added more notes and intro page

This commit is contained in:
Hugh Ratsch
2025-01-29 16:20:58 -06:00
parent 027cae7efe
commit cc33690249
4 changed files with 151 additions and 4 deletions
+62
View File
@@ -0,0 +1,62 @@
# Security Fundamentals
This section covers essential security concepts, including threats, vulnerabilities, security program elements, device access control, password policies, VPNs, access control lists, Layer 2 security, AAA concepts, wireless security, and configuring WLANs with WPA2 PSK.
## 5.1 Key Security Concepts
* **Threats:** Potential dangers to network security, such as malware, denial-of-service attacks, and phishing.
* **Vulnerabilities:** Weaknesses in systems or applications that can be exploited by attackers.
* **Exploits:** Methods used to take advantage of vulnerabilities.
* **Mitigation Techniques:** Strategies to reduce or eliminate security risks, such as firewalls, intrusion prevention systems, and security awareness training.
## 5.2 Security Program Elements
* **User Awareness and Training:** Educating users about security threats and best practices.
* **Physical Access Control:** Restricting physical access to network devices and facilities.
## 5.3 Device Access Control
* **Local Passwords:** Using passwords to control access to network devices.
## 5.4 Security Password Policies
* **Password Management:** Guidelines for creating, storing, and changing passwords.
* **Password Complexity:** Requirements for password length, character types, and complexity.
* **Password Alternatives:**
* **Multifactor Authentication (MFA):** Requires multiple factors for authentication, such as something you know (password), something you have (token), or something you are (biometric).
* **Certificates:** Digital certificates used for authentication.
* **Biometrics:** Using unique biological traits for authentication, such as fingerprints or facial recognition.
## 5.5 VPNs (Virtual Private Networks)
VPNs create secure connections over public networks, such as the internet.
* **Remote Access VPNs:** Allow remote users to securely connect to the network.
* **Site-to-Site VPNs:** Connect two or more networks securely over the internet.
## 5.6 Access Control Lists (ACLs)
ACLs filter network traffic based on criteria such as source/destination IP address, port number, and protocol.
## 5.7 Layer 2 Security Features
* **DHCP Snooping:** Prevents unauthorized DHCP servers from assigning IP addresses.
* **Dynamic ARP Inspection (DAI):** Prevents ARP poisoning attacks.
* **Port Security:** Limits the number of MAC addresses that can be learned on a port.
## 5.8 Authentication, Authorization, and Accounting (AAA)
* **Authentication:** Verifying the identity of a user or device.
* **Authorization:** Determining what resources a user or device is allowed to access.
* **Accounting:** Tracking user activity and resource usage.
## 5.9 Wireless Security Protocols
* **WPA (Wi-Fi Protected Access):** An older security protocol that is no longer considered secure.
* **WPA2:** A more secure protocol that uses stronger encryption.
* **PSK (Pre-Shared Key):** Uses a shared password for authentication.
* **WPA3:** The latest and most secure protocol.
## 5.10 WLAN Configuration with WPA2 PSK
Wireless LAN controllers can be used to configure WLANs (wireless networks) with WPA2 PSK security.
+47
View File
@@ -0,0 +1,47 @@
# Automation and Programmability
This section delves into the impact of automation on network management, controller-based networking, software-defined architectures, AI and machine learning in network operations, REST-based APIs, configuration management tools, and JSON data.
## 6.1 Automation Impact
Network automation uses software and scripts to automate network configuration, management, and operations tasks. This leads to increased efficiency, reduced errors, and faster response times.
## 6.2 Traditional vs. Controller-Based Networking
* **Traditional Networks:** Devices are configured and managed individually.
* **Controller-Based Networking:** A central controller manages the network devices. This allows for centralized configuration, management, and monitoring.
## 6.3 Software-Defined Architecture (SDN)
SDN separates the control plane (which makes decisions about how traffic is forwarded) from the data plane (which forwards the traffic).
* **Overlay Network:** A virtual network built on top of the physical network.
* **Underlay Network:** The physical network infrastructure.
* **Fabric:** The combination of the underlay and overlay networks.
* **Northbound APIs:** Used for communication between the controller and applications.
* **Southbound APIs:** Used for communication between the controller and network devices.
## 6.4 AI and Machine Learning in Network Operations
* **AI (Artificial Intelligence):** Enables networks to learn and adapt.
* **Generative AI:** Can create new content or solutions.
* **Predictive AI:** Can anticipate future events or trends.
* **Machine Learning (ML):** A type of AI that allows systems to learn from data without explicit programming.
## 6.5 REST-based APIs
REST (Representational State Transfer) APIs are a common way to interact with web services.
* **Authentication Types:** Methods for verifying the identity of the client, such as API keys or OAuth.
* **CRUD:** Create, Read, Update, Delete operations.
* **HTTP Verbs:** GET, POST, PUT, DELETE used to perform CRUD operations.
* **Data Encoding:** Formats for encoding data, such as JSON or XML.
## 6.6 Configuration Management Mechanisms
* **Ansible:** An open-source automation tool that uses playbooks to automate tasks.
* **Terraform:** An infrastructure-as-code tool that allows you to define and manage your infrastructure in code.
## 6.7 JSON-Encoded Data
JSON (JavaScript Object Notation) is a lightweight data format that is easy for humans to read and write and for machines to parse.
+10 -4
View File
@@ -1,6 +1,12 @@
# Summary # Summary
- [Chapter 1 Network Fundamentals](1-network-fundamentals.md) - [Introduction](introduction.md)
- [Chapter 2 Network Access](2-network-access.md) - [Network Fundamentals](1-network-fundamentals.md)
- [Chapter 3 IP Connectivity](3-ip-connectivity.md) - [Network Access](2-network-access.md)
- [Chapter 4 IP Services](4-ip-services.md) - [VLANs](2-network-access.md#vlans)
- [STP](2-network-access.md#stp)
- [IP Connectivity](3-ip-connectivity.md)
- [Static Routing](3-ip-connectivity.md#static-routing)
- [Dynamic Routing](3-ip-connectivity.md#dynamic-routing)
- [WAN Technologies](4-wan-technologies.md)
- [Network Security](5-network-security.md)
+32
View File
@@ -0,0 +1,32 @@
# Welcome to Your CCNA Study Guide!
This guide is designed to help you prepare for the Cisco CCNA (200-301) exam. It covers all the key topics outlined in the official exam blueprint, including:
* Network Fundamentals
* Network Access
* IP Connectivity
* IP Services
* Security Fundamentals
* Automation and Programmability
Whether you're new to networking or looking to refresh your knowledge, this guide will provide you with the information and practice you need to succeed on the exam.
**How to Use This Guide**
This guide is organized into chapters that correspond to the exam topics. Each chapter covers the essential concepts and provides examples and practice questions to help you solidify your understanding.
You can use this guide in several ways:
* **As a primary study resource:** Read through each chapter carefully and work through the examples and practice questions.
* **As a quick reference:** Use the table of contents and index to quickly find the information you need.
* **As a supplement to other study materials:** Use this guide to reinforce your learning from other resources, such as Cisco's official curriculum or online courses.
**Tips for Success**
* **Start early and study consistently.** The CCNA exam covers a lot of material, so it's important to give yourself plenty of time to prepare.
* **Use a variety of study methods.** Don't just read the material; work through practice questions, labs, and simulations.
* **Focus on your weak areas.** Identify the topics you're struggling with and spend extra time studying them.
* **Get hands-on experience.** If possible, set up a lab environment where you can practice configuring and troubleshooting network devices.
* **Join a study group or online forum.** Discussing the material with others can help you learn and retain information.
I hope this guide helps you achieve your CCNA certification goals!