🇺🇸 Cisco Certified Network Associate (CCNA) · subject

Cisco Certified Network Associate (CCNA) Network Access Syllabus

Every chapter and topic of Network Access examined in Cisco Certified Network Associate (CCNA) — 5 chapters, 17 topics and 30 sub-topics, plus 80 flashcards written against it.

5Chapters
17Topics
30Sub-topics
~20hEst. first pass
17%Of Cisco Certified Network Associate (CCNA)
80Flashcards

Network Access syllabus — full chapter and topic list

Expand any chapter to see its topics and sub-topics. This is the whole examinable outline for Network Access in Cisco Certified Network Associate (CCNA), not a summary of it.

  1. VLANs and Inter-Switch Connectivity

    3 topics
    • VLAN concepts and benefits
      • Broadcast domain segmentation
      • Access vs voice VLANs
      • Default and native VLANs
    • Configuring VLANs spanning multiple switches
      • Creating and assigning VLANs to access ports
      • Verifying VLAN membership
    • Inter-VLAN routing concepts
      • Router-on-a-stick
      • SVIs on Layer 3 switches
  2. Trunking and VLAN Protocols

    3 topics
    • 802.1Q trunking
      • Tagging and untagged native VLAN
      • Allowed VLAN list pruning
    • Dynamic Trunking Protocol (DTP)
      • Trunk negotiation modes
      • Disabling DTP for security
    • Trunk verification and troubleshooting
  3. Spanning Tree Protocol

    3 topics
    • STP operation and convergence
      • Root bridge election and bridge ID
      • Port roles and states
      • Path cost and port priority
    • Rapid PVST+
      • Per-VLAN spanning tree
      • RSTP port roles and fast transitions
    • STP protection features
      • PortFast
      • BPDU Guard
  4. EtherChannel and Layer 2 Discovery

    4 topics
    • Layer 2 and Layer 3 EtherChannel
      • LACP configuration and modes
      • PAgP and static channels
      • Load balancing methods
    • Cisco Discovery Protocol (CDP)
    • Link Layer Discovery Protocol (LLDP)
    • Verifying and troubleshooting EtherChannel bundles
  5. Wireless LAN Configuration

    4 topics
    • AP modes and WLC architecture
      • Autonomous vs lightweight APs
      • Split-MAC and CAPWAP
    • AP and WLC management access connections
      • Telnet, SSH, HTTP/HTTPS, console
      • TACACS+/RADIUS for management
    • Configuring WLAN components via WLC GUI
      • WLAN creation and security settings
      • QoS profiles
      • Advanced WLAN settings
    • Configuring Layer 2 wireless security
      • WPA2 and WPA3 PSK
      • 802.1X/EAP enterprise

Network Access flashcards for Cisco Certified Network Associate (CCNA)

20 of 80 cards from the Network Access deck — real questions with worked answers.

  1. What is a VLAN?

    A Virtual LAN is a logical grouping of devices into a single broadcast domain at Layer 2, regardless of their physical location or which switch they connect to.

  2. List the main benefits of using VLANs.

    Smaller broadcast domains, improved security (segmentation), logical grouping by function rather than location, easier management, and reduced cost (no extra physical switches).

  3. What is the default VLAN on a Cisco switch, and what is special about it?

    VLAN 1 is the default VLAN. All ports belong to it by default; it cannot be deleted or renamed, and it carries control traffic (CDP, DTP, VTP, STP) by default.

  4. What is the range of normal-range VLANs and extended-range VLANs?

    Normal range is 1-1005 (1002-1005 reserved for legacy Token Ring/FDDI). Extended range is 1006-4094.

  5. How many bits is the VLAN ID field in an 802.1Q tag, and how many usable VLANs result?

    12 bits, allowing 4096 values (0-4095), of which 4094 are usable (0 and 4095 are reserved).

  6. What two Cisco IOS commands create VLAN 20 named SALES?

    In global config: 'vlan 20' then 'name SALES'.

  7. What commands assign interface Gi0/1 to VLAN 20 as an access port?

    interface gi0/1 ; switchport mode access ; switchport access vlan 20.

  8. What is an access port?

    A switch port that belongs to and carries traffic for a single VLAN; frames are sent/received untagged to the end device.

  9. What is a trunk port?

    A switch port that carries traffic for multiple VLANs simultaneously between switches (or to routers/servers), tagging frames to identify their VLAN.

  10. Which trunking encapsulation does CCNA use, and what is the legacy Cisco-proprietary alternative?

    IEEE 802.1Q (dot1q) is the standard used. ISL (Inter-Switch Link) is the legacy Cisco-proprietary alternative, now deprecated.

  11. How does 802.1Q tag a frame, and how big is the tag?

    It inserts a 4-byte tag between the source MAC and the EtherType/Length field of the Ethernet frame, containing TPID, priority (PCP), CFI/DEI, and the 12-bit VLAN ID.

  12. What is the native VLAN in 802.1Q?

    The one VLAN whose traffic is sent untagged across a trunk (default VLAN 1). Frames received untagged on the trunk are assumed to belong to the native VLAN.

  13. Why must the native VLAN match on both ends of a trunk?

    A native VLAN mismatch causes traffic from the two VLANs to be merged (VLAN leaking) and triggers STP inconsistency; CDP reports a native VLAN mismatch error.

  14. What command sets the native VLAN to 99 on a trunk interface?

    switchport trunk native vlan 99.

  15. What is Dynamic Trunking Protocol (DTP)?

    A Cisco-proprietary Layer 2 protocol that automatically negotiates whether a link between two switches becomes a trunk.

  16. List the DTP-related switchport modes and which form a trunk.

    access (never trunks), trunk (on - always trunks), dynamic desirable (actively tries to trunk), dynamic auto (trunks only if the other side asks). Desirable+desirable, desirable+auto, desirable+trunk, auto+trunk, and trunk+trunk form trunks; auto+auto does NOT.

  17. What is the default DTP mode on many Cisco Catalyst switch ports?

    Dynamic auto (it will become a trunk only if the neighbor actively negotiates trunking).

  18. How do you disable DTP negotiation on a trunk port?

    switchport nonegotiate (only valid when the port is statically set to access or trunk mode).

  19. What command shows trunk status, allowed VLANs, and native VLAN?

    show interfaces trunk.

  20. What command restricts a trunk to only carry VLANs 10, 20, and 30?

    switchport trunk allowed vlan 10,20,30.

See more Network Access flashcards →

Planning Network Access for Cisco Certified Network Associate (CCNA)

Network Access is about 17% of the Cisco Certified Network Associate (CCNA) syllabus by topic count — 17 of 99 topics, spread over 5 chapters. At roughly 45 minutes per topic plus 12 minutes per sub-topic, a first pass runs to about 20 hours.

The heaviest chapters are EtherChannel and Layer 2 Discovery (4 topics), Wireless LAN Configuration (4 topics), VLANs and Inter-Switch Connectivity (3 topics) . Front-load those while your energy is high; the short chapters are better revision filler later.

Work top-down: read the chapter, then tick topics off individually rather than marking the whole chapter done. Sub-topics are where silent gaps hide.

Network Access (Cisco Certified Network Associate (CCNA)) FAQ

What is in the Cisco Certified Network Associate (CCNA) Network Access syllabus?

Network Access is split into 5 chapters — VLANs and Inter-Switch Connectivity, Trunking and VLAN Protocols, Spanning Tree Protocol, EtherChannel and Layer 2 Discovery and Wireless LAN Configuration, containing 17 topics and 30 sub-topics in total.

How many chapters are there in Network Access for Cisco Certified Network Associate (CCNA)?

5 chapters. Network Access accounts for about 17% of the topics in the whole Cisco Certified Network Associate (CCNA) syllabus (17 of 99).

How long should I spend on Network Access for Cisco Certified Network Associate (CCNA)?

Budget around 20 hours for a first pass through Network Access — about 45 minutes per topic plus 12 minutes per sub-topic across its 17 topics. Add revision cycles on top.

Are there flashcards for Cisco Certified Network Associate (CCNA) Network Access?

Yes — a 80-card Network Access deck. Sample cards are printed on this page, and the full deck is free in the Examius app with spaced repetition scheduling.