VMware ESXi and vSphere Cluster Management

CCENT ICND1 100-101 Networking Fundamentals Study Guide

Learn CCENT ICND1 100-101 networking fundamentals, IPv4 and IPv6 addressing, Cisco IOS, routing, NAT, ACLs, and troubleshooting.

This study guide introduces the networking theory and Cisco IOS skills associated with the CCENT credential and the ICND1 100-101 exam. It is designed for beginning network administrators, support technicians, and students who are new to Cisco devices.

CCENT refers to an entry-level Cisco networking certification focused on foundational routing, addressing, network access, and troubleshooting skills. ICND1 100-101 is the exam identifier associated with an introductory Cisco networking and IOS curriculum. The important connection is practical: networking models explain what should happen, while IOS commands let you configure and verify what is happening on a device.

1. Networking Fundamentals

What is a computer network?

A computer network is a group of connected devices that exchange data using agreed rules called protocols. Networks allow users and applications to share information, services, and resources such as files, printers, voice systems, and Internet access.

• Host: An endpoint such as a PC, server, printer, phone, or virtual machine.
• Switch: Connects devices within a local network and forwards Ethernet frames using hardware addresses.
• Router: Connects different IP networks and forwards packets using destination IP addresses.
• Interface: A physical or logical connection through which a device sends and receives traffic.
• Network media: Copper cable, fiber-optic cable, radio, or another transmission medium.

On a local network, a host sends an Ethernet frame through its interface to a switch. If the destination is outside the local IP network, the host sends the frame to its default gateway, normally a router interface. The router removes the local frame, examines the destination IP address, selects a forwarding path, and creates a new frame for the next link.

LANs, WANs, and internetworks

• LAN: A local area network covering a limited location such as a room, office, or campus.
• WAN: A wide area network connecting locations across cities, countries, or service-provider infrastructure.
• Internetwork: Multiple networks connected by routers. The global Internet is an example of an internetwork.

Protocols define addressing, message formats, timing, error handling, and delivery behavior. Ethernet, IPv4, IPv6, TCP, UDP, ICMP, DNS, and HTTP are examples of protocols used at different levels of communication.

2. OSI, TCP/IP, and Encapsulation

Layered models divide networking into responsibilities. This makes protocols easier to design and helps technicians isolate faults. The OSI model has seven conceptual layers. The TCP/IP model groups the same general functions into a smaller set of practical layers used by IP networks.

Encapsulation is the addition of protocol information as data moves down the stack. An application creates data; TCP may add a header to form a segment; IP adds a header to form a packet; Ethernet adds a header and trailer to form a frame; and the frame is transmitted as bits. Decapsulation occurs in reverse at the receiving device.

Use the models diagnostically. No link light suggests a Layer 1 problem. A switch forwarding or VLAN problem is generally Layer 2. An incorrect address, mask, route, or gateway is Layer 3. A TCP port, application, or name-resolution problem is higher-layer. ACLs and NAT can create policy or translation failures that appear during otherwise valid Layer 3 communication.

3. IPv4 Addressing and Subnetting

An IPv4 address is a 32-bit logical address written as four decimal octets, such as 192.168.10.25. A subnet mask separates the network portion from the host portion. Prefix notation expresses the number of network bits, so 255.255.255.0 is /24.

• The network address identifies the subnet and is not assigned to a normal host.
• Usable host addresses identify interfaces within that subnet.
• The broadcast address is the last address and reaches all hosts on the subnet.
• The default gateway is the local router address used for remote destinations.

For a 192.168.10.0/24 LAN, the network address is 192.168.10.0, usable hosts range from 192.168.10.1 through 192.168.10.254, and the broadcast address is 192.168.10.255. A practical plan might assign 192.168.10.1 to the router, 192.168.10.10 to a PC, and 255.255.255.0 to both.

Private IPv4 ranges are intended for internal networks: 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. Public addresses are globally reachable when properly routed. Private addresses commonly reach public networks through NAT.

4. Cisco IOS Fundamentals

Cisco IOS is the Cisco network operating system and command-line environment used on many routers and switches. Console access provides local management through a console connection. Remote management may use Telnet or, preferably, SSH after the device has suitable addressing, authentication, and access controls.

Use ? for context-sensitive help and the Up Arrow for command history. ? after a partial command shows valid completions. Ctrl-Z returns to privileged EXEC from a configuration context, while end does the same.

The running configuration is active in RAM. The startup configuration is stored for use after a reboot. Changes in the running configuration are lost if they are not saved.

Router> enable
Router# configure terminal
Router(config)# hostname Branch-R1
Branch-R1(config)# end
Branch-R1# copy running-config startup-config
Branch-R1# show running-config
Branch-R1# show startup-config

5. Configuring a Router Interface

Select an interface, assign an address and mask, and remove the administrative shutdown state. The exact interface name depends on the router model.

Router> enable
Router# configure terminal
Router(config)# interface gigabitEthernet 0/0
Router(config-if)# ip address 192.168.10.1 255.255.255.0
Router(config-if)# no shutdown
Router(config-if)# end
Router# copy running-config startup-config

Verify both the configured address and operational state:

Router# show ip interface brief
Router# show interfaces gigabitEthernet 0/0
Router# show running-config
Router# ping 192.168.10.10

up/up generally means the interface and line protocol are operational. administratively down means it is disabled with shutdown. A physical or Layer 2 problem can leave the interface down even when an address is configured.

6. Routing Fundamentals

Routers are required when traffic moves between different IP networks. A router compares the destination address with entries in its routing table, chooses the most specific matching route, and forwards the packet to an exit interface or next-hop address. If no specific route matches, a default route may be used.

• Connected route: Added automatically when an addressed interface is operational.
• Static route: Manually configured path to a destination.
• Default route: The catch-all route written as 0.0.0.0 0.0.0.0 in IPv4.
• Dynamic routing protocol: Exchanges reachability information between routers and calculates usable paths.

Router# configure terminal
Router(config)# ip route 192.168.20.0 255.255.255.0 10.0.0.2
Router(config)# ip route 0.0.0.0 0.0.0.0 10.0.0.2
Router(config)# end
Router# show ip route

Two-way communication requires both a forward path and a return path. A router can successfully send a request while the reply fails because the remote router does not know how to reach the source network.

7. IPv6 Fundamentals

IPv6 uses 128-bit addresses, providing a much larger address space than IPv4 and supporting modern autoconfiguration and routing features. An address contains eight hexadecimal groups separated by colons, for example 2001:db8:10:1:0000:0000:0000:0001.

• Leading zeros in a group may be removed: 0001 becomes 1.
• A single consecutive run of all-zero groups may be replaced with ::.
• The replacement may be used only once in an address.

The shortened example is 2001:db8:10:1::1/64. The first 64 bits identify the network prefix; the remaining bits identify the interface. Common address types include global unicast, link-local addresses beginning with fe80::/10, unique local addresses beginning with fc00::/7, multicast addresses beginning with ff00::/8, and loopback ::1. IPv6 does not use a broadcast address; multicast provides comparable group-delivery functions.

Router# configure terminal
Router(config)# ipv6 unicast-routing
Router(config)# interface gigabitEthernet 0/1
Router(config-if)# ipv6 address 2001:db8:10:1::1/64
Router(config-if)# no shutdown
Router(config-if)# end
Router# show ipv6 interface brief
Router# show ipv6 route

8. NAT and PAT

Network Address Translation (NAT) changes an address as traffic crosses a router, commonly translating private IPv4 addresses to public addresses. Port Address Translation (PAT), also called NAT overload, allows many internal hosts to share one public address by distinguishing connections with transport-layer port numbers.

• Static NAT: Creates a permanent one-to-one mapping, often for an internal server.
• Dynamic NAT: Allocates addresses from a configured public pool.
• PAT: Reuses one or more public addresses with different port translations.

Router# configure terminal
Router(config)# access-list 1 permit 192.168.10.0 0.0.0.255
Router(config)# interface gigabitEthernet 0/0
Router(config-if)# ip nat inside
Router(config-if)# interface gigabitEthernet 0/1
Router(config-if)# ip nat outside
Router(config-if)# exit
Router(config)# ip nat inside source list 1 interface gigabitEthernet 0/1 overload
Router(config)# end
Router# show ip nat translations
Router# show ip nat statistics

The NAT ACL identifies eligible inside source addresses; it does not by itself provide security filtering. Confirm that inside and outside roles, the ACL, PAT statement, and external default route are all correct.

9. Access Control Lists

An ACL is an ordered list of permit and deny rules. The router checks entries from top to bottom and stops at the first match. Traffic that matches a permit is allowed by that ACL; traffic that matches a deny is rejected. Every ACL has an implicit deny at the end, so an ACL intended to allow other traffic generally needs an explicit permit statement.

An inbound ACL is evaluated as traffic enters an interface. An outbound ACL is evaluated before traffic leaves an interface. Placement should reduce unwanted traffic early without unintentionally blocking legitimate flows.

Router# configure terminal
Router(config)# ip access-list extended BLOCK_TEST
Router(config-ext-nacl)# deny icmp 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255
Router(config-ext-nacl)# permit ip any any
Router(config-ext-nacl)# interface gigabitEthernet 0/0
Router(config-if)# ip access-group BLOCK_TEST in
Router(config-if)# end
Router# show access-lists
Router# show ip interface gigabitEthernet 0/0

A standard management-source example uses access-list 10 permit 192.168.10.0 0.0.0.255 and applies it to the VTY lines with access-class 10 in. Review wildcard masks carefully: a wildcard bit of zero must match, while a one means the corresponding bit is ignored.

10. Troubleshooting Workflow

Use a structured process: define the symptom, gather evidence, form a specific hypothesis, make one controlled change, and verify the result. Start close to the user and work through the layers.

Common failure patterns

• Interface address is correct but unavailable: Check show ip interface brief, use no shutdown, inspect the cable and neighboring device, and review show interfaces.
• Same-LAN hosts cannot communicate: Compare addresses and masks, confirm both calculate the same network, ping the gateway, and check local and switch interfaces.
• Local gateway works but remote network fails: Inspect the local and remote routing tables, verify default gateways, and use traceroute. A missing return route is a frequent cause.
• IPv6 external connectivity fails: Confirm ipv6 unicast-routing, the prefix, gateway, interface state, and IPv6 route.
• Private hosts cannot use the Internet after NAT configuration: Verify NAT roles, the source ACL, PAT overload, translations, statistics, and the external default route.
• An ACL blocks too much: Check rule order, wildcard masks, direction, interface placement, counters, and the implicit deny. Add an appropriate explicit permit when required.

11. Practical Study Scenarios

Two-network routing

Connect two LANs through a router. Give the first router interface an address in 192.168.10.0/24 and the second an address in 192.168.20.0/24. Hosts use their local router interface as the default gateway. The router automatically learns both networks as connected routes. Test host-to-gateway and host-to-host reachability, then inspect show ip route.

IPv6 LAN deployment

Configure 2001:db8:10:1::1/64 on the router interface, enable IPv6 unicast routing, and provide hosts with addresses from the same /64 prefix. Test the local link, the router's address, and a remote IPv6 destination. Verify with show ipv6 interface brief and show ipv6 route.

NAT and ACL validation

Use PAT so hosts from 192.168.10.0/24 share the outside interface address. Generate traffic, inspect translations, and confirm counters increase. Then apply an extended ACL that denies ICMP from that subnet to 192.168.20.0/24 while permitting other IP traffic. Test both the denied and permitted cases.

12. Final Review Checklist

• Explain the purpose of hosts, switches, routers, interfaces, media, and protocols.
• Map OSI layers to TCP/IP layers and identify bits, frames, packets, and segments.
• Calculate IPv4 network, host, and broadcast addresses from a prefix.
• Explain private addressing, public addressing, and default gateways.
• Move confidently among Cisco IOS command modes and save configurations.
• Configure and verify an IPv4 or IPv6 router interface.
• Read a routing table and configure connected, static, and default routes.
• Explain NAT terminology and configure or verify PAT.
• Apply ACL permit and deny logic, including implicit deny and direction.
• Use show commands, ping, and traceroute to isolate failures safely.

For a related learning path, see the CCENT ICND1 100-101 certification guide.