CCNA Certification Study Guide: Exam 200-301

CCNA Certification Study Guide
Acknowledgments
About the Author
Contents at a Glance
Contents
Introduction
Cisco’s Network Certifications
What Does This Book Cover?
Interactive Online Learning Environment and Test Bank
CCNA Exam Overview
Are there any prerequisites to take before the CCNA exam can be taken?
How to Use This Book
Where Do You Take the Exam?
Tips for Taking Your Cisco Exams
CCNA Certification Exam 200-301 Objectives
Assessment Test
Answers to Assessment Test
Chapter 1 Network Fundamentals
Network Components
Next-Generation Firewalls and IPS
Network Topology Architectures
The Cisco Three-Layer Hierarchical Model (3-Tier)
Collapsed Core (2-Tier)
Spine-Leaf
WAN
Defining WAN Terms
WAN Connection Bandwidth
Physical Interfaces and Cables
Ethernet Cabling
Straight-Through Cable
Crossover Cable
Fiber Optic
Power over Ethernet (802.3af, 802.3at)
Summary
Exam Essentials
Review Questions
Chapter 2 TCP/IP
Introducing TCP/IP
A Brief History of TCP/IP
TCP/IP and the DoD Model
The Process/Application Layer Protocols
The Host-to-Host or Transport Layer Protocols
The Internet Layer Protocols
IP Addressing
IP Terminology
The Hierarchical IP Addressing Scheme
Private IP Addresses (RFC 1918)
IPv4 Address Types
Layer 2 Broadcasts
Layer 3 Broadcasts
Unicast Address
Multicast Address
Summary
Exam Essentials
Review Questions
Chapter 3 Easy Subnetting
Subnetting Basics
How to Create Subnets
Subnet Masks
Classless Inter-Domain Routing (CIDR)
IP Subnet-Zero
Subnetting Class C Addresses
Subnetting Class B Addresses
Summary
Exam Essentials
Review Questions
Chapter 4 Troubleshooting IP Addressing
Cisco’s Way of Troubleshooting IP
Verify IP Parameters for Operating Systems (OS)
Determining IP Address Problems
Summary
Exam Essentials
Review Questions
Chapter 5 IP Routing
Routing Basics
The IP Routing Process
The Cisco Router Internal Process
Testing Your IP Routing Understanding
Configuring IP Routing
Corp Configuration
SF Configuration
LA Configuration
Configuring IP Routing in Our Network
Static Routing
Default Routing
Dynamic Routing
Routing Protocol Basics
Routing Information Protocol (RIP)
Configuring RIP Routing
Holding Down RIP Propagations
Summary
Exam Essentials
Review Questions
Chapter 6 Open Shortest Path First (OSPF)
Open Shortest Path First (OSPF) Basics
OSPF Terminology
OSPF Operation
Configuring OSPF
Enabling OSPF
Configuring OSPF Areas
Configuring Our Network with OSPF
OSPF and Loopback Interfaces
Configuring Loopback Interfaces
Verifying OSPF Configuration
The show ip ospf Command
The show ip ospf database Command
The show ip ospf interface Command
The show ip ospf neighbor Command
The show ip protocols Command
Summary
Exam Essentials
Review Questions
Chapter 7 Layer 2 Switching
Switching Services
Three Switch Functions at Layer 2
Port Security
Configuring Catalyst Switches
Catalyst Switch Configuration
Verifying Cisco Catalyst Switches
Summary
Exam Essentials
Review Questions
Chapter 8 VLANs and Inter-VLAN Routing
VLAN Basics
Broadcast Control
Security
Flexibility and Scalability
Identifying VLANs
Frame Tagging
VLAN Identification Methods
Routing Between VLANs
Configuring VLANs
Assigning Switch Ports to VLANs
Configuring Trunk Ports
Configuring Inter-VLAN Routing
Summary
Exam Essentials
Review Questions
Chapter 9 Enhanced Switched Technologies
Spanning Tree Protocol (STP)
Spanning-Tree Terms
Spanning-Tree Operations
Types of Spanning-Tree Protocols
Common Spanning Tree
Per-VLAN Spanning Tree+
Modifying and Verifying the Bridge ID
Spanning-Tree Failure Consequences
PortFast and BPDU Guard
BPDU Guard
EtherChannel
Configuring and Verifying Port Channels
Layer-3 EtherChannel
Summary
Exam Essentials
Review Questions
Chapter 10 Access Lists
Perimeter, Firewall, and Internal Routers
Introduction to Access Lists
Mitigating Security Issues with ACLs
Standard Access Lists
Wildcard Masking
Standard Access List Example
Controlling VTY (Telnet/SSH) Access
Extended Access Lists
Extended Access List Example 1
Extended Access List Example 2
Extended Access List Example 3
Named ACLs
Remarks
Monitoring Access Lists
Summary
Exam Essentials
Review Questions
Chapter 11 Network Address Translation (NAT)
When Do We Use NAT?
Types of Network Address Translation
NAT Names
How NAT Works
Static NAT Configuration
Dynamic NAT Configuration
PAT (Overloading) Configuration
Simple Verification of NAT
Testing and Troubleshooting NAT
Summary
Exam Essentials
Review Questions
Chapter 12 IP Services
Exploring Connected Devices Using CDP and LLDP
Getting CDP Timers and Holdtime Information
Gathering Neighbor Information
Documenting a Network Topology Using CDP
Network Time Protocol (NTP)
SNMP
Management Information Base (MIB)
Configuring SNMP
Syslog
Configuring and Verifying Syslog
Secure Shell (SSH)
Summary
Exam Essentials
Review Questions
Chapter 13 Security
Network Security Threats
Three Primary Network Attacks
Network Attacks
Eavesdropping
Denial-of-Service Attacks
Unauthorized Access
WareZ
Masquerade Attack (IP Spoofing)
Session Hijacking or Replaying
Rerouting
Repudiation
Smurfing
Password Attacks
Man-in-the-Middle Attacks
Application-Layer Attacks
Trojan Horse Programs, Viruses, and Worms
HTML Attacks
Security Program Elements
User Awareness
Training
Physical Access Control
Layer 2 Security Features
Securing Network Access with Cisco AAA
Authentication Methods
Windows Authentication
Security Server Authentication
External Authentication Options
Managing User Accounts
Disabling Accounts
Setting Up Anonymous Accounts
Limiting Connections
Renaming the Maintenance Account
Security Password Policy Elements
Password Management
Managing Passwords
Single Sign-On
Local Authentication
LDAP
Password Alternatives
User-Authentication Methods
Public Key Infrastructure (PKI)
Kerberos
Setting Passwords
Auxiliary Password
Summary
Exam Essentials
Review Questions
Chapter 14 First Hop Redundancy Protocol (HSRP)
Client Redundancy Issues
Introducing First Hop Redundancy Protocol (FHRP)
Hot Standby Router Protocol (HSRP)
Virtual MAC Address
HSRP Timers
Group Roles
Configuring and Verifying HSRP
Summary
Exam Essentials
Review Questions
Chapter 15 Virtual Private Networks (VPNs)
Virtual Private Networks
Benefits of VPNs
Enterprise- and Provider-Managed VPNs
Introduction to Cisco IOS IPsec
IPsec Transforms
GRE Tunnels
GRE over IPsec
Configuring GRE Tunnels
Verifying GRP Tunnels
Summary
Exam Essentials
Review Questions
Chapter 16 Quality of Service (QoS)
Quality of Service
Traffic Characteristics
Trust Boundary
QoS Mechanisms
Classification and Marking
Policing, Shaping, and Re-marking
Tools for Managing Congestion
Tools for Congestion Avoidance
Summary
Exam Essentials
Review Questions
Chapter 17 Internet Protocol Version 6 (IPv6)
Why Do We Need IPv6?
The Benefits and Uses of IPv6
IPv6 Addressing and Expressions
Shortened Expression
Address Types
Special Addresses
How IPv6 Works in an Internetwork
Manual Address Assignment
Stateless Autoconfiguration (eui-64)
DHCPv6 (Stateful)
IPv6 Header
ICMPv6
IPv6 Routing Protocols
Static Routing with IPv6
Configuring IPv6 on Our Internetwork
Configuring Routing on Our Internetwork
Summary
Exam Essentials
Review Questions
Chapter 18 Troubleshooting IP, IPv6, and VLANs
Endpoints
Desktops/Laptops
Mobile Phones/Tablets
Access Points
IP Phones
Internet of Things
Servers
Server Roles
IP Config
Windows 10
macOS
Ubuntu/Red Hat
Troubleshooting IP Network Connectivity
Using SPAN for Troubleshooting
Configuring and Verifying Extended Access Lists
Troubleshooting IPv6 Network Connectivity
ICMPv6
Troubleshooting VLAN Connectivity
VLAN Troubleshooting
Trunk Troubleshooting
Summary
Exam Essentials
Review Questions
Chapter 19 Wireless Technologies
Wireless Networks
Wireless Personal Area Network (WPAN)
Wireless LAN (WLAN)
Wireless Metro Area Network (WMAN)
Wireless Wide Area Network (WWAN)
Basic Wireless Devices
Wireless Access Points
Wireless Network Interface Card (NIC)
Wireless Antennas
Wireless Principles
Independent Basic Service Set (Ad Hoc)
Basic Service Set (BSS)
Infrastructure Basic Service Set
Service Set ID
Extended Service Set
Repeaters
Bridging
Mesh Networks
Nonoverlapping Wi-Fi channels
2.4GHz Band
5GHz Band
Radio Frequency (RF)
Radio Frequency Behaviors
Free Space Path Loss
Absorption
Reflection
Multipath
Refraction
Diffraction
Scattering
RF Operational Requirements
Wireless Security
Authentication and Encryption
WEP
WPA and WPA2: An Overview
WPA3
Summary
Exam Essentials
Review Question
Chapter 20 Configuring Wireless Technologies
WLAN Deployment Models
Stand-Alone Model
Lightweight Model
Cloud Model
Setting Up a Wireless LAN Controller (WLC)
Configuring the Switch
WLC Initial Setup
Joining Access Points (APs)
Manual Method
DNS Method
DHCP Method
Configuring the VLAN
Configuring the Switchport
Wireless LAN Controllers (WLC)
WLC Port Types
WLC Interface Types
Management Interface
Service Port Interface
Redundancy Management
Virtual Interface
Dynamic Interface
Interface Groups
Link Aggregation Group (LAG)
Configuring the AP
AP Modes
AP and WLC Management Access Connections
CDP
Telnet
SSH
HTTP
HTTPS
Console
RADIUS
TACACS+
Connecting the Client
Summary
Exam Essentials
Review Questions
Chapter 21 Virtualization, Automation, and Programmability
Virtual Machine Fundamentals
Virtualization Components
Virtualization Features
Hardware Abstraction
Snapshots
Clones
Migrations
Virtualization Types
Type 1
Type 2
Hardware Virtualized Machine
Paravirtualization
Virtualization Solutions
VMware ESXi
Hyper-V
Xen/KVM
VMware Workstation/Fusion
VirtualBox
Automation Components
Python
JSON
YAML
REST API
Summary
Exam Essentials
Review Questions
Chapter 22 SDN Controllers
Traditional Network Monitoring Systems (NMS)
Configuring SNMP
Network Health
Central Syslog
Central SNMP Traps
Interface Information
Hardware Health
Network Information
Traditional Network Configuration Managers (NCM)
Traditional Networking
Management Plane
Control Plane
Data Plane
Forwarding
Introduction to SDN
Northbound Interfaces
Southbound Interfaces
SDN Solutions
Separating the Control Plane
Controller-Based Architectures
Campus Architecture
Spine/Leaf Architecture
SDN Network Components
Underlay
Overlay
Fabric
DNA Center Overview
Discovery
Network Hierarchy
Templates
Topology
Upgrades
Command Runner
Assurance
Path Trace
EasyQoS
LAN Automation
SD-Access
Restful API
Summary
Exam Essentials
Review Questions
Chapter 23 Configuration Management
Team Silos
DevOps
Infrastructure as Code (IaC)
Ansible
Installation
Settings
Inventory
Lab Setup
Modules
Ad-Hoc Example
Playbook Example
Ansible Tower/AWX
Puppet
Installation
Lab Setup
Site Manifest File
DC Manifest File
Installing the Puppet Agent
Verifying the Results
Puppet Enterprise
Chef
Installation – Server
Installation – Workstation
Lab Setup
Verifying the Results
Summary
Exam Essentials
Review Questions
Appendix Answer to Review Questions
Chapter 1: Network Fundamentals
Chapter 2: TCP/IP
Chapter 3: Easy Subnetting
Chapter 4: Troubleshooting IP Addressing
Chapter 5: IP Routing
Chapter 6: Open Shortest Path First (OSPF)
Chapter 7: Layer 2 Switching
Chapter 8: VLANs and Inter-VLAN Routing
Chapter 9: Enhanced Switched Technologies
Chapter 10: Access Lists
Chapter 11: Network Address Translation (NAT)
Chapter 12: IP Services
Chapter 13: Security
Chapter 14: First Hop Redundancy Protocol (HSRP)
Chapter 15: Virtual Private Networks (VPNs)
Chapter 16: Quality of Service (QoS)
Chapter 17: Internet Protocol Version 6 (IPv6)
Chapter 18: Troubleshooting IP, IPv6, and VLANs
Chapter 19: Wireless Technologies
Chapter 20: Configuring Wireless Technologies
Chapter 21: Virtualization, Automation, and Programmability
Chapter 22: SDN Controllers
Chapter 23: Configuration Management
Index
Advert
EULA