updated

2026-06-17 12:39:42 +02:00
parent 927528a34b
commit ed7b31a69e
371 changed files with 18594 additions and 16607 deletions
@@ -0,0 +1,40 @@
+VLAN tagging IEEE 802.1Q and trunk port configuration
+VLAN segregation for DMZ management and guest networks
+VLAN access control lists VACL for inter-VLAN filtering
+VLAN pruning and VTP VLAN trunking protocol
+VLAN hopping attack prevention and security best practices
+DMZ design patterns: single firewall dual firewall triple-homed
+DMZ service isolation for web mail and application servers
+DMZ reverse proxy architecture for secure service exposure
+Zero Trust network access ZTNA architecture principles
+Zero Trust micro-segmentation for workload isolation
+Zero Trust identity-aware firewall policy enforcement
+Zero Trust least privilege access and just-in-time JIT access
+SD-WAN architecture and policy-based routing
+SD-WAN application-aware path selection
+SD-WAN bonded links and failover configuration
+Network segmentation for PCI DSS and compliance zones
+Network Access Control NAC for device authentication
+802.1X port-based authentication for wired networks
+RADIUS and TACACS+ authentication server configuration
+DNS security with DNSSEC validation and signing
+DNS sinkhole for malware domain blocking
+DNS over HTTPS DoH and DNS over TLS DoT configuration
+BGP routing protocol configuration for multi-homed networks
+OSPF area design and route summarization
+Policy-based routing for traffic engineering
+IP SLA tracking for route failover and path monitoring
+Switch port security MAC limiting and sticky learning
+Storm control broadcast multicast unknown unicast
+DHCP snooping and dynamic ARP inspection
+IP source guard and port security for access layer
+VRRP and HSRP first-hop redundancy protocol configuration
+Spanning Tree Protocol STP and Rapid PVST+ tuning
+EtherChannel LACP link aggregation for bandwidth and redundancy
+NetFlow and sFlow traffic analysis for network visibility
+Network taps and SPAN port configuration for monitoring
+Packet broker and aggregator for security tool chaining
+GRE tunnels and IP-IP encapsulation
+VXLAN overlay networking for data center fabrics
+EVPN VXLAN for multi-tenant network virtualization
+MPLS label switching and L3VPN architecture