A structured lesson workspace with readable content, hands-on examples, and a clean path to completion.
Cisco's own reference designs migrated from three-tier campus (access/distribution/core) to collapsed core starting around 2010. Starting around 2016, fabric-based SD-Access became the recommended pattern for new campus deployments. Each shift reduced the number of tiers, centralized more control, and increased software-defined behavior. Traditional designs aren't obsolete, but they're no longer what a new deployment should look like.
The classic design. Access layer connects users, distribution layer does routing and policy, core layer moves packets between distribution blocks. Clean separation of concerns, but expensive — the core layer is dedicated hardware that only does high-speed transit.
Modern campuses collapse distribution and core into one pair of switches. The core hardware is eliminated; routing happens in the collapsed-core pair. This is what most enterprises deploy today. Same logical separation (access for endpoints, collapsed core for routing and policy) but fewer physical devices.
For data centers, spine-leaf replaced three-tier. Every leaf connects to every spine. No leaf connects to another leaf. Traffic between any two leaves always goes leaf→spine→leaf — exactly two hops, predictable latency. Every link is used with Layer 3 ECMP routing. This is the modern data center standard.
| Design | Layers | Best for | Traffic pattern |
|---|---|---|---|
| Three-tier campus | Access/Dist/Core | Large traditional campus | North-south |
| Collapsed core | Access/Core | Mid-size campus, most common today | North-south |
| Spine-leaf | Leaf/Spine | Data centers, cloud infrastructure | East-west |
| SD-Access fabric | Edge/Intermediate/Border | Modern campus, policy at scale | Any (VXLAN overlay) |
| Cloud edge (AWS/Azure) | VPC/VNet + transit | Cloud workloads | Hybrid |
Section 17 complete. You've covered WAN technologies, broadband options, VPN types (site-to-site and remote access), IPsec fundamentals, GRE tunnels, SD-WAN architecture, SD-Access/SDN concepts, and the evolution of network architectures. Section 18 covers automation and programmability.
Finish the lesson once you have worked through the material. This awards ★ 20 XP.
Select each vulnerable line, then classify the finding.
Findings
Review target: 9 lines · 2 expected findings