Chapter 1 · CCNA 200-301 Study Guide · Based on the CCNA 200-301 v2.0 exam blueprint (effective February 2027)

Chapter 1: Network Fundamentals

Every network you will ever touch — from a home Wi-Fi router to a global enterprise WAN — is built on the ideas in this chapter. Cisco expects you to know these cold: what happens at each layer of the models, how bits travel over copper and fiber, how Ethernet frames work, and above all, how to subnet in your head. Subnetting alone can decide whether you pass or fail the exam, so we go deep on it here.

1.1 The OSI Model vs the TCP/IP Model

The OSI model (Open Systems Interconnection) is a 7-layer reference model. Nobody implements it directly, but everyone uses its vocabulary to describe what is happening on a network. The TCP/IP model is the 4-layer model that the real Internet actually runs on. Cisco will ask you to map one to the other, so learn both.

Encapsulation and De-encapsulation

When a host sends data, each layer adds its own header (and sometimes a trailer) as the data moves down the stack. This is encapsulation:

1. Application — the user data (e.g. a web page request).
2. Transport — adds a TCP or UDP header → the unit is now called a segment (TCP) or datagram (UDP). This header carries the source and destination port numbers.
3. Network — adds an IP header → now called a packet. This header carries the source and destination IP addresses.
4. Data Link — adds an Ethernet header and trailer → now called a frame. The header carries source and destination MAC addresses; the trailer carries the FCS error check.
5. Physical — the frame is converted to bits and transmitted as electrical, light, or radio signals.

The receiving host reverses the process — de-encapsulation — stripping each header as the data moves back up the stack.

1.2 Cabling Types

Twisted-Pair Copper

Twisted-pair cable contains pairs of copper wires twisted together to cancel electromagnetic interference. UTP (unshielded) is the common type in offices; STP (shielded) adds foil shielding for noisy environments like factories.

Fiber Optics

Fiber carries light instead of electricity, so it is immune to electromagnetic interference and supports far longer distances.

Connectors

• RJ45 — 8-pin connector for twisted-pair Ethernet. This is the familiar "network plug."
• LC — small-form-factor fiber connector, the most common in modern equipment.
• SC — larger square fiber connector, common on older gear.
• ST — round bayonet-style fiber connector, mostly legacy.

1.3 Ethernet Concepts

Frames and MAC Addresses

An Ethernet frame has this structure: preamble (synchronization) → destination MAC → source MAC → EtherType/length → payload → FCS (Frame Check Sequence, a 4-byte error-detection trailer).

A MAC address is a 48-bit hardware address written as 12 hexadecimal digits, e.g. AA:BB:CC:DD:EE:FF. The first 24 bits are the OUI (Organizationally Unique Identifier) assigned to the manufacturer; the last 24 bits identify the individual device. The broadcast MAC address is FF:FF:FF:FF:FF:FF — a frame sent there is received by every device on the LAN.

Half Duplex, CSMA/CD, and Full Duplex

• Half duplex — a device can send or receive, but not both at once (like a walkie-talkie). Old hubs worked this way. To manage sharing, Ethernet used CSMA/CD (Carrier Sense Multiple Access with Collision Detection): listen before sending, and if two devices transmit at once (a collision), both back off for a random time and retry.
• Full duplex — a device sends and receives simultaneously (like a phone call). Modern switches give every port its own collision-free path, so collisions no longer occur and CSMA/CD is effectively retired on switched networks.

Speed and Duplex

Ethernet ports negotiate speed (10/100/1000 Mbps and beyond) and duplex automatically via autonegotiation. A duplex mismatch — one side full, the other half — causes late collisions, CRC errors, and painfully slow throughput. When troubleshooting, check both ends:

Switch# show interfaces gigabitethernet0/1 status
Port      Name  Status       Vlan  Duplex  Speed Type
Gi0/1           connected    10    a-full  a-1000 10/100/1000BaseTX

To set speed and duplex manually:

Switch(config)# interface gigabitethernet0/1
Switch(config-if)# speed 1000
Switch(config-if)# duplex full

1.4 IPv4 Addressing and Subnetting in Depth

Address Classes and Private Ranges

An IPv4 address is 32 bits, written as four decimal octets (e.g. 192.168.1.10).

Special addresses: 127.0.0.0/8 is loopback (this device itself); 169.254.0.0/16 is APIPA/link-local (self-assigned when no DHCP server answers).

The private ranges (RFC 1918) are not routable on the public Internet and are reused inside organizations:

• 10.0.0.0/8 (Class A private)
• 172.16.0.0/12 (Class B private — 172.16.0.0 through 172.31.255.255)
• 192.168.0.0/16 (Class C private)

Subnet Mask Math

Subnetting borrows bits from the host portion of an address to create smaller networks. Two formulas run everything:

• Number of subnets = 2^(borrowed bits)
• Usable hosts per subnet = 2^(host bits) − 2 (subtract the network ID and the broadcast address)

The fastest method: the block size (increment) = 256 − (interesting octet of the mask). Count by block sizes to find each subnet's network ID; the broadcast is one address before the next network ID.

Configuring an IPv4 Address

Router(config)# interface gigabitethernet0/0
Router(config-if)# ip address 192.168.10.1 255.255.255.0
Router(config-if)# no shutdown

1.5 VLSM and Route Summarization Basics

VLSM (Variable Length Subnet Masking) means using different mask lengths inside one address block, so each subnet gets only the addresses it needs. Always allocate largest requirement first, or the big subnets will not fit into the leftover space.

Route summarization (aggregation) combines multiple contiguous subnets into one advertised route, shrinking routing tables.

1.6 IPv6 Fundamentals

IPv6 uses 128-bit addresses written as eight groups of four hexadecimal digits (hextets), e.g. 2001:0db8:0000:0000:0000:ff00:0042:8329. Two shortening rules keep them readable:

1. Drop leading zeros in each hextet: 0db8 → db8, 0042 → 42.
2. Replace the longest run of all-zero hextets with :: — but only once per address.

So 2001:0db8:0000:0000:0000:ff00:0042:8329 becomes 2001:db8::ff00:42:8329.

IPv6 Address Types

EUI-64

A host can build its own 64-bit interface ID from its 48-bit MAC address (EUI-64): split the MAC in half, insert FFFE in the middle, and flip the 7th bit (the U/L bit) of the first byte.

SLAAC vs DHCPv6

• SLAAC (Stateless Address Autoconfiguration): the host listens for Router Advertisements, takes the advertised prefix, and generates its own interface ID (EUI-64 or random). No server needed; the router does not track who got what. Basic SLAAC does not provide DNS server info.
• DHCPv6: stateful DHCPv6 works like DHCP for IPv4 (server assigns full addresses and tracks them); stateless DHCPv6 only supplies extra info such as DNS servers while the host self-assigns its address via SLAAC.

Configuring IPv6

Router(config)# ipv6 unicast-routing
Router(config)# interface gigabitethernet0/0
Router(config-if)# ipv6 address 2001:db8:abcd:1::1/64
Router(config-if)# no shutdown

1.7 Wireless Principles

RF Bands and Channels

Wi-Fi uses unlicensed radio spectrum in three bands:

In the 2.4 GHz band, channels overlap — only channels 1, 6, and 11 are non-overlapping (in regions using channels 1–11), so neighboring access points should be placed on these three. The 5 and 6 GHz bands offer many more non-overlapping channels and wider channel widths (40, 80, even 160 MHz) for higher throughput.

SSID and Wireless Media Access

The SSID (Service Set Identifier) is the network name clients see — up to 32 characters, case-sensitive. Hiding the SSID (not broadcasting it) is not real security; it is trivially discovered.

Because wireless is half-duplex (a radio cannot transmit and receive on the same frequency at once), Wi-Fi uses CSMA/CA (Collision Avoidance) instead of Ethernet's CSMA/CD — the sender first checks the airwaves are clear and may use RTS/CTS handshaking to reserve airtime, avoiding collisions rather than detecting them after the fact.

End-of-Chapter Test