2.0 Network Access

Making up 20% of the CCNA exam, this domain covers the infrastructure that connects users to the network. Master Layer 2 switching architecture, loop prevention mechanisms, and enterprise wireless deployments.

Domain Readiness

Complete all 7 core sub-modules to unlock the Domain 2.0 baseline assessment.

Overall Progress100% Shared Architecture Mapping

Domain 2.0 Master Cheat Sheet

Download the complete PDF study guide for offline review.

Download PDF

Study Modules

2.1 Virtual LANs (VLANs)

Active

Isolate broadcast domains, configure 802.1Q trunking, and implement Native VLAN security best practices.

Initialize Sequence

2.2 Inter-VLAN Routing

Active

Cross the Layer 3 boundary using Router-on-a-Stick (ROAS) subinterfaces and Multilayer Switch Virtual Interfaces (SVIs).

Initialize Sequence

2.3 Spanning Tree Protocol

Active

Prevent Layer 2 broadcast storms. Master Root Bridge elections, Rapid PVST+, PortFast, and BPDU Guard.

Initialize Sequence

2.4 EtherChannel

Active

Bundle physical links for redundancy and bandwidth using LACP (802.3ad) and PAgP negotiation protocols.

Initialize Sequence

2.5 L2 Discovery Protocols

Active

Map undocumented network topologies using CDP and LLDP, and learn how to secure edge ports against reconnaissance.

Initialize Sequence

2.6 Wireless Architecture

Active

Transition from Autonomous to Lightweight APs. Understand the Split-MAC architecture and CAPWAP tunneling.

Initialize Sequence

2.7 WLAN Security

Active

Configure WPA2/WPA3 encryption, AES/CCMP ciphers, and implement 802.1X Enterprise RADIUS authentication via the WLC.

Initialize Sequence

Domain 2.0 Core Vocabulary

802.1Q

The IEEE standard for VLAN tagging. It inserts a 4-byte tag into the Ethernet header to identify which VLAN the frame belongs to across a trunk link.

BPDU

Bridge Protocol Data Unit. Multicast frames exchanged by switches to elect a Root Bridge and detect network loops in Spanning Tree Protocol.

CAPWAP

Control and Provisioning of Wireless Access Points. A protocol that encapsulates data and control traffic between a Lightweight AP and a WLC over UDP tunnels.

CDP

Cisco Discovery Protocol. A proprietary Layer 2 protocol enabled by default on Cisco equipment used to discover hardware and IP details of directly connected neighbors.

EtherChannel

A port link aggregation technology that groups multiple physical Ethernet links into a single logical link to provide fault-tolerance and high-speed links between switches.

LACP

Link Aggregation Control Protocol. The IEEE 802.3ad open standard protocol used to dynamically negotiate and form EtherChannel bundles.

Native VLAN

The single VLAN on an 802.1Q trunk that carries untagged traffic. For security reasons, this should always be changed from the default VLAN 1.

PortFast

An STP optimization that bypasses the listening and learning states to transition a port immediately to forwarding. Should only be used on edge ports facing end devices.

ROAS

Router-on-a-Stick. An inter-VLAN routing setup where a single physical router interface is divided into multiple 802.1Q-tagged logical subinterfaces.

STP

Spanning Tree Protocol. A Layer 2 protocol that creates a loop-free logical topology by systematically placing redundant ports into a blocking state.

SVI

Switch Virtual Interface. A logical Layer 3 interface created on a Multilayer Switch used as the default gateway to route traffic for a specific VLAN.

WPA3

Wi-Fi Protected Access 3. The modern wireless security standard that replaces the vulnerable PSK handshake with Simultaneous Authentication of Equals (SAE).