Subnetting on Layer 2 architecture

Convert between dotted-decimal subnet masks and CIDR notation for all prefix lengths.

Calculate the network address and broadcast address for a given IP address and subnet mask.

Determine the number of usable host addresses for any given CIDR prefix.

Identify the valid host IP address range for any given subnet.

Rapidly determine the block size and starting addresses for common prefixes (/25, /26, /27, etc.) without a calculator.

Explain how Variable Length Subnet Masking (VLSM) minimizes address waste compared to a fixed-size scheme.

Given a set of host requirements, determine the optimal CIDR prefix for each network segment.

Develop a VLSM allocation plan by ordering segments from largest to smallest and assigning non-overlapping subnets from a parent block.

Document the VLSM plan, including network address, prefix, usable range, and broadcast address for each subnet.

Calculate address utilization efficiency for a given VLSM plan.

Plan subnets for point-to-point links using /30 or /31 prefixes.

Explain how VLANs create separate Layer 2 broadcast domains.

Describe the benefits of VLAN segmentation for performance (broadcast reduction) and security (traffic isolation).

Develop a VLAN strategy for a large network based on user function, location, and security requirements.

Define criteria for creating special-purpose VLANs, such as for servers, voice traffic, wireless, and network management.

Estimate host address requirements for each planned VLAN, accounting for future growth.

Explain the 1:1 relationship between a VLAN and an IP subnet.

Design the structure of an IP Address Management (IPAM) document for a large network.

Populate an IPAM document by mapping a VLAN plan to a VLSM allocation.

Assign a default gateway IP address for each subnet/VLAN within the IPAM document.

Verify the IPAM plan for completeness and absence of overlapping allocations.

Explain the function of a Switched Virtual Interface (SVI) as a VLAN's Layer 3 gateway.

Describe the role of a core or distribution layer L3 switch in routing traffic between VLANs.

Trace the packet flow for a host in one VLAN communicating with a host in another VLAN via an L3 switch.

Plan SVI placement and IP addressing in a multi-switch L3 topology.

Designate the appropriate default gateway for hosts within a VLAN.

Explain how Access Control Lists (ACLs) filter traffic between subnets at the SVI.

Translate a written security policy into a sequence of ACL permit/deny statements.

Describe the importance of statement order and the implicit 'deny all' in an ACL.

Apply an ACL to an SVI in the correct direction (inbound/outbound) to enforce a security policy.

Design and apply an ACL to restrict access to the dedicated network management VLAN.

Explain the purpose of route summarization in reducing the size of routing tables.

Given a hierarchical IP addressing plan, create a summary route that covers multiple subnets.

Describe how Virtual Routing and Forwarding (VRF-Lite) creates isolated virtual routers within a single physical switch.

Design a two-VRF topology to separate internal corporate traffic from guest/internet-only traffic.

Plan the assignment of VLANs, SVIs, and physical interfaces to their respective VRFs.

Translate a set of business requirements (locations, departments, user counts, security needs) into a technical requirements document.

Produce a complete VLAN plan based on the technical requirements.

Develop a hierarchical VLSM addressing plan for the entire enterprise from a given address block.

Create a comprehensive IPAM document mapping all VLANs to their assigned subnets and gateways.

Define the L3 routing topology, including SVI placement and IP assignments.

Design the inter-VLAN security policies using ACLs.

Integrate a VRF design to meet traffic separation requirements.

Compile all design artifacts (VLAN plan, IPAM sheet, ACL policy, topology diagram) into a final project document.

Analyze a sample network design's documentation to identify its IP addressing scheme, VLAN structure, and security policies.

Critique the efficiency of a given address allocation plan using VLSM principles and calculate potential address savings.

Identify security gaps or inefficiencies in a sample architecture's VLAN and ACL implementation.

Assess the scalability and summarization potential of a given IP addressing plan.