Computer Networks: Implementation and Security Course

Lesson 1 • Physical and Data Link Layer Essentials

Examines transmission media, signalling, and MAC-layer framing. Connects physical hardware choices to data integrity and throughput outcomes.

Lesson 2 • Network Models and Layered Architecture

Covers OSI and TCP/IP models, layer responsibilities, and inter-layer communication. Establishes the conceptual framework used throughout the entire course.

Lesson 3 • IP Addressing and Subnetting

Teaches IPv4 and IPv6 address structures, CIDR notation, and subnet design. Provides the addressing skills required for all routing and security topics ahead.

Lesson 4 • Network Topologies and Design Patterns

Surveys bus, star, ring, mesh, and hybrid topologies with trade-off analysis. Grounds later design and redundancy decisions in topology fundamentals.

Lesson 1 • Transport Layer Protocols

Contrasts TCP connection management with UDP's stateless delivery model. Directly supports later firewall rule design and traffic analysis skills.

Lesson 2 • Protocol Analysis with Packet Capture

Introduces packet capture tools and filter syntax for live protocol inspection. Develops the traffic analysis skill set used in every security chapter.

Lesson 3 • Routing Protocols and Path Selection

Covers static routing, RIP, OSPF, and BGP operation and convergence behaviour. Enables students to configure and troubleshoot routing in later implementation labs.

Lesson 4 • Application Layer Protocols

Examines HTTP, DNS, DHCP, FTP, SMTP, and SNMP operation and message formats. Builds protocol literacy needed for traffic inspection and attack recognition.

Lesson 1 • VLAN Design and Trunking

Teaches VLAN creation, port assignment, and 802.1Q trunk configuration. Segmentation skills here underpin both network design and security zone implementation.

Lesson 2 • Spanning Tree Protocol and Redundancy

Explains STP, RSTP, and MSTP loop prevention and port state machines. Redundancy design here feeds directly into high-availability network architecture.

Lesson 3 • EtherChannel and Link Aggregation

Configures LACP and static EtherChannel bundles for bandwidth and redundancy. Builds on trunking knowledge and prepares students for high-throughput designs.

Lesson 4 • Quality of Service on LANs

Implements traffic classification, marking, queuing, and policing at Layer 2 and 3. Ensures students can prioritise critical traffic in converged network environments.

Lesson 1 • MPLS and Provider-Managed Networks

Explains MPLS label switching, VPN types, and traffic engineering capabilities. Connects provider-managed WAN to enterprise routing and QoS requirements.

Lesson 2 • Broadband and Internet-Based WAN

Covers DSL, cable, fibre, and LTE/5G broadband access with PPPoE configuration. Prepares students to deploy cost-effective internet-based WAN for branch offices.

Lesson 3 • VPN Technologies for Remote Access

Configures site-to-site IPsec and remote-access SSL VPNs with authentication. Bridges WAN connectivity to the security chapters that follow.

Lesson 4 • SD-WAN Architecture and Deployment

Introduces SD-WAN controllers, data planes, and policy-based path selection. Positions students to evaluate modern WAN overlays against traditional approaches.

Lesson 1 • Security Policies and Risk Management

Develops security policies, risk assessment processes, and compliance mapping. Grounds technical controls in organisational risk management strategy.

Lesson 2 • Threat Landscape and Attack Taxonomy

Categorises network threats by vector, target layer, and attacker motivation. Provides the threat vocabulary used in every subsequent security implementation chapter.

Lesson 3 • Cryptography Essentials for Networks

Covers symmetric, asymmetric, and hashing algorithms with key management basics. Underpins VPN, PKI, and secure protocol topics in later chapters.

Lesson 4 • Authentication and Access Control

Implements AAA, RADIUS, TACACS+, and multi-factor authentication for network access. Establishes identity-based access control as a core security layer.

Lesson 1 • Firewall Rule Auditing and Hardening

Audits rule sets for shadowed, redundant, and overly permissive rules using structured methods. Closes the perimeter security loop with ongoing maintenance practices.

Lesson 2 • Intrusion Detection and Prevention Systems

Deploys signature-based and anomaly-based IDS/IPS with tuning and alert management. Extends perimeter defence beyond static rule sets to active threat detection.

Lesson 3 • Firewall Types and Deployment Models

Compares packet-filter, stateful, proxy, and next-generation firewall architectures. Sets the selection criteria applied when designing perimeter security solutions.

Lesson 4 • DMZ Architecture and Zone Design

Designs multi-zone DMZ topologies separating public services from internal networks. Applies defence-in-depth principles to perimeter architecture decisions.

Lesson 1 • Forensic Analysis of Network Evidence

Collects and analyses packet captures, flow records, and log artifacts for investigations. Provides the evidentiary skills needed to support post-incident reporting.

Lesson 2 • Network Monitoring Architecture

Designs monitoring topologies using SNMP, NetFlow, syslog, and SPAN ports. Establishes the visibility infrastructure that feeds all detection and response activities.

Lesson 3 • Security Information and Event Management

Configures SIEM log ingestion, normalisation, correlation rules, and dashboards. Centralises security visibility and enables pattern-based threat detection at scale.

Lesson 4 • Anomaly Detection and Threat Hunting

Applies baseline profiling, behavioural analytics, and hypothesis-driven hunting techniques. Moves detection beyond reactive alerting to proactive threat discovery.

Lesson 1 • Penetration Testing Methodology

Executes structured network penetration tests through reconnaissance, exploitation, and reporting phases. Validates hardening effectiveness and identifies residual risk.

Lesson 2 • Continuous Security Improvement

Establishes metrics, KPIs, and review cycles to sustain and improve security posture over time. Closes the course with a strategic, lifecycle-oriented security management approach.

Lesson 3 • Device and Infrastructure Hardening

Applies CIS benchmark controls to routers, switches, and servers to reduce attack surface. Builds on all prior configuration knowledge to enforce a minimal-exposure posture.

Lesson 4 • Secure Network Architecture Patterns

Designs micro-segmentation, zero-trust overlays, and secure access service edge models. Integrates security architecture with the WAN and LAN designs from earlier chapters.