Password Policies and MFA for Network Devices
Harden the login prompt on Cisco IOS XE: the password-type hierarchy, minimum length enforcement, brute-force lockout, and where MFA fits, including a real brute-force attempt hitting a lab router.
Harden the login prompt on Cisco IOS XE: the password-type hierarchy, minimum length enforcement, brute-force lockout, and where MFA fits, including a real brute-force attempt hitting a lab router.
Threat, vulnerability, exploit, mitigation: CCNA domain 5 hinges on keeping these terms straight. This article pins down each one, walks the attack categories the exam expects, and maps each attack to the Cisco technology that stops it.
Next-hop, exit-interface, and fully specified static routes on Cisco IOS XE, plus default, floating, and host routes. Configured in a live lab with the failure modes shown, including recursion and administrative distance gotchas.
Before administrative distance or metric ever matters, a router forwards on the most specific route containing the destination. This article proves longest prefix match on a live Cisco IOS XE router and clears up which route actually wins.
Administrative distance ranks how much a router trusts each source of routing information, and it is the reason a prefix installs via EIGRP when you expected OSPF. Here is the complete default table, the floating static design that depends on it, and a real CML capture of the same prefix...
Read show ip route line by line: which protocol installed each route, the administrative distance and metric, how long the route has been stable, and which interface the packet leaves through, with real captures from IOS XE.
CDP and LLDP both announce a device to its directly connected neighbors, and you can map a network from their output alone. Compare what each protocol sees on the same wire in a live IOS XE lab, and when to run both or turn them off.
Half of network-down tickets end at the client. Verify IP address, mask, gateway, and DNS on Windows, macOS, and Linux with the exact commands for each, including live output from a real Debian host.
Server virtualization, containers, and VRFs all isolate multiple things on one piece of hardware, each at a different layer. Covers all three for CCNA objective 1.12 and proves the VRF case with the same IP address configured twice on one live router.
PoE delivers DC power over the same twisted pair that carries data. Covers the standards, wattage classes, how negotiation works, and what happens when the switch power budget runs out, for CCNA objective 1.3.
The three RFC 1918 blocks, the rules that come with them, and why private addresses need NAT. Includes a live packet's journey from a private host through PAT to a real machine, captured in the Network Fundamentals lab.
Two-tier and three-tier campus models, spine-leaf in the data center, and where SOHO, WAN, and cloud designs fit. CCNA exam objective 1.2 and the vocabulary every design conversation assumes you already know.