Learn how to design, implement, secure, troubleshoot, and maintain enterprise computer networks using real-world architectures and industry best practices. 19 modules from fundamentals through certification, 5 complete real-project design packages (corporate headquarters, hospital, manufacturing plant, data center, university campus), a 12-template documentation kit, and a certificate of completion. One-time purchase, no account required.
Explore the Full Curriculum →Why a CDN edge cache, an in-memory cache, and a browser cache all face the same tradeoff — TTLs, invalidation, and revalidation checks are the three ways of deciding how stale a cached copy is allowed to get before it has to catch up with the source.
One recipient, every device on the segment, or just the subscribed group — why multicast isn't "broadcast with fewer people," illustrated with a 1,000-viewer live stream sent three different ways.
TCP guarantees reliable, ordered delivery via a handshake and retransmission — but that guarantee can stall. UDP guarantees nothing, which is exactly why live video, VoIP, gaming, and DNS choose it on purpose.
A switch forwards frames by MAC address, entirely within one broadcast domain. A router forwards packets by IP address, between subnets — and re-writes the frame's MAC header at every hop. Neither one can do the other's job.
A switch gives every device its own private, collision-free wire — but it still has to flood a broadcast frame out every other port in the same VLAN. Eliminating collisions and shrinking broadcast domains are two different jobs, and only VLANs do the second one.
Latency is a physics-imposed time delay set by distance. Bandwidth is a theoretical capacity ceiling. Throughput is what you actually get — and the bandwidth-delay product shows why high latency caps it even on a fast, wide-open pipe.
Basic one-to-one NAT still needs roughly one public IP per device. PAT (NAT overload) adds port numbers as a second dimension, letting an entire office share just one public IP — which is what most routers are actually running.
An access port hands a device plain, untagged frames and quietly does the VLAN bookkeeping itself. A trunk port carries several VLANs over one wire at once, using 802.1Q tags to keep them straight — plug the wrong device into the wrong one and connectivity breaks immediately.
A static route keeps pointing at a dead link forever, blind to the failure, until an engineer fixes it by hand. A dynamic protocol like OSPF or BGP detects the same failure and converges on a new path automatically — at the cost of overhead, complexity, and its own failure modes that a static route never has to pay.
A pure Layer 2 switch can't move traffic between VLANs at all without an external router. A Layer 3 switch routes between VLANs itself, in its own ASIC, at wire speed — no extra hop, no round trip up a trunk link and back.
A VLAN is a Layer 2 broadcast-domain boundary enforced by switch ports and 802.1Q tags. A subnet is a Layer 3 IP addressing boundary enforced by network address and mask. The 1:1 mapping between them is a design convention, not a protocol requirement.
A single-mode core is narrow enough for only one light path — long reach on a precise laser. A multi-mode core is wide enough for several paths at once, capping distance via modal dispersion but enabling cheap LED/VCSEL transceivers built for exactly the distances a data center actually needs.
Most engineers start with CompTIA Network+ for vendor-neutral fundamentals, then Cisco CCNA for the most widely recognized associate-level networking certification. From there you can pursue CCNP and specialize.
Yes — most do. CompTIA and Cisco certifications are typically valid for three years and must be renewed through continuing education or by passing a current exam.
RCDD (Registered Communications Distribution Designer) is the premier credential for designing structured cabling and telecommunications infrastructure — pathways, spaces, bonding/grounding and data centers per TIA/ISO standards.
CISSP requires five years of cumulative paid work experience across at least two of its eight domains (one year can be waived with a relevant degree or approved certification). You can pass the exam first and become an Associate of (ISC)² while you accrue experience.
Interactive 13-section enterprise networking reference covering OSI model, Ethernet/VLANs/STP, OSPF/BGP routing, network security, Wi-Fi 6 design, SD-WAN, spine-leaf data center topology, VXLAN/EVPN, and cloud networking. First 3 free to preview.
Interactive 27-section illustrated guide from OSI/TCP-IP fundamentals and IP subnetting through VLANs/STP, campus and spine-leaf data-center architecture, OSPF/BGP routing and ACLs, IT/OT security segmentation, and IP video surveillance design. First 3 free to preview.
Interactive 14-section illustrated guide to MPLS, MPLS-TP, and SR-MPLS transport technologies — dynamic vs. static label-switched paths, label imposition/disposition, label stack types, real SR-MPLS/MPLS-TP/IS-IS configuration examples, and migration to hybrid SR-MPLS networks. First 3 free to preview.
Zoomable 41-sheet real-project enterprise Wi-Fi deployment drawing set — architectural floor plans, AP layout and RF coverage/heat maps, cabling and low-voltage riser diagrams, network topology, device schedules, and installation details. Sheets 1-5 free to preview.