Cisco Certified Network Associate (CCNA)
1 Network Fundamentals
1-1 Explain the role and function of network components
1-2 Describe characteristics of network topology architectures
1-3 Compare physical interface and cabling types
1-4 Identify interface and cable issues (collisions, errors, mismatch protocols)
1-5 Compare TCP to UDP
1-6 Configure and verify IPv4 addressing and subnetting
1-7 Describe the need for private IPv4 addressing
1-8 Configure and verify IPv6 addressing and prefix
1-9 Compare IPv6 address types
1-10 Describe IPv6 address autoconfiguration
1-11 Verify IP parameters for Client OS (Windows, Linux, Mac OS)
1-12 Describe wireless principles (SSID, BSS, ESS)
1-13 Describe virtualization fundamentals (hypervisor)
1-14 Describe switching concepts
2 Network Access
2-1 Configure and verify VLANs (normal range) spanning multiple switches
2-2 Configure and verify interswitch connectivity (trunking, DTP, VTP)
2-3 Configure and verify Layer 2 discovery protocols (CDP, LLDP)
2-4 Configure and verify (Layer 2Layer 3) EtherChannel (LACP)
2-5 Describe the need for and basic operations of Rapid PVST+ Spanning Tree Protocol
2-6 Compare Cisco Wireless Architectures and AP modes
2-7 Describe physical infrastructure connections of WLAN components (AP, WLC, accesstrunk ports, and LAG)
2-8 Describe AP and WLC management access connections (Telnet, SSH, HTTP, HTTPS, console, and TACACS+RADIUS)
2-9 Configure the components of a wireless LAN access for client connectivity using GUI only
3 IP Connectivity
3-1 Interpret the components of routing table
3-2 Determine how a router makes a forwarding decision by default
3-3 Configure and verify IPv4 and IPv6 static routing
3-4 Configure and verify single area OSPF
3-5 Describe the purpose of first hop redundancy protocols
4 IP Services
4-1 Configure and verify inside source NAT using static and pools
4-2 Configure and verify NTP operating in a client and server mode
4-3 Explain the role of DHCP and DNS within the network
4-4 Explain the function of SNMP in network operations
4-5 Describe the use of syslog features including facilities and levels
4-6 Configure and verify DHCP client and relay
4-7 Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, and congestion
4-8 Configure network devices for remote access using SSH
4-9 Describe the capabilities and function of TFTPFTP in the network
5 Security Fundamentals
5-1 Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)
5-2 Describe security program elements (user awareness, training, and physical access control)
5-3 Configure and verify device access control using local passwords
5-4 Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)
5-5 Configure and verify access control lists (ACLs)
5-6 Configure and verify Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)
5-7 Configure and verify IPv6 access control lists (ACLs)
5-8 Describe wireless security protocols (WPA, WPA2, and WPA3)
5-9 Configure and verify wireless security settings
5-10 Describe the components of a comprehensive security policy (acceptable use policy, password, updates, and patches)
6 Automation and Programmability
6-1 Explain how automation impacts network management
6-2 Compare traditional networks with controller-based networking
6-3 Describe controller-based and software defined architectures (overlay, underlay, and fabric)
6-4 Compare traditional campus device management with Cisco DNA Center enabled device management
6-5 Describe characteristics of REST-based APIs (CRUD, HTTP verbs, and data encoding)
6-6 Recognize the capabilities of configuration management mechanisms Puppet, Chef, and Ansible
6-7 Interpret JSON encoded data
6-8 Identify the appropriate Automation and Programmability solution for a given scenario
CCNA: Automation and Programmability

CCNA: Automation and Programmability

Key Concepts

Network Automation

Network Automation involves using software to automate repetitive tasks in network management, such as configuration, monitoring, and troubleshooting. It reduces manual intervention, minimizes human error, and increases efficiency. Automation can be achieved through scripts, APIs, and configuration management tools.

Example: Think of network automation as a smart home system that automatically adjusts lighting, temperature, and security based on predefined rules. This system eliminates the need for manual adjustments, ensuring everything runs smoothly without human intervention.

Programmability

Programmability refers to the ability of network devices to be configured and managed using software programs and scripts. It allows network administrators to write code that interacts with network devices, enabling dynamic and flexible network management. Programmability is essential for creating scalable and adaptable network infrastructures.

Example: Consider programmability as the ability to customize a car's settings using a mobile app. Instead of manually adjusting each setting, you can write a script to automate the process, ensuring the car is always configured to your preferences.

APIs (Application Programming Interfaces)

APIs are sets of rules and protocols that allow different software applications to communicate with each other. In network automation, APIs enable network devices to interact with management systems, allowing for seamless integration and automation of network tasks. APIs are crucial for building scalable and interoperable network solutions.

Example: Think of an API as a universal translator that allows different languages (software applications) to communicate with each other. This translator ensures that devices and systems can work together efficiently, regardless of their native languages.

Configuration Management Tools

Configuration Management Tools, such as Ansible, Puppet, and Chef, are used to automate the configuration and management of network devices. These tools ensure consistency across the network by applying predefined configurations to multiple devices simultaneously. They also facilitate version control and rollback capabilities.

Example: Consider configuration management tools as a blueprint for building a house. The blueprint ensures that every room is built according to the same specifications, reducing the risk of errors and ensuring consistency throughout the construction process.

Software-Defined Networking (SDN)

SDN is an approach to network management that separates the control plane (decision-making) from the data plane (data forwarding). This separation allows network administrators to manage the network through a centralized controller, enabling dynamic and flexible network configurations. SDN is essential for creating scalable and adaptable network infrastructures.

Example: Think of SDN as a traffic control system that manages the flow of cars on a highway. The control center (centralized controller) decides the best routes for each car, ensuring smooth traffic flow without the need for each car to make its own decisions.

Network Function Virtualization (NFV)

NFV is a network architecture that virtualizes network functions, such as firewalls, load balancers, and routers, onto standard hardware. This virtualization allows network functions to be deployed, scaled, and managed more flexibly and efficiently. NFV is crucial for creating agile and cost-effective network solutions.

Example: Consider NFV as a cloud-based service that provides various tools (network functions) on demand. Instead of buying and maintaining physical tools, you can access the tools you need from the cloud, ensuring flexibility and cost-effectiveness.