Under exam pressure it's easy to forget a step. Build every site in the same order, bottom up, and each layer rests on a working one below:
- Physical / interfaces. Cable,
no shutdown, addresses. Checkshow ip interface brief: up/up. - Switching. VLANs, access ports, trunks.
show vlan brief,show interfaces trunk. - Routing. Static or OSPF so every subnet is reachable.
show ip route,pingend to end. - Services. DHCP, NAT, DNS, NTP as needed. Test from a client.
- Security. SSH, passwords, ACLs, port security - last, so you don't lock yourself out mid-build.
- Save.
copy running-config startup-config.
The matching troubleshooting order is the same, bottom up: a service can't work if routing is broken, and routing can't work if an interface is down. Always check the layer below before blaming the one above.
Remember: Interfaces → switching → routing → services → security → save. Troubleshoot bottom up.