Published simultaneously in Canada

ISBN: 978-1-119-65918-1
ISBN: 978-1-119-66025-5 (ebk.)
ISBN: 978-1-119-66020-0 (ebk.)

Manufactured in the United States of America

No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/permissions.

Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read.

For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the U.S. at (877) 762-2974, outside the U.S. at (317) 572-3993 or fax (317) 572-4002.

Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material included with standard print versions of this book may not be included in e-books or in print-on-demand. If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at http://booksupport.wiley.com. For more information about Wiley products, visit www.wiley.com.

Library of Congress Control Number: 2019953053

TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. CCNA is a registered trademark of Cisco Technology, Inc. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book.

Acknowledgments

There were many people who helped me build the new CCNA books in 2019 and 2020. First, Kenyon Brown helped me put together the direction for the books and managed the internal editing at Wiley, so thank you, Ken, for working diligently for many months keeping these books moving along. Thanks also to Christine O'Connor, my production editor at Wiley for well over a decade now, as well as Judy Flynn my go-to editor who always does an excellent job! Thanks also to Kim Wimpsett for proofreading and to Todd Montgomery for technical proofreading.

The co-author I used in this book was Donald Robb out of Canada. He helped me put together the two wireless chapters and completely wrote the three DevNet chapters (21–23). His knowledge of the subject is second to none and he blew me away! You'll love his work too. You can reach Donald through his popular blog at https://the-packet-thrower.com. He also is a top moderator and contributor at reddit: https://www.reddit.com/r/ccna/.

The top editors I used in the CCNA series included Troy McMillon, who read each chapter in the full series multiple times, making amazing discoveries both technically and editorially. Todd Montgomery was the most excellent tech editor for the complete two book CCNA Series. Also, Monica Lammle read and reread each chapter and really helped me keep the voicing in place throughout the editorial process, which isn't an easy thing to do!

About the Author

Todd Lammle is the authority on Cisco certification and internetworking and is Cisco certified in most Cisco certification categories. He is a world-renowned author, speaker, trainer, and consultant. Todd has three decades of experience working with LANs, WANs, and large enterprise licensed and unlicensed wireless networks, and lately he's been implementing large Cisco Security networks using Firepower/FTD and ISE.

His years of real-world experience are evident in his writing; he is not just an author but an experienced networking engineer with very practical experience from working on the largest networks in the world, at such companies as Xerox, Hughes Aircraft, Texaco, AAA, Cisco, and Toshiba, among many others.

Todd has published almost 100 books, including the very popular CCNA: Cisco Certified Network Associate Study Guide, CCNA Wireless Study Guide, CCNA Data Center Study Guide, SSFIPS (Firepower), and CCNP Security, all from Sybex. He runs an international consulting and training company based in Colorado, where he spends his free time in the mountains playing with his golden retrievers.

You can reach Todd through his website at www.lammle.com.

CONTENTS

Cover

Acknowledgments

About the Author

Introduction

Assessment Test

Answers to Assessment Test

Chapter 1 Network Fundamentals

Network Components
Next-Generation Firewalls and IPS
Network Topology Architectures
Physical Interfaces and Cables
Ethernet Cabling
Summary
Exam Essentials
Review Questions

Chapter 2 TCP/IP

Introducing TCP/IP
TCP/IP and the DoD Model
IP Addressing
IPv4 Address Types
Summary
Exam Essentials
Review Questions

Chapter 3 Easy Subnetting

Subnetting Basics
Summary
Exam Essentials
Review Questions

Chapter 4 Troubleshooting IP Addressing

Cisco’s Way of Troubleshooting IP
Summary
Exam Essentials
Review Questions

Chapter 5 IP Routing

Routing Basics
The IP Routing Process
Configuring IP Routing
Configuring IP Routing in Our Network
Dynamic Routing
Routing Information Protocol (RIP)
Summary
Exam Essentials
Review Questions

Chapter 6 Open Shortest Path First (OSPF)

Open Shortest Path First (OSPF) Basics
Configuring OSPF
OSPF and Loopback Interfaces
Verifying OSPF Configuration
Summary
Exam Essentials
Review Questions

Chapter 7 Layer 2 Switching

Switching Services
Configuring Catalyst Switches
Summary
Exam Essentials
Review Questions

Chapter 8 VLANs and Inter-VLAN Routing

VLAN Basics
Identifying VLANs
Routing Between VLANs
Configuring VLANs
Summary
Exam Essentials
Review Questions

Chapter 9 Enhanced Switched Technologies

Spanning Tree Protocol (STP)
Types of Spanning-Tree Protocols
Modifying and Verifying the Bridge ID
Spanning-Tree Failure Consequences
PortFast and BPDU Guard
EtherChannel
Summary
Exam Essentials
Review Questions

Chapter 10 Access Lists

Perimeter, Firewall, and Internal Routers
Introduction to Access Lists
Standard Access Lists
Extended Access Lists
Monitoring Access Lists
Summary
Exam Essentials
Review Questions

Chapter 11 Network Address Translation (NAT)

When Do We Use NAT?
Types of Network Address Translation
NAT Names
How NAT Works
Testing and Troubleshooting NAT
Summary
Exam Essentials
Review Questions

Chapter 12 IP Services

Exploring Connected Devices Using CDP and LLDP
Network Time Protocol (NTP)
SNMP
Syslog
Secure Shell (SSH)
Summary
Exam Essentials
Review Questions

Chapter 13 Security

Network Security Threats
Three Primary Network Attacks
Network Attacks
Security Program Elements
Layer 2 Security Features
Authentication Methods
Managing User Accounts
Security Password Policy Elements
User-Authentication Methods
Setting Passwords
Summary
Exam Essentials
Review Questions

Chapter 14 First Hop Redundancy Protocol (HSRP)

Client Redundancy Issues
Introducing First Hop Redundancy Protocol (FHRP)
Hot Standby Router Protocol (HSRP)
Summary
Exam Essentials
Review Questions

Chapter 15 Virtual Private Networks (VPNs)

Virtual Private Networks
GRE Tunnels
Summary
Exam Essentials
Review Questions

Chapter 16 Quality of Service (QoS)

Quality of Service
Trust Boundary
QoS Mechanisms
Summary
Exam Essentials
Review Questions

Chapter 17 Internet Protocol Version 6 (IPv6)

Why Do We Need IPv6?
The Benefits and Uses of IPv6
IPv6 Addressing and Expressions
How IPv6 Works in an Internetwork
IPv6 Routing Protocols
Configuring IPv6 on Our Internetwork
Configuring Routing on Our Internetwork
Summary
Exam Essentials
Review Questions

Chapter 18 Troubleshooting IP, IPv6, and VLANs

Endpoints
Servers
IP Config
Troubleshooting IP Network Connectivity
Troubleshooting IPv6 Network Connectivity
Troubleshooting VLAN Connectivity
Summary
Exam Essentials
Review Questions

Chapter 19 Wireless Technologies

Wireless Networks
Basic Wireless Devices
Wireless Principles
Nonoverlapping Wi-Fi channels
Radio Frequency (RF)
Wireless Security
Summary
Exam Essentials
Review Question

Chapter 20 Configuring Wireless Technologies

WLAN Deployment Models
Setting Up a Wireless LAN Controller (WLC)
Joining Access Points (APs)
Wireless LAN Controllers (WLC)
WLC Port Types
WLC Interface Types
AP Modes
AP and WLC Management Access Connections
Summary
Exam Essentials
Review Questions

Chapter 21 Virtualization, Automation, and Programmability

Virtual Machine Fundamentals
Virtualization Components
Virtualization Features
Virtualization Types
Virtualization Solutions
Automation Components
Summary
Exam Essentials
Review Questions

Chapter 22 SDN Controllers

Traditional Network Monitoring Systems (NMS)
Traditional Network Configuration Managers (NCMs)
Traditional Networking
Introduction to SDN
Separating the Control Plane
Controller-Based Architectures
SDN Network Components
DNA Center Overview
Summary
Exam Essentials
Review Questions

Chapter 23 Configuration Management

Team Silos
DevOps
Infrastructure as Code (IaC)
Ansible
Ansible Tower/AWX
Puppet
Chef
Summary
Exam Essentials
Review Questions

Appendix Answers to Review Questions

Chapter 1: Network Fundamentals
Chapter 2: TCP/IP
Chapter 3: Easy Subnetting
Chapter 4: Troubleshooting IP Addressing
Chapter 5: IP Routing
Chapter 6: Open Shortest Path First (OSPF)
Chapter 7: Layer 2 Switching
Chapter 8: VLANs and Inter-VLAN Routing
Chapter 9: Enhanced Switched Technologies
Chapter 10: Access Lists
Chapter 11: Network Address Translation (NAT)
Chapter 12: IP Services
Chapter 13: Security
Chapter 14: First Hop Redundancy Protocol (HSRP)
Chapter 15: Virtual Private Networks (VPNs)
Chapter 16: Quality of Service (QoS)
Chapter 17: Internet Protocol Version 6 (IPv6)
Chapter 18: Troubleshooting IP, IPv6, and VLANs
Chapter 19: Wireless Technologies
Chapter 20: Configuring Wireless Technologies
Chapter 21: Virtualization, Automation, and Programmability
Chapter 22: SDN Controllers
Chapter 23: Configuration Management

Index

End User License Agreement

List of Illustrations

Introduction

Figure I.1: The Cisco certification path

Chapter 1

Figure 1.1 A very basic SOHO network
Figure 1.2 A switch can break up collision domains.
Figure 1.3 Routers create an internetwork.
Figure 1.4 Switches work at layer 2.
Figure 1.5 Physical components of a network
Figure 1.6 NGFW can stop attacks in real time.
Figure 1.7 Cisco IPS policy to the rescue!
Figure 1.8 Cisco Firepower IPS policy dropped the bad guys packets!
Figure 1.9 The Cisco hierarchical model
Figure 1.10 Real-life collapsed core (2-tier) Image
Figure 1.11 Top of Rack Network Design
Figure 1.12 Spine-leaf design
Figure 1.13 WAN terms
Figure 1.14 Category 5 Enhanced UTP cable
Figure 1.15 Straight-through Ethernet cable
Figure 1.16 Crossover Ethernet cable
Figure 1.17 Typical uses for straight-through and cross-over Ethernet cables
Figure 1.18 UTP Gigabit crossover Ethernet cable
Figure 1.19 Typical fiber cable. Dimensions are in um (10^–6 meters). Not to scale.
Figure 1.20 Multimode and single-mode fibers
Figure 1.21 NGFW ports provide PoE

Chapter 2

Figure 2.1 The DoD and OSI models
Figure 2.2 The TCP/IP protocol suite
Figure 2.3 Telnet
Figure 2.4 Secure Shell
Figure 2.5 FTP
Figure 2.6 TFTP
Figure 2.7 SNMP
Figure 2.8 HTTP
Figure 2.9 NTP
Figure 2.10 DNS
Figure 2.11 DHCP client four-step process
Figure 2.12 TCP segment format
Figure 2.13 UDP segment
Figure 2.14 Port numbers for TCP and UDP
Figure 2.15 IP header
Figure 2.16 The Protocol field in an IP header
Figure 2.17 ICMP error message is sent to the sending host from the remote router
Figure 2.18 ICMP in action
Figure 2.19 Local ARP broadcast
Figure 2.20 Summary of the three classes of networks
Figure 2.21 Local layer 2 broadcasts
Figure 2.22 Layer 3 broadcasts
Figure 2.23 Unicast address
Figure 2.24 EIGRP multicast example

Chapter 3

Figure 3.1 One network
Figure 3.2 Multiple networks connected together
Figure 3.3 Implementing a Class C /25 logical network
Figure 3.4 Implementing a class C /26 (with three networks)
Figure 3.5 Implementing a Class C /27 logical network

Chapter 4

Figure 4.1 Basic IP troubleshooting
Figure 4.2 IP address problem 1
Figure 4.3 IP address problem 2
Figure 4.4 Find the valid host #1.
Figure 4.5 Find the valid host #2.
Figure 4.6 Find the valid host address #3.
Figure 4.7 Find the valid subnet mask

Chapter 5

Figure 5.1 A simple routing example
Figure 5.2 IP routing example using two hosts and one router
Figure 5.3 Frame used from Host A to the Lab_A router when Host B is pinged
Figure 5.4 IP routing example 1
Figure 5.5 IP routing example 2
Figure 5.6 Basic IP routing using MAC and IP addresses
Figure 5.7 Testing basic routing knowledge
Figure 5.8 Configuring IP routing
Figure 5.9 Our internetwork

Chapter 6

Figure 6.1 OSPF design example. An OSPF hierarchical design minimizes routing table entrie...
Figure 6.2 The Hello protocol
Figure 6.3 Sample OSPF wildcard configuration
Figure 6.4 Our new network layout
Figure 6.5 Adding a non-OSPF network to LA router
Figure 6.6 OSPF router ID (RID)

Chapter 7

Figure 7.1 Empty forward/filter table on a switch
Figure 7.2 How switches learn hosts’ locations
Figure 7.3 Forward/filter table
Figure 7.4 Forward/filter table answer
Figure 7.5 “Port security” on a switch port restricts port access by MAC address.
Figure 7.6 Protecting a PC in a lobby
Figure 7.7 Broadcast storm
Figure 7.8 Multiple frame copies
Figure 7.9 A Cisco Catalyst switch
Figure 7.10 Our switched network

Chapter 8

Figure 8.1 Flat network structure
Figure 8.2 The benefit of a switched network
Figure 8.3 One switch, one LAN: Before VLANs, there were no separations between hosts.
Figure 8.4 One switch, two virtual LANs (logical separation between hosts): Still physic...
Figure 8.5 Access ports
Figure 8.6 VLANs can span multiple switches by using trunk links, which carry traffic for ...
Figure 8.7 IEEE 802.1q encapsulation with and without the 802.1q tag
Figure 8.8 Router connecting three VLANs together for inter-VLAN communication, one router...
Figure 8.9 Router on a stick: single router interface connecting all three VLANs together ...
Figure 8.10 A router creates logical interfaces.
Figure 8.11 With IVR, routing runs on the backplane of the switch, and it appears to the ho...
Figure 8.12 Configuring inter-VLAN example 1
Figure 8.13 Inter-VLAN example 2
Figure 8.14 Inter-VLAN example 3
Figure 8.15 Inter-VLAN example 4
Figure 8.16 Inter-VLAN routing with a multilayer switch

Chapter 9

Figure 9.1 A switched network with switching loops
Figure 9.2 A switched network with STP
Figure 9.3 STP operations
Figure 9.4 STP operations
Figure 9.5 STP converged
Figure 9.6 STP operations
Figure 9.7 Common STP example
Figure 9.8 PVST+ provides efficient root bridge selection.
Figure 9.9 PVST+ unique bridge ID
Figure 9.10 RSTP example 1
Figure 9.11 RSTP example 1 answer
Figure 9.12 RSTP example 2
Figure 9.13 RSTP example 2, answer 1
Figure 9.14 RSTP example 2, answer 2
Figure 9.15 Our simple three-switch network
Figure 9.16 STP stopping loops
Figure 9.17 STP failure
Figure 9.18 PortFast
Figure 9.19 Before and after port channels
Figure 9.20 EtherChannel example

Chapter 10

Figure 10.1 A typical secured network
Figure 10.2 IP access list example with three LANs and a WAN connection
Figure 10.3 IP standard access list example 2
Figure 10.4 IP standard access list example 3
Figure 10.5 Extended ACL example 1
Figure 10.6 Extended ACL example 3

Chapter 11

Figure 11.1 Where to configure NAT
Figure 11.2 Basic NAT translation
Figure 11.3 NAT overloading example (PAT)
Figure 11.4 NAT example
Figure 11.5 Another NAT example
Figure 11.6 Last NAT example

Chapter 12

Figure 12.1 Cisco Discovery Protocol
Figure 12.2 Documenting a network topology using CDP
Figure 12.3 Network topology documented
Figure 12.4 Synchronizing time information
Figure 12.5 SNMP GET and TRAP messages
Figure 12.6 Cisco’s MIB OIDs
Figure 12.7 Messages sent to a syslog server

Chapter 13

Figure 13.1 Aerial view of a mantrap
Figure 13.2 Mitigating Threats at the Access Layer
Figure 13.3 DHCP Snooping
Figure 13.4 Identity-Based Networking
Figure 13.5 RSA token card
Figure 13.6 External Authentication options
Figure 13.7 The certificate authority process
Figure 13.8 PKI Encryption Process in action
Figure 13.9 The Kerberos authentication process

Chapter 14

Figure 14.1 Default gateway
Figure 14.2 Proxy ARP
Figure 14.3 FHRPs use a virtual router with a virtual IP address and virtual  MAC address.
Figure 14.4 HSRP active and standby routers
Figure 14.5 Example of HSRP active and standby routers swapping interfaces
Figure 14.6 HSRP Hellos
Figure 14.7 Interface tracking setup
Figure 14.8 HSRP configuration and verification
Figure 14.9 HSRP load balancing per VLAN

Chapter 15

Figure 15.1 Example of using a VPN
Figure 15.2 Enterprise-managed VPNs
Figure 15.3 Provider-managed VPNs
Figure 15.4 Security Protocols
Figure 15.5 Encryption Process
Figure 15.6 Generic Routing Encapsulation (GRE) tunnel structure
Figure 15.7 Example of GRE configuration

Chapter 16

Figure 16.1 Traffic characteristics
Figure 16.2 Trust boundary
Figure 16.3 Policing and shaping rate limiters
Figure 16.4 Congestion management
Figure 16.5 Modern queuing mechanisms
Figure 16.6 LLQ queuing mechanisms
Figure 16.7 Congestion avoidance

Chapter 17

Figure 17.1 IPv6 address example
Figure 17.2 IPv6 global unicast addresses
Figure 17.3 IPv6 link local FE80::/10: The first 10 bits define the address type.
Figure 17.4 EUI-64 interface ID assignment
Figure 17.5 Two steps to IPv6 autoconfiguration
Figure 17.6 IPv6 autoconfiguration example
Figure 17.7 IPv6 header
Figure 17.8 ICMPv6
Figure 17.9 Router solicitation (RS) and router advertisement (RA)
Figure 17.10 Neighbor solicitation (NS) and neighbor advertisement (NA)
Figure 17.11 Duplicate address detection (DAD)
Figure 17.12 IPv6 static and default routing
Figure 17.13 Our internetwork

Chapter 18

Figure 18.1 Network Connections page
Figure 18.2 IPv4 Properties Page
Figure 18.3 Setting the IP and DNS addresses
Figure 18.4 Advanced tab
Figure 18.5 DNS tab
Figure 18.6 Verifying IP information
Figure 18.7 IPconfig
Figure 18.8 IPConfig /all
Figure 18.9 Powershell
Figure 18.10 MAC OS
Figure 18.11 MAC TCP/IP Screen
Figure 18.12 MAC DNS tab
Figure 18.13 MAC ifconfig
Figure 18.14 Ubuntu IP Settings
Figure 18.15 the Linux gear icon
Figure 18.16 Troubleshooting scenario
Figure 18.17 Using SPAN for troubleshooting
Figure 18.18 Extended ACLs
Figure 18.19 IPv6 troubleshooting scenario
Figure 18.20 Router solicitation (RS) and router advertisement (RA)
Figure 18.21 Neighbor solicitation (NS) and neighbor advertisement (NA)
Figure 18.22 VLAN connectivity

Chapter 19

Figure 19.1 Wireless LANs are an extension of our existing LANs
Figure 19.2 Today’s wireless networks
Figure 19.3 A wireless access point
Figure 19.4 Wireless NIC
Figure 19.5 A wireless network in ad hoc mode
Figure 19.6 Basic service set/basic service area
Figure 19.7 A network with MBSSIDs configured on an AP
Figure 19.8 Extended service set (ESS)
Figure 19.9 An AP repeater network
Figure 19.10 Typical bridge scenarios
Figure 19.11 A repeater AP bridge configured as a nonroot bridge
Figure 19.12 Typical large mesh outdoor environment
Figure 19.13 2.4GHz band 22MHz wide channels
Figure 19.14 5GHz band 20MHz wide channels
Figure 19.15 Channel overlap in the 2.4GHz range
Figure 19.16 Channel overlap in the 5GHz band
Figure 19.17 RF spectrum
Figure 19.18 Frequency
Figure 19.19 Amplitude
Figure 19.21 Absorption
Figure 19.22 Reflection
Figure 19.23 Multipath
Figure 19.24 Refraction
Figure 19.25 Diffraction
Figure 19.26 Scattering
Figure 19.27 Line of sight
Figure 19.28 Fresnel zone
Figure 19.29 SNR
Figure 19.30 Open access process
Figure 19.31 Open access process

Chapter 20

Figure 20.1 Cisco stand-alone AP
Figure 20.2 Cisco Lightweight AP
Figure 20.3 The cloud model
Figure 20.4 Meraki Wireless
Figure 20.5 Example wireless network
Figure 20.6 Configure AP with DNS
Figure 20.7 Cisco WLC
Figure 20.8 Cisco WLC Serial Port Configuration
Figure 20.9 WLC Add Route
Figure 20.10 Distribution system port
Figure 20.11 WLC interfaces
Figure 20.12 WLC management interface
Figure 20.13 WLC service port interface
Figure 20.14 WLC redundancy management interface
Figure 20.15 WLC virtual interface
Figure 20.16 WLC dynamic interface
Figure 20.17 WLC dynamic interface configuration
Figure 20.18 WLC Interface Groups
Figure 20.19 WLC interface group configuration
Figure 20.20 WLC LAN Aggregation Group
Figure 20.21 WLC reboot
Figure 20.22 WLC AP configuration screen
Figure 20.23 WLC AP IP addressing
Figure 20.24 WLC AP DNS configuration
Figure 20.25 WLC high availability
Figure 20.26 WLC finished AP configuration
Figure 20.27 WLC radio sniffer
Figure 20.28 Cisco Spectrum Expert
Figure 20.29 Metageek’s Chanalyzer
Figure 20.30 Bridge mode
Figure 20.31 FlexConnect layout
Figure 20.32 WLC CDP configuration
Figure 20.33 WLC CDP verification
Figure 20.34 Show CDP neighbors
Figure 20.35 WLC telnet configuration
Figure 20.36 WLC SSH Configuration
Figure 20.37 WLC HTTP configuration
Figure 20.38 WLC HTTPS configuration
Figure 20.39 WLC Radius configuration
Figure 20.40 WLC second Radius configuration
Figure 20.41 Radius configuration summary
Figure 20.42 WLC Radius accounting configuration
Figure 20.43 WLC Radius accounting summary
Figure 20.44 WLC TACACS+ configuration
Figure 20.45 WLC TACACS+ summary
Figure 20.46 WLC TACACS+ accounting configuration
Figure 20.47 WLC TACACS+ accounting summary
Figure 20.48 WLC authentication order
Figure 20.49 WLC WLAN creation
Figure 20.50 WLC WLAN configuration
Figure 20.51 WLC WLAN General tab
Figure 20.52 WLC WLAN Security tab
Figure 20.53 WLC WLAN PSK configuration
Figure 20.54 WLC WLAN AAA Servers tab
Figure 20.55 WLC WLAN QoS tab
Figure 20.56 WLC WLAN Advanced tab
Figure 20.57 Connect a client to the WLAN
Figure 20.58 WLAN client configuration
Figure 20.59 WLAN client verification

Chapter 21

Figure 21.1 Five servers and counting
Figure 21.2 Streamlined Servers
Figure 21.3 How a REST API is put together
Figure 21.4 Token Body Window
Figure 21.5 Device Inventory

Chapter 22

Figure 22.1 NMS network overview
Figure 22.2 NMS alert configuration
Figure 22.3 NMS alert configuration
Figure 22.4 NMS central syslog
Figure 22.5 NMS central SNMP trap
Figure 22.6 NMS interface utilization
Figure 22.7 NMS hardware health
Figure 22.8 NMS network graphs
Figure 22.9 NMS network topology
Figure 22.10 NCM config overview
Figure 22.11 NCM compare config
Figure 22.12 NCM push config
Figure 22.13 IOS-XE web interface
Figure 22.14 Fowarding traffic flow
Figure 22.15 Forwarding table
Figure 22.16 Full topology
Figure 22.17 SDN architecture
Figure 22.18 OpenDaylight topology
Figure 22.19 SDN control plane
Figure 22.20 SDN Controller
Figure 22.21 Campus fabric
Figure 22.22 CLOS topology
Figure 22.23 Underlay topology
Figure 22.24 DMVPN topology
Figure 22.25 DNA Overview
Figure 22.26 DNA discovery
Figure 22.27 DNA Network Hierarchy
Figure 22.28 DNA Network Settings
Figure 22.29 DNA Wireless Settings
Figure 22.30 DNA Switch Template
Figure 22.31 DNA topology
Figure 22.32 DNA upgrade repository
Figure 22.33 DNA upgrading devices
Figure 22.34 DNA Command Runner
Figure 22.35 DNA Network Health
Figure 22.36 DNA wireless clients
Figure 22.37 DNA Path Trace
Figure 22.38 DNA QoS Policy
Figure 22.39 DNA Service Provider Profiles
Figure 22.40 DNA LAN automation
Figure 22.41 DNA Restful API

Chapter 23

Figure 23.1 IT generalist
Figure 23.2 Silo network team
Figure 23.3 Silo systems team
Figure 23.4 Silo security team
Figure 23.5 Network services
Figure 23.6 Silo development team
Figure 23.7 DevOps team
Figure 23.8 Ansible components
Figure 23.9 Ansible topology
Figure 23.10 Puppet lab
Figure 23.11 Chef architecture
Figure 23.12 Chef lab
Figure 23.13 Chef verification

CCNA
Certification

Study Guide
Exam 200-301

Acknowledgments

About the Author