\documentclass[10pt,a4paper]{article} % Packages \usepackage{fancyhdr} % For header and footer \usepackage{multicol} % Allows multicols in tables \usepackage{tabularx} % Intelligent column widths \usepackage{tabulary} % Used in header and footer \usepackage{hhline} % Border under tables \usepackage{graphicx} % For images \usepackage{xcolor} % For hex colours %\usepackage[utf8x]{inputenc} % For unicode character support \usepackage[T1]{fontenc} % Without this we get weird character replacements \usepackage{colortbl} % For coloured tables \usepackage{setspace} % For line height \usepackage{lastpage} % Needed for total page number \usepackage{seqsplit} % Splits long words. %\usepackage{opensans} % Can't make this work so far. Shame. Would be lovely. \usepackage[normalem]{ulem} % For underlining links % Most of the following are not required for the majority % of cheat sheets but are needed for some symbol support. \usepackage{amsmath} % Symbols \usepackage{MnSymbol} % Symbols \usepackage{wasysym} % Symbols %\usepackage[english,german,french,spanish,italian]{babel} % Languages % Document Info \author{bytebar} \pdfinfo{ /Title (ccna-200-301.pdf) /Creator (Cheatography) /Author (bytebar) /Subject (CCNA (200-301) Cheat Sheet) } % Lengths and widths \addtolength{\textwidth}{6cm} \addtolength{\textheight}{-1cm} \addtolength{\hoffset}{-3cm} \addtolength{\voffset}{-2cm} \setlength{\tabcolsep}{0.2cm} % Space between columns \setlength{\headsep}{-12pt} % Reduce space between header and content \setlength{\headheight}{85pt} % If less, LaTeX automatically increases it \renewcommand{\footrulewidth}{0pt} % Remove footer line \renewcommand{\headrulewidth}{0pt} % Remove header line \renewcommand{\seqinsert}{\ifmmode\allowbreak\else\-\fi} % Hyphens in seqsplit % This two commands together give roughly % the right line height in the tables \renewcommand{\arraystretch}{1.3} \onehalfspacing % Commands \newcommand{\SetRowColor}[1]{\noalign{\gdef\RowColorName{#1}}\rowcolor{\RowColorName}} % Shortcut for row colour \newcommand{\mymulticolumn}[3]{\multicolumn{#1}{>{\columncolor{\RowColorName}}#2}{#3}} % For coloured multi-cols \newcolumntype{x}[1]{>{\raggedright}p{#1}} % New column types for ragged-right paragraph columns \newcommand{\tn}{\tabularnewline} % Required as custom column type in use % Font and Colours \definecolor{HeadBackground}{HTML}{333333} \definecolor{FootBackground}{HTML}{666666} \definecolor{TextColor}{HTML}{333333} \definecolor{DarkBackground}{HTML}{A3A3A3} \definecolor{LightBackground}{HTML}{F3F3F3} \renewcommand{\familydefault}{\sfdefault} \color{TextColor} % Header and Footer \pagestyle{fancy} \fancyhead{} % Set header to blank \fancyfoot{} % Set footer to blank \fancyhead[L]{ \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{C} \SetRowColor{DarkBackground} \vspace{-7pt} {\parbox{\dimexpr\textwidth-2\fboxsep\relax}{\noindent \hspace*{-6pt}\includegraphics[width=5.8cm]{/web/www.cheatography.com/public/images/cheatography_logo.pdf}} } \end{tabulary} \columnbreak \begin{tabulary}{11cm}{L} \vspace{-2pt}\large{\bf{\textcolor{DarkBackground}{\textrm{CCNA (200-301) Cheat Sheet}}}} \\ \normalsize{by \textcolor{DarkBackground}{bytebar} via \textcolor{DarkBackground}{\uline{cheatography.com/218949/cs/48466/}}} \end{tabulary} \end{multicols}} \fancyfoot[L]{ \footnotesize \noindent \begin{multicols}{3} \begin{tabulary}{5.8cm}{LL} \SetRowColor{FootBackground} \mymulticolumn{2}{p{5.377cm}}{\bf\textcolor{white}{Cheatographer}} \\ \vspace{-2pt}bytebar \\ \uline{cheatography.com/bytebar} \\ \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Cheat Sheet}} \\ \vspace{-2pt}Published 24th September, 2026.\\ Updated 25th September, 2026.\\ Page {\thepage} of \pageref{LastPage}. \end{tabulary} \vfill \columnbreak \begin{tabulary}{5.8cm}{L} \SetRowColor{FootBackground} \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Sponsor}} \\ \SetRowColor{white} \vspace{-5pt} %\includegraphics[width=48px,height=48px]{dave.jpeg} Measure your website readability!\\ www.readability-score.com \end{tabulary} \end{multicols}} \begin{document} \raggedright \raggedcolumns % Set font size to small. Switch to any value % from this page to resize cheat sheet text: % www.emerson.emory.edu/services/latex/latex_169.html \footnotesize % Small font. \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{DHCP on IOS}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{``` \newline % Row Count 1 (+ 1) Router(config)\# ip dhcp pool LAN \newline % Row Count 2 (+ 1) Router(dhcp-config)\# network 192.168.1.0 255.255.255.0 \newline % Row Count 4 (+ 2) Router(dhcp-config)\# default-router 192.168.1.1 \newline % Row Count 5 (+ 1) Router(dhcp-config)\# dns-server 8.8.8.8 \newline % Row Count 6 (+ 1) Router(config)\# ip dhcp excluded-address 192.168.1.1 192.168.1.10 \newline % Row Count 8 (+ 2) ``` \newline % Row Count 9 (+ 1) - {\bf{DHCP relay (`ip helper-address`):}} forwards client broadcasts to a remote DHCP server — configured on the router interface facing clients. \newline % Row Count 12 (+ 3) - {\bf{Troubleshoot:}} client gets APIPA → check pool, exclusions, relay, and that the server is reachable. `show ip dhcp binding` lists active leases.% Row Count 15 (+ 3) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{More from ByteBar}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{{\bf{CCNA 200-301 — Go Deeper}} \newline % Row Count 1 (+ 1) Like this cheat sheet? The ByteBar CCNA (200-301) Study Guide covers all five exam domains in exam-weight order, with must-memorize tables, EXAM TIP boxes, and 100 practice questions with full explanations — only \$5: \{\{link="https://bytebarhq.com/b/Ah9lQ"\}\}https://bytebarhq.com/b/Ah9lQ\{\{/link\}\} \newline % Row Count 7 (+ 6) {\emph{Independent study resource. Not affiliated with Cisco Systems, Inc. Cisco and CCNA are trademarks of Cisco Systems, Inc.}}% Row Count 10 (+ 3) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \SetRowColor{LightBackground} \mymulticolumn{1}{x{17.67cm}}{Updated practice question count from 30 to 100.} \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Exam-Day Rapid Fire}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{- {\bf{Simlets first.}} CLI simulations pay the most and eat the most time — do them while fresh. \newline % Row Count 2 (+ 2) - {\bf{Subnet in the margins.}} Write the CIDR ladder on scratch paper before starting — free reference for the whole exam. \newline % Row Count 5 (+ 3) - {\bf{Read like a troubleshooter:}} match symptoms to causes (APIPA = DHCP, native mismatch = trunk, EXSTART stuck = MTU). \newline % Row Count 8 (+ 3) - {\bf{AD ladder:}} 0-1-20-90-110-120-200. Longest prefix match beats everything. \newline % Row Count 10 (+ 2) - {\bf{Eliminate aggressively.}} Two answers are usually nonsense — kill them, then decide between the survivors. \newline % Row Count 13 (+ 3) - {\bf{Never leave blanks.}} No penalty for guessing. \newline % Row Count 15 (+ 2) - {\bf{Version check:}} v2.0 blueprint exam goes live February 3, 2027 — booked before that date, you sit v1.1. \newline % Row Count 18 (+ 3) - About the exam: \textasciitilde{}100 questions (multiple choice, drag-and-drop, simlets), 120 minutes, passing score not published, valid 3 years.% Row Count 21 (+ 3) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Essential CLI Commands}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Command | Does what | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | `show ip route` | Routing table — {[}AD/metric{]}, next-hop, exit interface | \newline % Row Count 4 (+ 2) | `show interfaces status` | Port status at a glance | \newline % Row Count 6 (+ 2) | `show interfaces trunk` | Verify trunking + allowed VLANs | \newline % Row Count 8 (+ 2) | `show vlan brief` | VLAN-to-port mapping | \newline % Row Count 9 (+ 1) | `show spanning-tree vlan 10` | Root bridge, port roles/states per VLAN | \newline % Row Count 11 (+ 2) | `show etherchannel summary` | Channel-group status: (P) bundled vs. (I) standalone | \newline % Row Count 13 (+ 2) | `show cdp neighbors` / `show lldp neighbors` | Directly connected neighbor identity and capabilities | \newline % Row Count 16 (+ 3) | `show ip ospf neighbor` | OSPF adjacencies and states (FULL, 2WAY…) | \newline % Row Count 18 (+ 2) | `show ip ospf interface brief` | OSPF-enabled interfaces | \newline % Row Count 20 (+ 2) | `show ip dhcp binding` | Active DHCP leases | \newline % Row Count 21 (+ 1) | `show standby brief` | HSRP/VRRP active/standby roles | \newline % Row Count 23 (+ 2) | `ping` / extended `ping` | Basic reachability; extended sets source interface | \newline % Row Count 25 (+ 2) | `traceroute` | Hop-by-hop path (find where inter-VLAN routing breaks) |% Row Count 27 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Protocols Quick Reference}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Protocol | What the guide says | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | Telnet (23) | Block it in ACLs (`deny tcp... any eq 23`); disable in favor of SSH | \newline % Row Count 4 (+ 2) | SSH | Encrypted device management | \newline % Row Count 5 (+ 1) | DNS | Name resolution (A, AAAA, CNAME, MX, NS, PTR) | \newline % Row Count 7 (+ 2) | DHCP | Address assignment; relay with `ip helper-address`; APIPA = DHCP failed | \newline % Row Count 9 (+ 2) | SNMP | Monitoring — v2c community strings (plaintext), v3 auth + privacy | \newline % Row Count 11 (+ 2) | Syslog | Centralized logging, severity 0–7 | \newline % Row Count 12 (+ 1) | NTP | Time synchronization | \newline % Row Count 13 (+ 1) | TFTP | Insecure — never across untrusted networks | \newline % Row Count 15 (+ 2) | SFTP / SCP | Secure transfer of IOS images and configs | \newline % Row Count 17 (+ 2) | RADIUS / TACACS+ | AAA — RADIUS open (encrypts password only), TACACS+ Cisco (encrypts whole payload) | \newline % Row Count 20 (+ 3) | IPsec / IKE | VPN tunnels; IKE negotiates the security association | \newline % Row Count 22 (+ 2) | HSRP / VRRP | First-hop redundancy — virtual IP + virtual MAC gateway | \newline % Row Count 24 (+ 2) | OSPF | Single-area (area 0) interior routing | \newline % Row Count 25 (+ 1) | CDP / LLDP | Neighbor discovery — CDP Cisco-proprietary, LLDP open (multi-vendor) | \newline % Row Count 27 (+ 2) | CAPWAP / LWAPP | Lightweight APs tunnel traffic to the WLC | \newline % Row Count 29 (+ 2) | ICMP | ping (extended ping sets source interface), traceroute (hop-by-hop path) |% Row Count 31 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Management, Monitoring \& Automation}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{\#\#\# Approaches \newline % Row Count 1 (+ 1) | Approach | Know this | \newline % Row Count 2 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 3 (+ 1) | Device-based (traditional) | CLI/SSH per device — fine for small networks, doesn't scale | \newline % Row Count 5 (+ 2) | Controller-based (SDN) | Central controller (e.g., Catalyst Center) pushes policy; devices follow | \newline % Row Count 8 (+ 3) | Cloud-based | Management plane in the cloud (e.g., Meraki dashboard) | \newline % Row Count 10 (+ 2) | Automation / IaC | Configs as versioned code (Ansible playbooks, Terraform) — consistent, repeatable, reviewable | \newline % Row Count 13 (+ 3) {\bf{Planes:}} management (SSH/SNMP — how you administer), control (routing protocols — how devices learn paths), data (forwarding — the actual packets). \newline % Row Count 17 (+ 4) \#\#\# SNMP, Syslog, NTP \newline % Row Count 18 (+ 1) | Tool | Know this | \newline % Row Count 19 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 20 (+ 1) | SNMPv2c | Community strings (plaintext) — `snmp-server community`; agents, managers, MIBs, traps | \newline % Row Count 23 (+ 3) | SNMPv3 | Adds auth + privacy (encryption) — the secure choice | \newline % Row Count 25 (+ 2) | Syslog severity | 0 Emergency → 7 Debug (mnemonic: {\bf{E}}very {\bf{A}}wesome {\bf{C}}isco {\bf{E}}ngineer {\bf{C}}an {\bf{N}}ow {\bf{P}}lay {\bf{D}}aily). Lower number = worse | \newline % Row Count 29 (+ 4) | NTP | Time sync for logs and certs — `ntp server 10.1.1.50` | \newline % Row Count 31 (+ 2) } \tn \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Management, Monitoring \& Automation (cont)}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{``` \newline % Row Count 1 (+ 1) Router(config)\# logging host 10.1.1.100 \newline % Row Count 2 (+ 1) Router(config)\# logging trap warnings \newline % Row Count 3 (+ 1) Router(config)\# snmp-server community NETOPS RO \newline % Row Count 4 (+ 1) ``` \newline % Row Count 5 (+ 1) `logging trap warnings` sends severity 0–4 (that level and everything more severe). \newline % Row Count 7 (+ 2) \#\#\# Automation \& AI \newline % Row Count 8 (+ 1) - {\bf{Ansible:}} agentless automation over SSH; playbooks (YAML) declare desired state. \newline % Row Count 10 (+ 2) - {\bf{REST APIs / JSON:}} how controllers and scripts talk to network devices programmatically. \newline % Row Count 12 (+ 2) - {\bf{Agentic AI in NetOps:}} can analyze telemetry, suggest config changes, draft troubleshooting steps — but a human validates before anything touches production.% Row Count 16 (+ 4) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Wireless Principles}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Concept | Know this | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | Bands | 2.4 GHz (range), 5 GHz (speed/capacity), 6 GHz (Wi-Fi 6E/7, fastest) | \newline % Row Count 4 (+ 2) | Channels (2.4 GHz) | Only 1, 6, 11 are non-overlapping | \newline % Row Count 6 (+ 2) | Security | WPA3 current; WPA2-AES minimum; WEP is broken | \newline % Row Count 8 (+ 2) | Enterprise auth | 802.1X + RADIUS — per-user credentials, not a shared passphrase | \newline % Row Count 10 (+ 2) | Interference | Microwaves, Bluetooth, neighboring APs on 2.4 GHz; rogues and overlap generally | \newline % Row Count 12 (+ 2) | LWAPP/CAPWAP | Lightweight APs tunnel traffic to a wireless LAN controller (WLC) |% Row Count 14 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Management Security \& VPNs}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Concept | Know this | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | SSH | Encrypted management: `crypto key generate rsa`, `ip ssh version 2`, disable telnet (line vty: `transport input ssh`) | \newline % Row Count 5 (+ 3) | Passwords | `service password-encryption` obscures type-7 passwords; `enable secret` uses strong MD5 for the privileged password | \newline % Row Count 8 (+ 3) | AAA | Authentication, Authorization, Accounting — TACACS+ (Cisco, encrypts whole payload) vs. RADIUS (open, encrypts password only) | \newline % Row Count 11 (+ 3) | SFTP/SCP | Secure file transfer for IOS images and configs — never TFTP across untrusted networks | \newline % Row Count 14 (+ 3) | IPsec VPN | Site-to-site (routers/firewalls) and remote-access (clients); tunnel vs. transport mode; IKE negotiates the SA |% Row Count 17 (+ 3) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Layer 2 Security}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Feature | Stops | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | Port security | MAC flooding / rogue devices — limit MACs per port; violation: protect, restrict, shutdown (default) | \newline % Row Count 5 (+ 3) | DHCP snooping | Rogue DHCP servers — trust only uplink ports; builds a binding table | \newline % Row Count 7 (+ 2) | Dynamic ARP Inspection (DAI) | ARP spoofing — validates ARP against the DHCP snooping table | \newline % Row Count 9 (+ 2) | Storm control | Broadcast/multicast storms — throttles when traffic exceeds a threshold | \newline % Row Count 11 (+ 2) | RA guard | Rogue IPv6 router advertisements | \newline % Row Count 12 (+ 1) ``` \newline % Row Count 13 (+ 1) Switch(config-if)\# switchport port-security \newline % Row Count 14 (+ 1) Switch(config-if)\# switchport port-security maximum 2 \newline % Row Count 16 (+ 2) Switch(config-if)\# switchport port-security violation restrict \newline % Row Count 18 (+ 2) Switch(config-if)\# switchport port-security mac-address sticky \newline % Row Count 20 (+ 2) ``` \newline % Row Count 21 (+ 1) {\bf{Violation modes:}} protect = drop only; restrict = drop + log/trap, port stays up; shutdown (default) = err-disables the port. DHCP snooping drops server messages (OFFER/ACK) arriving on untrusted ports.% Row Count 26 (+ 5) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{ACLs — The Packet Filter}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Type | Range | Filters on | Place it | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | Standard | 1–99 | Source IP only | Close to the destination | \newline % Row Count 4 (+ 2) | Extended | 100–199 | Source + dest IP, protocol, ports | Close to the source | \newline % Row Count 6 (+ 2) ``` \newline % Row Count 7 (+ 1) Router(config)\# access-list 101 deny tcp 192.168.10.0 0.0.0.255 any eq 23 \newline % Row Count 9 (+ 2) Router(config)\# access-list 101 permit ip any any \newline % Row Count 10 (+ 1) Router(config-if)\# ip access-group 101 in \newline % Row Count 11 (+ 1) ``` \newline % Row Count 12 (+ 1) - Rules process top-down, first match wins, ending in an {\bf{implicit deny all}} — finish with `permit ip any any` (or your traffic dies). \newline % Row Count 15 (+ 3) - {\bf{Wildcard masks}} invert subnet masks: /24 → 0.0.0.255. `host 10.1.1.1` = 0.0.0.0 wildcard. (/26 → 0.0.0.63.) \newline % Row Count 18 (+ 3) - Named ACLs allow editing/removal of individual lines; numbered are append-only (`ip access-list extended NAME`).% Row Count 21 (+ 3) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{NAT / PAT}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Type | What it does | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | Static NAT | One private IP ↔ one public IP (1:1). For servers needing a fixed public address | \newline % Row Count 4 (+ 2) | Dynamic NAT | Pool of public IPs assigned on demand — 1:1 while in use | \newline % Row Count 6 (+ 2) | PAT (overload) | Many private IPs ↔ one public IP using port numbers — the SOHO/branch standard | \newline % Row Count 9 (+ 3) ``` \newline % Row Count 10 (+ 1) Router(config)\# ip nat inside source list 1 interface Gi0/0 overload \newline % Row Count 12 (+ 2) Router(config)\# access-list 1 permit 192.168.1.0 0.0.0.255 \newline % Row Count 14 (+ 2) Router(config-if)\# ip nat inside \newline % Row Count 15 (+ 1) Router(config-if)\# ip nat outside \newline % Row Count 16 (+ 1) ``` \newline % Row Count 17 (+ 1) {\bf{Inside source}} translates private→public (outbound). Mark interfaces: `ip nat inside` on the LAN side, `ip nat outside` toward the ISP. Reversed = nothing translates.% Row Count 21 (+ 4) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Intro}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{{\bf{CCNA 200-301 Cheat Sheet}} \newline % Row Count 1 (+ 1) The commands, tables, and exam traps from the CCNA 200-301 blueprint — subnetting, VLANs, STP, OSPF, ACLs, NAT, wireless, and automation on one page.% Row Count 5 (+ 4) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{DNS Records}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Record | Maps | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | A | Hostname → IPv4 | \newline % Row Count 3 (+ 1) | AAAA | Hostname → IPv6 | \newline % Row Count 4 (+ 1) | CNAME | Alias → canonical name | \newline % Row Count 5 (+ 1) | MX | Domain → mail server | \newline % Row Count 6 (+ 1) | NS | Domain → authoritative name servers | \newline % Row Count 7 (+ 1) | PTR | IP → hostname (reverse lookup) |% Row Count 8 (+ 1) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Single-Area OSPFv2 / OSPFv3}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Concept | Know this | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | Area | CCNA covers single-area only — backbone area 0 | \newline % Row Count 4 (+ 2) | Router ID | Highest loopback IP, else highest active physical IP; or set manually (best practice) | \newline % Row Count 7 (+ 3) | DR/BDR election | Highest OSPF priority (default 1), tie-break: highest router ID. Priority 0 = never DR | \newline % Row Count 10 (+ 3) | Neighbor requirements | Same area, same hello/dead timers, same subnet, matching authentication, unique router IDs | \newline % Row Count 13 (+ 3) | Cost | Reference bandwidth (100 Mbps default) / interface bandwidth — lower cost = preferred path | \newline % Row Count 16 (+ 3) | OSPFv3 | Same concepts for IPv6; uses link-local addresses for neighbor formation | \newline % Row Count 18 (+ 2) ``` \newline % Row Count 19 (+ 1) Router(config)\# router ospf 1 \newline % Row Count 20 (+ 1) Router(config-router)\# router-id 1.1.1.1 \newline % Row Count 21 (+ 1) Router(config-router)\# network 10.0.0.0 0.0.0.255 area 0 \newline % Row Count 23 (+ 2) Router\# show ip ospf neighbor \newline % Row Count 24 (+ 1) Router\# show ip ospf interface brief \newline % Row Count 25 (+ 1) ``` \newline % Row Count 26 (+ 1) {\bf{Troubleshooting:}} neighbors stuck in EXSTART/EXCHANGE → suspect MTU mismatch. Stuck in INIT → hellos aren't getting through (ACL, timer mismatch, or multicast blocked). \newline % Row Count 30 (+ 4) } \tn \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Single-Area OSPFv2 / OSPFv3 (cont)}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{\#\#\# First Hop Redundancy (HSRP / VRRP) \newline % Row Count 1 (+ 1) - Give hosts a virtual IP + virtual MAC as their gateway; one router is active, another standby — failover is transparent to hosts. \newline % Row Count 4 (+ 3) - HSRP (Cisco-proprietary) vs. VRRP (open standard) — same idea, know both names. \newline % Row Count 6 (+ 2) - Verify with `show standby brief`; preemption lets the higher-priority router retake the active role.% Row Count 9 (+ 3) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Static Routing}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{``` \newline % Row Count 1 (+ 1) Router(config)\# ip route 192.168.20.0 255.255.255.0 10.0.0.2 \newline % Row Count 3 (+ 2) Router(config)\# ipv6 route 2001:db8::/32 2001:db8:1::2 \newline % Row Count 5 (+ 2) Router(config)\# ip route 0.0.0.0 0.0.0.0 10.0.0.2 \newline % Row Count 6 (+ 1) Router(config)\# ip route 192.168.30.0 255.255.255.0 10.0.0.6 10 (floating static) \newline % Row Count 8 (+ 2) ``` \newline % Row Count 9 (+ 1) - {\bf{Default route (0.0.0.0/0):}} the "route of last resort" — points toward the ISP/internet. \newline % Row Count 11 (+ 2) - {\bf{Floating static:}} same destination with a higher AD (e.g., 10) — sleeps until the primary route fails. \newline % Row Count 14 (+ 3) - {\bf{Host route (/32):}} a route to one specific address — most specific, always wins the match.% Row Count 16 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Reading a Routing Table}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{``` \newline % Row Count 1 (+ 1) R1\# show ip route \newline % Row Count 2 (+ 1) O 192.168.20.0/24 {[}110/2{]} via 10.0.0.2, 00:14:33, Gig0/1 \newline % Row Count 4 (+ 2) ``` \newline % Row Count 5 (+ 1) | Field | Meaning | \newline % Row Count 6 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 7 (+ 1) | O | Source protocol: O=OSPF, C=connected, S=static, D=EIGRP, B=BGP | \newline % Row Count 9 (+ 2) | 110/2 | Administrative distance / metric — lower AD wins between protocols | \newline % Row Count 11 (+ 2) | via 10.0.0.2 | Next-hop address | \newline % Row Count 12 (+ 1) | Gig0/1 | Exit interface | \newline % Row Count 13 (+ 1) {\bf{Route selection order:}} 1) longest prefix match (most specific wins), 2) lowest administrative distance, 3) lowest metric. \newline % Row Count 16 (+ 3) \#\#\# Administrative Distance Ladder (memorize: 0-1-20-90-110-120-200) \newline % Row Count 18 (+ 2) | Source | AD | \newline % Row Count 19 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 20 (+ 1) | Connected | 0 | \newline % Row Count 21 (+ 1) | Static | 1 | \newline % Row Count 22 (+ 1) | eBGP | 20 | \newline % Row Count 23 (+ 1) | EIGRP | 90 | \newline % Row Count 24 (+ 1) | OSPF | 110 | \newline % Row Count 25 (+ 1) | RIP | 120 | \newline % Row Count 26 (+ 1) | iBGP | 200 | \newline % Row Count 27 (+ 1) Equal prefix length → lowest AD wins, regardless of metric.% Row Count 29 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Switch Port Recipes}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{- {\bf{Desktop/printer:}} access port in the right VLAN + PortFast. \newline % Row Count 2 (+ 2) - {\bf{IP phone:}} access (data) VLAN + voice VLAN; trust QoS markings from the phone. \newline % Row Count 4 (+ 2) - {\bf{Wireless AP:}} trunk carrying AP-management + SSID VLANs (or access port for single-SSID). \newline % Row Count 6 (+ 2) - {\bf{PoE:}} powers phones/APs/cameras over the data cable — check the switch's power budget before adding devices.% Row Count 9 (+ 3) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Spanning Tree — Rapid PVST+}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Concept | Know this | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | Purpose | Prevents Layer 2 loops by blocking redundant paths; one instance per VLAN (PVST+) | \newline % Row Count 4 (+ 2) | Root bridge election | Lowest bridge ID wins (priority + MAC). Default priority 32768; set 4096/8192 to force it | \newline % Row Count 7 (+ 3) | Port roles | Root port (toward root), designated (forwarding per segment), alternate (blocked backup) | \newline % Row Count 10 (+ 3) | PortFast | Edge ports skip listening/learning — hosts come up instantly. Never on trunk/uplink ports | \newline % Row Count 13 (+ 3) | BPDU guard | Shuts down (err-disables) a PortFast port if a BPDU arrives — rogue switch protection | \newline % Row Count 16 (+ 3) | Root guard | Blocks a port from becoming root (keeps the hierarchy stable) | \newline % Row Count 18 (+ 2) | Loop guard | Prevents alternate/blocked ports from wrongly transitioning to forwarding | \newline % Row Count 20 (+ 2) ``` \newline % Row Count 21 (+ 1) Switch(config)\# spanning-tree vlan 10 root primary \newline % Row Count 23 (+ 2) Switch(config-if)\# spanning-tree portfast \newline % Row Count 24 (+ 1) Switch(config-if)\# spanning-tree bpduguard enable \newline % Row Count 25 (+ 1) ``` \newline % Row Count 26 (+ 1) {\bf{Election order is everything:}} lowest bridge ID → root bridge. For root ports: lowest path cost to the root, then lowest neighbor bridge ID, then lowest port priority/number.% Row Count 30 (+ 4) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{EtherChannel / LACP}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Concept | Know this | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | Purpose | Bundle 2–8 physical links into one logical link — more bandwidth + redundancy | \newline % Row Count 4 (+ 2) | LACP modes | active (initiates) / passive (responds) — at least one side must be active | \newline % Row Count 6 (+ 2) | Static ('on' mode) | No negotiation protocol — both sides must be 'on' | \newline % Row Count 8 (+ 2) | Rules | Same speed/duplex, same VLAN config on all member ports; max 8 active + 8 standby | \newline % Row Count 10 (+ 2) ``` \newline % Row Count 11 (+ 1) Switch(config)\# interface range Gi0/1-2 \newline % Row Count 12 (+ 1) \seqsplit{Switch(config-if-range)\#} channel-group 1 mode active \newline % Row Count 14 (+ 2) Switch(config)\# interface port-channel 1 \newline % Row Count 15 (+ 1) Switch(config-if)\# switchport mode trunk \newline % Row Count 16 (+ 1) ``` \newline % Row Count 17 (+ 1) `show etherchannel summary` — (P) bundled vs. (I) \seqsplit{standalone/misconfigured.}% Row Count 19 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{VLANs \& Trunking}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Concept | Know this | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | VLAN | Broadcast-domain segmentation at Layer 2; hosts in different VLANs need a router (SVI) to talk | \newline % Row Count 5 (+ 3) | Access port | Carries one VLAN — connects end hosts | \newline % Row Count 7 (+ 2) | Trunk port | Carries multiple VLANs using 802.1Q tagging — switch-to-switch | \newline % Row Count 9 (+ 2) | Native VLAN | Untagged traffic on a trunk (default VLAN 1 — change it for security) | \newline % Row Count 11 (+ 2) | Voice VLAN | Separates VoIP traffic; phone + PC can share one port (data + voice VLANs) | \newline % Row Count 13 (+ 2) ``` \newline % Row Count 14 (+ 1) Switch(config)\# vlan 10 \newline % Row Count 15 (+ 1) Switch(config-vlan)\# name SALES \newline % Row Count 16 (+ 1) Switch(config)\# interface Gi0/1 \newline % Row Count 17 (+ 1) Switch(config-if)\# switchport mode access \newline % Row Count 18 (+ 1) Switch(config-if)\# switchport access vlan 10 \newline % Row Count 19 (+ 1) Switch(config)\# interface Gi0/24 \newline % Row Count 20 (+ 1) Switch(config-if)\# switchport mode trunk \newline % Row Count 21 (+ 1) Switch(config-if)\# switchport trunk allowed vlan 10,20 \newline % Row Count 23 (+ 2) ``` \newline % Row Count 24 (+ 1) {\bf{Trunk troubleshooting:}} native VLAN mismatch on the two ends breaks untagged traffic, and a VLAN missing from `allowed vlan` silently drops that VLAN's frames. Check both first. \newline % Row Count 28 (+ 4) \#\#\# Inter-VLAN Routing \newline % Row Count 29 (+ 1) - {\bf{SVI (switched virtual interface):}} the Layer 3 path between VLANs on a multilayer switch. \newline % Row Count 31 (+ 2) } \tn \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{VLANs \& Trunking (cont)}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{- {\bf{Router-on-a-stick:}} a router subinterface per VLAN over one trunk link. \newline % Row Count 2 (+ 2) - Same-VLAN works + gateways respond but VLANs can't reach each other → inter-VLAN routing (SVI/router) is misconfigured or missing.% Row Count 5 (+ 3) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Cables \& Interfaces — Diagnose Fast}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Issue | Symptom / check | \newline % Row Count 1 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 2 (+ 1) | Speed/duplex mismatch | Late collisions, terrible throughput — hard-code both sides or leave both auto | \newline % Row Count 5 (+ 3) | Wrong cable type | No link — straight-through vs. crossover (auto-MDIX fixes most modern gear) | \newline % Row Count 8 (+ 3) | Distance exceeded | 100 m copper limit; errors climb past it — move to fiber | \newline % Row Count 10 (+ 2) | Fiber: wrong type | Single-mode vs. multimode mismatch = no link; check TX/RX polarity | \newline % Row Count 12 (+ 2) | Dirty connectors | Intermittent errors on fiber — clean with proper tools, never touch the endface | \newline % Row Count 15 (+ 3) | Collisions | Half-duplex relic; full-duplex links shouldn't show collisions at all | \newline % Row Count 17 (+ 2) `show interfaces status` · `show interfaces Gi0/1 counters errors`% Row Count 19 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Layers — Quick Map (as used in the guide)}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{| Layer | Lives here | Examples from the blueprint | \newline % Row Count 2 (+ 2) | -{}-{}- | -{}-{}- | -{}-{}- | \newline % Row Count 3 (+ 1) | Layer 2 | Switching | VLANs, trunks (802.1Q), STP, EtherChannel, MAC/frames | \newline % Row Count 5 (+ 2) | Layer 3 | Routing | IP addressing, static routes, OSPF, ACLs, NAT, packets |% Row Count 7 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{IP Addressing Essentials}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{\#\#\# IPv4 \newline % Row Count 1 (+ 1) | Concept | Know this | \newline % Row Count 2 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 3 (+ 1) | Private (RFC 1918) | 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 | \newline % Row Count 5 (+ 2) | APIPA | 169.254.x.x — DHCP failed | \newline % Row Count 6 (+ 1) | Loopback | 127.0.0.0/8 (reserved, not Class A usable) | \newline % Row Count 8 (+ 2) | Default route | 0.0.0.0/0 — "everything" | \newline % Row Count 9 (+ 1) | Limited broadcast | 255.255.255.255 — "everyone here" | \newline % Row Count 11 (+ 2) \#\#\# IPv6 \newline % Row Count 12 (+ 1) | Concept | Know this | \newline % Row Count 13 (+ 1) | -{}-{}- | -{}-{}- | \newline % Row Count 14 (+ 1) | Global unicast | 2000::/3 — publicly routable | \newline % Row Count 16 (+ 2) | Link-local | fe80::/10 — auto-configured on every interface; used for neighbor discovery | \newline % Row Count 18 (+ 2) | EUI-64 | Builds the host portion from the MAC: flip the 7th bit, insert ff:fe in the middle | \newline % Row Count 20 (+ 2) | SLAAC | Stateless auto-configuration — hosts self-assign using router advertisements | \newline % Row Count 22 (+ 2) | Shorthand | Compress the longest run of zeros once with :: (e.g., 2001:db8::1) |% Row Count 24 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \begin{tabularx}{17.67cm}{X} \SetRowColor{DarkBackground} \mymulticolumn{1}{x{17.67cm}}{\bf\textcolor{white}{Subnetting — The 30-Second Method}} \tn \SetRowColor{white} \mymulticolumn{1}{x{17.67cm}}{1. {\bf{Magic number}} = 256 − interesting octet. Subnets increment by the magic number. \newline % Row Count 2 (+ 2) 2. {\bf{Broadcast}} = next subnet − 1. {\bf{Usable range}} = everything between. \newline % Row Count 4 (+ 2) 3. Example: 192.168.1.0/26 → magic 64 → subnets .0, .64, .128, .192; first subnet usable .1–.62, broadcast .63. \newline % Row Count 7 (+ 3) 4. Usable hosts = 2\textasciicircum{}(host bits) − 2. Subnet and broadcast addresses are never assignable. \newline % Row Count 9 (+ 2) \#\#\# CIDR Ladder (memorize cold) \newline % Row Count 10 (+ 1) | CIDR | Mask | Hosts | Use it for | \newline % Row Count 11 (+ 1) | -{}-{}- | -{}-{}- | -{}-{}- | -{}-{}- | \newline % Row Count 12 (+ 1) | /24 | 255.255.255.0 | 254 | Standard LAN subnet | \newline % Row Count 14 (+ 2) | /25 | 255.255.255.128 | 126 | Splitting a /24 in half | \newline % Row Count 16 (+ 2) | /26 | 255.255.255.192 | 62 | Small departments | \newline % Row Count 18 (+ 2) | /27 | 255.255.255.224 | 30 | Point-of-sale, small VLANs | \newline % Row Count 20 (+ 2) | /28 | 255.255.255.240 | 14 | Tiny segments | \newline % Row Count 21 (+ 1) | /29 | 255.255.255.248 | 6 | DMZ server clusters | \newline % Row Count 23 (+ 2) | /30 | 255.255.255.252 | 2 | Point-to-point WAN links | \newline % Row Count 25 (+ 2) {\bf{Exam favorite:}} /30 = 2 usable hosts is the standard point-to-point mask.% Row Count 27 (+ 2) } \tn \hhline{>{\arrayrulecolor{DarkBackground}}-} \end{tabularx} \par\addvspace{1.3em} \end{document}