Day 3: The Physical Layer – Copper, Fiber, and Finding Faults

The CyberSec Guru

Updated on:

The Physical Layer

If you like this post, then please share it:

Buy me A Coffee!

Support The CyberSec Guru’s Mission

🔐 Fuel the cybersecurity crusade by buying me a coffee! Why your support matters: Zero paywalls: Keep the main content 100% free for learners worldwide, Writeup Access: Get complete in-depth writeup with scripts access within 12 hours of machine drop.

“Your coffee keeps the servers running and the knowledge flowing in our fight against cybercrime.”☕ Support My Work

Buy Me a Coffee Button

Welcome to Day 3 of your CCNA journey.

On Days 1 and 2, we looked at the network from a high level—the devices and the topology maps. Today, we look at the messy reality of the physical world.

Layer 1 (The Physical Layer) is where data meets physics. It is where binary 1s and 0s are converted into electrical pulses or pulses of light. It is also where the vast majority of network troubleshooting begins. If the cable is broken, OSPF doesn’t matter. If the interface is mismatched, your expensive firewall is useless.

This guide covers CCNA Exam Topic 1.3 (Compare physical interface and cabling types) and Topic 1.4 (Identify interface and cable issues). We will dive deep into Copper vs. Fiber, the magic of Power over Ethernet (PoE), and how to read the cryptic error counters in show interfaces.

Copper Cabling: The Universal Standard

Despite the rise of Wi-Fi, the world still runs on copper. Twisted Pair copper cabling is the standard for connecting end-user devices (Access Layer).

Unshielded Twisted Pair (UTP)

The most common cable is UTP. It consists of 8 copper wires twisted into 4 pairs.

  • Why twist them? To cancel out EMI (Electromagnetic Interference) and Crosstalk (signal leaking from one wire to another). The tighter the twist, the better the protection.

Cabling Categories (Know these for the Exam)

You must know the speeds and distances. The standard maximum distance for Ethernet on copper is 100 meters (328 feet).

  • Cat5e (Category 5 Enhanced): The old standard. Supports 1 Gbps (1000BASE-T) up to 100m.
  • Cat6: The current standard. Supports 1 Gbps up to 100m, and 10 Gbps up to 55 meters. It has a plastic separator (spline) in the middle to reduce crosstalk.
  • Cat6a (Augmented): Thicker and shielded. Supports 10 Gbps for the full 100 meters.
Cat 5e vs Cat 6a
Cat 5e vs Cat 6a

Connector Types

  • RJ-45: The standard 8-pin connector you see on every laptop and switch.

Straight-Through vs. Crossover

  • Straight-Through: Pin 1 goes to Pin 1. Used to connect Unlike Devices (PC to Switch, Router to Switch).
  • Crossover: Pin 1 crosses to Pin 3. Used to connect Like Devices (Switch to Switch, Router to PC).
  • Auto-MDIX: Modern switches automatically detect the cable type and swap the logic internally. However, for the CCNA, you must know the difference.
🚀 Ultimate Study Guide

Ace the CCNA 200-301 Exam

Stop memorizing and start understanding. Get 500 realistic, scenario-based questions designed to test your skills and boost your confidence before test day.

500+ Practice Scenarios
Detailed Explanations
Instant PDF Access
Get The Guide Now

Fiber Optic Cabling: Speed of Light

When you need to go farther than 100 meters or faster than 10 Gbps, you use Fiber. Fiber uses light (photons) instead of electricity (electrons), making it immune to EMI.

Single-Mode Fiber (SMF)

  • Core Size: Tiny (9 microns).
  • Light Source: Laser.
  • Distance: Long range (Kilometers/Miles).
  • Application: Connecting buildings (Campus Backbone) or cities (WAN).
  • Color Code: Typically Yellow cables.

Multimode Fiber (MMF)

  • Core Size: Wider (50 or 62.5 microns).
  • Light Source: LED.
  • Distance: Short range (approx. 300m – 550m).
  • Application: Within a Data Center (Server to Switch) or inside a single building.
  • Color Code: Typically Orange (OM1/OM2) or Aqua (OM3/OM4).
  • Dispersion: Because the core is wide, light bounces around (modes), leading to signal degradation over long distances. This is why MMF is shorter range than SMF.
Single-Mode vs Multimode Fiber
Single-Mode vs Multimode Fiber

Power over Ethernet (PoE)

PoE allows a switch to send electrical power along the same copper cable used for data. This eliminates the need for power bricks for IP Phones and Access Points.

The Terminology

  • PSE (Power Sourcing Equipment): The device giving power (The Switch).
  • PD (Powered Device): The device receiving power (The IP Phone/Camera).

The Standards (Memorize the Watts)

  1. PoE (802.3af): Provides up to 15.4W (enough for basic IP phones).
  2. PoE+ (802.3at): Provides up to 30W (needed for advanced APs with multiple antennas).
  3. UPoE / 4PPoE (802.3bt): Provides 60W or even 100W (used for powering lights, TVs, or laptops).
PoE - Power over Ethernet
PoE – Power over Ethernet

Troubleshooting Interface Issues (Topic 1.4)

This is the most “real world” part of the CCNA. You plug a cable in, and it doesn’t work. Or worse, it works poorly. You turn to the CLI command: show interfaces.

The “Show Interface” Autopsy

When you run show interfaces GigabitEthernet0/1, you are looking for specific counters.

🚀 Ultimate Study Guide

Ace the CCNA 200-301 Exam

Stop memorizing and start understanding. Get 500 realistic, scenario-based questions designed to test your skills and boost your confidence before test day.

500+ Practice Scenarios
Detailed Explanations
Instant PDF Access
Get The Guide Now
Router# show interfaces gi0/1
GigabitEthernet0/1 is up, line protocol is up (connected)
  Hardware is Gigabit Ethernet, address is 0011.2233.4455 (bia 0011.2233.4455)
  MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
  reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX
  input flow-control is off, output flow-control is unsupported
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:08, output 00:00:05, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     1245 packets input, 198234 bytes, 0 no buffer
     0 received broadcasts (0 multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     2341 packets output, 394852 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred

The “Big Three” Status Codes

  1. Up / Up: Layer 1 is good, Layer 2 is good. Everything is working.
  2. Down / Down: Layer 1 is dead. Check the cable. Is it plugged in? Is the device on?
  3. Up / Down: Layer 1 is alive (it detects carrier signal), but Layer 2 is failing. This usually means a protocol mismatch (encapsulation) or a Keepalive failure.

Common Interface Errors Explained

Collisions (Duplex Mismatch)

  • Half-Duplex: Only one device can talk at a time (like a Walkie-Talkie). Uses CSMA/CD to detect collisions.
  • Full-Duplex: Both devices can talk at once (like a Telephone). No collisions possible.
  • The Issue: If one side is auto-negotiated to Full-Duplex and the other is hard-coded to Half-Duplex, you get a Duplex Mismatch.
  • Symptoms: The link is “Up/Up”, but you see Late Collisions incrementing on the Half-Duplex side and FCS/CRC Errors on the Full-Duplex side. Performance will be terrible.

Runts and Giants

  • Runt: A frame smaller than 64 bytes. Usually caused by collisions.
  • Giant: A frame larger than 1518 bytes (or larger than the configured MTU). Usually caused by Jumbo Frames being configured on one side but not the other.

CRC (Cyclic Redundancy Check)

  • What is it? A mathematical check to ensure the data wasn’t corrupted in transit.
  • Cause: If the CRC counter is increasing, it almost always means physical interference (EMI), a bad cable, or a loose connector. Layer 1 is failing to deliver a clean signal.
Troubleshooting Using CLI
Troubleshooting Using CLI

The Physical Foundation

To pass CCNA Topic 1.3 and 1.4, remember:

  • Copper: Cat6a for 10G over 100m. Shielding protects against EMI.
  • Fiber: Single-mode for distance (Yellow), Multimode for local speed (Aqua).
  • PoE: 802.3at (PoE+) is needed for modern APs.
  • Troubleshooting:
    • Up/Down: Check Layer 2 config.
    • Down/Down: Check the cable.
    • Late Collisions: Check for Duplex Mismatch.
    • CRC Errors: Replace the cable.

Ready for Day 4? Now that we have cables plugged in and interfaces up, we need to carve up the network logically. Tomorrow, we dive into VLANs and Trunking (802.1Q).

Author’s Note: This guide is strictly aligned with Cisco CCNA 200-301 Exam Topics 1.3 and 1.4. Always check Layer 1 first!

🚀 Ultimate Study Guide

Ace the CCNA 200-301 Exam

Stop memorizing and start understanding. Get 500 realistic, scenario-based questions designed to test your skills and boost your confidence before test day.

500+ Practice Scenarios
Detailed Explanations
Instant PDF Access
Get The Guide Now

Buy me A Coffee!

Support The CyberSec Guru’s Mission

🔐 Fuel the cybersecurity crusade by buying me a coffee! Your contribution powers free tutorials, hands-on labs, and security resources.

Why your support matters:
  • Writeup Access: Get complete writeup access within 12 hours
  • Zero paywalls: Keep the main content 100% free for learners worldwide

Perks for one-time supporters:
☕️ $5: Shoutout in Buy Me a Coffee
🛡️ $8: Fast-track Access to Live Webinars
💻 $10: Vote on future tutorial topics + exclusive AMA access

“Your coffee keeps the servers running and the knowledge flowing in our fight against cybercrime.”☕ Support My Work

Buy Me a Coffee Button

If you like this post, then please share it:

CCNA 101

Discover more from The CyberSec Guru

Subscribe to get the latest posts sent to your email!

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Discover more from The CyberSec Guru

Subscribe now to keep reading and get access to the full archive.

Continue reading