ManuelYu Part 1-9 Theories

A hierarchical network design is a structured approach that divides a network into layers such as edge, distribution, and access, each with specific roles. This improves scalability, simplifies management, and enhances fault isolation by separating responsibilities. Trigger phrase: Layered design → scalability + control Memory anchor: Divide the network, conquer complexity

The edge layer handles external connectivity, the distribution layer manages routing and policy enforcement, and the access layer connects end devices. Each layer has a defined responsibility to keep the network efficient and organized. Trigger phrase: Edge = outside, Distribution = control, Access = users Memory anchor: Top moves traffic, middle decides, bottom connects

Redundancy ensures continuous operation by providing alternate paths in case of failure. It improves reliability and minimizes downtime by eliminating single points of failure. Trigger phrase: No single point of failure Memory anchor: Always have a backup

Fault tolerance is the ability of a network to continue functioning even when components fail. It is achieved through redundancy, dynamic routing, and resilient design. Trigger phrase: Failure happens → system survives Memory anchor: Break one, system still stands

A VLAN is a logical segmentation of a network that creates separate broadcast domains within the same physical infrastructure. It allows grouping of devices based on function rather than location. Trigger phrase: Logical segmentation Memory anchor: Same switch, different networks

VLAN segmentation improves security by isolating user groups, reduces broadcast traffic, and simplifies network management by organizing devices based on roles. Trigger phrase: Segmentation → security + efficiency Memory anchor: Separate to control

Inter-VLAN routing enables communication between devices in different VLANs using a Layer 3 device such as a multilayer switch or router. Trigger phrase: Different VLANs need Layer 3 Memory anchor: VLANs talk through a gateway

A trunk port carries traffic for multiple VLANs by tagging frames with VLAN IDs, allowing VLANs to span across switches. Trigger phrase: One link, many VLANs Memory anchor: Highway for VLANs

A broadcast domain is a network segment where broadcast traffic is forwarded to all devices. VLANs reduce broadcast domains by isolating traffic. Trigger phrase: Broadcast limited by VLAN Memory anchor: Noise stays contained

OSPF is a link-state routing protocol that dynamically determines the best path using cost metrics and shares topology information among routers. Trigger phrase: Link-state routing Memory anchor: Routers map the network

Area 0 is the backbone of an OSPF network where all routing information is exchanged. All other areas must connect to it. Trigger phrase: Backbone area Memory anchor: All roads lead to Area 0

It is a relationship formed between routers after exchanging hello packets, allowing them to share routing information. Trigger phrase: Hello → adjacency Memory anchor: Routers handshake

OSPF cost determines the best path based on bandwidth, with lower cost paths preferred. Trigger phrase: Lower cost = better path Memory anchor: Faster wins

A passive interface advertises a network without forming neighbor relationships, improving security and reducing unnecessary traffic. Trigger phrase: Advertise, don’t neighbor Memory anchor: Silent but visible

An ACL is a set of rules used to permit or deny traffic based on source, destination, protocol, and port. It is used to control traffic flow and enforce security policies in a network. Trigger phrase: Traffic filtering rules Memory anchor: Traffic gatekeeper

Standard ACLs filter only based on source IP, while extended ACLs filter based on source, destination, protocol, and port, allowing more granular control. Trigger phrase: Standard = source, Extended = detailed Memory anchor: Extended sees everything

The implicit deny rule means that any traffic not explicitly permitted is automatically denied at the end of the ACL. Trigger phrase: Not permitted = denied Memory anchor: If not listed, it’s blocked

ACLs can be applied inbound to filter traffic before routing or outbound to filter traffic after routing, depending on the design goal. Trigger phrase: Inbound = early filter Memory anchor: Stop it early

Port-based filtering allows control over specific services such as HTTP or DNS by matching port numbers, enabling precise access control. Trigger phrase: Port = service Memory anchor: Service equals port

NAT (Network Address Translation) translates private IP addresses into public IP addresses to allow communication with external networks. Trigger phrase: Private → public Memory anchor: Hide internal IPs

PAT (Port Address Translation) allows multiple devices to share a single public IP by using different port numbers. Trigger phrase: One IP, many ports Memory anchor: Many share one

Inside refers to internal private networks, while outside refers to external public networks. Trigger phrase: Inside vs outside Memory anchor: Private vs public

NAT conserves public IP addresses and adds a layer of security by hiding internal network structure. Trigger phrase: IP conservation + security Memory anchor: Hide and save

A VPN creates a secure, encrypted connection over a public network, allowing remote sites to communicate safely. Trigger phrase: Secure tunnel Memory anchor: Private over public

IPsec is a protocol suite that provides encryption and authentication for secure communication over IP networks. Trigger phrase: Encrypt + authenticate Memory anchor: Secure the data

Phase 1 establishes a secure channel using ISAKMP, while Phase 2 defines how data is encrypted using IPsec. Trigger phrase: Phase 1 = tunnel setup, Phase 2 = data protection Memory anchor: Setup then secure

Interesting traffic is traffic that matches ACL rules and is selected to be encrypted and sent through the VPN tunnel. Trigger phrase: Matched traffic gets encrypted Memory anchor: Only selected goes in

QoS is a set of techniques used to manage network traffic by prioritizing certain types of data to ensure reliable performance for critical applications. Trigger phrase: Traffic prioritization Memory anchor: Important traffic goes first

Delay is the time it takes for data to travel, jitter is variation in delay, and packet loss is when packets fail to reach the destination. These affect real-time applications like voice. Trigger phrase: Delay, jitter, loss Memory anchor: Voice hates inconsistency

Traffic classification is the process of identifying and grouping packets based on criteria such as VLAN or ACLs for QoS treatment. Trigger phrase: Identify before prioritize Memory anchor: Know the traffic first

A policy map defines how classified traffic is handled, including bandwidth allocation and priority levels. Trigger phrase: Policy = action Memory anchor: Rules decide treatment

SNMP is a protocol used to monitor and collect information from network devices, such as performance and interface statistics. Trigger phrase: Monitoring protocol Memory anchor: Check device health

Syslog is a logging system that records events and messages generated by network devices for troubleshooting and auditing. Trigger phrase: Event logging Memory anchor: Network diary

NTP synchronizes time across devices, ensuring logs and events are consistent and accurate. Trigger phrase: Time synchronization Memory anchor: Same time, same story

NetFlow is used to analyze traffic flows, providing visibility into bandwidth usage and communication patterns. Trigger phrase: Traffic analysis Memory anchor: Who talks to whom

DNS translates domain names into IP addresses, allowing users to access services using human-readable names. Trigger phrase: Name to IP Memory anchor: Internet phonebook

DHCP automatically assigns IP addresses and network settings to devices, simplifying configuration. Trigger phrase: Automatic IP assignment Memory anchor: No manual setup

Separating servers improves security, centralizes services, and allows controlled access from other VLANs. Trigger phrase: Server isolation Memory anchor: Protect the core