Octet

Configuration labs

Switching and VLANs

  1. Route between two VLANs with one router interfaceCisco IOSCore

IPv6

  1. Configure a dual-stack router LAN and WANCisco IOSCore
  2. Give a LAN SLAAC addresses with DNS from stateless DHCPv6Cisco IOSWorking

Routing fundamentals

  1. Dual ISP failover with a tracked default and a floating staticCisco IOSWorking

EIGRP, RIP and IS-IS

  1. Build a two-area IS-IS network with L1, L1/L2 and L2 routersCisco IOSWorking
  2. Build EIGRP named mode with SHA-256 authentication and passive interfacesCisco IOSWorking
  3. Make routed access switches EIGRP stubs and summarize the block at distributionCisco IOSWorking
  4. Load share over a 200 Mbps and a 100 Mbps WAN circuit with EIGRP varianceCisco IOSExpert

IP services

  1. Serve DHCP to a local and a remote subnet from one IOS routerCisco IOSCore
  2. Give users internet access with PAT and publish two servers with static NATCisco IOSWorking

TCP, UDP and applications

  1. Capture a TCP connection from SYN to TIME_WAIT and read every numberLinuxCore
  2. Serve a full certificate chain over TLS 1.3 and check it with openssl and curlLinuxWorking
  3. Set the IP MTU on a GRE tunnel and clamp TCP MSS so large transfers workCisco IOSWorking
  4. Size Linux TCP buffers for a 1 Gbit/s path with 60 ms RTTLinuxWorking

Network security

  1. Filter staff and guest traffic at a branch router with extended ACLsCisco IOSCore
  2. Build an inside, DMZ and outside policy with the IOS zone-based firewallCisco IOSWorking
  3. Configure 802.1X with MAB fallback on a switch port using RADIUSCisco IOSWorking
  4. Protect an access VLAN with DHCP snooping, DAI and IP Source GuardCisco IOSWorking

VPNs and tunnels

  1. Build a site-to-site IKEv2 VPN with a static VTICisco IOSWorking
  2. Join two LANs with a WireGuard site-to-site tunnel on LinuxLinuxWorking
  3. Run OSPF across a GRE over IPsec tunnel with IKEv1Cisco IOSWorking
  4. Build DMVPN phase 3 with one hub and two spokesCisco IOSExpert

Data center

  1. Build a vPC pair and dual-home a server with LACPNX-OSWorking
  2. Build an eBGP underlay for a two-spine, two-leaf fabricNX-OSWorking
  3. Configure a VXLAN BGP EVPN leaf with an anycast gatewayNX-OSExpert

Automation and SDN

  1. Back up device configs with a Netmiko scriptPythonCore
  2. Render switch interface configs from YAML with a Jinja2 templatePythonCore
  3. Push VLANs to access switches with an Ansible resource moduleAnsibleWorking
  4. Read and change an IOS-XE interface with RESTCONF and curlCisco IOSWorking

Cloud networking

  1. Build a two-AZ VPC with public and private subnets using the AWS CLIAWSCore
  2. Build an AWS site-to-site VPN with BGP to an IOS-XE routerAWSWorking
  3. Connect two Azure spokes through a hub firewall with peering and UDRsAzureWorking
  4. Write web and app security groups plus a private subnet NACL in TerraformAWSWorking

Linux networking

  1. Bond two NICs with LACP and run VLAN interfaces on top with netplanLinuxWorking
  2. Build a NAT router with a port forward in iptables, then in nftablesLinuxWorking
  3. Build a two-host network inside one Linux box with namespaces, veth and a bridgeLinuxWorking
  4. Make a dual-homed Linux server answer on both ISP links with policy routingLinuxExpert

Troubleshooting

  1. Mirror a port locally, across switches with RSPAN, and over IP with ERSPANCisco IOSWorking
  2. Prove what a router receives and sends with Embedded Packet CaptureCisco IOSWorking
  3. Catch an intermittent WAN drop with IP SLA, tracking and EEMCisco IOSExpert

Network design

  1. Build a multi-site addressing plan and advertise one summary per siteCisco IOSWorking
  2. Fail over between two ISPs with IP SLA and a tracked default routeCisco IOSWorking
  3. Replace a distribution switch with a runbook, pre and post checks and a rollbackCisco IOSWorking