Loading, please wait...
Master CCNA with hands-on challenges and interactive lessons.
THE CONNECTED SYSTEM. Begin with the fundamental purpose of networking: moving information between systems. Establish the roles of endpoints, servers, switches, routers, wireless access points, firewalls, and network controllers, then connect those components into LAN, WAN, WLAN, Internet, and cloud architectures.
THE SHAPE OF THE NETWORK. Explore how networks are physically and logically organized. Compare star, extended-star, mesh, hybrid, two-tier, three-tier, spine-leaf, WAN, SOHO, on-premises, cloud, and hybrid architectures, and understand why topology determines scalability, redundancy, and traffic flow.
WHERE DATA BECOMES SIGNAL. Build the physical foundation of Ethernet networking with copper, fiber, connectors, transceivers, UTP, STP, single-mode fiber, multimode fiber, and PoE. Connect bandwidth, distance, attenuation, interference, and physical limitations to real network behavior.
PHYSICAL-LAYER FORENSICS. Learn to recognize collisions, CRC errors, input and output errors, duplex mismatches, speed mismatches, interface failures, and physical connectivity problems. Turn interface statistics and symptoms into a repeatable troubleshooting process.
THE LOCAL DELIVERY SYSTEM. Follow an Ethernet frame from source to destination. Examine MAC addresses, unicast, broadcast, multicast, frame fields, FCS, Ethernet II, and the role of Layer 2 addressing in local network communication.
THE SWITCHING ENGINE. Discover how switches learn MAC addresses, build CAM tables, flood unknown traffic, forward known destinations, filter frames, and age learned entries. Trace the exact decision a switch makes when an Ethernet frame enters one of its ports.
SEGMENTATION AT LAYER 2. Understand the relationship between collision domains, broadcast domains, switches, routers, and VLANs. See why modern full-duplex switched Ethernet behaves differently from the shared-media networks that preceded it.
THE NETWORK ENGINEER'S INTERFACE. Enter Cisco IOS and master User EXEC, Privileged EXEC, Global Configuration, Interface Configuration, and other configuration modes. Learn command syntax, context-sensitive help, command history, shortcuts, and the mental model behind IOS configuration.
FROM POWER-ON TO PRODUCTION. Follow a Cisco device through bootstrapping, IOS loading, startup configuration, running configuration, NVRAM, and configuration persistence. Establish hostnames, passwords, banners, management addressing, and the workflow used to safely save and restore configurations.
THE LANGUAGE OF IPv4. Translate between binary, decimal, network addresses, host addresses, prefixes, and masks. Understand historical address classes as context while moving toward the CIDR-based addressing model used by modern networks.
THE PRIVATE SIDE OF IPv4. Separate public and private address space and understand RFC 1918 ranges, loopback, link-local/APIPA, limited broadcast, directed broadcast, and other special-use addresses. Learn where each address type belongs and why.
ADDRESS SPACE ENGINEERING. Turn one IPv4 network into multiple logical networks. Calculate subnet boundaries, network addresses, broadcast addresses, usable host ranges, prefix lengths, and host capacity without relying on guesswork.
STOP WASTING ADDRESSES. Apply Variable Length Subnet Masking to networks with unequal host requirements. Design address plans that allocate only the space each segment needs while preserving room for future growth.
PUT THE NUMBERS TO WORK. Configure IPv4 addresses, subnet masks, gateways, and interface states on Cisco routers and switches. Verify connectivity with IOS commands and learn how incorrect addressing manifests in the network.
128 BITS OF POSSIBILITY. Move from IPv4 into the architecture of IPv6. Master hexadecimal notation, prefix lengths, address compression, interface identifiers, and the reasons IPv6 was designed around an enormous address space.
A NEW ADDRESSING MODEL. Distinguish Global Unicast, Link-Local, Unique Local, Multicast, Anycast, loopback, and unspecified IPv6 addresses. Understand which addresses are routable, which are local, and how IPv6 uses multicast where IPv4 traditionally relied on broadcast.
IPv6 FINDS ITS NEIGHBORS. Replace the ARP mental model with ICMPv6 Neighbor Discovery. Follow Neighbor Solicitation, Neighbor Advertisement, Router Solicitation, Router Advertisement, and Duplicate Address Detection as IPv6 devices discover one another and their gateways.
AUTOMATIC IPv6 CONFIGURATION. Build IPv6 hosts using Router Advertisements, SLAAC, Stateless DHCPv6, and Stateful DHCPv6. Compare what the router provides with what DHCPv6 provides and determine which method a network is actually using.
LOOK AT THE NETWORK FROM THE ENDPOINT. Use Windows, Linux, and macOS tools to inspect IP addresses, prefixes, gateways, DNS configuration, routing information, and interface state. Connect client-side observations to what is configured on the network infrastructure.
RELIABILITY VERSUS SPEED. Compare TCP and UDP through ports, sockets, connection establishment, sequencing, acknowledgments, retransmission, flow control, and connectionless delivery. Understand why different applications deliberately choose different transport behaviors.
THE SERVICES RUNNING ABOVE IP. Connect HTTP, HTTPS, DNS, DHCP, SSH, Telnet, FTP, TFTP, SMTP, SNMP, NTP, and Syslog to their transport protocols and common ports. Learn to recognize a service from the traffic and understand its role in an enterprise network.
ONE SWITCH, MANY NETWORKS. Create independent broadcast domains using VLANs. Work with VLAN IDs, access ports, normal-range VLANs, default VLAN behavior, voice VLANs, and the relationship between logical segmentation and physical switching.
CARRY MANY VLANs OVER ONE LINK. Explore IEEE 802.1Q tagging, trunk ports, native VLANs, allowed VLAN lists, and the mechanics of carrying multiple broadcast domains between switches. Build the foundation required for multi-switch VLAN architectures.
CONNECTING THE SWITCHING FABRIC. Configure and verify links between switches while paying attention to VLAN membership, trunk state, native VLAN consistency, allowed VLANs, and interface negotiation. Learn to identify why two apparently connected switches may still fail to exchange the expected traffic.
CROSSING THE BROADCAST BOUNDARY. Enable communication between VLANs using Router-on-a-Stick and Layer 3 switching with SVIs. Follow a packet from an endpoint through its default gateway into another VLAN and back again.
LET THE NETWORK REVEAL ITSELF. Use Cisco Discovery Protocol and Link Layer Discovery Protocol to identify neighboring devices, interfaces, platforms, capabilities, and management addresses. Turn neighbor information into a practical topology-discovery and troubleshooting tool.
MULTIPLE LINKS, ONE LOGICAL PATH. Combine physical interfaces into logical Port-Channels using LACP. Understand active and passive negotiation, Layer 2 and Layer 3 EtherChannel, load distribution, configuration consistency, and how the logical bundle interacts with STP.
REDUNDANCY WITHOUT CHAOS. Discover why redundant Ethernet links can create broadcast storms, duplicate frames, and unstable MAC tables. Build the STP mental model around Bridge IDs, BPDUs, root bridges, root ports, designated ports, path cost, and blocked paths.
FASTER CONVERGENCE. Explore Rapid PVST+ and its root, designated, alternate, and backup roles. Understand the transition between port states and how rapid convergence allows redundant Layer 2 infrastructure to recover quickly from topology changes.
PROTECT THE TREE. Harden spanning-tree behavior with PortFast, BPDU Guard, BPDU Filter, Root Guard, and Loop Guard. Learn what failure each mechanism is designed to prevent and recognize the operational consequences of misconfiguration.
FROM CABLE TO RADIO. Understand wireless LAN architecture through access points, wireless LAN controllers, lightweight and autonomous APs, SSIDs, cells, roaming, and centralized versus distributed management. Connect the wireless edge to the wired switching infrastructure beneath it.
THE PHYSICS OF WI-FI. Explore radio frequency, 2.4 GHz and 5 GHz operation, channels, channel width, interference, attenuation, signal strength, SNR, and overlapping channels. Learn why wireless performance is often limited by the environment rather than the access point itself.
HOW ACCESS POINTS CONNECT TO THE NETWORK. Examine AP operating modes and the physical connections between APs, switches, WLCs, trunks, access ports, and LAGs. Understand how wireless traffic enters and leaves the wired infrastructure.
THE WIRELESS CONTROL CHANNEL. Follow the relationship between lightweight access points and wireless controllers through CAPWAP. Understand control and data communication, AP discovery, controller registration, centralized policy, and the division of work between AP and WLC.
BUILD THE WLAN. Work through the concepts exposed by a wireless controller GUI: WLAN creation, SSIDs, client connectivity, security settings, QoS profiles, advanced settings, and operational status. Learn to interpret the controller rather than treating its GUI as a black box.
THE AUTOMATED ADDRESS DESK. Follow the DORA process from Discover to Acknowledge. Configure DHCP pools, excluded addresses, leases, default gateways, DNS options, and client addressing while understanding exactly where each parameter originates.
CROSSING THE ROUTER. Understand why DHCP broadcasts cannot normally cross Layer 3 boundaries and how a relay agent solves the problem. Configure and verify IP Helper-Address behavior between client VLANs and centralized DHCP services.
THE INTERNET'S DIRECTORY. Follow a DNS lookup from a client through recursive resolution and caching to an authoritative answer. Understand A, AAAA, CNAME, and other common records, and distinguish DNS failure from actual IP connectivity failure.
TRANSLATING THE ADDRESS SPACE. Configure inside-source NAT using static mappings, address pools, and PAT. Trace how private addresses become externally reachable addresses and inspect the translation table to understand what the router is actually doing.
TIME AS INFRASTRUCTURE. Configure and verify NTP in client and server roles. Understand stratum, clock synchronization, and why accurate time is essential for logs, troubleshooting, authentication, certificates, and security investigations.
THE NETWORK'S BLACK BOX. Learn how devices report operational events through Syslog. Interpret facilities and severity levels, distinguish informational events from serious failures, and understand how centralized logging transforms isolated device messages into an operational timeline.
MEASURING THE INFRASTRUCTURE. Understand SNMP's role in monitoring network devices, including managers, agents, OIDs, polling, traps, and basic SNMP versions. Connect monitoring data to interface health, availability, utilization, and operational visibility.
CHOOSING WHAT GETS THROUGH FIRST. Explore Quality of Service through classification, marking, queuing, congestion, policing, shaping, and per-hop behavior. Understand why bandwidth alone cannot guarantee good performance for voice, video, and latency-sensitive applications.
SECURE THE MANAGEMENT PLANE. Configure Cisco devices for SSH-based remote administration. Establish local credentials, domain information, keys, VTY access, and secure management practices while understanding why Telnet exposes administrative sessions to unnecessary risk.
MOVING CONFIGURATIONS AND IMAGES. Understand how TFTP and FTP are used for configuration backups, IOS image transfers, and operational file management. Learn the difference between transferring a file and actually restoring or applying what it contains.
THE ROUTER'S MAP. Read a Cisco routing table as a structured representation of reachable networks. Interpret connected, local, static, and dynamically learned routes, next hops, outgoing interfaces, administrative distance, metrics, and route codes.
THE FORWARDING DECISION. Give the router multiple possible paths and determine which one wins. Work through Longest Prefix Match first, followed by route preference and metric considerations, then trace how the selected route becomes the actual forwarding decision.
MANUAL PATH ENGINEERING. Configure IPv4 static, default, host, next-hop, exit-interface, and fully specified routes. Understand recursive lookups and verify the resulting forwarding behavior rather than assuming that an accepted command means the route is usable.
STATIC ROUTING IN THE IPv6 WORLD. Extend manual routing into IPv6 with global and link-local next hops, static routes, default routes, and verification. Learn the differences that matter when configuring IPv6 interfaces and routes on Cisco IOS.
THE BACKUP PATH. Build a route that stays dormant until the preferred path disappears. Use administrative distance to create predictable failover behavior and verify that the backup route enters and leaves the routing table at the correct time.
LET ROUTERS LEARN THE NETWORK. Introduce single-area OSPFv2 through neighbor relationships, Hello packets, Router IDs, link-state information, LSAs, SPF calculations, and OSPF cost. Understand why a link-state protocol can build a shared view of network topology.
WHEN ROUTERS BECOME NEIGHBORS. Follow the OSPF neighbor state machine from Down to Full. Examine Designated Router and Backup Designated Router elections on multi-access Ethernet networks and learn the common reasons an adjacency becomes stuck before Full state.
BUILD A DYNAMIC ROUTING DOMAIN. Configure OSPFv2, advertise networks, select Router IDs, use passive interfaces, verify neighbors, inspect the routing table, and troubleshoot incorrect advertisements. Turn the OSPF theory into a functioning multi-router topology.
REMOVE THE DEFAULT-GATEWAY SINGLE POINT OF FAILURE. Understand the purpose and operating principles of First Hop Redundancy Protocols. Compare HSRP, VRRP, and GLBP and see how redundant routers can present resilient gateway services to end hosts.
THINK LIKE AN ATTACKER, DESIGN LIKE A DEFENDER. Establish the vocabulary of threats, vulnerabilities, exploits, attack surfaces, risk, and mitigation. Examine reconnaissance, malware, DoS, credential attacks, social engineering, ARP spoofing, DHCP attacks, MAC flooding, and VLAN-related threats.
SECURITY STARTS OUTSIDE THE CLI. Explore user awareness, security training, physical access controls, policies, procedures, and operational discipline. Understand why technically secure devices can still be compromised through people, facilities, or weak processes.
LOCK THE DOOR TO THE NETWORK. Configure local device access controls, encrypted password storage, privileged access, console security, VTY restrictions, login controls, and secure administrative practices. Build a hardened baseline before exposing a device to remote management.
BEYOND THE PASSWORD. Examine password management, complexity, multifactor authentication, certificates, biometrics, and other authentication alternatives. Understand why identity security is increasingly based on multiple factors rather than a single shared secret.
PRIVATE COMMUNICATION OVER PUBLIC NETWORKS. Understand the purpose of remote-access and site-to-site VPNs and the security role of IPsec. Explore confidentiality, integrity, authentication, tunneling, and the difference between connecting users and connecting entire networks.
BUILD THE TRAFFIC FILTER. Configure and verify standard and extended IPv4 access control lists. Master wildcard masks, sequence evaluation, implicit deny, source and destination matching, protocols, ports, named ACLs, and correct interface placement.
HARDEN THE SWITCH EDGE. Configure and verify port security, DHCP Snooping, and Dynamic ARP Inspection. Understand how these mechanisms defend against MAC flooding, rogue DHCP servers, DHCP starvation, ARP spoofing, and other attacks originating inside the local switching domain.
CENTRALIZE IDENTITY. Separate authentication, authorization, and accounting and compare local authentication with centralized RADIUS and TACACS+. Understand how AAA controls administrative access and creates accountability across network infrastructure.
SECURE THE AIR. Compare WPA, WPA2, and WPA3 and understand the security evolution of wireless networks. Examine personal and enterprise authentication, encryption, pre-shared keys, and the role of 802.1X and centralized authentication in enterprise WLANs.
FROM SSID TO AUTHENTICATED CLIENT. Configure and verify a WLAN through the controller interface using WPA2 PSK. Validate SSID behavior, security settings, client association, addressing, and end-to-end connectivity.
EVERY MANAGEMENT PATH MATTERS. Compare console, Telnet, SSH, HTTP, HTTPS, TACACS+, RADIUS, and cloud-managed access. Understand which methods provide local, remote, encrypted, centralized, or cloud-based management and where each belongs in a modern infrastructure.
WHEN ONE DEVICE BECOMES ONE THOUSAND. Explore why repetitive CLI configuration becomes a scalability problem. Compare traditional device-by-device management with automated workflows, centralized policy, templates, APIs, and infrastructure-as-code concepts.
THE NETWORK AS A SYSTEM. Compare traditional distributed networking with controller-based architectures. Understand centralized control, policy abstraction, programmability, and how controllers can coordinate behavior across many devices.
BUILDING LOGICAL NETWORKS ON PHYSICAL NETWORKS. Separate the physical underlay from logical overlays and fabric architectures. Understand why modern networks abstract connectivity into programmable layers rather than treating every physical link as an isolated configuration problem.
THE NETWORK STARTS LEARNING FROM ITSELF. Introduce predictive and generative AI in network operations, including anomaly detection, telemetry analysis, event correlation, capacity prediction, configuration assistance, and operational decision support. Understand what these systems can assist with without treating AI as a replacement for networking fundamentals.
TALK TO INFRASTRUCTURE WITH SOFTWARE. Learn REST architecture through HTTP methods, CRUD operations, endpoints, status codes, authentication, and request/response workflows. Understand how applications can retrieve and manipulate network information without interacting with a CLI.
DATA THAT MACHINES CAN UNDERSTAND. Read and construct JSON objects, arrays, strings, numbers, booleans, and nested structures. Translate network information into structured data and understand why structured formats are essential to automation and APIs.
INFRASTRUCTURE AS CODE. Compare configuration-management and infrastructure-as-code approaches using Ansible and Terraform. Understand inventories, playbooks, declarative configuration, state, providers, resources, and the different problems each tool is designed to solve.
STOP GUESSING. Establish a disciplined troubleshooting workflow: define the problem, gather evidence, isolate the failure domain, test a hypothesis, implement the smallest appropriate change, verify the result, and document the solution. Apply the OSI model as a diagnostic framework rather than merely memorizing its layers.
TURN OUTPUT INTO EVIDENCE. Master the verification commands that reveal what the network is actually doing: interface status, IP addressing, VLANs, trunks, MAC tables, STP, EtherChannel, routing tables, OSPF neighbors, ACLs, logs, and configuration state.
THE NETWORK IS DOWN. FIND OUT WHY. Work through realistic failures involving incorrect VLANs, broken trunks, STP changes, EtherChannel mismatches, wrong IP addresses, missing routes, OSPF adjacency failures, DHCP problems, NAT translations, ACLs, and gateway failures. Each problem must be solved from evidence rather than from configuration memorization.
FROM EMPTY TO OPERATIONAL. Build a complete enterprise topology from the ground up. Implement addressing, VLANs, trunks, inter-VLAN routing, EtherChannel, Rapid PVST+, IPv4 and IPv6, DHCP, NAT, OSPF, SSH, ACLs, Layer 2 security, wireless concepts, and network services as one interconnected system.
BREAK THE NETWORK ON PURPOSE. Diagnose deliberately introduced faults across Layers 1 through 7. Recover from interface failures, VLAN mismatches, routing errors, STP problems, OSPF failures, DHCP issues, ACL mistakes, and security misconfigurations while documenting the reasoning behind every fix.
THE FINAL NETWORK TEST. Bring together network fundamentals, network access, IP connectivity, IP services, security fundamentals, and automation and programmability in a comprehensive assessment. Demonstrate not only that the correct answer can be identified, but that the network can actually be configured, verified, interpreted, and repaired.