CCNA 200-301 Study Plan

The CCNA 200-301 is the cert that separates network users from network engineers. Unlike CompTIA's Network+, which tests whether you recognize protocols, Cisco wants to see whether you can read a config, predict the behavior, and fix it when it breaks. That's a different skill, and it needs a different study plan.

The single biggest reason candidates fail the 200-301 isn't subnetting (though that matters) — it's underestimating the sim labs. This plan is built around the lab-first principle: every concept gets a working Packet Tracer file before you move on.

The six 200-301 domains

Network Fundamentals (20%) — OSI, IPv4/IPv6, cabling, wireless basics
Network Access (20%) — VLANs, trunking, EtherChannel, STP, wireless
IP Connectivity (25%) — static routing, OSPFv2 single-area, FHRP
IP Services (10%) — DHCP, DNS, NAT, NTP, SNMP, syslog, QoS
Security Fundamentals (15%) — access control, port security, ACLs, wireless security
Automation & Programmability (10%) — REST APIs, JSON, Ansible/Puppet, controller-based networking

The 12-week plan (recommended)

About 12–15 hours per week. Sit the exam at week 12.

Week 1: Install Packet Tracer + CML-Free. OSI, TCP/IP, encapsulation. Build a two-router lab from scratch.
Week 2: Subnetting boot camp. 30 minutes of drills daily. Don't move on until /27, /28, /29 are instant, and you can VLSM a /23 in under two minutes.
Week 3: IPv6 addressing, EUI-64, SLAAC, link-local. Configure dual-stack on your lab.
Week 4: Switching — MAC tables, VLANs, 802.1Q trunks. Build a 3-switch VLAN topology.
Week 5: Spanning Tree (STP, RSTP), EtherChannel, port security. Break STP intentionally and watch it converge.
Week 6: Static routing, default routes, recursive lookups. Build a 4-router topology with no dynamic protocol.
Week 7: OSPFv2 single-area — the highest-leverage week in the plan. Configure, debug, and read the LSDB.
Week 8: FHRP (HSRP, VRRP), NAT (static, dynamic, PAT), DHCP server + relay.
Week 9: Wireless — 802.11 standards, WLC architecture, WPA2/WPA3, SSIDs.
Week 10: ACLs (standard, extended, named), AAA, device hardening, syslog, SNMP.
Week 11: Automation domain — REST APIs, JSON parsing, Ansible vs Puppet vs Chef, SDN/SD-Access concepts.
Week 12: Two full timed practice exams, lab review of weakest domain, sit the real exam.

Subnetting: still the floor, not the ceiling

Cisco assumes you can subnet in your sleep. The exam won't ask "what's a /27 mask" — it'll show you a topology with three subnets and ask which host is unreachable and why. Build automatic recall on these patterns:

Powers of 2 from 2⁰ to 2²⁴ — instant recall
CIDR /16 through /30 → mask, hosts, increment
VLSM: split a /22 into four networks of unequal size in under 3 minutes
IPv6: identify SLAAC vs DHCPv6 from a packet capture

The lab rule: 60+ hours minimum

You cannot pass the 200-301 with under 60 hours in a simulator. Packet Tracer is free from Cisco's Networking Academy and covers ~95% of the exam topics; CML-Free fills the rest. Every week of the plan above ends with a working lab file you can break and rebuild from memory.

The candidates who fail almost always fall into the same trap: they watch the video, take the notes, and skip the lab "because the concept is clear." On exam day they sit down to a sim, the prompt says "configure OSPF between R1 and R2 so that 10.1.1.0/24 is reachable from PC2," and they freeze — because they've never actually typed router ospf 1 on a CLI.

The CertRealm approach

Inside CertRealm, the CCNA path is the Wyrmspine Server realm — twelve named bosses, one per major topic, each gated behind a working lab. You don't unlock OSPF until you've configured a routed link. You don't reach the automation tier until your ACLs hold under attack. The MMO frame isn't decoration; it's the lab-first principle wearing a different costume.

Frequently asked questions

How long does it take to study for the CCNA 200-301?+

Most candidates need 150–200 hours over 3–4 months. If you already hold Network+, you can compress that to 100–120 hours by skipping the OSI/TCP-IP fundamentals.

Do I need Network+ before CCNA?+

No — CCNA has no prerequisites. But Network+ is a friendlier on-ramp: same subnetting, gentler routing depth, and lower cut score. Many candidates do N+ first, then CCNA within 6 months.

What's the hardest part of the 200-301?+

OSPF and the configuration sim labs. Cisco expects you to read a running-config and predict behavior — multiple-choice memorization alone won't carry you. Lab daily in Packet Tracer or CML.

Is the CCNA 200-301 worth it in 2026?+

Yes. CCNA remains the de-facto enterprise networking credential — it unlocks NOC, network engineer, and junior security roles, and it's the prerequisite mindset for CCNP, DevNet, and most SD-WAN certs.

Coming from CompTIA? Read the Network+ study plan first — most of weeks 1–3 transfer directly.