Network Fundamentals // Lesson 08

Virtualisation &
network architecture.

Modern networks are no longer built entirely from physical servers, physical switches and one device per function. In this lesson you'll learn the basics of virtual machines, hypervisors, virtual switching, containers, cloud networking and common architectural ideas used in today's networks.

📖 Beginner ⏱ About 15 minutes ✓ Quiz included Final lesson
01 // Why virtualise?

One physical server can run many logical systems

Traditionally, a server workload might have required its own physical machine. Virtualisation allows several independent systems to share the CPU, memory, storage and network interfaces of one physical host.

🖥️
Physical Server

CPU, RAM, storage and NICs

→
⚙️
Hypervisor

Provides virtual hardware

→
🧩
Virtual Machines

Independent guest systems

Virtualisation changes where a network connection exists. Two servers may communicate through a virtual switch without their traffic ever reaching a physical switch.
02 // Hypervisors

The hypervisor sits between workloads and hardware

🏗️

Type 1 Hypervisor

Runs directly on the physical hardware and hosts virtual machines. This model is common in data centres and enterprise virtualisation.

💻

Type 2 Hypervisor

Runs as an application on top of a conventional host operating system and is common in desktop or lab environments.

03 // Virtual networking

Virtual machines still need a switch

A virtual switch performs Layer 2 forwarding for virtual network interfaces. It provides connectivity between virtual machines and can connect them to physical network interfaces on the host.

🧩
VM 1

Virtual NIC

→
🔀
Virtual Switch

Software Layer 2 forwarding

→
🔌
Physical NIC

Connection to physical LAN

From a networking point of view, virtual NICs still use concepts such as MAC addresses, VLANs and IP addressing.
04 // Containers

Containers are lighter than full virtual machines

Containers isolate applications while sharing the host operating system kernel. They normally require fewer resources than running a complete guest operating system for every workload.

Virtual Machine

Includes a complete guest operating system running on virtualised hardware.

Container

Packages an application and its dependencies while sharing the host kernel.

Containers can also have virtual network interfaces, virtual bridges and their own IP addresses, so networking remains an important part of container design.
05 // Cloud networking

The network can be software-defined

Cloud platforms allow infrastructure to be created through software. Instead of physically cabling a new router or switch for every change, administrators can define virtual networks, subnets, routes and security policies through a management platform or API.

🌐

Virtual Network

A logically isolated network created inside a cloud environment.

🧱

Virtual Subnet

IP address ranges used to group workloads within the cloud network.

🛡️

Security Policy

Software-defined controls can filter traffic between systems or networks.

06 // Architecture

Common network architecture ideas

CCNA expects you to recognise the broad characteristics of common network designs rather than memorise one universal topology.

Architecture Idea Typical use
Two-tier Access and collapsed distribution/core layers Smaller campus networks
Three-tier Access, distribution and core layers Larger hierarchical campus designs
Spine-leaf Each leaf connects to every spine Modern data-centre networking
WAN Connects geographically separated networks Branches, campuses and data centres
SOHO Small-office/home-office network Small deployments and home networks
Cloud Virtual network resources hosted by a cloud provider Public, private or hybrid infrastructure
07 // Campus design

Hierarchical networking keeps designs manageable

Access Layer

Connects end devices such as PCs, phones, printers and wireless access points to the network.

Distribution Layer

Aggregates access switches and can provide routing, policy and redundancy between access and core portions of the network.

Core Layer

Provides high-speed connectivity between major parts of a larger campus network.

Collapsed Core

In smaller networks, the distribution and core functions may be combined into the same devices.

08 // Data centres

Spine-leaf supports east-west traffic

Traditional campus networks often have traffic flowing from users toward shared services or the Internet. Data centres frequently have large amounts of traffic moving between servers.

A spine-leaf design connects every leaf switch to every spine switch, creating predictable paths between racks or workloads.

Leaf: connects servers or endpoints.
Spine: provides high-speed connectivity between leaf switches.
09 // Centralised control

Modern networks separate control from repetitive configuration

Large networks become difficult to manage if every change must be configured manually on each individual device.

Controllers and management platforms can provide a centralised view of network configuration, policy, monitoring and automation.

Central Policy

Define intent or configuration from a central management system.

Automation

Apply changes consistently across many devices using software.

Visibility

Collect operational data centrally for monitoring and troubleshooting.

You'll go much deeper into controllers, APIs and automation later in the CCNA Automation & Programmability domain.
10 // Practical example

A modern application may cross several virtual networks

Imagine a user opens a web application hosted in the cloud.

The user connects through a physical or wireless access network.

Traffic may pass through physical switches, routers and firewalls.

In the cloud, the destination server may actually be a virtual machine or container.

Traffic may cross a virtual switch and a software-defined cloud network before reaching the workload.

Even though some components are virtual, the same fundamental concepts still apply: MAC addresses, IP addresses, routes, ports and security policy.

11 // Check your knowledge

Quick quiz

1. What is the primary role of a hypervisor?

A hypervisor provides virtual hardware and resource isolation so multiple virtual machines can run on a physical host.

2. What does a virtual switch do?

A virtual switch performs software Layer 2 forwarding between virtual interfaces and may connect workloads to physical NICs.

3. Which statement best describes a container?

Containers package applications and dependencies while normally sharing the host operating system kernel.

4. Which network architecture commonly has access, distribution and core layers?

The traditional three-tier campus architecture consists of access, distribution and core layers.

5. In a spine-leaf architecture, what does each leaf normally connect to?

In a typical spine-leaf design, each leaf connects to every spine, providing predictable paths between leaf switches.

6. What is a collapsed core?

Smaller campus networks often combine distribution and core functions into the same devices, creating a collapsed-core design.

7. Which statement about cloud networking is correct?

Cloud platforms commonly implement networking as software-defined resources such as virtual networks, subnets, routes and security rules.
Score: 0 / 7
Module complete

Network Fundamentals complete. 🎉

You've now covered the core ideas behind network models, network devices, Ethernet, IPv4, IPv6, transport protocols, wireless and modern network architecture.

These foundations will keep appearing throughout the rest of CCNA. Next up is Network Access, where we'll get properly hands-on with VLANs, trunks, spanning tree and EtherChannel.

Back to CCNA home →