Computer
Networking
Skills
01
Network
Fundamentals
&
Models
12
skills
02
Routing
&
Switching
14
skills
03
Protocols
&
Network
Services
13
skills
OSI
7-
layer
reference
model
TCP
/
IP
protocol
stack
Ethernet
(
IEEE
802.3) &
frame
structure
MAC
addressing
&
layer
-2
forwarding
IPv
4
addressing
&
subnetting
IPv
6
addressing
&
dual
-
stack
CIDR
notation
&
VLSM
ARP
,
NDP
&
ICMP
Network
topologies
(
star
,
mesh
,
spine
-
leaf
)
Duplex
,
MTU
&
frame
fragmentation
Bandwidth
,
throughput
&
goodput
Latency
,
jitter
&
packet
loss
analysis
Static
routing
&
default
gateways
Routing
tables
&
longest
-
prefix
match
OSPF
(
v
2 /
v
3)
single
- &
multi
-
area
EIGRP
&
advanced
distance
-
vector
concepts
BGP
—
eBGP
,
iBGP
,
path
selection
IS
-
IS
&
RIP
(
v
1/
v
2/
ng
)
Route
redistribution
,
summarization
&
filtering
VLANs
, 802.1
Q
trunking
&
native
VLANs
Inter
-
VLAN
routing
(
SVI
&
router
-
on
-
a
-
stick
)
Spanning
Tree
—
STP
,
RSTP
,
MSTP
EtherChannel
/
LACP
/
PAgP
First
-
hop
redundancy
—
HSRP
,
VRRP
,
GLBP
MPLS
,
L
3
VPN
&
VRF
-
lite
Segment
routing
&
traffic
engineering
TCP
—
handshake
,
flow
&
congestion
control
UDP
&
real
-
time
transport
Port
numbers
&
socket
management
DNS
—
records
,
resolution
,
split
-
horizon
DHCP
&
DHCP
relay
/
option
82
HTTP
,
HTTPS
&
TLS
/
SSL
handshakes
HTTP
/2
and
HTTP
/3 (
QUIC
)
NAT
&
PAT
/
NAT
overload
FTP
,
SFTP
,
TFTP
&
file
transfer
services
SMTP
,
IMAP
&
POP
3
mail
flow
SNMP
v
2
c
/
v
3 &
MIB
structure
NTP
/
PTP
time
synchronization
SIP
,
RTP
&
VoIP
media
flow
1 / 4
04
Network
Security
15
skills
05
Wireless
&
Mobility
10
skills
06
Cloud
,
Virtualization
&
Data
Center
14
skills
07
Network
Automation
&
Programmability
13
skills
Access
control
lists
(
standard
&
extended
)
Stateful
firewalls
&
next
-
gen
firewalls
(
NGFW
)
Security
zones
&
DMZ
design
IPsec
VPN
—
IKEv
1/
IKEv
2,
site
-
to
-
site
Remote
-
access
VPN
&
SSL
/
TLS
VPN
DMVPN
&
dynamic
multipoint
topologies
Zero
Trust
Network
Access
(
ZTNA
)
SASE
&
secure
web
gateway
(
SWG
)
IDS
/
IPS
&
deep
packet
inspection
Web
application
firewalls
(
WAF
)
802.1
X
,
NAC
&
port
security
AAA
—
RADIUS
&
TACACS
+
PKI
,
digital
certificates
&
TLS
trust
chains
Encryption
standards
—
AES
,
RSA
,
ECC
,
IPsec
suites
DDoS
mitigation
&
network
segmentation
IEEE
802.11
a
/
b
/
g
/
n
/
ac
/
ax
(
Wi
-
Fi
6 / 6
E
)
Wi
-
Fi
7 (802.11
be
) &
multi
-
link
operation
WLAN
controllers
&
CAPWAP
tunnels
Autonomous
vs
.
lightweight
access
points
Roaming
—
L
2/
L
3
fast
transition
(802.11
r
/
k
/
v
)
RF
site
surveys
&
channel
planning
WPA
2 /
WPA
3 & 802.1
X
EAP
methods
Guest
,
BYOD
&
captive
-
portal
networks
Cellular
— 4
G
LTE
, 5
G
NR
&
private
5
G
IoT
and
LPWAN
connectivity
(
LoRa
,
NB
-
IoT
)
VPC
/
VNet
design
&
subnet
planning
Cloud
security
groups
&
network
ACLs
Route
tables
,
NAT
gateways
&
internet
gateways
Hybrid
connectivity
—
Direct
Connect
,
ExpressRoute
Transit
Gateway
&
hub
-
and
-
spoke
cloud
topologies
SDN
&
controller
-
based
networking
Network
functions
virtualization
(
NFV
)
VXLAN
,
EVPN
&
overlay
/
underlay
networking
Spine
-
leaf
fabric
architecture
Leaf
-
spine
routing
&
ECMP
Load
balancing
—
L
4
vs
.
L
7,
GSLB
CDN
configuration
&
edge
caching
Kubernetes
networking
&
CNI
plugins
Service
mesh
&
container
overlay
networks
Python
for
network
automation
Netmiko
,
NAPALM
&
Nornir
frameworks
Ansible
network
modules
&
playbooks
Terraform
for
network
infrastructure
as
code
REST
APIs
&
SDK
-
based
integrations
NETCONF
&
RESTCONF
YANG
data
models
Model
-
driven
telemetry
(
gNMI
/
gRPC
)
JSON
,
YAML
&
XML
data
serialization
Jinja
2
configuration
templating
Git
version
control
&
CI
/
CD
pipelines
Intent
-
based
networking
(
IBN
)
Infrastructure
as
code
&
config
drift
remediation
2 / 4
08
Monitoring
,
Performance
&
Troubleshooting
14
skills
09
Network
Design
&
Architecture
12
skills
10
Hardware
,
Cabling
&
Physical
Layer
10
skills
11
Vendors
&
Platforms
14
platforms
Cisco
IOS
/
IOS
-
XE
Cisco
NX
-
OS
Cisco
Catalyst
Cisco
Nexus
Juniper
Junos
Arista
EOS
Palo
Alto
PAN
-
OS
Fortinet
FortiOS
F
5
BIG
-
IP
Cisco
Meraki
AWS
Networking
Azure
Virtual
Network
VMware
NSX
Cisco
ACI
Wireshark
packet
capture
&
analysis
tcpdump
&
command
-
line
capture
Flow
analysis
—
NetFlow
,
sFlow
,
IPFIX
SNMP
polling
&
trap
-
based
monitoring
Syslog
collection
&
correlation
SolarWinds
NPM
&
network
monitoring
suites
PRTG
,
Nagios
&
Zabbix
Grafana
&
Prometheus
dashboards
ELK
/
Splunk
log
analytics
Network
baselining
&
capacity
trending
Performance
testing
with
iperf
3
Path
analysis
—
traceroute
,
MTR
,
ping
sweeps
Root
-
cause
analysis
&
incident
documentation
Structured
troubleshooting
methodology
Hierarchical
design
(
core
/
distribution
/
access
)
Collapsed
-
core
&
three
-
tier
topologies
High
availability
&
redundancy
design
WAN
design
&
carrier
circuit
selection
SD
-
WAN
(
Viptela
,
VeloCloud
,
Fortinet
)
QoS
—
classification
,
marking
,
queuing
Traffic
shaping
&
policing
IPv
6
migration
planning
Multicast
design
(
IGMP
,
PIM
-
SM
)
IP
address
management
(
IPAM
)
Network
documentation
&
topology
diagrams
Disaster
recovery
&
failover
testing
Structured
cabling
(
Cat
5
e
/
Cat
6 /
Cat
6
a
)
Fiber
optics
—
single
-
mode
&
multimode
SFP
/
QSFP
transceiver
selection
Patch
panels
,
MDF
/
IDF
&
cable
management
PoE
/
PoE
+ /
PoE
++
power
budgeting
Rack
&
stack
installation
Console
,
rollover
&
crossover
cabling
Cable
testing
&
certification
(
TDR
/
OTDR
)
Switch
,
router
&
firewall
hardware
platforms
Power
redundancy
&
UPS
planning
3 / 4
12
Certifications
&
Frameworks
10
credentials
CompTIA
Network
+
Cisco
CCNA
Cisco
CCNP
Enterprise
/
Security
/
Data
Center
Cisco
CCIE
(
Enterprise
Infrastructure
)
Juniper
JNCIA
/
JNCIS
/
JNCIP
AWS
Certified
Advanced
Networking
—
Specialty
Palo
Alto
Networks
PCNSE
CCNP
Security
/
Fortinet
NSE
certifications
ITIL
service
management
fundamentals
NIST
CSF
&
ISO
27001
network
controls
4 / 4
