Enterprise Networking: Switching, Routing, and Virtualization at Scale
Beyond a Single LAN
Multi-site thinking
Enterprise networks often span offices, data centers, remote users, and cloud services. This creates requirements for segmentation, policy enforcement, and predictable interconnects.
Virtualization in networks
Network virtualization allows multiple logical networks or services to share the same hardware while remaining isolated by policy and addressing.
Common enterprise building blocks
VLANs, routing, firewalls, VPNs, load balancers, and SD-WAN components are combined to create resilient and manageable topologies.
Physical vs logical topology
Physical topology
- How devices and cables are actually connected
- Important for redundancy and cabling
- Can differ from traffic flow
Logical topology
- How traffic and policy behave
- Defined by VLANs, routing, and overlays
- Important for segmentation and services
Why do enterprises often use VLANs and routed boundaries together?
VLANs isolate groups, while routing can connect them in a controlled way.
Correct answer: To segment traffic while still enabling controlled communication
What problem does SD-WAN aim to solve at a high level?
SD-WAN abstracts WAN selection and management across sites.
Correct answer: It simplifies branch connectivity and policy across multiple WAN links
Design priorities for an enterprise branch
-
1
Step 1: Identify critical applications and user groups.
-
2
Step 2: Separate traffic into appropriate segments.
-
3
Step 3: Provide redundant internet or WAN paths where needed.
-
4
Step 4: Apply security and monitoring consistently.
Which component most directly controls traffic entering or leaving a trust boundary?
Firewalls enforce rules at network boundaries.
Correct answer: Firewall policy