Enterprise IT & Networks Studio

Interactive 13-section enterprise networking reference covering OSI model, Ethernet/VLANs/STP, OSPF/BGP routing, network security, Wi-Fi 6 design, SD-WAN, spine-leaf data center topology, VXLAN/EVPN, and cloud networking.

Interactive 27-section illustrated guide from OSI/TCP-IP fundamentals and IP subnetting through VLANs/STP, campus and spine-leaf data-center architecture, OSPF/BGP routing and ACLs, IT/OT security segmentation, and IP video surveillance design.

Interactive 14-section illustrated guide to MPLS, MPLS-TP, and SR-MPLS transport technologies — dynamic vs. static label-switched paths, label imposition/disposition, label stack types, real SR-MPLS/MPLS-TP/IS-IS configuration examples, and migration to hybrid SR-MPLS networks.

Why a CDN edge cache, an in-memory cache, and a browser cache all face the same tradeoff — TTLs, invalidation, and revalidation checks are the three ways of deciding how stale a cached copy is allowed to get before it has to catch up with the source.

One recipient, every device on the segment, or just the subscribed group — why multicast isn't "broadcast with fewer people," illustrated with a 1,000-viewer live stream sent three different ways.

TCP guarantees reliable, ordered delivery via a handshake and retransmission — but that guarantee can stall. UDP guarantees nothing, which is exactly why live video, VoIP, gaming, and DNS choose it on purpose.

A switch forwards frames by MAC address, entirely within one broadcast domain. A router forwards packets by IP address, between subnets — and re-writes the frame's MAC header at every hop. Neither one can do the other's job.

A switch gives every device its own private, collision-free wire — but it still has to flood a broadcast frame out every other port in the same VLAN. Eliminating collisions and shrinking broadcast domains are two different jobs, and only VLANs do the second one.

Latency is a physics-imposed time delay set by distance. Bandwidth is a theoretical capacity ceiling. Throughput is what you actually get — and the bandwidth-delay product shows why high latency caps it even on a fast, wide-open pipe.

Basic one-to-one NAT still needs roughly one public IP per device. PAT (NAT overload) adds port numbers as a second dimension, letting an entire office share just one public IP — which is what most routers are actually running.

An access port hands a device plain, untagged frames and quietly does the VLAN bookkeeping itself. A trunk port carries several VLANs over one wire at once, using 802.1Q tags to keep them straight — plug the wrong device into the wrong one and connectivity breaks immediately.

A static route keeps pointing at a dead link forever, blind to the failure, until an engineer fixes it by hand. A dynamic protocol like OSPF or BGP detects the same failure and converges on a new path automatically — at the cost of overhead, complexity, and its own failure modes that a static route never has to pay.

A pure Layer 2 switch can't move traffic between VLANs at all without an external router. A Layer 3 switch routes between VLANs itself, in its own ASIC, at wire speed — no extra hop, no round trip up a trunk link and back.

A VLAN is a Layer 2 broadcast-domain boundary enforced by switch ports and 802.1Q tags. A subnet is a Layer 3 IP addressing boundary enforced by network address and mask. The 1:1 mapping between them is a design convention, not a protocol requirement.

A single-mode core is narrow enough for only one light path — long reach on a precise laser. A multi-mode core is wide enough for several paths at once, capping distance via modal dispersion but enabling cheap LED/VCSEL transceivers built for exactly the distances a data center actually needs.

Learn how to design, implement, secure, troubleshoot, and maintain enterprise computer networks using real-world architectures and industry best practices. 19 modules from fundamentals through certification, 5 complete real-project design packages (corporate headquarters, hospital, manufacturing plant, data center, university campus), a 12-template documentation kit, and a certificate of completion. One-time $4.99 purchase, no account required.