01 // COMMAND SET
VLANs and trunks
vlan, switchport mode, access/native/allowed VLANs, show vlan and show interfaces trunk.
Layer 2
02 // COMMAND SET
Discovery and channels
show cdp/lldp neighbors, channel-group, port-channel and show etherchannel summary.
Operations
03 // COMMAND SET
Spanning tree
Root primary/secondary, PortFast, BPDU Guard and show spanning-tree.
Loop prevention
04 // COMMAND SET
Routing
show ip route, IPv4/IPv6 static routes, OSPF interface configuration and neighbour checks.
Layer 3
05 // COMMAND SET
Services
NAT, NTP, DHCP relay, SSH, SNMP, syslog and file-transfer command patterns.
Services
06 // COMMAND SET
Security
ACLs, local access control, DHCP snooping, DAI and port-security verification.
Hardening