A 27-section interactive guide to enterprise networking — from the OSI and TCP/IP reference models and IP addressing/subnetting fundamentals, through VLANs and Spanning Tree, campus and spine-leaf data-center architecture, OSPF/BGP routing and access control lists, IT/OT network security segmentation, and IP video surveillance system design. Every topic pairs a written explanation with its own full-size infographic slide.
Part A (Chapters 1–4) builds the foundation: the OSI seven-layer model, how OSI and TCP/IP relate, the TCP/IP four-layer reference, and the TCP three-way handshake and connection termination. Part B (5–8) covers IP addressing: IPv4 structure, subnetting fundamentals, a complete CIDR cheat sheet, and RFC 1918 private ranges. Part C (9–11) covers switching: VLAN port assignments, 802.1Q trunking, and Spanning Tree Protocol. Part D (12–19) covers architecture: SDN, three-tier campus hierarchy, spine-leaf and VXLAN data-center fabric, east-west vs. north-south traffic, and dual-ISP redundant edge design. Part E (20–22) covers routing and filtering: OSPF neighbor states and DR/BDR election, BGP best-path selection, and ACL processing logic. Part F (23–25) covers security: defense-in-depth layers and IT/OT network segmentation. Part G (26–27) covers IP video surveillance system architecture and enterprise CCTV network design.
Use the Prev / Next buttons at the bottom, or press the arrow keys on your keyboard. Click the ☰ menu button in the top-right to open the table of contents and jump to any of the 27 chapters. Each chapter's text explanation is immediately followed by its own dedicated, full-size figure slide, so every diagram, table, and callout stays fully legible before you move to the next topic.
Network engineers and IT infrastructure professionals who want a structured visual reference for enterprise networking fundamentals and architecture; students and certification candidates (Network+, CCNA, CCNP) studying the OSI/TCP-IP models, subnetting, VLANs, spanning tree, and routing protocol fundamentals; and building/security systems designers who need to understand how IT, OT/building-automation, and IP video surveillance traffic should be segmented on a converged network.
The OSI model is a 7-layer conceptual reference (Application, Presentation, Session, Transport, Network, Data Link, Physical) used mainly for teaching and troubleshooting. The TCP/IP model is the 4-layer model the internet protocol suite actually implements, combining OSI's top three layers into one Application layer and its bottom two into one Network Access layer. Both describe the same underlying communication at different levels of granularity.
CIDR notation (like /24) specifies how many of an IPv4 address's 32 bits form the network portion, with the rest identifying the host. Subnetting divides a larger address block into smaller subnets to match actual host-count needs; usable hosts per subnet equal 2^(host bits) minus 2. The guide includes a complete CIDR reference table from /1 to /32 with subnet masks, wildcard masks, and usable host counts.
A VLAN is a logical broadcast domain configured on a switch, letting traffic be segmented by function (data, voice, management, guest) independent of physical wiring, with 802.1Q trunk links tagging frames so multiple VLANs share one physical uplink. Spanning Tree Protocol prevents Layer-2 loops on networks with redundant switch links by electing a root bridge and blocking just enough ports to keep the topology loop-free while preserving redundancy.
Data-center traffic is overwhelmingly server-to-server (east-west) rather than client-to-server (north-south), and three-tier's core-distribution-access hierarchy forces east-west traffic to hairpin through multiple tiers. Spine-leaf flattens the design to two tiers with every leaf switch meshed to every spine switch, guaranteeing a constant 2-hop latency between any two leaves and enabling ECMP load balancing, which is why it has become the standard for modern data centers running VXLAN overlays.
Operational technology such as building automation, HVAC controls, and IP video surveillance typically runs on less-hardened devices than IT endpoints, so it should sit on its own dedicated VLAN or subnet, separated from the corporate network by a firewall that enforces exactly which hosts and protocols may cross the boundary, following defense-in-depth principles — layered perimeter, network, host, application, and data controls — rather than one flat network shared by both.
Disclaimer: This guide summarizes general enterprise networking concepts for educational purposes only. Always consult current vendor documentation, applicable standards (IEEE, IETF RFCs, TIA), and a qualified network engineer for actual network design, security architecture, and implementation decisions.