First: what 60 days actually means
Sixty days is achievable. It is also uncomfortable. You're looking at two to three hours of focused study every single day, no real weekends off, and a final two weeks that are almost entirely practice exams. If that sounds hard, it is. The CCNA is not a "study casually for a few months" exam. It's 120 questions in 120 minutes covering six domains, and Cisco writes questions specifically to catch people who half-understood something rather than actually learned it.
That said, people pass in 60 days regularly. The ones who succeed share one trait: they start subnetting immediately and never stop drilling it until exam day. Everything else in the CCNA you can learn through study and repetition. Subnetting you have to internalize until you can do it without conscious effort, because you'll be running subnet calculations while simultaneously reading a question about OSPF neighbor adjacency.
This plan assumes you have some IT background — you know what an IP address is, you've touched a network device at least conceptually, you understand what a router does versus a switch. If you're starting completely from scratch, add three to four weeks to the front of this timeline to build that baseline first.
Days 1–10: Network fundamentals and subnetting
Spend the first ten days on the Network Fundamentals domain (20% of the exam) with subnetting as a parallel obsession. These aren't separate things — subnetting lives inside fundamentals — but it deserves its own daily drill time because it's a skill that takes repetition, not just understanding.
The fundamentals domain covers the OSI and TCP/IP models, Ethernet, cables and connectors, wireless standards, IP addressing (both IPv4 and IPv6), DHCP, DNS, and how traffic flows through a switched and routed network. Don't rush through this. The exam asks scenario questions that require you to understand why a packet takes a specific path, not just what IP stands for.
For subnetting specifically: learn to calculate the network address, broadcast address, and full host range for any CIDR prefix. Practice until you can do /24 through /30 from memory without writing anything down first. The Cisco exam doesn't give you extra time to do math — you need to run subnet calculations in your head while simultaneously reading the question and its answer choices.
A drill that actually works: take any random IP address and prefix length, calculate the network and broadcast address in under 15 seconds. Repeat 20 times a day until it's automatic. It sounds tedious. It is tedious. Do it anyway, because this single skill separates first-attempt passers from people who need a retake more than any other topic in the exam.
Days 11–25: LAN switching — VLANs, STP, EtherChannel
The Network Access domain (20%) is where a lot of candidates slow down, because it requires understanding how switches make decisions — something that's less intuitive than routing for people with a general IT background.
VLANs are the foundation of this domain. Understand what a VLAN is, why you'd separate traffic into multiple VLANs on the same physical switch, how trunk ports carry multiple VLANs between switches, and the three ways to route between VLANs (router-on-a-stick, Layer 3 switch, and separate physical router interfaces). The exam tests all three and often puts them in the same scenario question.
Spanning Tree Protocol gets significant exam coverage, and it comes with deliberate traps. Know the port states in order: Blocking, Listening, Learning, Forwarding. Know the timers for classic 802.1D STP (max age 20s, forward delay 15s each for Listening and Learning — total worst-case convergence around 50 seconds). Know that RSTP (802.1w) eliminates those timers through negotiation and converges in under a second. Know how the root bridge is elected (lowest Bridge ID, which is priority + MAC address) and why you should always set priority manually on your intended root bridge. The exam writes topology diagrams and asks which port will be blocked — you need to be able to trace the logic, not just recall the terms.
EtherChannel (link aggregation) gets lighter coverage. Know the difference between LACP (IEEE standard, open) and PAgP (Cisco proprietary). Know that EtherChannel groups multiple physical links into a single logical link for both bandwidth and redundancy. Basic configuration concept is enough for now — detailed syntax comes later.
Days 26–40: Routing — OSPF, static routes, NAT, DHCP relay
IP Connectivity (25%) is the largest domain by weight and one of the most practically important. Routing tables, OSPF neighbor relationships, and inter-network traffic flow all live here.
Start with static routing and understand it completely before touching OSPF. Many candidates rush past static routes because they feel conceptually simple, then hit OSPF questions without having a clean mental model of how routing decisions are made. Static routes first teaches you how routers think. OSPF then teaches you how to automate that thinking at scale.
OSPF is the main routing protocol on the CCNA exam — Cisco removed EIGRP from the vendor-neutral sections of the curriculum. You need to understand the neighbor adjacency process (from Down through Init, 2-Way, ExStart, Exchange, Loading, to Full), the DR/BDR election on broadcast networks, LSA types, area design basics, and common reasons why an OSPF adjacency won't form. That last one is exam gold: mismatched Hello/Dead timers, mismatched area IDs, mismatched authentication, MTU mismatch — these scenarios show up constantly.
NAT is tested more heavily than most study guides prepare you for. Know static NAT (one-to-one mapping), dynamic NAT (pool of public IPs), and PAT — also called NAT overload — which maps many private IPs to one public IP using port numbers to track sessions. PAT is what every home router does. The exam asks about NAT in troubleshooting scenarios: a device can't reach the internet, the NAT table shows no entry for that host, why? Work through the logic.
The ip helper-address command handles DHCP relay, and it shows up in enough exam questions to be worth knowing precisely. The scenario: a device on one subnet can't get a DHCP address because the DHCP server is on a different subnet. Routers don't forward broadcast traffic by default, so DHCP discovery packets never reach the server. The fix is ip helper-address <server-ip> on the router interface facing the client subnet. Know this configuration cold.
Days 41–50: IP Services, Security Fundamentals, and WAN
These three domains together account for roughly 25% of the exam. None go as deep as routing and switching, but they're tested with enough scenario questions that you can't treat them as afterthoughts.
IP Services covers DHCP configuration, NTP, DNS, SNMP, syslog severity levels, QoS concepts, and SSH versus Telnet. The QoS questions are the ones candidates most often underestimate. You don't need to configure QoS — you need to understand classification (identifying traffic), marking (applying DSCP values like EF for voice, AF for business data), and queuing (prioritizing marked traffic). Know what DSCP EF (Expedited Forwarding, value 46) means and why voice traffic uses it.
Security Fundamentals covers ACLs most heavily. Standard ACLs match only source IP and should be placed closest to the destination. Extended ACLs match source IP, destination IP, protocol, and port, and should be placed closest to the source. Know the implicit deny at the end of every ACL. Be able to read a numbered or named ACL and predict which traffic it permits or denies, including traffic that matches no rule and hits the implicit deny.
Port security on switches — limiting the number of MAC addresses on an interface, and the violation modes (protect, restrict, shutdown) — shows up regularly in troubleshooting scenarios. If a switch port goes to err-disabled state, port security violation is one of the common causes the exam tests.
WAN covers serial connections, MPLS concepts at a high level, and software-defined WAN. It's lighter coverage. Two focused days is enough.
Days 51–55: Automation and Programmability — do not skip this
This domain (10%) is the one candidates most often underestimate because it doesn't feel like "real" networking. It's a mistake that costs exam passes. Ten percent is a minimum of twelve questions on a 120-question exam. Skip the domain entirely and you've handed Cisco those questions.
The domain covers the difference between traditional CLI-based network management and controller-based SDN architectures, what a network controller does (Cisco DNA Center for campus networks, Cisco vManage for SD-WAN), REST API concepts (GET, POST, PUT, DELETE, and what status codes like 200, 201, 400, 404, 500 mean), JSON and XML data formats, and configuration management tools — Ansible, Puppet, Chef — at a conceptual level. You do not need to write Python or YAML. You need to understand what these tools do and be able to read a simple JSON object and identify its structure.
Five days of focused study, two to three hours per day, is enough to go from knowing nothing about this domain to answering most of its questions correctly. Don't skip it.
Days 56–60: Practice exams only, nothing new
Stop studying new content on day 56. Everything you haven't learned by then will not be learned in five days, and trying to cram new topics this close to the exam is more likely to scramble what you know than to add to it.
Take full 120-question timed practice exams every day for the last five days. Review every wrong answer immediately after each exam. Don't just note that you got it wrong — understand why the correct answer is correct and why the answer you chose was wrong. Cisco writes distractor choices specifically to catch misconceptions. Seeing the same misconception multiple times in review is the fastest way to eliminate it permanently.
If you're consistently scoring 75% or above on realistic practice exams, you're likely ready. If you're below 70%, identify your weakest domains using the score breakdown and spend the remaining days on targeted review of those areas rather than more full exams.
Good practice exam sources: Cisco's official practice exams in the Cert Guide, Boson ExSim (expensive but extremely accurate to real exam difficulty), and the practice exams on Courseiva's CCNA section, which are updated for the current 200-301 exam objectives.
On the day of the exam
Get to the Pearson VUE center early. The check-in process — ID verification, biometrics, locker for your belongings — takes longer than you'd expect, and walking into the testing room rushed is not how you want to start 120 minutes of high-stakes questions.
You'll receive a small whiteboard and marker. Use it for subnetting. Write down the binary values for the last octet (/25 = 128, /26 = 64, /27 = 32, /28 = 16, /29 = 8, /30 = 4) before you start the exam, while your mind is fresh. You'll reference it throughout.
Flag performance-based questions and move past them. Come back after answering all the multiple choice. This protects your time and sometimes the multiple choice context helps with the simulated tasks.
The CCNA is achievable in 60 days. Most people who fail don't fail because it's too hard — they fail because they didn't drill subnetting, skipped the automation domain, or ran out of realistic practice exam time before sitting the real thing. Fix those three and your odds improve substantially.