frostyripper1
41 lines
2.0 KiB
Plaintext
41 lines
2.0 KiB
Plaintext
VLAN tagging IEEE 802.1Q and trunk port configuration
|
|
VLAN segregation for DMZ management and guest networks
|
|
VLAN access control lists VACL for inter-VLAN filtering
|
|
VLAN pruning and VTP VLAN trunking protocol
|
|
VLAN hopping attack prevention and security best practices
|
|
DMZ design patterns: single firewall dual firewall triple-homed
|
|
DMZ service isolation for web mail and application servers
|
|
DMZ reverse proxy architecture for secure service exposure
|
|
Zero Trust network access ZTNA architecture principles
|
|
Zero Trust micro-segmentation for workload isolation
|
|
Zero Trust identity-aware firewall policy enforcement
|
|
Zero Trust least privilege access and just-in-time JIT access
|
|
SD-WAN architecture and policy-based routing
|
|
SD-WAN application-aware path selection
|
|
SD-WAN bonded links and failover configuration
|
|
Network segmentation for PCI DSS and compliance zones
|
|
Network Access Control NAC for device authentication
|
|
802.1X port-based authentication for wired networks
|
|
RADIUS and TACACS+ authentication server configuration
|
|
DNS security with DNSSEC validation and signing
|
|
DNS sinkhole for malware domain blocking
|
|
DNS over HTTPS DoH and DNS over TLS DoT configuration
|
|
BGP routing protocol configuration for multi-homed networks
|
|
OSPF area design and route summarization
|
|
Policy-based routing for traffic engineering
|
|
IP SLA tracking for route failover and path monitoring
|
|
Switch port security MAC limiting and sticky learning
|
|
Storm control broadcast multicast unknown unicast
|
|
DHCP snooping and dynamic ARP inspection
|
|
IP source guard and port security for access layer
|
|
VRRP and HSRP first-hop redundancy protocol configuration
|
|
Spanning Tree Protocol STP and Rapid PVST+ tuning
|
|
EtherChannel LACP link aggregation for bandwidth and redundancy
|
|
NetFlow and sFlow traffic analysis for network visibility
|
|
Network taps and SPAN port configuration for monitoring
|
|
Packet broker and aggregator for security tool chaining
|
|
GRE tunnels and IP-IP encapsulation
|
|
VXLAN overlay networking for data center fabrics
|
|
EVPN VXLAN for multi-tenant network virtualization
|
|
MPLS label switching and L3VPN architecture
|