Cheat sheet · Specialise
Network engineering cheat sheet (Cloud networking)
Opens with creditsFor students and early-career engineers heading into cloud networking: the same routing, subnetting and security basics every network needs, then VPCs, route tables, security groups, hybrid VPNs and network code. Commands are Cisco IOS for the labs and the AWS CLI for the cloud.
Chapters
10 chapters · 74 concepts
1Models, addressing and subnettingHow data moves through the layers, the ports you will see every day, IPv4 and IPv6 addressing, and the subnetting maths every other stage depends on.10 concepts
- 1OSI and TCP/IP modelsTwo ways to split networking into layers.
- 2TCP vs UDPThe two main transport protocols.
- 3Common port numbersThe numbers that identify a service on a host.
- 4IPv4 addresses and CIDR prefixesAn IPv4 address is 32 bits written as four numbers from 0 to 255.
- 5Subnetting tableThe prefixes you meet most, with their masks, block sizes and usable hosts.
- 6VLSMCarving one block into subnets of different sizes, largest first, so each LAN, link and loopback gets only the addresses it needs.
- 7IPv6 addressingIPv6 addresses are 128 bits written in hex groups, such as 2001:db8:10::1/64.
- 8ARPThe IPv4 protocol that finds the MAC address for an IP address on the local network by broadcasting a question and caching the answer.
- 9DHCP and DHCP relayDHCP hands clients an address, mask, gateway and DNS servers through Discover, Offer, Request, Acknowledge.
- 10DNS recordsDNS turns names into addresses.
10 in this chapterOpen this chapter2Switching and VLANsHow switches learn and forward frames, how VLANs and trunks split one physical network into many, and the loop protection that keeps a campus network alive.8 concepts
- 1MAC address tableThe switch table mapping each MAC address to the port it was last seen on.
- 2VLANA VLAN splits one switch, or many, into separate Layer 2 networks.
- 3Trunks and 802.1QA trunk carries many VLANs over one link by adding a 4-byte 802.1Q tag with the VLAN number to each frame.
- 4Inter-VLAN routingHosts in different VLANs need a router to talk.
- 5Spanning Tree ProtocolSTP stops loops in a switched network by electing a root bridge and blocking redundant paths.
- 6PortFast, BPDU Guard and Root GuardPortFast puts an access port straight into forwarding.
- 7EtherChannel and LACPBundling several physical links into one logical link.
- 8CDP and LLDPDiscovery protocols that let directly connected devices announce their name, model, port and address.
8 in this chapterOpen this chapter- Routing: static, OSPF and BGPHow a router chooses where a packet goes, static and default routes, OSPF inside an organisation, BGP between organisations, and gateway redundancy.9 conceptsOpens with credits
- Labs, the CLI and troubleshooting toolsThe simulators and emulators you practise on, how the Cisco command line is organised, and the show, ping, traceroute and capture tools that turn guesses into evidence.7 conceptsOpens with credits
- Certification planWhat the CCNA exam covers now and after its February 2027 refresh, where other certifications fit, and how to turn a blueprint into a study plan you finish.5 conceptsOpens with credits
- Network security: ACLs, firewalls and VPNsFiltering traffic with ACLs, translating addresses, locking down switch ports and device access, stateful firewalls and the VPNs that join sites and users.8 conceptsOpens with credits
- Wireless networkingWi-Fi standards, bands and channels, how controllers manage access points, the security protocols to choose and why wireless problems are so often radio problems.5 conceptsOpens with credits
- Network automation and monitoringPython and Ansible for repeatable changes, APIs and structured data, and the SNMP, syslog and backups that tell you what the network is doing.7 conceptsOpens with credits
- Cloud networkingVirtual networks in the cloud: address plans, route tables, gateways, security groups, joining networks together and to the office, and the logs that show what flowed.9 conceptsOpens with credits
- Your first network roleWhat NOC and junior network jobs look like day to day: tickets, escalation, change windows, a troubleshooting method and the documentation that makes you trusted.6 conceptsOpens with credits
- 11Glossary, A to ZEvery concept in the sheet and the smaller terms it uses, in one list.136 terms
About this sheet
Routing, switching, CCNA, cloud networks.
Related on Sefism
Picked from the other libraries by shared topics.
Checklists
See all- Incident Response ChecklistPrepare for and handle production incidents: on-call, severity levels, declaring, roles, mitigation, security containment, status updates and blameless postmortems.
- Kubernetes Production ChecklistVerify a workload and its cluster before real traffic: requests and limits, probes, PDBs, spread, Pod Security, RBAC, network policies, secrets, images, autoscaling, upgrades and backups.
- Linux Server Hardening ChecklistHarden an Ubuntu, Debian or RHEL server step by step: accounts and sudo, SSH, updates, firewall and open ports, permissions, logging and CIS benchmark scans.
Project structures
See all- ESP32 with PlatformIO project structureFirmware for an ESP32-S3 plant monitor that reads soil moisture and temperature, publishes them over MQTT and serves a small web dashboard, built with PlatformIO and the Arduino framework. The layout follows the PlatformIO project conventions: firmware in src/, testable logic in private libraries under lib/, tests under test/ that run on your laptop and on the board, web files in data/ for LittleFS, and a custom partition table with two OTA slots. For students who have blinked an LED in the Arduino IDE and want to build firmware that survives in the field.
- Firebase (Cloud Functions and security rules) project structureFor students building an app on Firebase who need a real backend: Cloud Functions (2nd gen) in TypeScript, Firestore and Storage security rules with tests, and the Local Emulator Suite. The tree starts from
firebase initand grows into feature folders of callables, triggers and scheduled jobs, then adds CI deploys, environments, contract tests and runbooks. - Terraform project structureAn infrastructure repository for a small app on AWS: reusable modules, one folder per environment with its own remote state, pinned providers, tests and security scans, with plan on every pull request and apply from CI. For students who have finished the Terraform tutorials and want to know how a real team lays out the files. The same layout works unchanged with OpenTofu.
Work with me
Stuck on something specific?
Writing only gets you so far. If you want an answer to your situation rather than the general case, book a session and we will work through it together. Sessions are free for approved Sefism members, and a few slots open each week.
- 1:1 Mentorship
- Fresh Graduate Mentorship
- Career Guidance
Brand deals, promos and partnerships: tauseeffayyaz@gmail.com