Day 2

Interfaces, Cables & Link Diagnosis

interfaces-cables-diagnosis

At a glance

Diagnose copper and fiber link faults from negotiated settings and counters: collisions, CRC, runts, giants, duplex and speed mismatch, pinout, cable type, signal level, polarity, and distance. Interface types, straight-through and crossover, Auto-MDI-X, and what a link means in Packet Tracer versus real hardware sit underneath that diagnosis. Maps to CCNA v2.0 objective 1.1.

Deep chapter

Long-form companion reading (original prose).

Day 2 in context: physical layer literacy

Day 1 gave you the cast: hosts, switches, routers, firewalls, wireless. Day 2 is where you learn the stage rigging—interfaces, transceivers, copper and fiber standards, cable categories, negotiation, and the first disciplined troubleshooting ladder. Many outages that look like “routing” are actually wrong media, bad ports, or speed/duplex mismatch.

By the end of this chapter you should read a port label like “Gi1/0/24” without panic, pick a sensible copper standard for a desktop uplink versus a distribution uplink at a high level, and explain why console access is not interchangeable with user Ethernet.

How IEEE names Ethernet: BASE, speed, and media

IEEE 802.3 defines Ethernet at the physical and data-link layers (with MAC rules you study more on switching days). The shorthand you see in books and exams usually follows a pattern: a speed number, the word BASE meaning baseband (no frequency-division multiplexing like some WAN radios), and a media code—T for twisted pair, TX for a specific copper PHY variant, SX/LR for fiber, and so on.

Each PHY is standardized in an IEEE 802.3 amendment (or clause incorporated into the base standard). Exams increasingly mix marketing names (1000BASE-T) with clause numbers (802.3ab). Learn both: the letter in the PHY name hints at the medium; the amendment number hints at the speed generation.

Important nuance: the number is the line rate on the wire (raw PHY speed), not guaranteed TCP throughput. Protocol overhead, inter-frame gaps, hosts, and congestion all reduce what applications feel.

Twisted-pair Ethernet PHY standards (what shows up on CCNA)

These rows are the copper (UTP/STP) PHYs you are most likely to compare in coursework and multiple-choice framing. Distances assume a compliant twisted-pair channel (horizontal cable, connectors, patch leads) per TIA-568-style structured cabling—not a random fly lead coiled above a ceiling tile.

Memory hook by amendment: 802.3i → 10BASE-T; 802.3u → 100BASE-TX (same amendment as 100BASE-FX fiber); 802.3ab → 1000BASE-T; 802.3an → 10GBASE-T; 802.3bz → 2.5GBASE-T and 5GBASE-T. The classic exam trap remains 802.3ab (gigabit copper) vs 802.3z (gigabit fiber SX/LX)—different media, different amendments.

Legacy 100BASE-T4 (also 802.3u) used four Cat3 pairs; modern plant is overwhelmingly 100BASE-TX on two pairs. If a stem mentions T4, think old horizontal cabling and four-pair 100 Mb/s—not what you install today.

IEEE PHY802.3 amendmentCommon labelLine rateTypical twisted-pairTypical max channel (guide)
10BASE-T802.3iEthernet on UTP10 Mb/sCat3 minimum in the old spec; Cat5 common today if found100 m
100BASE-TX802.3uFast Ethernet (copper)100 Mb/sCat5 UTP (two pairs used for data)100 m
1000BASE-T802.3abGigabit Ethernet on copper1 Gb/sCat5e or better; all four pairs participate100 m
2.5GBASE-T802.3bzMultigig / NBASE-T2.5 Gb/sOften Cat5e for shorter runs; Cat6 for comfortable 100 m class designsUp to ~100 m on Cat6 (design-dependent)
5GBASE-T802.3bzMultigig5 Gb/sCat6 common for 100 m-class links~100 m on solid Cat6 (vendor tables vary)
10GBASE-T802.3an10 Gigabit on copper10 Gb/sCat6a common for 100 m; Cat6 may work shorter100 m on Cat6a typical campus answer

Pairs, duplex, and why Gigabit needed four pairs

Classic Fast Ethernet 100BASE-TX uses two pairs: one direction per pair in full duplex. Gigabit on copper (1000BASE-T) uses all four pairs simultaneously with echo cancellation and sophisticated coding—so an old “two-pair only” cable fault that still passed 100 Mb/s might fail at 1 Gb/s.

Full duplex on a switch port means the port can transmit and receive at the same time without classic collision-domain sharing. Half duplex still exists in theory on some links; mismatch with a full-duplex peer is a historic pain that shows up as interface errors and miserable performance.

TIA cable categories (bandwidth class, not “speed” by itself)

Category ratings define cable performance: tighter twists, better isolation, higher usable frequency. Higher category does not automatically “upgrade the internet”; it means the copper plant can support higher PHYs at required distances with acceptable bit error rates.

CategoryClass bandwidth (≤100 m)Typical Ethernet you plan forNotes
Cat316 MHzLegacy voice / very old 10BASE-T plantMostly obsolete for new LANs
Cat5100 MHz100BASE-TX; marginal for 1000BASE-T long termSuperseded by Cat5e in practice
Cat5e100 MHz (tighter specs than Cat5)1000BASE-T standard answerMost common “existing building” cable
Cat6250 MHz1 Gb/s everywhere; shorter 10GBASE-T possibleLower crosstalk than Cat5e
Cat6a500 MHz10GBASE-T at 100 m design targetCommon for new horizontal runs
Cat7/7a600–1000 MHzShielded solutions; less common wording on CCNAKnow it exists; vendor marketing varies
Cat82000 MHzShort copper in data centers (25/40GbE variants)Not typical access-layer desktop cabling

RJ-45, pinouts, and structured cabling vocabulary

The modular 8-position 8-contact plug/jack is commonly called RJ-45 in networking speech. T568A vs T568B are color-code orders for the eight conductors; consistency matters end-to-end. A horizontal cable run usually terminates on a patch panel (permanent link) and is patched to a switch with a short patch cord (channel).

Bad terminations, stretched pairs, and tight bend radii raise return loss and crosstalk—symptoms look like “flaps at 1 Gb/s but fine at 100 Mb/s.”

Block diagram from wall outlet through horizontal cable and patch panel to switch and server
Structured cabling vocabulary: the in-wall horizontal segment plus patch cords forms the channel. Field techs often re-seat or replace patch cords first because they wear out faster than solid horizontal cable.

MDI vs MDI-X, straight-through, crossover, Auto-MDI-X

Ethernet NICs and switch ports expect transmit and receive on specific pin pairs. A crossover cable swaps those pairs so like devices could interconnect in early designs. A straight-through cable keeps pin order end-to-end for unlike devices (host to switch).

Auto-MDI-X lets modern interfaces detect and flip pairs in silicon so crossover cables are rarely needed in new installs. CCNA still tests the classical story because you will still read old diagrams, work in brownfield closets, and troubleshoot someone’s “mystery cable drawer.”

Diagram: PC NIC connected with straight-through cable to switch port labeled MDI-X with Auto-MDI-X
Auto-MDI-X concept: the access switch can adapt pin usage so a normal straight-through patch cord works from a PC (MDI) without a manual crossover.

Pinout, pair count, and cable type

Pinout decides whether a copper link can come up before speed and duplex ever negotiate. T568A on both ends is a straight-through cable. T568B on both ends is also straight-through. A on one end and B on the other swaps the pair on pins 1-2 with the pair on pins 3-6, which is a crossover. Hosts and modern switches hide that swap with Auto-MDI-X. A port with `no mdix auto`, or an old switch that never had it, still needs the classical cable: straight-through between unlike devices, crossover between like devices. A rollover cable is a console cable. It will not light an Ethernet data port.

1000BASE-T trains on all four pairs. A run that only punches down pairs 1-2 and 3-6 can still carry 10 or 100 Mb/s and then fail, or fall back, when the port tries to negotiate 1 Gb/s. Split pairs, where the two wires of a logical pair are not the twisted partners, often pass a cheap continuity tester and still produce CRC errors and flaky negotiation. The channel length for twisted-pair Ethernet is 100 meters, patch cords included. Past that length the link drops, errors, or negotiates downward.

Exam trap: “no link” between two switches is still a cable-type question when the stem mentions legacy hardware or Auto-MDI-X turned off. “Link up at 100, errors or no link at 1000” is a pair-count or distance question. Compare both ends, and the punch-down, before you replace the switch.

UTP (Unshielded Twisted Pair): pairs, plugs, and why twists matter

Most access-layer Ethernet in offices uses UTP: four pairs of copper conductors twisted together inside a PVC jacket, with no metallic foil shield around each pair (hence unshielded). Twisting fights crosstalk and electromagnetic pickup; tighter twist rates and better insulation are how higher cable categories support higher frequencies.

Shielded twisted pair (STP / F/UTP, S/FTP, etc.) appears in noisy industrial sites or some data centers. CCNA still centers UTP vocabulary: Cat5e/Cat6/Cat6a horizontal cabling, RJ-45 plugs, patch panels, and compliance testing (NEXT, return loss) in real installs.

A modular plug terminates all eight conductors according to T568A or T568B color order. New North American installs commonly standardize on T568B end-to-end for consistency. The cable type (straight vs crossover) is about whether pin 1 on the left electrically reaches pin 1 on the right, or whether transmit/receive pairs swap for like-device links.

Diagram: eight colored wires run straight between two RJ45 plugs labeled A and B with identical T568B pin order
Straight-through: pin 1 maps to pin 1, pin 2 to pin 2, … pin 8 to pin 8. This is the normal patch cord for PC→switch or router→switch access ports.
Diagram: T568B plug A and T568A plug B with curved wires swapping orange and green pairs; blue and brown straight
Crossover cable (common build): T568B on one end and T568A on the other so the orange pair (1–2) trades place with the green pair (3–6); blue and brown stay aligned. That lets two MDI devices (e.g. switch-to-switch) carry 10/100BASE-TX. Gigabit uses all pairs; Auto-MDI-X made dedicated crossover cables rare.

Fiber optics: what you are actually plugging in

Fiber carries light through a glass core surrounded by a lower-index cladding so rays (modes) stay guided. Compared with copper, fiber wins on distance and immunity to electrical noise; it loses on cost of optics, skill to terminate cleanly, and sensitivity to dirt. CCNA expects you to pair the right IEEE PHY name (for example 1000BASE-SX) with multimode vs single-mode, typical wavelength, and rough distance class—not to design an optical budget spreadsheet.

Those PHY names live under the parent standard IEEE 802.3. Each speed generation is published as an amendment you will see on datasheets and exam stems: 802.3u (Fast Ethernet, including fiber 100BASE-FX), 802.3z (Gigabit over fiber—1000BASE-SX and 1000BASE-LX), 802.3ae (10 Gigabit fiber PHYs such as 10GBASE-SR/LR/ER), and 802.3ba (40 and 100 Gigabit fiber families). Do not confuse 802.3z (gigabit fiber) with 802.3ab, which is 1000BASE-T on twisted pair.

A duplex link uses two strands (or two lanes in a ribbon) so each side can transmit while the other receives. Polarity mistakes (A/B flipped) are a classic “both optics good, no link” field issue.

Cross-section: wide multimode core with many light paths versus narrow single-mode core with one path
Multimode has a larger core (50 µm or legacy 62.5 µm) and allows multiple propagation paths; single-mode uses a ~9 µm core and a laser optimized for one fundamental mode—lower dispersion, longer reach.

Wavelengths and why installers talk in nanometers

850 nm is the common multimode window for short-reach optics (LEDs in the past; VCSELs today). 1310 nm and 1550 nm appear heavily in single-mode systems; 1550 nm is often used for longest WAN spans with amplifiers. The exam usually stops at recognizing that SX/SR family is 850 nm MM while LR/LX on SM is long-wavelength territory.

You cannot freely mix wavelengths: each transceiver is built for a band. Color-coded bales on LC connectors sometimes help techs avoid plugging a blue SM patch into an MM plant—but always read the module label and data sheet.

Multimode grades (OM1–OM5) at a glance

Multimode fiber is classified by OM (optical multimode) grade. Newer OM grades support higher modal bandwidth, which translates to longer 10/40/100 Gb/s reaches at the same wavelength. Legacy 62.5 µm OM1 still exists in old buildings; most greenfield is laser-optimized 50 µm OM3/OM4, with OM5 adding wider WWDM support for certain high-speed schemes.

GradeCore (typical)Exam / field note
OM162.5 µmLegacy; shorter high-speed reach than OM3/OM4
OM250 µm (older)Better than OM1; still limited vs laser-optimized grades
OM350 µm laser-optimizedCommon data center / campus MM for 10G SR class
OM450 µmExtended MM reach vs OM3 at high speeds
OM550 µm (wide)Know the name; less detail on CCNA than OM3/OM4

Single-mode (OS1/OS2) and when engineers pick it

Single-mode cable is yellow in many plant conventions. OS1 vs OS2 is a construction/loss class story for standards people; for CCNA, internalize “SM + LR optics = campus/metro distances MM cannot hit.” SM optics cost more but avoid modal dispersion limits that cap MM distance as speeds rise.

Mode-conditioning patch cords can allow some gigabit LX optics to launch into legacy MM more safely; if you see the term on a question, think “LX + MM nuance,” not day-to-day access-layer design.

Connectors, polish, and physical mistakes that kill links

LC duplex is the de facto data center connector: small form factor, latch, two ferrules. SC remains common in ISP handoffs. ST is older bayonet style you still see in plant photos. MPO/MTP carries parallel ribbons for 40/100 Gb/s short reach—know the acronym for interviews even if the lab stays on LC SR optics.

Fiber faces must stay clean: oil from a thumbprint or dust creates back reflections and loss. UPC polish is typical in enterprise LAN; APC (green-bodied connectors, angled polish) appears in CATV/PON contexts—do not mix APC and UPC in the same mated pair.

Simplified front views of LC duplex, SC, and ST fiber connectors
Connector silhouettes you should recognize: LC duplex (two 1.25 mm ferrules), SC push-pull, ST twist-lock. Real hardware adds boots, strain relief, and color codes.

Fiber signal, polarity, and distance

A dark fiber link is often light, polarity, or the wrong optic, which objective 1.1 groups with signal level and distance. The transmit strand on one end must land on receive at the other. A swapped duplex LC connector, or a polarity flip in a cassette, leaves both ports with no link even though each SFP is healthy. `show interfaces transceiver` (and `detail` on platforms that expose DOM) reports Tx and Rx power against the optic’s thresholds. Rx below the low warning means too much loss: distance past the optic’s budget, a dirty end-face, too many patches, a bend tighter than the cable’s radius, or a strand that is simply broken.

Wavelength and mode have to match on both ends. A 1310 nm long-reach optic will not train with a 850 nm short-reach optic. Multimode fiber under a single-mode optic, or the reverse, may fail outright or may link across a short jumper and then fall apart on the real run. Distance is part of the PHY: 1000BASE-SX is hundreds of meters depending on the OM grade, while LX/LR and single-mode runs are measured in kilometers. Exceeding the budget raises CRC errors before it becomes a total blackout. Clean the end-face and confirm the optic part number against the fiber type before you swap the switch.

Exam trap: one side showing receive light and the other showing none is a polarity or a break, and it is evidence you can read. Replacing both SFPs without reading Rx power burns a change window. UDLD can catch a unidirectional fiber later; the first check is still light, connector polarity, wavelength, and distance.

Pluggable optics: SFP, SFP+, QSFP, and DAC twinax

Field-replaceable modules let one switch SKU serve copper access, fiber uplinks, or long-reach SM. SFP ≈ 1 Gb/s class; SFP+ ≈ 10 Gb/s; QSFP variants aggregate lanes for 40/100 Gb/s. Direct-attach copper (DAC) uses twinax with fixed module ends for very short rack-to-rack links—cheaper and lower latency than fiber when distance allows.

A missing module, wrong speed grade, or incompatible optic (MM SR plugged into an SM-only path) shows up as a dark interface or stuck notconnect even though configuration looks perfect. Always verify part numbers against the cable plant.

Two switches with SFP modules and two colored fiber strands crossing between them labeled Tx and Rx paths
Logical duplex fiber link: each SFP transmits on one strand toward the partner’s receiver. Cleaning and seating both ferrules matters as much as CLI configuration.

Loss, bend radius, and operations hygiene

Every connector, splice, and split adds insertion loss; budgets add those losses against the optic’s power budget. Sharp bends (below vendor minimum radius) cause macro-bending loss—especially at tighter wavelengths. If a cable is kinked in a door, fix the bend before you chase VLANs.

Use dry cleaning tools or lint-free wipes approved for optics; blowing on a connector is folklore, not engineering. Label both ends of the same fiber pair so polarity tracing does not become a two-hour mystery.

IEEE fiber Ethernet PHYs (exam-oriented survey)

Associate each row with three ideas: the marketing PHY (1000BASE-SX), the 802.3 amendment that standardized it, and the fiber type / wavelength that must match your plant. The table is not every clause in 802.3—only the fiber silhouettes that show up in coursework and multiple-choice framing.

Memory hook by speed era: 802.3u → 100 Mb/s fiber (FX); 802.3z → 1 Gb/s fiber (SX/LX); 802.3ae → 10 Gb/s fiber (SR/LR/ER and related); 802.3ba → 40/100 Gb/s parallel optics (SR4, LR4, etc.). Later amendments (802.3by for 25G, 802.3bm for refined 40/100G modules) matter in data centers but are usually survey depth on CCNA.

IEEE PHY802.3 amendmentCommon nameFiber / λ (typical)Distance class (guide)
100BASE-FX802.3uFast Ethernet fiberMM 1310 nm (2 fiber strands)~2 km MM (legacy plant)
1000BASE-SX802.3zGig short wavelengthMM 850 nmTens to hundreds of meters (OM grade dependent)
1000BASE-LX802.3zGig long wavelengthSM 1310 nm (MM with caveats)Longer than SX; SM spans dominate
10GBASE-SR802.3ae10G short reachMM 850 nmData center / risers per OM3/OM4 table
10GBASE-LR802.3ae10G long reachSM 1310 nmMuch longer campus/metro than SR (~10 km class)
10GBASE-ER802.3ae10G extended reachSM 1550 nmLonger than LR at survey depth (~40 km class)
10GBASE-LRM802.3aq10G long reach multimodeMM 1310 nmExtends MM plant for 10G when OM budget allows (~220 m guide)
40GBASE-SR4802.3ba40G short reach (4 lanes)MM 850 nm (often MPO)Data center MM; lane count matters
40GBASE-LR4802.3ba40G long reach (4 λ on SM)SM 1310 nm WDMCampus/metro SM when MM distance is exhausted
100GBASE-SR4802.3ba100G short reach (4 lanes)MM 850 nm (often MPO)High-speed MM spine; know name + amendment
100GBASE-LR4802.3ba100G long reach (4 λ on SM)SM 1310 nm WDMSurvey: SM answer when stems ask longest 100G fiber hop

Router and switch interfaces on Cisco IOS (naming and state)

Interface names encode type and numbering: GigabitEthernet0/0, TenGigabitEthernet1/1, TwentyFiveGigE, Serial0/0/0, etc. The exact slot/port layout is platform-specific, but the configuration grammar is stable: interface x/y, description, speed, duplex, shutdown/no shutdown.

show ip interface brief lists IP-enabled routed interfaces succinctly; show interfaces status is gold for switch access ports (connected/notconnect, speed, duplex, VLAN). Learn both early.

Conceptual front panel with console port, four RJ-45 Ethernet jacks, dashed SFP slot, and USB
Conceptual port mix: console (out-of-band), bulk RJ-45 Ethernet, and an empty SFP/SFP+ bay waiting for the correct optic or DAC.

Console and VTY: management planes vs user data plane

Console is out-of-band serial-style access for bootstrap and recovery. VTY lines are for remote sessions (SSH/Telnet). Neither replaces routed Ethernet for carrying user subnets; confusing console with a normal switchport is a classic lab derail.

SSH replaces Telnet because encryption and integrity matter even inside a “trusted” management VLAN—attackers move laterally.

Diagram: orange line from laptop to switch console for out-of-band; green line through Ethernet for IP and SSH
Console gives you control plane access when IP is broken; SSH over a routed SVI or management VLAN is normal day-two operations once addressing works.

Troubleshooting ladder (memorize this order)

1) Link light and interface status. 2) Correct media and module. 3) Speed/duplex negotiation evidence. 4) Cable category vs attempted PHY. 5) VLAN/access vs trunk (later). 6) IP and mask. 7) Routing. 8) ACL/NAT (later). Randomly skipping rungs wastes hours.

Vertical ladder numbered 1 through 8 from link status through ACL NAT
Visual ladder: start at Layer 1 evidence before rewriting OSPF or re-addressing subnets.

Counters that name the fault

Objective 1.1 lives in `show interfaces`, not in the routing table. Read the negotiated speed and duplex, then the counters, on both ends. Collisions belong to half duplex. On a full-duplex switched port they should stay at zero. Late collisions, frames that collide after the 512-bit window, are the classic signature of a duplex mismatch: one side forced to full, the other left on auto and fallen back to half. The link stays up. Throughput collapses. CDP often logs the mismatch if both ends speak it.

CRC and input errors mean the frame failed its FCS: bad cable, noise, a failing NIC, split pairs, or that same duplex mismatch. Runts are undersized frames, often from collisions or bad hardware. Giants are oversized frames: an MTU mismatch, or a tagged frame landing on a port that is not expecting the extra four bytes. Output drops and queue drops mean congestion, which is a different ticket from a bad pair. `clear counters` on the interface, generate traffic, and read again so last year’s errors do not convict today’s cable.

Speed that is forced to different values on the two ends often produces no link at all. Auto on one side and `duplex full` with a forced speed on the other is the mismatch that stays up. The safe patterns are auto on both ends, or the same manual speed and duplex on both ends. Exam trap: a green link with rising late collisions is a duplex and counter problem. Do not start at OSPF.

Connecting Devices lab: what to rehearse

Rebuild the topology twice from blank: first slow with notes, second timed. After each link-up, say aloud the PHY speed you expect given cable labels in the exercise (even if simulated). If the lab offers copper vs fiber uplinks, write one sentence on why an engineer would pick fiber for that hop.

Into Day 3

With standards tables in your notebook, the OSI and TCP/IP models become grounded: physical layer is not abstract when you can name the PHY and the cable class that must support it.

Key ideas

  • Late collisions and CRC on a port that claims full duplex point at a duplex mismatch or a bad pair. Compare both ends, then clear counters and retest.
  • Both ends auto, or both ends the same manual speed and duplex. Auto on one side and forced full on the other leaves the link up and half duplex on the auto side.
  • T568A and T568B are straight-through when both ends match. Mixing them builds a crossover. 1000BASE-T needs four pairs inside 100 meters. A rollover cable is for the console.
  • Fiber fails on low Rx power, swapped Tx/Rx polarity, wrong wavelength or mode, and distance past the optic. Read show interfaces transceiver before you swap hardware.
  • Console access is out-of-band management. It is a different cable and a different port from user Ethernet.

Self-check

  • A switch port shows half duplex and rising late collisions while the PC is forced to full. What do you change, and on which ends?
  • The run links at 100 Mb/s and will not train at 1000. Which physical facts do you check?
  • Rx power is below the low warning on one optic and healthy on the other. Name two causes.
  • When does a crossover still matter if most of your switches have Auto-MDI-X?