# NETWORK NODES PORTFOLIO STATEMENT :
This network portfolio outlines the design, deployment, and management of a secure, scalable, and high-performance enterprise network infrastructure. The network architecture follows industry best practices using a layered design model comprising edge, distribution, aggregation, core, and service-provider connectivity layers. This structured approach ensures high availability, efficient traffic flow, simplified troubleshooting, and future scalability while maintaining strong security controls.
Overall, this network portfolio demonstrates a robust and standards-compliant design focused on security, performance, redundancy, and scalability. The architecture supports enterprise applications, internet access, MPLS connectivity, and wireless services while allowing easy expansion and efficient operations. This approach ensures a future-ready network capable of meeting both current business requirements and evolving technological demands.
8.1 # HOW TO DEFINE THE EDGE DEVICES IN NETWORK :
EDGE SWITCH: At the edge layer, access switches provide reliable and secure connectivity to end-user devices such as desktops, laptops, IP phones, wireless access points, and surveillance systems. These switches support VLAN segmentation, Power over Ethernet (PoE), and port-level security mechanisms including 802.1X authentication, DHCP snooping, and port security. This layer is designed to deliver seamless user access while protecting the network from unauthorized or misconfigured devices.
EDGE ROUTER: An edge router is a router placed at the boundary (edge) of a network, where an organization’s internal network connects to external networks such as the Internet, ISP, MPLS cloud, or a service provider. It acts as the entry and exit point for all data traffic between internal users and outside networks.
| Edge switch is required when : - | |
|---|---|
| |
| Edge Router is required when : - | |
| |
8.2 # HOW TO DEFINE THE DISTRIBUTION DEVICES IN NETWORK :
DISTRIBUTION SWITCH: It is sit between the edge layer and the core layer and act as a control and policy enforcement point in the network. They aggregate multiple edge switches and usually operate at Layer-3, enabling inter-VLAN routing. Distribution switches apply access control lists (ACLs), quality of service (QoS) policies, route summarization, and redundancy mechanisms. This layer is designed to balance performance with control, ensuring that traffic from access switches is filtered, routed, and managed according to organizational policies before moving toward the core.
DISTRIBUTION ROUTER: It is a Layer-3 networking device deployed at the distribution layer of a hierarchical network architecture. It acts as an intermediate routing point between the access layer (edge switches) and the core network, responsible for aggregating traffic, routing between subnets or VLANs, and enforcing network policies.
| Distribution switch is required when : - | |
|---|---|
| |
| Distribution Router is required when : - | |
| |
8.3 # HOW TO DEFINE THE AFFREGATION DEVICES IN NETWORK :
AGGREGATION SWITCHES are used in large campus, data center, or service-provider environments where traffic from multiple distribution switches must be consolidated before reaching the core or upstream networks. The aggregation layer focuses on scalability and traffic consolidation, and in some designs it may also apply limited policies or load balancing. While similar to the distribution layer, aggregation switches mainly exist to handle high traffic volumes and simplify the network by reducing the number of direct connections to the core.
AGGREGATION ROUTERS are combines multiple network connections or traffic streams into a single, high-capacity link, boosting bandwidth, providing redundancy, and centralizing services like firewalls, crucial for managing growth in enterprise and service provider networks. It acts as a central point in data centers or branch offices, consolidating traffic from access switches or various internet providers (ISPs) to optimize performance and simplify management for cloud, mobility, and digital collaboration.
| Aggregation switch is required when : - | |
|---|---|
| |
| Aggregation Router is required when : - | |
| |
Distribution = policy + routing & Aggregation = scaling + consolidation
8.4 # HOW TO DEFINE THE CORE DEVICES IN NETWORK :
CORE SWITCHES is a high-performance switching device used at the backbone of an enterprise or data-center network to interconnect distribution switches and major network segments. Its primary role is to forward traffic at very high speeds with minimal latency. Core switches usually operate at Layer-3 but are optimized for fast packet switching rather than complex decision-making. They are kept policy-free, meaning features such as NAT, firewalling, or heavy ACLs are avoided, to ensure maximum throughput, high availability, and rapid convergence.
CORE ROUTERS is a high-capacity routing device used at the backbone of large enterprise WANs, ISP networks, or MPLS environments. Its main function is to route traffic between different networks or autonomous systems and across long-distance links. Core routers handle complex routing protocols such as BGP, OSPF, and IS-IS and are designed to manage very large routing tables, traffic engineering, and WAN/MPLS services. Unlike core switches, core routers are more focused on network-to-network connectivity rather than internal LAN switching.
Difference between : -
| Feature | Core Switch | Core Router |
|---|---|---|
| Primary Role | High-speed LAN backbone | High-speed WAN/ISP backbone |
| Network Position | Inside enterprise or data center | Between networks or service provider cores |
| OSI Layer | Layer-3 (optimized for switching) | Layer-3 (routing-focused) |
| Traffic Type | Internal LAN traffic | Inter-network / WAN traffic |
| Routing Table Size | Small to medium | Very large |
| Protocols Used | OSPF, EIGRP (limited use) | BGP, OSPF, IS-IS, MPLS |
| Policy Features | Minimal or none | Advanced routing and traffic engineering |
| Latency | Very low | Slightly higher than switches |
| Typical Use Case | Campus or data center core | ISP, MPLS, WAN core |
| Core switch is required when : - | |
|---|---|
| |
| Core Router is required when : - | |
| |
8.5 # HOW TO DEFINE THE CE & PE DEVICES IN NETWORK :
CUSTOMER EDGE (CE) – Customer Premises Location Its (Router or Switch) devices are installed at the customer site, usually in the main server room or network rack. They form the boundary between the enterprise network and the service provider and connect directly to the provider edge device.
PROVIDER EDGE (PE) – Service Provider Location Its (Router or Switch) devices are located at the ISP or service provider’s Point of Presence (PoP). These devices connect multiple customers to the service provider’s core network and handle technologies such as MPLS and VRF.
| Customer Edge (CE) is required when : - | |
|---|---|
| |
| Provider Edge (PE) is required when : - | |
| |
| Layer/Device | Role | Key Function | Example |
|---|---|---|---|
| Edge (Access) | User connectivity | VLAN, PoE, security | Catalyst 2960 |
| Distribution | Policy + routing | ACL, Inter-VLAN | Catalyst 3650 |
| Core | Backbone | Fast forwarding | Catalyst 9500 |
| Aggregation | Traffic consolidation | Scaling, redundancy | Nexus 5K |
| Provider Edge | ISP boundary | MPLS, VRF, MP-BGP | ASR 9000 |
| Customer Edge | Customer boundary | Routing with ISP | ISR 4331 |
| Simple Flow (Enterprise + MPLS) |
|---|
| User Device ↓ Edge Switch ↓ Distribution Switch ↓ Aggregation / Core ↓ Customer Edge (CE) ↓ Provider Edge (CE) ↓ MPLS Core |
# Verification Commands (Troubleshooting):
🔹 Interface & Hardware
Switch #show ip interface brief
Switch #show interfaces
Switch #show interfaces counters errors
Switch #show controllers
🔹 Routing
Switch #show ip route
Switch #show ip route 'destination'
Switch #show ip protocols
Switch #show running-config | section router
Switch #show port-security interface fa 0/1
🔹 Port & PoE (APs / IP Phones)
Switch #show interfaces status
Switch #show power inline
Switch #show power inline police
Switch #clear port-security all
🔹 Session & Logs
Switch #show conn
Switch #show logging
Switch #show logging | include deny
🔹 SLA & Performance
Switch #show ip sla statistics
Switch #show track
🔹 Logs & Monitoring
Switch #show logging
Switch #show logging buffered
Switch #show clock
Switch #show ntp status
🔹 Performance & CPU/Memory Issues
Switch #show processes cpu
Switch #show processes memory
Switch #show memory statistics
Switch #show platform resources
🔹 Debug Commands (Use Carefully)
Switch #debug ip packet
Switch #debug ip routing
Switch #debug ip bgp
Switch #debug mpls ldp events
Switch #debug wireless client 'mac'
Switch #undebug all