A complete management plane hardening guide for Cisco IOS-XE: SSH v2 with modern ciphers, VTY access restrictions, Type 8/9 password hashing, privilege levels, parser views, disabling unnecessary services, NETCONF/RESTCONF security, and a practical 10-point verification checklist.
Learn how to use Cloudflare Tunnels to securely expose your homelab services, Nextcloud, Home Assistant, Grafana, and more, from the internet without opening any ports on your router. Free, automatic TLS, and optional Zero Trust authentication included.
Master Wireshark for Cisco network troubleshooting. Covers BPF capture filters vs. display filters, Embedded Packet Capture (EPC) on IOS-XE, SPAN configuration, and real-world scenarios for BGP, OSPF, STP, and security anomaly analysis with actual IOS-XE CLI commands.
A step-by-step guide to configuring MPLS L3VPN on Cisco IOS-XE, covering LDP setup, VRF definitions, MP-BGP VPNv4, CE-PE routing, and verification with real show command output.
Most enterprise networks still run dual-stack at best in 2026. This guide covers full IPv6 deployment on Cisco IOS-XE: addressing, OSPFv3, DHCPv6, ACLs, BGP, and the verification commands that actually tell you what’s broken, with real CLI output and production gotchas.
A practical guide to diagnosing and fixing the most common OSPF adjacency failures on Cisco IOS-XE, MTU mismatches, timer conflicts, authentication errors, duplicate Router IDs, and flapping neighbors, with real show command output and CLI fixes.
Cisco’s Embedded Event Manager (EEM) is one of the most underutilized features in IOS-XE. This guide covers six practical EEM applets, from BGP peer monitoring and interface flap detection to nightly config backups and CPU spike capture, with real CLI syntax and Cat9K-specific tips.
BGP is the glue that holds the internet together, learn how it works, how to configure it on Cisco, and the security challenges it faces.
Tailscale makes VPN dead simple, install it, and your devices just connect. Here’s how to set it up with subnet routing, exit nodes, and SSH.
A deep dive into Cisco’s three operating systems, IOS, IOS-XE, and IOS-XR, their architectures, platforms, CLI differences, and when you’ll encounter each.
A hands-on guide to VLANs, what they are, why segmentation matters, and how to configure them on a managed switch with Cisco CLI examples.
How I run AdGuard Home with Unbound as a private recursive resolver on my homelab server: the wiring, three blocklists, split-horizon DNS rewrites, and the two gotchas that have bitten me.
