This maps introductory coverage to Cisco’s six CCNA 200-301 v1.1 domains. Percentages come from the linked official outline. A linked page does not mean that every subtopic has a deep hardware lab or that you are exam-ready. Review the official outline alongside your own practice evidence.
Network fundamentals (20%)
Devices, layouts, cabling, interface faults, TCP/UDP, IPv4, private addressing, IPv6, client tools, wireless principles, virtualisation and switching concepts.
- Network devices, functions, and topologies
- Ethernet cabling and interface troubleshooting
- OSI and TCP/IP models, encapsulation, TCP, UDP, and ports
- IPv4 addressing and subnet calculations
- IPv6 addressing, Neighbor Discovery, and SLAAC
- Client IP configuration and connectivity troubleshooting
- Wireless LAN fundamentals, channels, and security
- Virtual machines, containers, and VRF routing tables
- Ethernet frame forwarding, MAC address tables, and ARP
Practice depth: Concept lessons, subnet practice and existing foundation/IPv6 labs.
Network access (20%)
VLANs, voice/default VLAN roles, trunks, native VLAN, discovery, EtherChannel, rapid spanning tree, edge protections, wireless architectures and device management.
- VLAN configuration and 802.1Q trunking
- CDP and LLDP neighbor discovery
- Spanning Tree Protocol and EtherChannel
- Access points, wireless controllers, and WLAN configuration
- Network access control, authentication, and secure management
Practice depth: VLAN practice pack; existing trunk, EtherChannel, RSTP and SSH labs; wireless build checklist.
IP connectivity (25%)
Routing-table fields, route choice, IPv4/IPv6 static routes, single-area OSPF and first-hop redundancy purpose.
- Routing tables and longest-prefix matching
- OSPF operation, neighbor adjacency, and route verification
- First-hop redundancy and default gateway availability
- IPv6 addressing, Neighbor Discovery, and SLAAC
Practice depth: Route-choice tool, OSPF practice pack and existing static/IPv6 routing labs. Redundancy is introduced conceptually.
IP services (10%)
Static/pool NAT, NTP, DHCP, DNS, SNMP, syslog, QoS, SSH and TFTP/FTP roles.
- DHCP address allocation and DNS name resolution
- Network monitoring with syslog, NTP, and SNMP
- QoS queuing and configuration file transfers
- Access control lists, NAT, and PAT
- Network access control, authentication, and secure management
Practice depth: DHCP and PAT practice packs; existing NAT, DHCP, NTP/syslog and SSH labs. QoS and SNMP are introductory concept coverage.
Security fundamentals (15%)
Threat/weakness/mitigation, user and physical safeguards, passwords, MFA, VPNs, ACLs, Layer 2 controls, AAA and wireless security.
- Network access control, authentication, and secure management
- Access control lists, NAT, and PAT
- VPNs, GRE encapsulation, and IPsec protection
- Wireless LAN fundamentals, channels, and security
- Access points, wireless controllers, and WLAN configuration
Practice depth: ACL pack; existing port security and Layer 2 labs; wireless GUI build checklist and conceptual reasoning exercise.
Automation and programmability (10%)
Automation, controller architectures, underlay/overlay, API directions, AI/ML, REST methods/authentication, configuration management and JSON.
- Controller-based networking and network automation
- AI-assisted network operations and output validation
- JSON data structures and REST API requests
- Ansible configuration automation and Terraform provisioning
Practice depth: Local JSON exercise and conceptual change-review activities. No live controller or cloud API is contacted.
Extension topics
The existing RIP, EIGRP, GRE and multi-area OSPF labs are useful additional study. They should not displace subnetting, single-area OSPF, wireless, security and automation fundamentals in a beginner CCNA path.
Sources & content checks
Technical references checked on 25 October 2026. These are original teaching explanations, not official Cisco course material. See how content and lab validation are described.