Cna Expansion 1 Unit 3

Understanding CNA Expansion 1 Unit 3

CNA expansion 1 unit 3 is part of the broader CCNA curriculum that covers switching technologies and LAN fundamentals. If you're working through this material, you're looking at VLANs, VTP, EtherChannel, and inter-VLAN routing as the core topics. The official exam objectives bundle these together because they all relate to how traffic moves within and between broadcast domains on a switched network. The unit breaks down into several concrete areas. First, you need to know how to configure and verify VLANs on Cisco switches, including creating them, assigning ports to them, and checking their status. Second is VTP (VLAN Trunking Protocol), which synchronizes VLAN information across multiple switches in a domain. Third is EtherChannel configuration using either PAgP or LACP to bundle multiple physical links into a single logical connection. Finally, inter-VLAN routing, which can be done via router-on-a-stick using 802.1Q trunking or through a Layer 3 switch with SVIs. I remember spending an afternoon troubleshooting why a newly configured VLAN wasn't propagating to a downstream switch. Turns out the VTP domain name had a trailing space on one device. Such a small detail, and it silently prevented all VLAN updates from syncing. I started using copy/paste for domain names from the running config to avoid typos, and that problem disappeared completely.

One thing beginners consistently get wrong is assuming VTP mode (transparent) switches participate in VLAN synchronization. They don't. A transparent switch forwards VTP advertisements but doesn't process them for its own VLAN database. If your topology has a mix of server and transparent modes, the transparent switch will never learn new VLANs from the server. You have to create VLANs manually on transparent devices, which defeats part of the purpose of using VTP in the first place. Another counter-intuitive point involves EtherChannel negotiation. Not all port channels form successfully just because you configure the same parameters on both sides. LACP and PAgP must match on both ends, but beyond that, certain switch models have limitations on which ports can be grouped together. On some older 2960 switches, for example, you cannot mix speeds or duplex settings within a single channel group. The port will stay in a suspended state until the mismatch is resolved.

Working Through Inter-VLAN Routing Configurations

Router-on-a-stick is the most common implementation tested in this unit. You create a subinterface on the router's physical interface for each VLAN, assign each subinterface the corresponding VLAN ID using the 802.1Q encapsulation command, and give each subinterface an IP address that serves as the default gateway for that VLAN. The physical interface itself gets no IP address. The switch side requires a trunk port connecting to the router. That trunk port uses the switchport mode trunk command and optionally a switchport trunk allowed vlan statement to restrict which VLANs traverse the link. I've seen students forget to allow specific VLANs on the trunk, which results in perfectly valid router subinterfaces that simply can't reach any hosts because the trunk is filtering their traffic. Layer 3 switch SVIs are the alternative approach and generally perform better in production environments. Each VLAN gets a virtual interface with an IP address, and ip routing must be enabled globally on the switch. The key difference from router-on-a-stick is that routing happens in hardware rather than through a software-based router process, which reduces latency and offloads the CPU.

There's a practical bottleneck with SVI-based routing on entry-level switches. The switching capacity of devices like the 2960 series is finite, and when you enable IP routing along with many VLANs, you may notice reduced throughput compared to a dedicated router for heavy routed traffic. If your network expects significant cross-VLAN traffic, consider whether the switch can actually handle it before committing to this design.

Verification Commands That Matter

Show running-config is useful but often shows more information than you need. For VLAN-related troubleshooting, show vlan brief gives you a clean view of which VLANs exist and which ports belong to them. Show etherchannel port-channel summary tells you quickly whether all member links are bundled or if some are suspended. Show ip routes verifies that the Layer 3 switch has learned routes for all configured VLANs. When testing connectivity after configuration, don't assume success just because ping works from the switch to a remote VLAN. That only proves the switch's own routing table is correct. You need to test from an actual host within each VLAN to confirm end-to-end connectivity, including proper default gateway configuration on the host side.

Lab Practice Recommendations

The most effective way to prepare for the exam material in this unit is hands-on practice. Packet Tracer or GNS3 both work fine for simulating switch and router configurations. Build a topology with at least three switches, configure multiple VLANs, set up VTP in server mode on one switch and client mode on others, create an EtherChannel between two switches, and configure inter-VLAN routing using both router-on-a-stick and L3 switch approaches. Compare the results between the two routing methods. Practice verifying each configuration step before moving to the next one. If something fails, the earlier steps are easier to isolate when you haven't added additional complexity on top of an already broken setup. This approach typically cuts debugging time in half compared to configuring everything first and then trying to find where things went wrong.

Where This Material Falls Short

One honest limitation of the CNA expansion 1 unit 3 coverage is that it doesn't deeply address security implications of the technologies discussed. VLAN hopping attacks, VTP manipulation risks, and EtherChannel misconfiguration vulnerabilities are all real concerns that professionals deal with, but the exam focus remains on configuration and basic troubleshooting rather than defense strategies. If your goal is practical network administration rather than just passing an exam, supplement this material with additional study on network security fundamentals. Another gap is that modern networks increasingly use VXLAN and other overlay technologies that go beyond traditional VLAN-based segmentation. The concepts in this unit remain foundational, but don't expect this material alone to prepare you for advanced data center or cloud networking scenarios. It covers the basics well enough for the certification, but real-world deployment often requires understanding more than what's tested here.