CCNA Volume 2 Book Study Map

# How To Use The Book

1. Read Small

Study one chapter section at a time, not a whole part in one sitting.
Write a simple answer: what problem does this solve in a real network?

2. Build Proof

Create a Packet Tracer or GNS3 topology for every configurable topic.
Save .pkt, configs, screenshots, command output, and notes.

3. Break And Repair

Add one realistic fault per topic: wrong ACL direction, bad NAT statement, DHCP snooping trust mistake, or OSPF mismatch.
Document symptom, checks, root cause, fix, and verification.

4. Review Like An Engineer

Add commands to Commands.
Add failures to Mistakes.
Add a job-style explanation to Interview.

# Book Topics Grouped For Study

This is organized by learning dependency and lab value, not only by chapter order.

Module 1. Transport, Applications, And ACL Thinking Ch. 1-3

TCP and UDP behavior: ports, reliability, connection setup, flow control, and application selection.

DNS, HTTP, URI basics, and how a receiving host selects the right application.

Standard IPv4 ACLs: location, direction, matching, permit/deny logic, implicit deny.

Wildcard masks: exact host, subnet range, any/all, and reverse-engineering ACL ranges.

Extended and named ACLs: protocol, source, destination, TCP/UDP ports, sequence editing.

Module 2. Security Architecture And Device Hardening Ch. 4-6

Threat language: spoofing, DoS, reflection/amplification, man-in-the-middle, reconnaissance, malware, passwords.

Security controls: user access, user education, firewalls, IPS, NGFW, and security zones.

IOS passwords: console/VTY, enable secret, local users, password hashing/encryption, access control for management.

Switch port security: sticky/static MACs, maximum addresses, violation modes, verify and recover.

Module 3. DHCP, Snooping, And ARP Defense Ch. 7-8

DHCP client/server flow, pools, exclusions, default gateway, DNS, and relay with ip helper-address.

Host IPv4 settings on Windows, macOS, and Linux: IP, mask, gateway, DNS, and lease checks.

DHCP snooping trust boundaries, binding table, rogue DHCP defense, and message rate limits.

Dynamic ARP Inspection: normal ARP review, gratuitous ARP attacks, validation checks, trusted uplinks.

Module 4. Management And IP Services Ch. 9-12

Syslog: severity levels, real-time messages, stored logs, debug output, and timestamps.

NTP: clock, timezone, stratum, redundant time sources, and loopback-source design.

CDP and LLDP: neighbor discovery, topology mapping, and verification commands.

NAT: static NAT, dynamic NAT, PAT overload, inside/outside interfaces, verification, and troubleshooting.

QoS: bandwidth, delay, jitter, loss, traffic types, classification, marking, queuing, shaping, policing, congestion avoidance.

FHRP and HSRP: virtual gateway, active/standby behavior, failover, priority, preemption, and verification.

SNMP, FTP, and TFTP: monitoring, device management, and IOS/config file movement.

Module 5. Architecture: LAN, WAN, And Cloud Ch. 13-15

Campus LAN design: two-tier, three-tier, access/distribution/core roles, and collapsed core.

SOHO and PoE: small network layout, power budgets, powered devices, and design impact.

WAN options: Metro Ethernet, MPLS, internet access, site-to-site VPN, remote-access VPN.

Virtualization: server virtualization, virtual switches, physical data center network, and traffic workflow.

Cloud: private/public cloud, IaaS/PaaS/SaaS, branch-to-cloud paths, internet VPN, private WAN, intercloud exchange.

Module 6. Automation And Programmability Ch. 16-19

Planes: data, control, and management planes; traditional vs controller-based networks.

SDN examples: OpenDaylight, ACI, APIC-EM, controller role, northbound and southbound interfaces.

Cisco SDA: underlay, overlay, VXLAN, LISP, DNA Center, scalable groups, and intent-based operations.

REST APIs: client/server, stateless calls, CRUD, HTTP verbs, URIs, status codes, and authentication awareness.

JSON/YAML/XML: key-value pairs, objects, arrays, minified vs beautified JSON, and interpreting API output.

Configuration management: drift, version control, templates, variables, Ansible, Puppet, and Chef.

Module 7. Final Review And Exam Readiness Ch. 20

Practice exam workflow: timed attempts, wrong-answer review, and weak-domain repair.

CLI skill review: commands that must be recalled under time pressure.

Self-assessment: separate memorized answers from lab-proven understanding.

# Lab And Packet File Plan

Create these under labs/ccna/. Each folder should hold the Packet Tracer or GNS3 file, topology image, configs, command output, and notes.

Folder	Lab	Packet / Diagram Needed	Proof Output
`acl-standard/`	Standard ACL placement and wildcard masks	`acl-standard.pkt`, client-server topology	`show access-lists`, ping permit/deny tests
`acl-extended/`	Extended ACL for web/DNS/ICMP control	`acl-extended.pkt`, traffic path diagram	packet tests by protocol and port
`port-security/`	Sticky MACs and violation modes	`port-security.pkt`, access switch diagram	`show port-security`, violation recovery notes
`dhcp-snooping-dai/`	Rogue DHCP and ARP spoof defense	`dhcp-snooping-dai.pkt`, trusted/untrusted port map	binding table, blocked rogue server proof
`nat-pat/`	Inside network to ISP using PAT	`nat-pat.pkt`, inside/outside labels	`show ip nat translations`, traceroute
`hsrp/`	Two gateways with failover	`hsrp.gns3` or `hsrp.pkt`, active/standby diagram	continuous ping during failover
`qos-basic/`	Classify, mark, queue, shape, police	original QoS flow diagram	policy-map notes and verification commands
`architecture/`	Campus, WAN, cloud comparison	original LAN/WAN/cloud diagrams	design notes and interview explanation
`rest-json/`	Read API output and JSON objects	API request/response diagram	formatted JSON examples and explanation
`ansible-config/`	Config backup and drift check concept	controller-to-devices diagram	inventory, playbook notes, before/after configs

# Image Rules

Use original diagrams for the site. The uploaded book contains useful figures, but the public repo should not copy Cisco Press images. Redraw your own simple diagrams: topology, traffic path, packet fields, trust boundary, inside/outside NAT, HSRP failover, campus tiers, WAN/cloud paths, and controller/API flow.

# Weekly Study Rhythm

Read-> Diagram-> Build-> Break-> Prove-> Review

Target: one module every 1-2 weeks. Do not mark a topic complete until it has a note, a lab or diagram, a proof artifact, and a one-paragraph interview answer.

CCNA 200-301 Volume 2 Topic-Wise Study Plan

# How To Use The Book

1. Read Small

2. Build Proof

3. Break And Repair

4. Review Like An Engineer

# Book Topics Grouped For Study

# Lab And Packet File Plan

# Image Rules

# Weekly Study Rhythm