
Why it's important: These are essential skills for networking.
Simple explanation: You have learned how data moves between networks.
Real-life example: A postal worker who knows how to deliver mail anywhere.
School example: A student who knows how to navigate the school.
Home example: A person who knows how to get around the city.
Nigerian example: A Nigerian network admin can now route traffic.
Illustration:
What You Learned: ----------------- - IP addresses and subnet masks - IPv4 vs IPv6 - Subnetting and VLSM - Routers and routing tables - Static and dynamic routing - OSPF and EIGRP - NAT and default gateways - Troubleshooting IP addressing
✅ Mini summary: You have learned the essentials of routing and IP addressing.
configure terminalip route 10.0.0.0 255.0.0.0 192.168.1.2show ip routeconfigure terminalrouter ospf 1network 192.168.1.0 0.0.0.255 area 0show ip ospf+-------------------+-------------------+-------------------+ | Source IP | Destination IP | Data | | 192.168.1.1 | 8.8.8.8 | | +-------------------+-------------------+-------------------+
Packet arrives
|
V
Check destination IP
|
V
Look up in routing table
|
+-----+-----+
| Found | Not Found
V V
Forward Drop or
to next send to
hop default
gateway
| Feature | IPv4 | IPv6 |
|---|---|---|
| Address length | 32 bits | 128 bits |
| Number of addresses | 4.3 billion | 340 undecillion |
| Address format | Dotted decimal (192.168.1.1) | Hexadecimal (2001:db8::1) |
| Subnet mask | Yes | Yes (prefix length) |
| NAT | Commonly used | Not needed |
1969: First router (ARPANET) 1980s: RIP introduced 1990s: OSPF and EIGRP introduced 2000s: MPLS and advanced routing 2024: IPv6 routing becomes common
You have completed Module 3 of the CCNA course. You have learned about routing and IP addressing – the foundation of internet communication. You now understand IP addresses, subnet masks, subnetting, VLSM, routers, routing tables, static and dynamic routing, OSPF, EIGRP, NAT, and default gateways. You are now ready to move on to Module 4, where you will learn about network security and access control lists.
Match the term to its description:
| Term | Description |
|---|---|
| 1. IP Address | A. A unique number for a device |
| 2. Subnet Mask | B. Separates network and host |
| 3. Router | C. Connects different networks |
| 4. NAT | D. Translates private IPs to public |
| 5. OSPF | E. A dynamic routing protocol |
Answers: 1-A, 2-B, 3-C, 4-D, 5-E
Scenario 1: A company has 50 employees in one office and 30 employees in another. They want to connect both offices. What device and protocol would you recommend?
Scenario 2: A company has a private network with IP addresses 192.168.1.0/24. They want to connect to the internet. What do they need to set up?
In groups of 3-4, design a network with three routers and four PCs. Configure static routing so that all PCs can communicate. Test connectivity.
Use Packet Tracer to configure OSPF on three routers. Verify the routing table and test connectivity between PCs.
Design a network for a company with three branches. Each branch has its own subnet. Configure static routing between the branches. Draw the network diagram and write the configuration commands.
Use Packet Tracer to create a network with two routers and four PCs. Configure static routing. Test connectivity from PC1 to PC4.
Set up a network with three routers and OSPF. Create multiple subnets and advertise them. Verify the routing table and test connectivity.
Multiple choice answers are provided above. Fill-in-the-blank answers:
In Module 4, we will learn about network security. You will learn about firewalls, access control lists (ACLs), and how to protect networks from threats. Get ready to become a network security expert!
🎉 Congratulations! You have completed Module 3 of the CCNA course. 🎉
You are now ready to move on to Module 4 – Network Security and ACLs.
Welcome back, young network explorer! In Modules 1, 2, and 3, we learned about networking basics, switching, and routing. Now, in Module 4, we will learn about network security – how to protect networks from unauthorized access and attacks. You will learn about Access Control Lists (ACLs), which are like security guards that decide who can enter and who is blocked. You will also learn about other security features like passwords, SSH, and firewalls. By the end of this module, you will know how to keep a network safe. Let's begin!
By the end of this module, you will be able to:
In the city of Cyberville, there was a large office building. At the entrance, there was a security guard named Kofi. His job was to check everyone who entered. He had a list of people who were allowed in. He also had a list of people who were not allowed in. If someone was on the allowed list, he let them in. If someone was on the blocked list, he stopped them. This is exactly how an Access Control List (ACL) works in networking. It allows or denies traffic based on rules. In this module, you will learn how to be the security guard of a network.
Definition: Network security is the practice of protecting a network from unauthorized access and attacks.
Why it's important: Without security, hackers can steal data, disrupt services, and cause damage.
Simple explanation: Like locking your doors to keep your house safe.
Real-life example: A bank uses firewalls and passwords to protect customer data.
School example: A school locks its doors to keep students safe.
Home example: You lock your front door to prevent intruders.
Nigerian example: Nigerian companies implement network security.
Illustration:
Security Threats: ----------------- - Hackers stealing data - Viruses and malware - Denial of Service attacks - Unauthorized access
✅ Mini summary: Network security protects networks from threats.
Definition: An ACL is a set of rules that allows or denies traffic based on criteria.
Why it's important: It acts like a security guard, controlling who can enter the network.
Simple explanation: Like a bouncer at a club who checks IDs.
Real-life example: A security guard checks IDs at a building entrance.
School example: A teacher checks if students have permission to leave class.
Home example: You check if a visitor is someone you know.
Nigerian example: Nigerian networks use ACLs for security.
Illustration:
ACL Rules: ---------- Rule 1: Permit 192.168.1.0/24 Rule 2: Deny 10.0.0.0/8 Rule 3: Permit any
✅ Mini summary: An ACL is a set of rules that allows or denies traffic.
Definition: A standard ACL filters traffic based on the source IP address only.
Why it's important: It's simple and useful for basic filtering.
Simple explanation: Like checking only the return address on a letter.
Real-life example: A postal worker checks only the sender's address.
School example: A teacher checks only the student's name.
Home example: You check only the name on a delivery package.
Nigerian example: Nigerian admins use standard ACLs for simple filtering.
Illustration:
Standard ACL Example: --------------------- access-list 10 permit 192.168.1.0 0.0.0.255 access-list 10 deny any
✅ Mini summary: Standard ACLs filter based on source IP address.
Definition: An extended ACL filters traffic based on source IP, destination IP, protocol, and port.
Why it's important: It provides more detailed control.
Simple explanation: Like checking the sender, recipient, and the subject of a letter.
Real-life example: A security guard checks who is entering, where they are going, and why.
School example: A teacher checks the student, the class, and the subject.
Home example: You check who is calling, what they want, and when.
Nigerian example: Nigerian enterprises use extended ACLs for detailed control.
Illustration:
Extended ACL Example: --------------------- access-list 100 permit tcp 192.168.1.0 0.0.0.255 10.0.0.0 0.255.255.255 eq 80 access-list 100 deny ip any any
✅ Mini summary: Extended ACLs filter based on multiple criteria.
Definition: Configuring an ACL involves creating the rules and applying them to an interface.
Why it's important: The ACL must be applied to a router interface to take effect.
Simple explanation: Like creating a list and giving it to the security guard.
Real-life example: A security guard receives a list of allowed people.
School example: A teacher gives a list of students who can leave early.
Home example: You give a list of approved visitors to the front desk.
Nigerian example: Nigerian admins follow these steps.
Illustration:
ACL Configuration Steps: ------------------------ 1. Create the ACL: access-list 2. Apply to interface: ip access-group
✅ Mini summary: ACLs are created then applied to an interface.
Definition: A wildcard mask is used in ACLs to specify which bits of an IP address to match.
Why it's important: It allows flexibility in matching addresses.
Simple explanation: Like a pattern that lets you match some numbers but not others.
Real-life example: A phone number with wildcards can match multiple numbers.
School example: A teacher checks if students are in a specific grade.
Home example: You check if a product is in a specific category.
Nigerian example: Nigerian admins use wildcard masks.
Illustration:
Wildcard Mask: -------------- IP: 192.168.1.0 Wildcard: 0.0.0.255 (matches 192.168.1.0 - 192.168.1.255)
✅ Mini summary: Wildcard masks specify which bits to match in ACLs.
Definition: ACLs must be applied to an interface in a specific direction (inbound or outbound).
Why it's important: The direction determines which traffic the ACL filters.
Simple explanation: Like placing the security guard at the entrance or exit.
Real-life example: A security guard checks people entering or leaving.
School example: A teacher checks students entering or leaving the classroom.
Home example: You check packages coming in or going out.
Nigerian example: Nigerian admins apply ACLs correctly.
Illustration:
Applying ACLs: -------------- interface Gig0/0 ip access-group 10 in ip access-group 20 out
✅ Mini summary: ACLs are applied to interfaces in a specific direction.
Definition: Port security limits the number of MAC addresses on a switch port.
Why it's important: It prevents unauthorized devices from connecting.
Simple explanation: Like limiting the number of guests who can enter a room.
Real-life example: A club limits the number of people in a room.
School example: A classroom has a maximum number of students.
Home example: Your car has a maximum number of passengers.
Nigerian example: Nigerian switches use port security.
Illustration:
Port Security Configuration: ---------------------------- interface FastEthernet0/1 switchport port-security switchport port-security maximum 1 switchport port-security violation shutdown
✅ Mini summary: Port security limits MAC addresses on a switch port.
Definition: Passwords and authentication protect access to network devices.
Why it's important: Without passwords, anyone could configure the device.
Simple explanation: Like having a PIN to unlock your phone.
Real-life example: You use a password to log into your computer.
School example: A student uses a password to log into the school portal.
Home example: You use a password to unlock your tablet.
Nigerian example: Nigerian admins use strong passwords.
Illustration:
Password Configuration: ---------------------- enable secret MySecretPassword line vty 0 4 password MyVtyPassword login
✅ Mini summary: Passwords protect access to network devices.
Definition: SSH provides secure remote access to network devices.
Why it's important: Telnet sends passwords in plain text; SSH encrypts them.
Simple explanation: Like sending a secret message in a locked box.
Real-life example: You use a secure app to send messages.
School example: A teacher uses an encrypted email.
Home example: You use a secure banking app.
Nigerian example: Nigerian admins use SSH for secure access.
Illustration:
SSH Configuration: ------------------ hostname R1 ip domain-name example.com crypto key generate rsa username admin secret password line vty 0 4 transport input ssh login local
✅ Mini summary: SSH provides secure remote access.
Definition: A firewall is a device that filters traffic between networks.
Why it's important: It blocks malicious traffic from entering the network.
Simple explanation: Like a wall with a gate that only allows approved visitors.
Real-life example: A firewall is like a security gate at a company.
School example: A school's network has a firewall to protect students.
Home example: Your router has a basic firewall.
Nigerian example: Nigerian companies use firewalls.
Illustration:
Firewall: --------- Internet <-> Firewall <-> Internal Network
✅ Mini summary: A firewall filters traffic between networks.
Definition: VLAN security includes isolating VLANs and restricting VLAN access.
Why it's important: It prevents unauthorized access to sensitive data.
Simple explanation: Like having different rooms for different people.
Real-life example: A company has separate VLANs for HR and Accounting.
School example: A school has separate networks for students and teachers.
Home example: You have separate networks for family and guests.
Nigerian example: Nigerian enterprises use VLAN security.
Illustration:
VLAN Security: -------------- - Assign ports to specific VLANs - Use VLAN access control lists - Restrict VLAN trunking
✅ Mini summary: VLAN security isolates and protects networks.
Definition: Security best practices are recommendations for keeping networks safe.
Why it's important: Following best practices reduces risk.
Simple explanation: Like locking your doors and windows at night.
Real-life example: A company uses strong passwords and regular updates.
School example: A school teaches students about internet safety.
Home example: You install security cameras.
Nigerian example: Nigerian companies follow best practices.
Illustration:
Best Practices: --------------- - Use strong passwords - Enable SSH instead of Telnet - Apply ACLs to limit traffic - Keep software up to date - Monitor network traffic
✅ Mini summary: Best practices help keep networks secure.
Definition: Troubleshooting ACLs involves checking configurations and verifying traffic.
Why it's important: Misconfigured ACLs can block legitimate traffic.
Simple explanation: Like checking if a security guard is stopping the wrong people.
Real-life example: You check if a locked door is the right one.
School example: A teacher checks if the right students are in the right class.
Home example: You check if the alarm is set correctly.
Nigerian example: Nigerian admins troubleshoot ACLs.
Illustration:
Troubleshooting Commands: ------------------------- show access-lists show ip interface debug ip packet (careful!)
✅ Mini summary: Troubleshooting ACLs finds and fixes configuration errors.
Definition: You have learned about network security and ACLs.
Why it's important: These skills are essential for protecting networks.
Simple explanation: You have learned to be a network security guard.
Real-life example: A security professional who protects networks.
School example: A student who knows how to stay safe online.
Home example: A person who secures their home network.
Nigerian example: A Nigerian network admin can now secure networks.
Illustration:
What You Learned: ----------------- - Network security importance - Access Control Lists (ACLs) - Standard and extended ACLs - Wildcard masks - Applying ACLs to interfaces - Port security - Passwords and authentication - SSH and firewalls - VLAN security - Security best practices - Troubleshooting ACLs
✅ Mini summary: You have learned the essentials of network security and ACLs.
configure terminalaccess-list 10 permit 192.168.1.0 0.0.0.255interface Gig0/0ip access-group 10 ininterface FastEthernet0/1switchport port-securityswitchport port-security maximum 1switchport port-security violation shutdown
Packet arrives
|
V
Check ACL rules in order
|
+-----+-----+
| Match | No match
V V
Permit Deny
or or
Deny Continue
Create ACL
|
V
Apply to interface
|
V
Verify with show
|
V
Test with traffic
| Feature | Standard ACL | Extended ACL |
|---|---|---|
| Filter criteria | Source IP only | Source IP, Dest IP, Protocol, Port |
| Number range | 1-99, 1300-1999 | 100-199, 2000-2699 |
| Placement | Near destination | Near source |
| Example | access-list 10 permit 192.168.1.0 | access-list 100 permit tcp 192.168.1.0 10.0.0.0 eq 80 |
| Complexity | Simple | Complex |
1980s: First firewalls developed 1995: SSH created 2000s: Advanced ACLs become common 2010s: Next-generation firewalls 2024: AI-powered security
You have completed Module 4 of the CCNA course. You have learned about network security and Access Control Lists. You now understand standard and extended ACLs, wildcard masks, applying ACLs to interfaces, port security, passwords, SSH, firewalls, and security best practices. You are now ready to move on to Module 5, where you will learn about WAN technologies and network automation.
ip access-group on an interface.Match the term to its description:
| Term | Description |
|---|---|
| 1. ACL | A. A set of rules that allows or denies traffic |
| 2. Standard ACL | B. Filters by source IP only |
| 3. Extended ACL | C. Filters by source, destination, protocol, and port |
| 4. Wildcard Mask | D. Matches IP bits in ACLs |
| 5. SSH | E. Encrypted remote access |
Answers: 1-A, 2-B, 3-C, 4-D, 5-E
Scenario 1: A company wants to block all traffic from a specific IP address. What type of ACL would you use and how would you configure it?
Scenario 2: A company wants to allow only authorized devices to connect to its network. What security feature would you use?
In groups of 3-4, design a security policy for a small network. Include ACLs, port security, and passwords. Present your policy to the class.
Use Packet Tracer to configure an ACL that blocks traffic from a specific IP address. Test the ACL with ping.
Design a network security plan for a small office. Include ACLs, port security, and remote access security. Write a report on your design choices.
Use Packet Tracer to configure a router with standard and extended ACLs. Apply them to interfaces and test the configuration.
Set up a network with two routers and a switch. Configure ACLs to allow HTTP traffic from one network but block it from another. Test your configuration.
Multiple choice answers are provided above. Fill-in-the-blank answers:
In Module 5, we will learn about WAN technologies and network automation. You will learn about connecting networks over long distances and how automation is changing networking. Get ready to explore the world of wide area networks!
🎉 Congratulations! You have completed Module 4 of the CCNA course. 🎉
You are now ready to move on to Module 5 – WAN Technologies and Automation.
Welcome back, young network explorer! You have completed Modules 1 through 5 of the CCNA course. You have learned about networking basics, switching, routing, security, WANs, and automation. Now, in Module 6, we will prepare you for the CCNA 200-301 certification exam. You will learn test-taking strategies, review key topics, and practice with sample questions. This module is your final step to becoming a Cisco Certified Network Associate. Let's begin!
By the end of this module, you will be able to:
In the city of Cyberville, young Kofi had completed all his training. He had learned about networks, switches, routers, security, and automation. Now, he faced the final challenge – the CCNA certification exam. Kofi studied hard, practiced on Packet Tracer, and reviewed all his notes. On exam day, he was nervous but confident. He took his time, read each question carefully, and used the knowledge he had gained. When he saw the word "PASS" on the screen, he was overjoyed. He had become a Cisco Certified Network Associate. Now, it's your turn!
Definition: The CCNA 200-301 exam is the test you need to pass to become certified.
Why it's important: This exam validates your networking knowledge.
Simple explanation: Like a driving test – it proves you can drive.
Real-life example: A doctor takes a licensing exam.
School example: You take a final exam to pass a class.
Home example: A driver's test to get a license.
Nigerian example: Nigerian professionals take the CCNA exam.
Illustration:
Exam Details: ------------- - Code: 200-301 - Time: 120 minutes - Questions: ~100 - Format: Multiple-choice, drag-and-drop, simulations - Passing score: Varies (~800-850/1000)
✅ Mini summary: The CCNA 200-301 exam validates your networking skills.
Definition: This domain covers the basics of networking.
Why it's important: It's the foundation for everything else.
Simple explanation: Like learning the alphabet before reading.
Real-life example: Understanding what a network is.
School example: Learning basic math.
Home example: Learning the rules of a game.
Nigerian example: Nigerian students learn these fundamentals.
Illustration:
Key Topics: ----------- - OSI and TCP/IP models - IP addressing and subnetting - Ethernet and switching - Basic routing
✅ Mini summary: Network fundamentals are the foundation of the CCNA exam.
Definition: This domain covers how devices connect to a network.
Why it's important: It's about physical and data link layer technologies.
Simple explanation: Like building the roads for cars.
Real-life example: Setting up a switch for a LAN.
School example: Connecting computers in a lab.
Home example: Setting up your home Wi-Fi.
Nigerian example: Nigerian companies set up network access.
Illustration:
Key Topics: ----------- - VLANs and trunking - Spanning Tree Protocol (STP) - EtherChannel - Wireless LANs
✅ Mini summary: Network access covers how devices connect to the network.
Definition: This domain covers routing and IP addressing.
Why it's important: It's about how data travels between networks.
Simple explanation: Like postal delivery between cities.
Real-life example: Configuring a router.
School example: A school connecting to the internet.
Home example: Your router connecting to the internet.
Nigerian example: Nigerian admins configure IP connectivity.
Illustration:
Key Topics: ----------- - Static and dynamic routing - OSPF and EIGRP - IPv4 and IPv6 addressing - Default gateway
✅ Mini summary: IP connectivity covers routing between networks.
Definition: This domain covers services like DHCP, DNS, and NAT.
Why it's important: These services make networks functional.
Simple explanation: Like utilities in a city (water, electricity).
Real-life example: DHCP assigning IP addresses.
School example: A school using DNS to access websites.
Home example: Your router using NAT.
Nigerian example: Nigerian ISPs use IP services.
Illustration:
Key Topics: ----------- - DHCP (assigns IP addresses) - DNS (name resolution) - NAT (address translation) - NTP (time synchronization)
✅ Mini summary: IP services like DHCP, DNS, and NAT make networks functional.
Definition: This domain covers basic network security.
Why it's important: Networks must be protected from threats.
Simple explanation: Like locking your doors.
Real-life example: Configuring ACLs and port security.
School example: A school using firewalls.
Home example: Using a password for Wi-Fi.
Nigerian example: Nigerian companies implement security.
Illustration:
Key Topics: ----------- - ACLs (Access Control Lists) - Port security - VPNs and encryption - Security best practices
✅ Mini summary: Security fundamentals protect networks from threats.
Definition: This domain covers network automation and APIs.
Why it's important: Automation is the future of networking.
Simple explanation: Like using robots to do chores.
Real-life example: Using Ansible to configure routers.
School example: Using scripts to manage computers.
Home example: Smart home automation.
Nigerian example: Nigerian companies are adopting automation.
Illustration:
Key Topics: ----------- - SDN and SD-WAN - APIs (RESTful) - Automation tools (Ansible, Puppet, Chef) - JSON and YAML
✅ Mini summary: Automation and programmability are the future of networking.
Definition: Study strategies are methods to learn effectively.
Why it's important: Good strategies help you pass the exam.
Simple explanation: Like having a good game plan.
Real-life example: Creating a study schedule.
School example: Reviewing notes before a test.
Home example: Practicing a skill.
Nigerian example: Nigerian students use study strategies.
Illustration:
Strategies: ----------- - Create a study schedule - Practice with Packet Tracer - Review all modules - Take practice exams - Join study groups
✅ Mini summary: Good study strategies help you prepare for the exam.
Definition: Packet Tracer is a simulation tool for practicing networking.
Why it's important: Hands-on practice is essential.
Simple explanation: Like a flight simulator for pilots.
Real-life example: You can build networks without real hardware.
School example: A school uses Packet Tracer for labs.
Home example: You practice networking at home.
Nigerian example: Nigerian students use Packet Tracer.
Illustration:
Packet Tracer Features: ----------------------- - Build networks visually - Configure routers and switches - Test connectivity - Simulate real-world scenarios
✅ Mini summary: Packet Tracer lets you practice networking hands-on.
Definition: Sample questions help you practice for the exam.
Why it's important: They familiarize you with the question format.
Simple explanation: Like practicing for a sports game.
Real-life example: Taking a practice test.
School example: Doing sample problems.
Home example: Practicing a recipe.
Nigerian example: Nigerian students practice sample questions.
Illustration:
Sample Question 1: ------------------ What is the OSI model? a) A 7-layer model b) A 4-layer model c) A 5-layer model Answer: a
✅ Mini summary: Sample questions help you practice for the exam.
Definition: These sample questions focus on routing and switching topics.
Why it's important: They test your understanding of key concepts.
Simple explanation: Like checking if you know the rules of a game.
Real-life example: A practice test for driving.
School example: A quiz on math.
Home example: A practice for cooking.
Nigerian example: Nigerian students practice these questions.
Illustration:
Sample Question 2: ------------------ What does a switch use to forward frames? a) MAC address table b) Routing table c) ARP table Answer: a
✅ Mini summary: Sample questions on routing and switching test your knowledge.
Definition: These sample questions focus on security and automation topics.
Why it's important: They test your understanding of modern networking.
Simple explanation: Like checking if you know how to protect your house.
Real-life example: A practice test for security.
School example: A quiz on safety.
Home example: A practice for security.
Nigerian example: Nigerian students practice these questions.
Illustration:
Sample Question 3: ------------------ What does SSH provide? a) Encrypted remote access b) Unencrypted remote access c) File transfer Answer: a
✅ Mini summary: Sample questions on security and automation test your modern networking skills.
Definition: Test-taking strategies are techniques to perform well on exams.
Why it's important: They help you stay calm and focused.
Simple explanation: Like having a game plan for a match.
Real-life example: Reading questions carefully.
School example: Managing time during a test.
Home example: Planning a project.
Nigerian example: Nigerian students use test strategies.
Illustration:
Strategies: ----------- - Read questions carefully - Eliminate wrong answers - Manage time wisely - Answer easy questions first - Review your answers
✅ Mini summary: Test-taking strategies help you perform well on the exam.
Definition: After passing the exam, you become CCNA certified.
Why it's important: Certification opens doors for your career.
Simple explanation: Like getting a driver's license.
Real-life example: A certified professional gets better job opportunities.
School example: A diploma helps you get into college.
Home example: A license helps you drive.
Nigerian example: Nigerian certified professionals advance their careers.
Illustration:
Benefits of Certification: -------------------------- - Better job opportunities - Higher salary - Recognition in the industry - Foundation for advanced certifications
✅ Mini summary: CCNA certification opens doors for your career.
Definition: You have learned how to prepare for the CCNA exam.
Why it's important: You are now ready to take the exam.
Simple explanation: You have finished your training.
Real-life example: An athlete who is ready for the competition.
School example: A student who is ready for the final exam.
Home example: A person who is ready for a big event.
Nigerian example: A Nigerian student is ready for the exam.
Illustration:
What You Learned: ----------------- - CCNA 200-301 exam format - Key topics from all modules - Study strategies - Packet Tracer practice - Sample questions - Test-taking strategies - Next steps after certification
✅ Mini summary: You are now ready to take the CCNA exam.
Study --> Practice --> Review --> Exam --> Certified!
Start
|
V
Review all modules
|
V
Practice with Packet Tracer
|
V
Take practice exams
|
V
Identify weak areas
|
V
Review weak areas
|
V
Schedule exam
|
V
Take exam
|
V
PASS! - Certified
| Certification | Focus | Experience Level |
|---|---|---|
| CCNA | Networking fundamentals | Entry to mid-level |
| CCNP | Advanced networking | Mid to senior level |
| CompTIA Network+ | Vendor-neutral networking | Entry-level |
| Security+ | Security fundamentals | Entry-level |
Week 1-2: Module 1 (Networking Basics) Week 3-4: Module 2 (Ethernet and Switching) Week 5-6: Module 3 (Routing and IP Addressing) Week 7-8: Module 4 (Network Security and ACLs) Week 9-10: Module 5 (WANs and Automation) Week 11-12: Module 6 (Exam Preparation) Week 13: Take the Exam!
You have completed Module 6 – the final module of the CCNA course. You have learned about the CCNA 200-301 exam format, key topics from all modules, study strategies, hands-on practice with Packet Tracer, sample questions, and test-taking strategies. You are now fully prepared to take the CCNA certification exam. Good luck on your journey to becoming a Cisco Certified Network Associate!
Match the term to its description:
| Term | Description |
|---|---|
| 1. CCNA | A. Networking certification |
| 2. 200-301 | B. Exam code |
| 3. Packet Tracer | C. Simulation tool |
| 4. Certification | D. Proof of skills |
| 5. CCNP | E. Advanced Cisco certification |
Answers: 1-A, 2-B, 3-C, 4-D, 5-E
Scenario 1: You are preparing for the CCNA exam. You have finished all the modules. What are the next steps you should take?
Scenario 2: You take the exam and fail. What should you do next?
In groups of 3-4, create a study plan for the CCNA exam. Include a timeline, study resources, and practice strategies. Present your plan to the class.
Create a personal study schedule for the CCNA exam. Include daily and weekly goals. Follow the schedule for one week and track your progress.
Create a "CCNA Exam Guide" for future students. Include tips, resources, and sample questions. Share your guide with the class.
Take a practice exam online. Identify the areas where you scored lowest. Review those modules and retake the practice exam.
Build a complete network in Packet Tracer with routers, switches, ACLs, and VLANs. Document the configuration and test connectivity. This simulates the hands-on part of the exam.
Multiple choice answers are provided above. Fill-in-the-blank answers:
You have now completed the CCNA course. You are ready to take the certification exam and start your career in networking. Keep practicing, stay curious, and always continue learning. The world of networking is vast and exciting. Good luck on your journey!
🎉 Congratulations! You have completed the CCNA course. 🎉
You are now ready to become a Cisco Certified Network Associate!