Cisco ENNA 300-445 study plan
Cisco ENNA 300-445 · Give each week a clear focus.
8 weeks · About 7 hours per week
Network Fundamentals
Diagram the path of a frame from host to default gateway across a two-switch, one-router topology, labeling every interface and MAC/IP pair.
Explain how a switch builds its MAC address table from source addresses and floods unknown unicast, then verify the behavior by reading a live table.
Distinguish collision domains from broadcast domains and predict the count for a given topology with VLANs and a router.
Compare TCP and UDP header fields and list three applications for each transport, justifying the choice.
Your checkpoint
A one-page hand-drawn topology diagram with an accompanying table of MAC/IP addresses and a written paragraph predicting broadcast domain counts.
Network Fundamentals & Network Access
Calculate usable host ranges from CIDR prefixes /24 through /30 without a subnet calculator, scoring at least 90% on 20 practice problems.
Configure access and trunk ports on two switches and confirm VLAN separation with ping tests.
Explain 802.1Q tagging and predict which frames cross a trunk untagged.
Describe the purpose of CDP and LLDP and read neighbor output to map an unknown topology.
Your checkpoint
A working two-switch lab with two VLANs, a documented trunk, and a ping matrix showing which hosts can reach each other.
Network Access
Configure a WLAN on a controller or autonomous AP with WPA2-PSK and verify client association.
Compare lightweight AP and autonomous AP operation and identify which device terminates CAPWAP.
Explain PoE negotiation and select the correct power standard for a given AP power draw.
Troubleshoot a simulated access port that fails to pass traffic, documenting the checks in order.
Your checkpoint
A wireless lab report with screenshots of client association, the security settings used, and a five-step troubleshooting checklist.
IP Connectivity
Configure a router-on-a-stick for three VLANs and verify inter-VLAN routing.
Build a static route table including a default route and a floating static, then verify with show ip route.
Configure single-area OSPFv2 on three routers and confirm full adjacency with show ip ospf neighbor.
Explain the OSPF DR/BDR election and predict the result for given priorities.
Your checkpoint
A three-router OSPF lab with a captured neighbor table and a route table showing learned, static, and connected routes.
IP Connectivity & IP Services
Tune OSPF cost to force a specific path and prove the change with traceroute output.
Configure HSRP or VRRP between two routers and test failover by shutting an interface.
Configure NAT overload on an edge router and verify translations with show ip nat translations.
Configure NTP and DHCP on a router and confirm a client receives an address and correct time.
Your checkpoint
A failover test log recording the pre-failover and post-failover default gateway, plus NAT and DHCP verification output.
IP Services & Security Fundamentals
Configure a site-to-site IPsec tunnel or a GRE tunnel and verify with show crypto or show interface tunnel.
Explain the difference between authentication, authorization, and accounting and map each to a configuration example.
Configure SSH-only management with a local username, then disable Telnet and verify.
Describe how AAA with TACACS+ or RADIUS differs in transport and encryption and choose one for a given requirement.
Your checkpoint
A security configuration file with SSH hardening and AAA settings, plus a written justification of each command's purpose.
Security Fundamentals & Automation and Programmability
Configure port security with a sticky MAC limit and test violation behavior in shutdown and restrict modes.
Configure DHCP snooping and dynamic ARP inspection on a VLAN and verify legitimate clients still work.
Use Python with a REST API or NETCONF to retrieve interface state from a device and print it as structured data.
Compare agent-based and agentless automation and explain where Ansible or a controller fits.
Your checkpoint
A Python script that queries a device or sandbox API and outputs interface name and status, committed with a short README.
Network Fundamentals & Network Access & IP Connectivity & IP Services & Security Fundamentals & Automation and Programmability
Complete two full-length timed practice sets and log every missed question by domain.
Re-study the two weakest domains and re-answer every missed item until correct without notes.
Rebuild one integrated lab from memory covering VLANs, OSPF, NAT, and SSH with no reference.
Your checkpoint
A scored practice exam report with a per-domain accuracy table and a list of the top five remaining weak areas.
Milestones
Week 2: Score 90% or better on a 20-question subnetting drill completed in under 15 minutes, and demonstrate working inter-VLAN separation on the lab.
Week 4: Show a full OSPF adjacency on three routers and correctly predict the DR/BDR for a stated priority scenario.
Week 6: Pass traffic through a configured tunnel and confirm SSH-only management with Telnet disabled.
Week 8: Achieve 85% or higher on a timed full-length practice set and reduce the weakest domain's error rate by half versus the first attempt.