Quest NetVR
3D Network Explorer & Academy
Protocol:
Initializing network topology scene...
-- FPS
-- Triangles
-- Calls
🏗️ Add Custom Network System
Server Blade
Data Center
🧮 IPv4 CIDR Subnet Calculator
Enter a CIDR subnet and click Calculate to view mask, host range, and capacity.
📘
CCNA 200-301 Visual Academy & Learning Lab
The OSI 7-Layer & TCP/IP Model with Data Encapsulation
As application data moves down the stack, each layer encapsulates the payload with its specific protocol header (Data → Segment → Packet → Frame → Bits).
Layer 7
Application Layer (TCP/IP: Application)
Network services directly exposed to applications. Protocols: HTTP/S (80/443), DNS (53), DHCP (67/68), SSH (22), BGP (179).
PDU: Application Data
Layer 6
Presentation Layer (TCP/IP: Application)
Data representation, TLS/SSL cryptographic encryption, compression, and character encoding (ASCII, Unicode, JPEG).
PDU: Formatted Data
Layer 5
Session Layer (TCP/IP: Application)
Session initiation, checkpointing, and termination between endpoints. Protocols: RPC, NetBIOS, PPTP.
PDU: Session Sockets
Layer 4
Transport Layer (TCP/IP: Transport)
End-to-end communication flow control, multiplexing via source/destination Port numbers (0-65535). TCP (reliable, 3-way handshake) vs UDP (fast, connectionless).
PDU: Segment (TCP) / Datagram (UDP)
Layer 3
Network Layer (TCP/IP: Internet)
Logical routing, IP addressing (IPv4/IPv6), subnetting, path determination. Protocols: IPv4, IPv6, ICMP, OSPF, EIGRP, ARP. Devices: Routers, Multilayer Switches.
PDU: Packet (IP Header + Payload)
Layer 2
Data Link Layer (TCP/IP: Network Access)
Physical hop-to-hop framing, 48-bit MAC addresses, 802.1Q VLAN tags, Spanning Tree (STP), and CRC error check (FCS). Devices: Ethernet Switches, WAPs, Bridges.
PDU: Frame (Ethernet Header + MAC + FCS)
Layer 1
Physical Layer (TCP/IP: Network Access)
Physical transmission of raw bits over physical media: electrical voltage (Copper Cat6), light pulses (Fiber SMF/MMF), radio frequencies (Wi-Fi 6). Connectors: RJ-45, LC, SFP+.
PDU: Bits (Binary 1s & 0s)
TCP vs UDP: Transport Layer Comparison
Understand connection-oriented reliable transfer vs connectionless high-speed datagrams.
🤝 The TCP 3-Way Handshake (SYN → SYN-ACK → ACK)
Step 1
Client SYN
Client sends
[SYN] Seq=0 Win=65535 MSS=1460 to initiate synchronization.→
Step 2
Server SYN-ACK
Server acknowledges and replies with
[SYN, ACK] Seq=0 Ack=1 Win=65535.→
Step 3
Client ACK
Client responds with
[ACK] Seq=1 Ack=1. Connection ESTABLISHED! Data can now flow.| Feature / Parameter | TCP (Transmission Control Protocol) | UDP (User Datagram Protocol) |
|---|---|---|
| Connection Type | Connection-oriented (Requires 3-way handshake) | Connectionless (Fire-and-forget, no handshake) |
| Reliability | Guaranteed delivery with ACKs & retransmission | Best-effort (No retransmission; packet loss possible) |
| Header Size | 20 bytes minimum (up to 60 bytes with options) | 8 bytes fixed (Source Port, Dst Port, Length, Checksum) |
| Ordering & Sequence | Packets sequenced and reassembled in exact order | No sequence numbers; packets may arrive out of order |
| Flow & Congestion Control | Sliding Window mechanism & TCP Congestion Avoidance | None (Streams at maximum application rate) |
| Typical Use Cases | Web (HTTP/HTTPS), Email (SMTP/IMAP), File (FTP/SSH), SQL | VoIP, Video Streaming, Gaming, DNS queries, DHCP, SNMP |
Physical Cabling Media, Transceivers & T568A/B Pinouts
Reference specs for copper twisted pair, optical fiber, direct-attach twinax, and EIA/TIA pinouts.
Cat6 Copper UTP
Unshielded Twisted Pair (Cat6)
Max Speed: 10 Gbps (55m) / 1 Gbps (100m)
Max Distance: 100 meters (328 ft)
Connector: RJ-45 (8P8C)
Use: End-user PCs, VoIP phones, Wi-Fi 6 APs, office switches
Single-Mode Fiber (OS2)
Yellow Jacket Laser Fiber
Max Speed: 100 Gbps - 400 Gbps
Max Distance: 10 km - 40 km (up to 80 km ZR)
Wavelength: 1310 nm / 1550 nm Laser
Use: Telco WAN backbones, campus interconnects
Multi-Mode Fiber (OM4)
Aqua Jacket VCSEL LED Fiber
Max Speed: 25 Gbps / 40 Gbps / 100 Gbps
Max Distance: 400 meters (OM4)
Wavelength: 850 nm VCSEL LED (50/125µm core)
Use: Data center spine-leaf, SAN storage fabric
Twinax DAC
Direct Attach Copper (Passive)
Max Speed: 10 Gbps / 25 Gbps / 100 Gbps
Max Distance: 1 - 5 meters (Ultra-low latency)
Connector: Integrated SFP28 / QSFP28
Use: Top-of-Rack switch to blade server racks
📸 Physical Connector Photo-Diagram: RJ-45 (8P8C) & Optical Fiber LC Duplex
🎨 EIA/TIA-568A vs EIA/TIA-568B RJ-45 Pinout Chart
Straight-through cable uses same standard on both ends. Crossover cable uses 568A on one end and 568B on the other.
T568B (Most Common Standard):
- White/Orange
- Orange
- White/Green
- Blue
- White/Blue
- Green
- White/Brown
- Brown
T568A Standard:
- White/Green
- Green
- White/Orange
- Blue
- White/Blue
- Orange
- White/Brown
- Brown
Virtualization, Hypervisors, VMs & Containers
Understand how modern cloud data centers decouple software from physical server hardware.
Type-1 Hypervisor (Bare-Metal)
Directly on Physical Hardware
Installs directly on the bare-metal server chassis with zero host OS overhead. Direct access to CPU, RAM, and PCIe devices.
Examples: VMware ESXi, KVM, Proxmox VE, Microsoft Hyper-V Server.
Use: Production enterprise data centers, AWS EC2 Nitro, high-density clouds.
Type-2 Hypervisor (Hosted)
Runs Inside a Host OS Application
Runs as software inside a traditional desktop operating system (Windows/macOS/Linux). Higher latency and CPU overhead.
Examples: Oracle VirtualBox, VMware Workstation / Fusion, Parallels.
Use: Developer workstations, student labs, software testing.
| Virtualization Concept | Virtual Machines (VMs) | Containers (Docker / Podman) |
|---|---|---|
| Architecture | Hardware virtualization (Virtual CPU, Virtual RAM, BIOS) | OS kernel namespace and cgroup isolation |
| Operating System | Runs full Guest OS with own kernel per VM (Gigabytes) | Shares the host OS kernel; micro-image footprint (Megabytes) |
| Startup Time | Minutes (Cold boots full OS kernel and services) | Milliseconds (Instantly launches isolated process) |
| Networking | Virtual Switch (vSwitch), port-groups, virtual MAC & IP | Bridge network, veth virtual ethernet pairs, Overlay CNI |
IPsec Cryptographic VPNs & Encrypted Tunnels
Protecting data in transit across public untrusted WANs using confidentiality, integrity, and authentication.
1. IKE Phase 1 (ISAKMP SA)
Negotiates security parameters to establish an authenticated, encrypted management channel between VPN peers.
- Hash: SHA-256 / SHA-384
- Authentication: Pre-Shared Key (PSK) or RSA Digital Certificates
- Group: Diffie-Hellman Key Exchange (DH Group 14, 19, 21)
- Lifetime: 86400 seconds (24 hours)
- Encryption: AES-256-GCM / AES-CBC
2. IKE Phase 2 (IPsec SA)
Negotiates the actual data tunnel parameters to protect payload traffic.
- Encapsulation: ESP (Encapsulating Security Payload, IP Protocol 50)
- Tunnel Mode: Encrypts entire original packet; wraps with new public IP header
- Transport Mode: Encrypts payload only; preserves original IP header (used in host-to-host or GRE over IPsec)
- Anti-Replay: Sequence numbers prevent man-in-the-middle replay attacks
🔒 Site-to-Site IPsec ESP Tunnel Mode Packet Structure
🎯 CCNA 200-301 Interactive Knowledge Check
Test your networking skills with rapid-fire questions covering OSI, TCP/UDP, Cabling, and Virtualization.
💡
Real-Time Network Architecture Explainer & Learning Co-Pilot
🛠️
NETWORK BUILDER STUDIO & DIAGNOSTIC LAB
Design your custom architecture, test reachability, audit health & download real 2D blueprint in PDF
GUIDED CONSTRUCTION WORKFLOW:
🌐 Step 1: Perimeter & Edge Security Defense
Establish the external WAN border and deploy next-gen threat defense.
Add Hardware to 3D Network
Select hardware role, department subnet, and specify custom IP address.
Hardware Preview
3D Hardware Icon preview with department halo and status LED.
Span Physical Cable Between Devices
Select endpoints and choose transmission media.
Active Cabling Schedule
| Link ID | Source Device | Destination Device | Media Type | Action |
|---|
Interactive Ping & Route Tracer
Simulate real packets across the network and watch live 3D packet traces.
Cisco IOS Packet Tracer CLI Ready. Select endpoints and press "Run Live Ping Test".
Automated Network Health Audit
--%
OPTIMAL / PRODUCTION READY
Automated checks: Duplicate IPs, default gateways, isolated devices & routing sanity.
🗺️ Real 2D Architectural Schematic Blueprint Map
Vector schematic diagram with hardware role cards, IP tags, cable media styles, and department zones.
Generate Professional 4-Page Network Blueprint PDF
Exports the complete architectural schematic map, 3D WebGL layout snapshot, diagnostic test audit, Bill of Materials (BOM) inventory table, and cabling schedule.
✅ Page 1: 2D Real Architectural Schematic Blueprint Map
✅ Page 2: Automated Health Diagnostic Audit & 3D WebGL Spatial Layout
✅ Page 3: Complete Bill of Materials (BOM) & Device Inventory Matrix
✅ Page 4: Physical Cabling & Interconnection Port Schedule
🦈 WIRESHARK-LITE PACKET SNIFFER
PROMISCUOUS CAPTURE
| No. | Time | Source IP | Destination IP | Protocol | Length | Packet Information / Summary |
|---|
Topology Data (JSON)