Understand the topology
Identify devices, links, addressing, VLANs, required services, management paths, and expected traffic before configuring anything.
CyberPatriot Training Hub
Cisco & Networking
Build competition-ready networking skill through addressing, subnetting, switching, VLANs, routing, ACLs, Cisco IOS, management security, troubleshooting, and Packet Tracer practice.
This pathway teaches the network as a system. Students learn how traffic moves, how Cisco devices make decisions, how to inspect configuration safely, and how to verify required connectivity after every meaningful change.
Networking Scope
Lessons18
Core workflow5 stages
PlatformCisco IOS + Packet Tracer
Training styleDefensive
Safety boundary
Practice on authorized networks and fictional topologies
Labs use Packet Tracer and fictional competition networks. The goal is defensive configuration, troubleshooting, and verification, not unauthorized access to real devices or networks.
Main question
How do you secure a network without breaking the traffic it must carry?
Strong network defense starts with topology and traffic flow. Understand the path, inspect the devices, make the smallest justified change, and test the real communication afterward.
Networking workflow
Five stages for controlled network defense
Collect a baseline
Use show commands and Packet Tracer evidence to understand interfaces, VLANs, trunks, routes, ACLs, users, and device state.
Trace the traffic
Follow the path from source to destination and determine which layer, device, or policy actually controls the problem.
Change narrowly
Apply the smallest configuration change that satisfies the requirement while preserving required connectivity and administration.
Verify end to end
Recheck device state and test the real path from the client, server, or management perspective instead of trusting one command.
Complete pathway
Cisco & Networking Lessons
Lessons move from networking foundations and addressing into Cisco IOS, switching, VLANs, routing, policy, management security, troubleshooting, Packet Tracer, and final review.
Lesson 01Cisco
Cisco Competition Workflow
Focus
Translate the overall CyberPatriot strategy into a safe Cisco and networking workflow built around topology review, baseline inspection, controlled configuration, and verification.
Defensive lab
Review a fictional Packet Tracer network, identify required devices and services, and organize findings before making changes.
Open Lesson →
Lesson 02Cisco
Networking Foundations & the OSI Model
Focus
Understand hosts, switches, routers, frames, packets, protocols, ports, and the OSI/TCP-IP models as practical troubleshooting tools.
Defensive lab
Trace a fictional web request from client to server and identify what happens at each layer.
Open Lesson →
Lesson 03Cisco
IPv4 Addressing & Subnet Masks
Focus
Read IPv4 addresses, network portions, host portions, subnet masks, default gateways, and private address ranges.
Defensive lab
Classify addresses from a fictional network and identify incorrect host addressing.
Open Lesson →
Lesson 04Cisco
Subnetting for Competition
Focus
Calculate network IDs, broadcast addresses, usable ranges, prefix lengths, and host capacity without relying on guesswork.
Defensive lab
Solve a set of fictional subnet requirements and verify each result.
Open Lesson →
Lesson 05Cisco
Cisco IOS CLI & Safe Navigation
Focus
Use user EXEC, privileged EXEC, global configuration, interface configuration, show commands, help, history, and safe save/review habits.
Defensive lab
Navigate a fictional Cisco device, collect a baseline, and identify which commands inspect versus modify.
Open Lesson →
Lesson 06Cisco
Switching, MAC Tables & Ethernet
Focus
Understand Ethernet frames, MAC learning, flooding, forwarding, collision domains, broadcast domains, and switch behavior.
Defensive lab
Use fictional switch output to explain how traffic moves between hosts.
Open Lesson →
Lesson 07Cisco
VLANs & Access Ports
Focus
Use VLANs to separate broadcast domains and assign access ports according to network requirements.
Defensive lab
Review a fictional switch and correct VLAN membership while preserving required endpoints.
Open Lesson →
Lesson 08Cisco
Trunks, Native VLANs & 802.1Q
Focus
Understand tagged traffic, trunks, allowed VLANs, native VLAN behavior, and how trunk mistakes break connectivity.
Defensive lab
Troubleshoot a fictional inter-switch trunk without opening unnecessary VLAN access.
Open Lesson →
Lesson 09Cisco
Inter-VLAN Routing
Focus
Understand router-on-a-stick, switched virtual interfaces, gateways, and how Layer 3 routing connects VLANs.
Defensive lab
Trace traffic between two fictional VLANs and identify the missing routing component.
Open Lesson →
Lesson 10Cisco
Switch Port Security
Focus
Review access ports, unused ports, port security concepts, sticky MAC behavior, violation modes, and safe shutdown decisions.
Defensive lab
Harden a fictional access switch while preserving required user devices.
Open Lesson →
Lesson 11Cisco
Router Interfaces & Static Routing
Focus
Inspect router interfaces, connected networks, routing tables, default routes, and static route behavior.
Defensive lab
Repair a fictional routing path using evidence from interfaces and route tables.
Open Lesson →
Lesson 12Cisco
Routing Concepts & Dynamic Protocol Awareness
Focus
Understand route selection, administrative distance, metrics, and the purpose of common dynamic routing protocols without forcing one protocol everywhere.
Defensive lab
Interpret a fictional routing table and determine why one path is preferred.
Open Lesson →
Lesson 13Cisco
Access Control Lists
Focus
Understand standard and extended ACL logic, direction, placement, implicit deny, sequence, and verification.
Defensive lab
Review a fictional access policy and build the narrowest rule set that meets the requirement.
Open Lesson →
Lesson 14Cisco
DHCP, DNS & NAT Concepts
Focus
Understand address assignment, name resolution, translation, default gateways, and how these services affect troubleshooting.
Defensive lab
Trace a fictional client that can reach local hosts but cannot reach an external service by name.
Open Lesson →
Lesson 15Cisco
Cisco Device Hardening & Management Plane
Focus
Review local accounts, enable secrets, console and VTY access, SSH, banners, unnecessary services, logging, time, and management exposure.
Defensive lab
Harden a fictional router's management access while preserving authorized administration.
Open Lesson →
Lesson 16Cisco
Network Troubleshooting Workflow
Focus
Use a layered troubleshooting process with interface state, addressing, VLANs, trunks, routes, ACLs, DNS, and services.
Defensive lab
Diagnose a fictional multi-layer connectivity failure from symptoms to root cause.
Open Lesson →
Lesson 17Cisco
Packet Tracer Defensive Practice
Focus
Apply Cisco IOS and networking concepts in Packet Tracer using inspection-first, change tracking, and verification.
Defensive lab
Complete a fictional mini competition network with switching, routing, ACL, and management tasks.
Open Lesson →
Lesson 18Cisco
Cisco & Networking Final Review Checklist
Focus
Bring addressing, switching, VLANs, trunks, routing, ACLs, services, management security, and verification into one final review.
Defensive lab
Run a fictional end-of-round network review and document remaining risks and required exceptions.
Open Lesson →
Priority zone
Addressing & Reachability
IPv4 addressing
Subnet masks
Default gateways
Routes
DNS and DHCP
Priority zone
Switching
MAC tables
VLAN membership
Access ports
Trunks
Port security
Priority zone
Routing & Policy
Router interfaces
Static routes
Route selection
ACLs
NAT awareness
Priority zone
Management & Evidence
Cisco IOS
Local accounts
SSH and VTY
Show commands
Verification
Network evidence preview
Fictional practice topology
01
Topology: two access switches, one router, three VLANs
02
Authorized administrator: Morgan
03
Required management: SSH from the Admin VLAN
04
Required users: Staff and Student networks
05
Required application: internal HTTPS server
06
Required infrastructure: DHCP and DNS
07
Forensic clue: unexpected ACL entry affecting one subnet
08
Important boundary: preserve required connectivity while investigating
Networking principles
Six rules to carry through the pathway
Topology before commands
A correct command on the wrong interface, VLAN, or device can still break the network.
Show before configure
Use inspection commands to understand current state before entering configuration mode.
Trace the path
Networking problems become easier when you follow traffic hop by hop instead of changing random settings.
Required traffic wins
Security controls should reduce unnecessary exposure without blocking services the scenario requires.
Save deliberately
Know the difference between running configuration and startup configuration and verify before saving.
Verify from both ends
A device can look correct locally while the actual client-to-server path is still broken.
Start here
Lesson 01 — Cisco Competition Workflow
Begin by learning how to read the topology, collect a device baseline, trace required traffic, make controlled changes, and verify end-to-end network behavior.