TCP Three-Way Handshake

What is it?

TCP establishes connection state with SYN → SYN-ACK → ACK before normal application data exchange.

Why should I learn it?

The handshake is usually the first thing to check when an application “can’t connect” but the network looks fine.

How it works

Client sends SYN → server replies SYN-ACK → client sends ACK → connection established for data exchange.

Real-world example

If SYN leaves but SYN-ACK never returns, investigate listener state, policy, routing and return path. If the handshake succeeds but the app fails, basic TCP reachability is already proven.

Troubleshooting mindset

Use packet flow evidence to identify which handshake message is missing.

Common mistake

Do not memorise the definition without connecting it to packet flow, device state and verification. Ask: what should happen, what actually happened, and which command or capture can prove the difference?

Quick recap

• Understand the job of the protocol or feature.
• Know where it sits in the traffic path.
• Verify behaviour instead of guessing.
• Connect the topic to the next networking layer.

Interview connection

Explain the concept in simple words first. Then give one practical example or troubleshooting check. That is stronger than repeating a textbook definition.

References & Further Reading

• How to Master CCNA — supplied reference material.
• CCNA Notes — supplied technical/configuration reference.