larger cover

Add To My Wish List

Register your product to gain access to bonus material or receive a coupon.

CCNA 200-301 Official Cert Guide Library Premium Edition eBook and Practice Test

Premium Edition eBook

  • Your Price: $55.99
  • List Price: $69.99
  • About Premium Edition eBooks
  • The Premium Edition eBook and Practice Test is a digital-only certification preparation product combining an eBook with enhanced Pearson Test Prep practice tests.

    Your purchase will deliver:

    • Link to download the Pearson Test Prep exam engine
    • Access code for question database
    • eBook in the following formats, accessible from your Account page after purchase:

    EPUB The open industry format known for its reflowable content and usability on supported mobile devices.

    PDF The popular standard, which reproduces the look and layout of the printed page.

    This eBook requires no passwords or activation to read. We customize your eBook by discreetly watermarking it with your name, making it uniquely yours.

    eBook FAQ

    eBook Download Instructions

Also available in other formats.

  • Description
  • Downloads
  • Sample Content
  • Updates
  • Copyright 2020
  • Edition: 1st
  • Premium Edition eBook
  • ISBN-10: 0-13-675549-6
  • ISBN-13: 978-0-13-675549-4

Cisco Press has the only study guides approved by Cisco for the new CCNA certification. The new edition of the best-selling two-book, value-priced CCNA 200-301 Official Cert Guide Library includes updated content, new online practice exercises, more than 400 practice exam questions, and more than 2 hours of video trainingPLUS the CCNA Network Simulator Lite Editions with 34 free Network Simulator labs (available on the companion website).

The exciting new CCNA 200-301 Official Cert Guide Library, Premium Edition eBook and Practice Test is a digital-only certification preparation product combining an eBook with enhanced Pearson Test Prep Practice Test. This eBook covers all the exam topics on the CCNA 200-301 exam. The Premium Edition eBook and Practice Test contains the following items:

路         The CCNA 200-301 Premium Edition Practice Test, including four full practice exams and enhanced practice test features

路         PDF and EPUB formats of the CCNA 200-301 Official Cert Guide Library from Cisco Press, which are accessible via your PC, tablet, and Smartphone

About the Premium Edition Practice Test

This Premium Edition contains an enhanced version of the Pearson Test Prep practice test software with four full practice exams. This integrated learning package

路         Allows you to focus on individual topic areas or take complete, timed exams

路         Includes direct links from each question to detailed tutorials to help you understand the concepts behind the questions

路         Provides unique sets of exam-realistic practice questions

路         Tracks your performance and provides feedback on a module-by-module basis, laying out a complete assessment of your knowledge to help you focus your study where it is needed most

Pearson Test Prep online system requirements:

Browsers: Chrome version 73 and above; Safari version 12 and above; Microsoft Edge 44 and above.

Devices: Desktop and laptop computers, tablets running on Android v8.0 and iOS v13, smartphones with a minimum screen size of 4.7. Internet access required.

Pearson Test Prep offline system requirements: Windows 10, Windows 8.1; Microsoft .NET Framework 4.5 Client; Pentium-class 1 GHz processor (or equivalent); 512 MB RAM; 650 MB disk space plus 50 MB for each downloaded practice exam; access to the Internet to register and download exam databases

About the Premium Edition eBook

CCNA 200-301 Official Cert Guide Library is a comprehensive review and practice package for the latest CCNA exam and is the only self-study resource approved by Cisco. The two books contained in this package, CCNA 200-301 Official Cert Guide, Volume 1 and CCNA 200-301 Official Cert Guide, Volume 2, present complete reviews and a more challenging and realistic preparation experience. The books have been fully updated to refresh the content for the latest CCNA exam topics and to enhance certain key topics that are critical for exam success.

Best-selling author Wendell Odom shares preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills.

This complete study package includes

路         A test-preparation routine proven to help you pass the exams

路         Do I Know This Already? quizzes, which enable you to decide how much time you need to spend on each section

路         Chapter-ending Key Topic tables, which help you drill on key concepts you must know thoroughly

路         A free copy of the CCNA 200-301 Network Simulator Lite software, complete with meaningful lab exercises that help you hone your hands-on skills with the command-line interface for routers and switches

路         Links to a series of hands-on config labs developed by the author

路         Online, interactive practice exercises that help you enhance your knowledge

路         More than 2 hours of video mentoring from the author

路         An online, interactive Flash Cards application to help you drill on Key Terms by chapter

路         A final preparation chapter, which guides you through tools and resources to help you craft your review and test-taking strategies

路         Study plan suggestions and templates to help you organize and optimize your study time

Well regarded for its level of detail, study plans, assessment features, hands-on labs, and challenging review questions and exercises, this official study guide helps you master the concepts and techniques that ensure your exam success.

These official study guides help you master all the topics on the CCNA exams, including

路         Networking fundamentals

路         Implementing Ethernet LANs

路         Implementing VLANs and STP

路         IPv4 addressing and subnetting

路         IPv4 routing

路         Implementing OSPF

路         IPv6 addressing, subnetting, and routing

路         Wireless LANs

路         IP Access Control Lists

路         Security services

路         IP services

路         Network architecture

路         Network automation

Companion Website:

The companion website contains the CCNA Network Simulator Lite software, online practice exercises, and more than 2 hours of video training.

Includes 34 free CCNA Network Simulator labs (on the companion website):

Volume 1

1. Configuring Local Usernames

2. Configuring Hostnames

3. Interface Status I

4. Interface Status II

5. Interface Status III

6. Interface Status IV

7. Configuring Switch IP Settings

8. Switch IP Address

9. Switch IP Connectivity I

10. Switch CLI Configuration Process I

11. Switch CLI Configuration Process II

12. Switch CLI Exec Mode

13. Setting Switch Passwords

14. Interface Settings I

15. Interface Settings II

16. Interface Settings III

17. Switch Forwarding I

18. Switch Security I

19. Switch Interfaces and Forwarding Configuration Scenario

20. Configuring VLANs Configuration Scenario

21. VLAN Troubleshooting

Volume 2

1. ACL I




5. ACL V


7. ACL Analysis I

8. Named ACL I

9. Named ACL II

10. Named ACL III

11. Standard ACL Configuration Scenario

12. Extended ACL I Configuration Scenario

13. Extended ACL II Configuration Scenario

CCNA Network Simulator Lite System Requirements:

Windows system requirements (minimum):

Windows 10 (32/64-bit), Windows 8.1 (32/64-bit), or Windows 7 (32/64 bit), 1 gigahertz (GHz) or faster 32-bit (x86) or 64-bit (x64) processor, 1 GB RAM (32-bit) or 2 GB RAM (64-bit), 16 GB available hard disk space (32-bit) or 20 GB (64-bit), DirectX 9 graphics device with WDDM 1.0 or higher driver, Adobe Acrobat Reader version 8 and above

Mac system requirements (minimum)

macOS 10.14, 10.13, 10.12, or 10.11, Intel core Duo 1.83 GHz, 512 MB RAM (1 GB recommended), 1.5 GB hard disk space, 32-bit color depth at 1024x768 resolution, Adobe Acrobat Reader version 8 and above

CCNA 200-301 Official Cert Guide Library Companion Website

Access interactive study tools on this book's companion website, including practice test software, video training, CCNA Network Simulator Lite software, memory table and config checklist review exercises, Key Term flash card application, a study planner, and more!

To access the companion website, simply follow these steps:

1.       Go to

2.       Enter the print book ISBN: (Volume 1: 9780135792735, Volume 2: 9781587147135).

3.       Answer the security question to validate your purchase.

4.       Go to your account page.

5.       Click on the Registered Products tab.

6.       Under the book listing, click on the Access Bonus Content link.

If you have any issues accessing the companion website, you can contact our support team by going to


CCNA 200-301, Volume 1 Exam Updates (1.7 MB .pdf)

CCNA 200-301, Volume 2 Exam Updates (5.7 MB .pdf)

Table of Contents

CCNA 200-301 Official Cert Guide, Volume 1


Your Study Plan

Part I Introduction to Networking

Chapter 1 Introduction to TCP/IP Networking

“Do I Know This Already?” Quiz

Foundation Topics

Perspectives on Networking

TCP/IP Networking Model

    History Leading to TCP/IP

    Overview of the TCP/IP Networking Model

    TCP/IP Application Layer

    TCP/IP Transport Layer

    TCP/IP Network Layer

    TCP/IP Data-Link and Physical Layers

Data Encapsulation Terminology

    Names of TCP/IP Messages

    OSI Networking Model and Terminology

Chapter Review

Chapter 2 Fundamentals of Ethernet LANs

“Do I Know This Already?” Quiz

Foundation Topics

An Overview of LANs

    Typical SOHO LANs

    Typical Enterprise LANs

    The Variety of Ethernet Physical Layer Standards

    Consistent Behavior over All Links Using the Ethernet Data-Link Layer

Building Physical Ethernet LANs with UTP

    Transmitting Data Using Twisted Pairs

    Breaking Down a UTP Ethernet Link

    UTP Cabling Pinouts for 10BASE-T and 100BASE-T

    UTP Cabling Pinouts for 1000BASE-T

Building Physical Ethernet LANs with Fiber

    Fiber Cabling Transmission Concepts

    Using Fiber with Ethernet

Sending Data in Ethernet Networks

    Ethernet Data-Link Protocols

    Sending Ethernet Frames with Switches and Hubs

Chapter Review

Chapter 3 Fundamentals of WANs and IP Routing

“Do I Know This Already?” Quiz

Foundation Topics

Wide-Area Networks

    Leased-Line WANs

    Ethernet as a WAN Technology

IP Routing

    Network Layer Routing (Forwarding) Logic

    How Network Layer Routing Uses LANs and WANs

    How IP Addressing Helps IP Routing

    How IP Routing Protocols Help IP Routing

Other Network Layer Features

    Using Names and the Domain Name System

    The Address Resolution Protocol

    ICMP Echo and the ping Command

Chapter Review

Part I Review

Part II Implementing Ethernet LANs

Chapter 4 Using the Command-Line Interface

“Do I Know This Already?” Quiz

Foundation Topics

Accessing the Cisco Catalyst Switch CLI

    Cisco Catalyst Switches

    Accessing the Cisco IOS CLI

    CLI Help Features

    The debug and show Commands

Configuring Cisco IOS Software

    Configuration Submodes and Contexts

    Storing Switch Configuration Files

    Copying and Erasing Configuration Files

Chapter Review

Chapter 5 Analyzing Ethernet LAN Switching

“Do I Know This Already?” Quiz

Foundation Topics

LAN Switching Concepts

    Overview of Switching Logic

    Forwarding Known Unicast Frames

    Learning MAC Addresses

    Flooding Unknown Unicast and Broadcast Frames

    Avoiding Loops Using Spanning Tree Protocol

    LAN Switching Summary

Verifying and Analyzing Ethernet Switching

    Demonstrating MAC Learning

    Switch Interfaces

    Finding Entries in the MAC Address Table

    Managing the MAC Address Table (Aging, Clearing)

    MAC Address Tables with Multiple Switches

Chapter Review

Chapter 6 Configuring Basic Switch Management

“Do I Know This Already?” Quiz

Foundation Topics

Securing the Switch CLI

    Securing User Mode and Privileged Mode with Simple Passwords

    Securing User Mode Access with Local Usernames and Passwords

    Securing User Mode Access with External Authentication Servers

    Securing Remote Access with Secure Shell

Enabling IPv4 for Remote Access

    Host and Switch IP Settings

    Configuring IPv4 on a Switch

    Configuring a Switch to Learn Its IP Address with DHCP

    Verifying IPv4 on a Switch

Miscellaneous Settings Useful in the Lab

    History Buffer Commands

    The logging synchronous, exec-timeout, and no ip domain-lookup Commands

Chapter Review

Chapter 7 Configuring and Verifying Switch Interfaces

“Do I Know This Already?” Quiz

Foundation Topics

Configuring Switch Interfaces

    Configuring Speed, Duplex, and Description

    Configuring Multiple Interfaces with the interface range Command

    Administratively Controlling Interface State with shutdown

    Removing Configuration with the no Command


Analyzing Switch Interface Status and Statistics

    Interface Status Codes and Reasons for Nonworking States

    Interface Speed and Duplex Issues

    Common Layer 1 Problems on Working Interfaces

Chapter Review

Part II Review

Part III Implementing VLANs and STP

Chapter 8 Implementing Ethernet Virtual LANs

“Do I Know This Already?” Quiz

Foundation Topics

Virtual LAN Concepts

    Creating Multiswitch VLANs Using Trunking

    Forwarding Data Between VLANs

VLAN and VLAN Trunking Configuration and Verification

    Creating VLANs and Assigning Access VLANs to an Interface

    VLAN Trunking Protocol

    VLAN Trunking Configuration

    Implementing Interfaces Connected to Phones

Troubleshooting VLANs and VLAN Trunks

    Access VLANs Undefined or Disabled

    Mismatched Trunking Operational States

    The Supported VLAN List on Trunks

    Mismatched Native VLAN on a Trunk

Chapter Review

Chapter 9 Spanning Tree Protocol Concepts

“Do I Know This Already?” Quiz

Foundation Topics

STP and RSTP Basics

    The Need for Spanning Tree

    What Spanning Tree Does

    How Spanning Tree Works

    Configuring to Influence the STP Topology

Details Specific to STP (and Not RSTP)

    STP Activity When the Network Remains Stable

    STP Timers That Manage STP Convergence

    Changing Interface States with STP

Rapid STP Concepts

    Comparing STP and RSTP

    RSTP and the Alternate (Root) Port Role

    RSTP States and Processes

    RSTP and the Backup (Designated) Port Role

    RSTP Port Types

    Optional STP Features

Chapter Review

Chapter 10 RSTP and EtherChannel Configuration

“Do I Know This Already?” Quiz

Foundation Topics

Understanding RSTP Through Configuration

    The Need for Multiple Spanning Trees

    STP Modes and Standards

    The Bridge ID and System ID Extension

    How Switches Use the Priority and System ID Extension

    RSTP Methods to Support Multiple Spanning Trees

    Other RSTP Configuration Options

Configuring Layer 2 EtherChannel

    Configuring a Manual Layer 2 EtherChannel

    Configuring Dynamic EtherChannels

    Physical Interface Configuration and EtherChannels

    EtherChannel Load Distribution

Chapter Review

Part III Review

Part IV IPv4 Addressing

Chapter 11 Perspectives on IPv4 Subnetting

“Do I Know This Already?” Quiz

Foundation Topics

Introduction to Subnetting

    Subnetting Defined Through a Simple Example

    Operational View Versus Design View of Subnetting

Analyze Subnetting and Addressing Needs

    Rules About Which Hosts Are in Which Subnet

    Determining the Number of Subnets

    Determining the Number of Hosts per Subnet

    One Size Subnet Fits All–Or Not

Make Design Choices

    Choose a Classful Network

    Choose the Mask

    Build a List of All Subnets

Plan the Implementation

    Assigning Subnets to Different Locations

    Choose Static and Dynamic Ranges per Subnet

Chapter Review

Chapter 12 Analyzing Classful IPv4 Networks

“Do I Know This Already?” Quiz

Foundation Topics

Classful Network Concepts

    IPv4 Network Classes and Related Facts

    Number of Hosts per Network

    Deriving the Network ID and Related Numbers

    Unusual Network IDs and Network Broadcast Addresses

Practice with Classful Networks

    Practice Deriving Key Facts Based on an IP Address

    Practice Remembering the Details of Address Classes

Chapter Review

Chapter 13 Analyzing Subnet Masks

“Do I Know This Already?” Quiz

Foundation Topics

Subnet Mask Conversion

    Three Mask Formats

    Converting Between Binary and Prefix Masks

    Converting Between Binary and DDN Masks

    Converting Between Prefix and DDN Masks

    Practice Converting Subnet Masks

Identifying Subnet Design Choices Using Masks

    Masks Divide the Subnet’s Addresses into Two Parts

    Masks and Class Divide Addresses into Three Parts

    Classless and Classful Addressing

    Calculations Based on the IPv4 Address Format

    Practice Analyzing Subnet Masks

Chapter Review

Chapter 14 Analyzing Existing Subnets

“Do I Know This Already?” Quiz

Foundation Topics

Defining a Subnet

    An Example with Network and Four Subnets

    Subnet ID Concepts

    Subnet Broadcast Address

    Range of Usable Addresses

Analyzing Existing Subnets: Binary

    Finding the Subnet ID: Binary

    Finding the Subnet Broadcast Address: Binary

    Binary Practice Problems

    Shortcut for the Binary Process

    Brief Note About Boolean Math

    Finding the Range of Addresses

Analyzing Existing Subnets: Decimal

    Analysis with Easy Masks

    Predictability in the Interesting Octet

    Finding the Subnet ID: Difficult Masks

    Finding the Subnet Broadcast Address: Difficult Masks

Practice Analyzing Existing Subnets

    A Choice: Memorize or Calculate

Chapter Review

Part IV Review

Part V IPv4 Routing

Chapter 15 Operating Cisco Routers

“Do I Know This Already?” Quiz

Foundation Topics

Installing Cisco Routers

    Installing Enterprise Routers

    Installing SOHO Routers

Enabling IPv4 Support on Cisco Router Interfaces

    Accessing the Router CLI

    Router Interfaces

    Router Auxiliary Port

Chapter Review

Chapter 16 Configuring IPv4 Addresses and Static Routes

“Do I Know This Already?” Quiz

Foundation Topics

IP Routing

    IPv4 Routing Process Reference

    An Example of IP Routing

Configuring IP Addresses and Connected Routes

    Connected Routes and the ip address Command

    The ARP Table on a Cisco Router

Configuring Static Routes

    Static Network Routes

    Static Host Routes

    Floating Static Routes

    Static Default Routes

    Troubleshooting Static Routes

IP Forwarding with the Longest Prefix Match

    Using show ip route to Find the Best Route

    Using show ip route address to Find the Best Route

    Interpreting the IP Routing Table

Chapter Review

Chapter 17 IP Routing in the LAN

“Do I Know This Already?” Quiz

Foundation Topics

VLAN Routing with Router 802.1Q Trunks

    Configuring ROAS

    Verifying ROAS

    Troubleshooting ROAS

VLAN Routing with Layer 3 Switch SVIs

    Configuring Routing Using Switch SVIs

    Verifying Routing with SVIs

    Troubleshooting Routing with SVIs

VLAN Routing with Layer 3 Switch Routed Ports

    Implementing Routed Interfaces on Switches

    Implementing Layer 3 EtherChannels

    Troubleshooting Layer 3 EtherChannels

Chapter Review

Chapter 18 Troubleshooting IPv4 Routing

“Do I Know This Already?” Quiz

Foundation Topics

Problem Isolation Using the ping Command

    Ping Command Basics

    Strategies and Results When Testing with the ping Command

    Using Ping with Names and with IP Addresses

Problem Isolation Using the traceroute Command

    traceroute Basics

Telnet and SSH

    Common Reasons to Use the IOS Telnet and SSH Client

    IOS Telnet and SSH Examples

Chapter Review

Part V Review


Chapter 19 Understanding OSPF Concepts

“Do I Know This Already?” Quiz

Foundation Topics

Comparing Dynamic Routing Protocol Features

    Routing Protocol Functions

    Interior and Exterior Routing Protocols

    Comparing IGPs

    Administrative Distance

OSPF Concepts and Operation

    OSPF Overview

    Becoming OSPF Neighbors

    Exchanging the LSDB Between Neighbors

    Calculating the Best Routes with SPF

OSPF Areas and LSAs

    OSPF Areas

    How Areas Reduce SPF Calculation Time

Chapter Review

Chapter 20 Implementing OSPF

“Do I Know This Already?” Quiz

Foundation Topics

Implementing Single-Area OSPFv2

    OSPF Single-Area Configuration

    Wildcard Matching with the network Command

    Verifying OSPF Operation

    Verifying OSPF Configuration

    Configuring the OSPF Router ID

    Implementing Multiarea OSPF

Using OSPFv2 Interface Subcommands

    OSPF Interface Configuration Example

Additional OSPFv2 Features

    OSPF Passive Interfaces

    OSPF Default Routes

    OSPF Metrics (Cost)

    OSPF Load Balancing

Chapter Review

Chapter 21 OSPF Network Types and Neighbors

“Do I Know This Already?” Quiz

Foundation Topics

OSPF Network Types

    The OSPF Broadcast Network Type

    The OSPF Point-to-Point Network Type

OSPF Neighbor Relationships

    OSPF Neighbor Requirements

    Issues That Prevent Neighbor Adjacencies

    Issues That Allow Adjacencies but Prevent IP Routes

Chapter Review

Part VI Review

Part VII IP Version 6

Chapter 22 Fundamentals of IP Version 6

“Do I Know This Already?” Quiz

Foundation Topics

Introduction to IPv6

    The Historical Reasons for IPv6

    The IPv6 Protocols

    IPv6 Routing

    IPv6 Routing Protocols

IPv6 Addressing Formats and Conventions

    Representing Full (Unabbreviated) IPv6 Addresses

    Abbreviating and Expanding IPv6 Addresses

    Representing the Prefix Length of an Address

    Calculating the IPv6 Prefix (Subnet ID)

    Finding the IPv6 Prefix

    Working with More-Difficult IPv6 Prefix Lengths

Chapter Review

Chapter 23 IPv6 Addressing and Subnetting

“Do I Know This Already?” Quiz

Foundation Topics

Global Unicast Addressing Concepts

    Public and Private IPv6 Addresses

    The IPv6 Global Routing Prefix

    Address Ranges for Global Unicast Addresses

    IPv6 Subnetting Using Global Unicast Addresses

    Assigning Addresses to Hosts in a Subnet

Unique Local Unicast Addresses

    Subnetting with Unique Local IPv6 Addresses

    The Need for Globally Unique Local Addresses

Chapter Review

Chapter 24 Implementing IPv6 Addressing on Routers

“Do I Know This Already?” Quiz

Foundation Topics

Implementing Unicast IPv6 Addresses on Routers

    Static Unicast Address Configuration

    Dynamic Unicast Address Configuration

Special Addresses Used by Routers

    Link-Local Addresses

    IPv6 Multicast Addresses

    Miscellaneous IPv6 Addresses

    Anycast Addresses

    IPv6 Addressing Configuration Summary

Chapter Review

Chapter 25 Implementing IPv6 Routing

“Do I Know This Already?” Quiz

Foundation Topics

Connected and Local IPv6 Routes

    Rules for Connected and Local Routes

    Example of Connected IPv6 Routes

    Examples of Local IPv6 Routes

Static IPv6 Routes

    Static Routes Using the Outgoing Interface

    Static Routes Using Next-Hop IPv6 Address

    Static Default Routes

    Static IPv6 Host Routes

    Floating Static IPv6 Routes

    Troubleshooting Static IPv6 Routes

The Neighbor Discovery Protocol

    Discovering Neighbor Link Addresses with NDP NS and NA

    Discovering Routers with NDP RS and RA

    Using SLAAC with NDP RS and RA

    Discovering Duplicate Addresses Using NDP NS and NA

    NDP Summary

Chapter Review

Part VII Review

Part VIII Wireless LANs

Chapter 26 Fundamentals of Wireless Networks

“Do I Know This Already?” Quiz

Foundation Topics

Comparing Wired and Wireless Networks

Wireless LAN Topologies

    Basic Service Set

    Distribution System

    Extended Service Set

    Independent Basic Service Set

Other Wireless Topologies


    Workgroup Bridge

    Outdoor Bridge

    Mesh Network

RF Overview

    Wireless Bands and Channels

    APs and Wireless Standards

Chapter Review

Chapter 27 Analyzing Cisco Wireless Architectures

“Do I Know This Already?” Quiz

Foundation Topics

Autonomous AP Architecture

Cloud-based AP Architecture

Split-MAC Architectures

Comparing Wireless LAN Controller Deployments

    Cisco AP Modes

Chapter Review

Chapter 28 Securing Wireless Networks

“Do I Know This Already?” Quiz

Foundation Topics

Anatomy of a Secure Connection


    Message Privacy

    Message Integrity

Wireless Client Authentication Methods

    Open Authentication



Wireless Privacy and Integrity Methods




WPA, WPA2, and WPA3

Chapter Review

Chapter 29 Building a Wireless LAN

“Do I Know This Already?” Quiz

Foundation Topics

Connecting a Cisco AP

Accessing a Cisco WLC

Connecting a Cisco WLC

    Using WLC Ports

    Using WLC Interfaces

Configuring a WLAN

    Step 1. Configure a RADIUS Server

    Step 2. Create a Dynamic Interface

    Step 3. Create a New WLAN

    Configuring WLAN Security

    Configuring WLAN QoS

    Configuring Advanced WLAN Settings

    Finalizing WLAN Configuration

Chapter Review

Part VIII Review

Part IX Appendixes

Appendix A Numeric Reference Tables

Appendix B CCNA 200-301, Volume 1 Exam Updates

Appendix C Answers to the “Do I Know This Already?” Quizzes


Online Appendixes

Appendix D Practice for Chapter 12: Analyzing Classful IPv4 Networks

Appendix E Practice for Chapter 13: Analyzing Subnet Masks

Appendix F Practice for Chapter 14: Analyzing Existing Subnets

Appendix G Practice for Chapter 22: Fundamentals of IP Version 6

Appendix H Practice for Chapter 24: Implementing IPv6 Addressing on Routers

Appendix I Study Planner

Appendix J Topics from Previous Editions

Appendix K Analyzing Ethernet LAN Designs

Appendix L Subnet Design

Appendix M Practice for Appendix L: Subnet Design

Appendix N Variable-Length Subnet Masks

Appendix O Spanning Tree Protocol Implementation

Appendix P LAN Troubleshooting

Appendix Q Troubleshooting IPv4 Routing Protocols

Appendix R Exam Topics Cross Reference

9780135792735   TOC   7/25/2019

CCNA 200-301 Official Cert Guide, Volume 2

Introduction xxvii

Part I IP Access Control Lists 3

Chapter 1 Introduction to TCP/IP Transport and Applications 4

“Do I Know This Already?” Quiz 4

Foundation Topics 6

TCP/IP Layer 4 Protocols: TCP and UDP 6

    Transmission Control Protocol 7

    User Datagram Protocol 16

TCP/IP Applications 16

    Uniform Resource Identifiers 17

    Finding the Web Server Using DNS 18

    Transferring Files with HTTP 20

    How the Receiving Host Identifies the Correct Receiving Application 21

Chapter Review 22

Chapter 2 Basic IPv4 Access Control Lists 24

“Do I Know This Already?” Quiz 24

Foundation Topics 26

IPv4 Access Control List Basics 26

    ACL Location and Direction 26

    Matching Packets 27

    Taking Action When a Match Occurs 28

    Types of IP ACLs 28

Standard Numbered IPv4 ACLs 29

    List Logic with IP ACLs 29

    Matching Logic and Command Syntax 31

    Implementing Standard IP ACLs 34

    Troubleshooting and Verification Tips 38

Practice Applying Standard IP ACLs 39

    Practice Building access-list Commands 39

    Reverse Engineering from ACL to Address Range 40

Chapter Review 41

Chapter 3 Advanced IPv4 Access Control Lists 44

“Do I Know This Already?” Quiz 44

Foundation Topics 46

Extended Numbered IP Access Control Lists 46

    Matching the Protocol, Source IP, and Destination IP 46

    Matching TCP and UDP Port Numbers 48

    Extended IP ACL Configuration 51

    Practice Building access-list Commands 54

Named ACLs and ACL Editing 54

    Named IP Access Lists 54

    Editing ACLs Using Sequence Numbers 56

    Numbered ACL Configuration Versus Named ACL Configuration 58

    ACL Implementation Considerations 59

    Additional Reading on ACLs 60

Chapter Review 61

Part I Review 64

Part II Security Services 67

Chapter 4 Security Architectures 68

“Do I Know This Already?” Quiz 68

Foundation Topics 70

Security Terminology 70

Common Security Threats 72

    Attacks That Spoof Addresses 72

    Reconnaissance Attacks 77

    Buffer Overflow Attacks 78

    Malware 78

    Human Vulnerabilities 79

    Password Vulnerabilities 80

Controlling and Monitoring User Access 82

Developing a Security Program to Educate Users 83

Chapter Review 84

Chapter 5 Securing Network Devices 86

“Do I Know This Already?” Quiz 86

Foundation Topics 88

Securing IOS Passwords 88

    Encrypting Older IOS Passwords with service password-encryption 89

    Encoding the Enable Passwords with Hashes 90

    Encoding the Passwords for Local Usernames 94

    Controlling Password Attacks with ACLs 95

Firewalls and Intrusion Prevention Systems 95

    Traditional Firewalls 96

    Intrusion Prevention Systems (IPS) 99

    Cisco Next-Generation Firewalls 100

    Cisco Next-Generation IPS 102

Chapter Review 103

Chapter 6 Implementing Switch Port Security 106

“Do I Know This Already?” Quiz 106

Foundation Topics 108

Port Security Concepts and Configuration 108

    Configuring Port Security 109

    Verifying Port Security 112

    Port Security MAC Addresses 113

Port Security Violation Modes 114

    Port Security Shutdown Mode 115

    Port Security Protect and Restrict Modes 117

Chapter Review 119

Chapter 7 Implementing DHCP 122

“Do I Know This Already?” Quiz 122

Foundation Topics 124

Dynamic Host Configuration Protocol 124

    DHCP Concepts 125

    Configuring DHCP Features on Routers and Switches 129

Identifying Host IPv4 Settings 133

    Host Settings for IPv4 133

    Host IP Settings on Windows 134

    Host IP Settings on macOS 136

    Host IP Settings on Linux 138

Chapter Review 140

Chapter 8 DHCP Snooping and ARP Inspection 144

“Do I Know This Already?” Quiz 144

Foundation Topics 146

DHCP Snooping 146

    DHCP Snooping Concepts 146

    DHCP Snooping Configuration 152

Dynamic ARP Inspection 156

    DAI Concepts 156

    Dynamic ARP Inspection Configuration 160

Chapter Review 166

Part II Review 168

Part III IP Services 171

Chapter 9 Device Management Protocols 172

“Do I Know This Already?” Quiz 172

Foundation Topics 174

System Message Logging (Syslog) 174

    Sending Messages in Real Time to Current Users 174

    Storing Log Messages for Later Review 175

    Log Message Format 176

    Log Message Severity Levels 177

    Configuring and Verifying System Logging 178

    The debug Command and Log Messages 180

Network Time Protocol (NTP) 181

    Setting the Time and Timezone 182

    Basic NTP Configuration 183

    NTP Reference Clock and Stratum 185

    Redundant NTP Configuration 186

    NTP Using a Loopback Interface for Better Availability 188

Analyzing Topology Using CDP and LLDP 190

    Examining Information Learned by CDP 190

    Configuring and Verifying CDP 193

    Examining Information Learned by LLDP 194

    Configuring and Verifying LLDP 197

Chapter Review 199

Chapter 10 Network Address Translation 202

“Do I Know This Already?” Quiz 202

Foundation Topics 204

Perspectives on IPv4 Address Scalability 204

    CIDR 205

    Private Addressing 206

Network Address Translation Concepts 207

    Static NAT 208

    Dynamic NAT 210

    Overloading NAT with Port Address Translation 211

NAT Configuration and Troubleshooting 213

    Static NAT Configuration 213

    Dynamic NAT Configuration 215

    Dynamic NAT Verification 217

    NAT Overload (PAT) Configuration 219

    NAT Troubleshooting 222

Chapter Review 223

Chapter 11 Quality of Service (QoS) 226

“Do I Know This Already?” Quiz 226

Foundation Topics 228

Introduction to QoS 228

    QoS: Managing Bandwidth, Delay, Jitter, and Loss 228

    Types of Traffic 229

    Voice and Video Applications 230

    QoS as Mentioned in This Book 232

    QoS on Switches and Routers 233

Classification and Marking 233

    Classification Basics 233

    Matching (Classification) Basics 234

    Classification on Routers with ACLs and NBAR 235

    Marking IP DSCP and Ethernet CoS 236

    Defining Trust Boundaries 238

    DiffServ Suggested Marking Values 239

Queuing 242

    Round-Robin Scheduling (Prioritization) 243

    Low Latency Queuing 243

    A Prioritization Strategy for Data, Voice, and Video 245

Shaping and Policing 245

    Policing 246

    Shaping 248

Congestion Avoidance 250

    TCP Windowing Basics 250

    Congestion Avoidance Tools 251

Chapter Review 252

Chapter 12 Miscellaneous IP Services 254

“Do I Know This Already?” Quiz 254

Foundation Topics 256

First Hop Redundancy Protocol 256

    The Need for Redundancy in Networks 257

    The Need for a First Hop Redundancy Protocol 259

    The Three Solutions for First-Hop Redundancy 260

    HSRP Concepts 261

Simple Network Management Protocol 263

    SNMP Variable Reading and Writing: SNMP Get and Set 264

    SNMP Notifications: Traps and Informs 265

    The Management Information Base 266

    Securing SNMP 267

FTP and TFTP 268

    Managing Cisco IOS Images with FTP/TFTP 268

    The FTP and TFTP Protocols 275

    TFTP Protocol Basics 279

Chapter Review 280

Part III Review 284

Part IV Network Architecture 287

Chapter 13 LAN Architecture 288

“Do I Know This Already?” Quiz 288

Foundation Topics 290

Analyzing Campus LAN Topologies 290

    Two-Tier Campus Design (Collapsed Core) 290

    Three-Tier Campus Design (Core) 293

    Topology Design Terminology 295

Small Office/Home Office 295

Power over Ethernet (PoE) 297

    PoE Basics 297

    PoE Operation 298

    PoE and LAN Design 299

Chapter Review 300

Chapter 14 WAN Architecture 302

“Do I Know This Already?” Quiz 302

Foundation Topics 304

Metro Ethernet 304

    Metro Ethernet Physical Design and Topology 305

    Ethernet WAN Services and Topologies 306

    Layer 3 Design Using Metro Ethernet 309

Multiprotocol Label Switching (MPLS) 311

    MPLS VPN Physical Design and Topology 313

    MPLS and Quality of Service 314

    Layer 3 with MPLS VPN 315

Internet VPNs 317

    Internet Access 317

    Internet VPN Fundamentals 321

    VPN Comparisons 326

Chapter Review 326

Chapter 15 Cloud Architecture 328

“Do I Know This Already?” Quiz 328

Foundation Topics 330

Server Virtualization 330

    Cisco Server Hardware 330

    Server Virtualization Basics 331

    Networking with Virtual Switches on a Virtualized Host 333

    The Physical Data Center Network 334

    Workflow with a Virtualized Data Center 335

Cloud Computing Services 336

    Private Cloud (On-Premise) 337

    Public Cloud 338

    Cloud and the “As a Service” Model 339

WAN Traffic Paths to Reach Cloud Services 342

    Enterprise WAN Connections to Public Cloud 342

    A Scenario: Branch Offices and the Public Cloud 347

Chapter Review 350

Part IV Review 352

Part V Network Automation 355

Chapter 16 Introduction to Controller-Based Networking 356

“Do I Know This Already?” Quiz 357

Foundation Topics 358

SDN and Controller-Based Networks 358

    The Data, Control, and Management Planes 358

    Controllers and Software-Defined Architecture 362

    Software Defined Architecture Summary 367

Examples of Network Programmability and SDN 367

    OpenDaylight and OpenFlow 367

    Cisco Application Centric Infrastructure (ACI) 369

    Cisco APIC Enterprise Module 373

    Summary of the SDN Examples 375

Comparing Traditional Versus Controller-Based Networks 375

    How Automation Impacts Network Management 376

    Comparing Traditional Networks with Controller-Based Networks 378

Chapter Review 379

Chapter 17 Cisco Software-Defined Access (SDA) 382

“Do I Know This Already?” Quiz 383

Foundation Topics 384

SDA Fabric, Underlay, and Overlay 384

    The SDA Underlay 386

    The SDA Overlay 390

DNA Center and SDA Operation 395

    Cisco DNA Center 395

    Cisco DNA Center and Scalable Groups 396

DNA Center as a Network Management Platform 400

    DNA Center Similarities to Traditional Management 401

    DNA Center Differences with Traditional Management 402

Chapter Review 403

Chapter 18 Understanding REST and JSON 406

“Do I Know This Already?” Quiz 406

Foundation Topics 408

REST-Based APIs 408

    REST-Based (RESTful) APIs 408

    Background: Data and Variables 410

    REST APIs and HTTP 413

    Example of REST API Call to DNA Center 417

Data Serialization and JSON 418

    The Need for a Data Model with APIs 419

    Data Serialization Languages 421

    Interpreting JSON 423

Chapter Review 427

Chapter 19 Understanding Ansible, Puppet, and Chef 428

“Do I Know This Already?” Quiz 428

Foundation Topics 430

Device Configuration Challenges and Solutions 430

    Configuration Drift 430

    Centralized Configuration Files and Version Control 431

    Configuration Monitoring and Enforcement 433

    Configuration Provisioning 434

Ansible, Puppet, and Chef Basics 438

    Ansible 438

    Puppet 440

    Chef 441

    Summary of Configuration Management Tools 442

Chapter Review 442

Part V Review 444

Part VI Final Review 447

Chapter 20 Final Review 448

Advice About the Exam Event 448

    Exam Event: Learn About Question Types 448

    Exam Event: Think About Your Time Budget 450

    Exam Event: A Sample Time-Check Method 451

    Exam Event: One Week Away 451

    Exam Event: 24 Hours Before the Exam 452

    Exam Event: The Last 30 Minutes 452

    Exam Event: Reserve the Hour After the Exam 453

Exam Review 454

    Exam Review: Take Practice Exams 454

    Exam Review: Find Knowledge Gaps 458

    Exam Review: Practice Hands-On CLI Skills 460

    Exam Review: Self-Assessment Pitfalls 462

    Exam Review: Adjustments for Your Second Attempt 463

    Exam Review: Other Study Tasks 464

    Final Thoughts 464

Part VII Appendixes 467

Appendix A Numeric Reference Tables 469

Appendix B CCNA 200-301, Volume 2 Exam Updates 476

Appendix C Answers to the “Do I Know This Already?” Quizzes 478

Glossary 494

Online Appendixes

Appendix D Topics from Previous Editions

Appendix E Practice for Chapter 2: Basic IPv4 Access Control Lists

Appendix F Previous Edition ICND1 Chapter 35: Managing IOS Files

Appendix G Exam Topics Cross-Reference

Appendix H Study Planner

9781587147135   TOC   10/18/2019

Updates & Corrections

CCNA 200-301, Volume 1 Exam Updates (1.7 MB .pdf)

CCNA 200-301, Volume 2 Exam Updates (5.7 MB .pdf)

Submit Errata

Cisco Press Promotional Mailings & Special Offers

I would like to receive exclusive offers and hear about products from Cisco Press and its family of brands. I can unsubscribe at any time.


Pearson Education, Inc., 221 River Street, Hoboken, New Jersey 07030, (Pearson) presents this site to provide information about Cisco Press products and services that can be purchased through this site.

This privacy notice provides an overview of our commitment to privacy and describes how we collect, protect, use and share personal information collected through this site. Please note that other Pearson websites and online products and services have their own separate privacy policies.

Collection and Use of Information

To conduct business and deliver products and services, Pearson collects and uses personal information in several ways in connection with this site, including:

Questions and Inquiries

For inquiries and questions, we collect the inquiry or question, together with name, contact details (email address, phone number and mailing address) and any other additional information voluntarily submitted to us through a Contact Us form or an email. We use this information to address the inquiry and respond to the question.

Online Store

For orders and purchases placed through our online store on this site, we collect order details, name, institution name and address (if applicable), email address, phone number, shipping and billing addresses, credit/debit card information, shipping options and any instructions. We use this information to complete transactions, fulfill orders, communicate with individuals placing orders or visiting the online store, and for related purposes.


Pearson may offer opportunities to provide feedback or participate in surveys, including surveys evaluating Pearson products, services or sites. Participation is voluntary. Pearson collects information requested in the survey questions and uses the information to evaluate, support, maintain and improve products, services or sites; develop new products and services; conduct educational research; and for other purposes specified in the survey.

Contests and Drawings

Occasionally, we may sponsor a contest or drawing. Participation is optional. Pearson collects name, contact information and other information specified on the entry form for the contest or drawing to conduct the contest or drawing. Pearson may collect additional personal information from the winners of a contest or drawing in order to award the prize and for tax reporting purposes, as required by law.


If you have elected to receive email newsletters or promotional mailings and special offers but want to unsubscribe, simply email

Service Announcements

On rare occasions it is necessary to send out a strictly service related announcement. For instance, if our service is temporarily suspended for maintenance we might send users an email. Generally, users may not opt-out of these communications, though they can deactivate their account information. However, these communications are not promotional in nature.

Customer Service

We communicate with users on a regular basis to provide requested services and in regard to issues relating to their account we reply via email or phone in accordance with the users' wishes when a user submits their information through our Contact Us form.

Other Collection and Use of Information

Application and System Logs

Pearson automatically collects log data to help ensure the delivery, availability and security of this site. Log data may include technical information about how a user or visitor connected to this site, such as browser type, type of computer/device, operating system, internet service provider and IP address. We use this information for support purposes and to monitor the health of the site, identify problems, improve service, detect unauthorized access and fraudulent activity, prevent and respond to security incidents and appropriately scale computing resources.

Web Analytics

Pearson may use third party web trend analytical services, including Google Analytics, to collect visitor information, such as IP addresses, browser types, referring pages, pages visited and time spent on a particular site. While these analytical services collect and report information on an anonymous basis, they may use cookies to gather web trend information. The information gathered may enable Pearson (but not the third party web trend services) to link information with application and system log data. Pearson uses this information for system administration and to identify problems, improve service, detect unauthorized access and fraudulent activity, prevent and respond to security incidents, appropriately scale computing resources and otherwise support and deliver this site and its services.

Cookies and Related Technologies

This site uses cookies and similar technologies to personalize content, measure traffic patterns, control security, track use and access of information on this site, and provide interest-based messages and advertising. Users can manage and block the use of cookies through their browser. Disabling or blocking certain cookies may limit the functionality of this site.

Do Not Track

This site currently does not respond to Do Not Track signals.


Pearson uses appropriate physical, administrative and technical security measures to protect personal information from unauthorized access, use and disclosure.


This site is not directed to children under the age of 13.


Pearson may send or direct marketing communications to users, provided that

  • Pearson will not use personal information collected or processed as a K-12 school service provider for the purpose of directed or targeted advertising.
  • Such marketing is consistent with applicable law and Pearson's legal obligations.
  • Pearson will not knowingly direct or send marketing communications to an individual who has expressed a preference not to receive marketing.
  • Where required by applicable law, express or implied consent to marketing exists and has not been withdrawn.

Pearson may provide personal information to a third party service provider on a restricted basis to provide marketing solely on behalf of Pearson or an affiliate or customer for whom Pearson is a service provider. Marketing preferences may be changed at any time.

Correcting/Updating Personal Information

If a user's personally identifiable information changes (such as your postal address or email address), we provide a way to correct or update that user's personal data provided to us. This can be done on the Account page. If a user no longer desires our service and desires to delete his or her account, please contact us at and we will process the deletion of a user's account.


Users can always make an informed choice as to whether they should proceed with certain services offered by Cisco Press. If you choose to remove yourself from our mailing list(s) simply visit the following page and uncheck any communication you no longer want to receive:

Sale of Personal Information

Pearson does not rent or sell personal information in exchange for any payment of money.

While Pearson does not sell personal information, as defined in Nevada law, Nevada residents may email a request for no sale of their personal information to

Supplemental Privacy Statement for California Residents

California residents should read our Supplemental privacy statement for California residents in conjunction with this Privacy Notice. The Supplemental privacy statement for California residents explains Pearson's commitment to comply with California law and applies to personal information of California residents collected in connection with this site and the Services.

Sharing and Disclosure

Pearson may disclose personal information, as follows:

  • As required by law.
  • With the consent of the individual (or their parent, if the individual is a minor)
  • In response to a subpoena, court order or legal process, to the extent permitted or required by law
  • To protect the security and safety of individuals, data, assets and systems, consistent with applicable law
  • In connection the sale, joint venture or other transfer of some or all of its company or assets, subject to the provisions of this Privacy Notice
  • To investigate or address actual or suspected fraud or other illegal activities
  • To exercise its legal rights, including enforcement of the Terms of Use for this site or another contract
  • To affiliated Pearson companies and other companies and organizations who perform work for Pearson and are obligated to protect the privacy of personal information consistent with this Privacy Notice
  • To a school, organization, company or government agency, where Pearson collects or processes the personal information in a school setting or on behalf of such organization, company or government agency.


This web site contains links to other sites. Please be aware that we are not responsible for the privacy practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy statements of each and every web site that collects Personal Information. This privacy statement applies solely to information collected by this web site.

Requests and Contact

Please contact us about this Privacy Notice or if you have any requests or questions relating to the privacy of your personal information.

Changes to this Privacy Notice

We may revise this Privacy Notice through an updated posting. We will identify the effective date of the revision in the posting. Often, updates are made to provide greater clarity or to comply with changes in regulatory requirements. If the updates involve material changes to the collection, protection, use or disclosure of Personal Information, Pearson will provide notice of the change through a conspicuous notice on this site or other appropriate way. Continued use of the site after the effective date of a posted revision evidences acceptance. Please contact us if you have questions or concerns about the Privacy Notice or any objection to any revisions.

Last Update: November 17, 2020