Learn

The CCNA study hub

Every CCNA topic in one place — and for each one, the guides that teach it, the command cheat sheet you keep beside your terminal, and the graded Cisco Modeling Labs that prove you can actually do it.

The CCNA is not a trivia test. Cisco's 200-301 exam mixes multiple-choice questions with simulations and configuration scenarios, and every job the certificate opens — help desk, NOC, junior network engineer — measures you by whether the link comes up, not whether you can pick the right answer from four options. That gap is why the most reliable way to study is a four-step loop for every topic: understand the concept until you can explain it out loud, keep a command cheat sheet next to you so syntax stops being a bottleneck, build the thing on real Cisco IOS, then grade your configuration against a working answer. Reading about OSPF and configuring an adjacency that actually forms are two different skills, and only the second one shows up on exam day and at work.

Recognition — 'I've seen this command before' — collapses under exam pressure. Fluency — 'I can type this from memory and troubleshoot it when it breaks' — is what you're building, and you get there by repetition on live gear: you type router ospf 10, you fat-finger the wildcard mask, the neighbor never comes up, you read show ip ospf neighbor, you fix it. That debugging loop wires the knowledge in far deeper than any flashcard, and it is exactly what the exam's sim questions are designed to test. Passive study — watching videos, highlighting a book — feels productive but plateaus fast; the candidates who pass comfortably are the ones who have broken and fixed each protocol with their own hands a dozen times.

This hub links 13 topic pages, each pairing the concept and the command syntax with a graded, hands-on lab on real Cisco IOS. Work them in the order below, use the exam blueprint to budget your time against the domains that carry the most weight, and treat every lab as a checkpoint: if you can build it clean without notes, you own it; if you can't, you've found exactly what to review.

New here? Start by setting up your lab, try the free sample, or drill subnetting — then work the topics below in order. When you want the whole exam sequenced end to end, the CCNA Complete Path ties all 17 lab bundles into one progression.

The CCNA 200-301 exam blueprint

The CCNA is a single exam — Cisco 200-301, with no prerequisite — organized into six domains, each carrying a fixed share of your score. Budget your study time roughly in proportion to these weightings:

Exam domain	Weight	What it covers
Network Fundamentals	20%	Addressing math, the TCP/IP and OSI models, cabling and interfaces, switching concepts, and IPv4/IPv6 — anchored by subnetting, the hands-on skill the rest of the exam depends on.
Network Access	20%	The Layer 2 switched access layer: VLANs and trunking, inter-VLAN routing, Spanning Tree, and EtherChannel, plus wireless (describe/basic-config only). VLANs, STP, and EtherChannel are graded labs here; the WLAN material is read-only.
IP Connectivity	25%	The heaviest domain — IPv4/IPv6 static and default routing plus single-area OSPFv2, how a router builds its routing table, and how it selects a path. Static routing and OSPF are hands-on labs; EIGRP on this site is a bonus, since it belongs to CCNP, not the CCNA blueprint.
IP Services	10%	The supporting services a network runs on — NAT/PAT, DHCP, NTP, DNS, SNMP, syslog, QoS concepts, and first-hop redundancy (HSRP/VRRP is describe-level on the exam). NAT, DHCP, and management services are graded labs; FHRP configuration is a bonus that goes beyond the exam bar.
Security Fundamentals	15%	Access control lists, device hardening and secure management (SSH, passwords, AAA concepts), Layer 2 security, and VPN/wireless-security concepts. ACLs and device/SSH hardening are graded labs here.
Automation and Programmability	10%	Controller-based and software-defined networking, Cisco DNA Center, REST APIs, data formats such as JSON, and config-management tools (Ansible, Puppet, Chef) — a describe-and-recognize domain studied by reading, not by graded CLI labs.

Where to start — a study order

Work the domains bottom-up, the way a network is actually built: master the fundamentals first, then the Layer 2 switched access layer, then the Layer 3 connectivity that routes between those networks, then the services that ride on top, and finally the security that locks it all down. The order isn't arbitrary — each layer assumes the one below it, so routing makes far more sense once you can already subnet and switch. The sixth domain, Automation and Programmability, has no hands-on hub here because it's a read-and-recognize topic (REST APIs, JSON, SDN, Cisco DNA Center, Ansible/Puppet/Chef); slot it in as reading throughout, or save it for the final week. Here is a concrete order for the five hands-on domains:

Network Fundamentals

Start here and don't rush it. Subnetting by hand is the single skill the whole exam rests on — VLAN design, routing, ACLs, and NAT all assume you can look at 172.16.40.0/22 and instantly know the mask, the range, and the usable host count. Drill it with the practice tool until you're fast and confident without a calculator; everything downstream gets easier once this is automatic.

Subnetting & IP AddressingIP addressing and subnetting are the number system the rest of the CCNA runs on: every routing table, ACL, and OSPF statement is really just addresses and masks. This hub ties the core concepts together with step-by-step guides, a printable cheat sheet, and graded hands-on labs so the math becomes automatic.

Network Access

Next, build the switched foundation: VLANs and trunking to segment the LAN, Spanning Tree to keep it loop-free, and EtherChannel to bundle links. This is where you learn how frames move at Layer 2 before you add routing on top, and inter-VLAN routing is the natural bridge into the connectivity domain. It sits second because a router needs something to route between.

IP Connectivity

This is the exam's heaviest domain at 25% and the heart of the CCNA: IPv4/IPv6 static and default routing, then single-area OSPFv2. Get comfortable reading the routing table and predicting which route wins before you lean on a protocol to build it for you. Note that EIGRP is not on the 200-301 blueprint — it's CCNP ENARSI — so the EIGRP hub here is a useful bonus, but don't spend CCNA time on it at the expense of OSPF.

IP Services

With routing working, layer on the services that make a network usable: NAT/PAT to reach the internet, DHCP to hand out addresses, and management services such as NTP, DNS, and syslog. First-hop redundancy (HSRP/VRRP) is described conceptually on the exam rather than configured in depth, so understand what problem it solves — our config labs go a step beyond the exam bar and are great for the job. At only 10% of the exam, cover this domain solidly without over-investing.

Security Fundamentals

Finish with security: standard, extended, and named ACLs to filter traffic, plus device hardening — SSH, strong passwords, and locking down the management plane. ACLs lean directly on your subnetting and port knowledge, which is why they land after connectivity and services rather than early. It's 15% of the exam and very lab-friendly, making it a strong confidence-builder right before test day.

How long it takes

Plan on roughly 3 to 6 months of steady study if you're working through it part-time — say 8 to 12 hours a week — or as little as 6 to 10 weeks if you can study close to full-time and already have some IT background. Complete beginners should budget toward the longer end. These are ranges, not promises: your pace depends on prior networking exposure, how much hands-on time you get, and how quickly subnetting clicks. Anyone quoting a single fixed number is guessing — treat the blueprint weightings as your map and let the graded labs tell you when a domain is actually solid.

Whatever your total, spread it out, because spaced, repeated hands-on practice beats a cramming binge every time. A workable rhythm is one domain every week or two: read the concept, drill the commands, then build and grade the labs until you can do them clean from memory. Revisit earlier topics on a rotation — re-subnet a few blocks each week, rebuild an OSPF adjacency you haven't touched in a month — so the early material doesn't decay while you learn the later domains. Two focused hours four times a week will carry you further than one eight-hour weekend marathon, because the forgetting curve punishes cramming and rewards repetition.

CCNA study FAQ

How long does it take to study for the CCNA?

There's no fixed answer, but a realistic range is about 3 to 6 months part-time (8 to 12 hours a week) for someone with some IT background, and longer for a complete beginner. If you can study close to full-time, 6 to 10 weeks is achievable. The real variables are your starting knowledge, how much hands-on time you get, and how fast subnetting becomes automatic — so gauge your readiness by whether you can build and grade the labs cleanly, not by the calendar.

What order should I study CCNA topics?

Build up the stack: fundamentals and subnetting first, then Layer 2 switching (VLANs, STP, EtherChannel), then Layer 3 connectivity (static routing and OSPF — the 25% domain), then IP services (NAT, DHCP, management), then security (ACLs and device hardening). Study Automation and Programmability by reading, woven in throughout or saved for the last week. Each layer assumes the one below it, so this order means you're never trying to learn routing before you can subnet.

Can I pass the CCNA with only labs or Packet Tracer?

Labs are the most important part of your prep, but 'only labs' isn't quite enough — the exam also tests concepts you don't configure, like SDN and controller-based networking, wireless and FHRP at the 'describe' level, and security theory, so you still need to read for those. Packet Tracer works and covers most CCNA topics, and it's a fine free place to start — but it simulates Cisco IOS rather than running it, so some commands, error messages, and edge behaviors differ from real gear. The better choice once you're past the basics is Cisco Modeling Labs (CML): it boots the real IOS images (the free tier is enough for CCNA topologies) and is what the labs on this site run on, so your muscle memory matches production and the exam's simulations. The strongest prep pairs concept reading with heavy hands-on repetition on real IOS, grading every config against a working answer.

Do I need real Cisco hardware?

No — you don't need to buy a rack of routers and switches. Packet Tracer (a free Cisco simulator) works for most CCNA topics and is a good place to start, but the better option is Cisco Modeling Labs (CML): it runs the real Cisco IOS images, so you get production-accurate behavior instead of a simulation. Its free tier covers CCNA-sized topologies, and it's what the labs on this site use. Physical gear is pleasant for tactile practice but is optional and, for most candidates, not worth the money.

Is the CCNA hard?

It's a substantial exam but very passable with disciplined, hands-on study — it's an associate-level certification with no prerequisite, not an expert cert. The difficulty comes from breadth (six domains, from subnetting to automation) and from timed simulations that make you configure under pressure, which is exactly why recognition-level studying fails and repeated lab practice works. Cisco doesn't publish a fixed passing score — it's scaled, and the figure often cited is in the mid-800s out of 1000, but treat that as unofficial — so aim to be comfortably fluent rather than to just scrape a line.

Which CCNA topic is hardest?

For most candidates it's a tie between subnetting and OSPF. Subnetting is hard because it has to become fast and automatic under a timer — the math is simple but the speed is not — and it underpins everything else, so any weakness there shows up across the whole exam. OSPF is hard because one small mistake, like a wrong wildcard mask or a mismatched area or timer, silently stops an adjacency from forming, forcing you to actually troubleshoot rather than just enter commands. Both reward the same fix: build them by hand, repeatedly, until the failure modes are familiar.

Free tools & references

Explainers

Study every CCNA topic, graded

The CCNA Complete Path sequences all 17 lab bundles into one graded progression you own forever.

See the CCNA path Try a free lab