Job Oriented Internetworking Training - JOINT

Explore cloud fundamentals and virtualization, including VMware and Cisco technology basics, and preview cloud vendor concepts from Google to Azure, building working knowledge essential for the JOINT program.

Explore cloud computing, its on-demand self-service and broad network access, a shared pool of configurable computing resources, measured services, and rapid elasticity to reduce its costs.

Explore the data center within the cloud, including infrastructure, hardware, virtualization, and software defined network, and learn about power backups, raised floors, cooling, access control, UCS, and 42U racks.

Discover how cloud characteristics like on-demand self-service, rapid elasticity, resource pooling, broad network access, and measured service shape how infrastructure is requested, deployed, and scaled.

Explore how organizations rely on service providers and vendors for telecom, storage, compute, iaas, paas, saas, and data center services, and how issues escalate through tickets toward service level agreements.

Define service level agreements with performance, uptime, mean time to recover, and customer data handling, ensuring confidentiality, integrity, authenticity, data privacy, and deletion policies in cloud, storage, and networking services.

Explore infrastructure as a service with AWS, covering compute, storage, and networking, regions and availability zones, and the split of provider versus user responsibilities.

Examine software as a service and the rise of x as a service, with providers delivering cloud solutions like Cisco WebEx and Google Docs, accessible via a single login.

Examine private clouds inside public cloud infrastructures, focusing on cost, control, and security, via AWS VPC, and compare with public cloud benefits and major private cloud solutions.

Explore community clouds and hybrid clouds, compare public and private cloud advantages and disadvantages, and examine secure tunnels linking private and public clouds.

Explore Cisco inter cloud fabric and director to connect private and public clouds with cloud switches and tunnels, and configure policies, service catalogs, and templates while monitoring capacity and utilization.

Learn how to move from traditional IT to cloud infrastructure through consolidation, virtualization, standardization, automation, and orchestration, using Cisco Prime Service Catalog with UCS Director for self-service private clouds.

Master cloud orchestrator capabilities for heterogeneous data centers with multi-vendor support. Provision physical and virtual compute and storage, create application profiles and containers, and enable secure multi-tenant metering and automation.

Cloud monitor, part of the three-component stack with service catalog and orchestrator, receives deployment notifications to measure resources, create billing plans, and generate on-demand reports.

Explore the cloud journey from legacy IT to cloud through consolidation, virtualization, standardization, and automation, enabling shared resources, scalable provisioning, and reduced manual errors.

Discover how orchestration enables consolidation, virtualization, standardization, and automation in IT infrastructure, and explore APIs and RESTful APIs, CLI configurations, and Python-based SDKs for network devices.

Contrast type one bare-metal hypervisors and type two hosted hypervisors, highlighting hardware efficiency and straightforward guest OS deployment; reduce costs, downtime, and improve data center management, continuity, and disaster recovery.

Explore how a virtual machine runs on a hypervisor such as ESXi, with virtual hardware like CPU, memory, VMDK, and a virtual NIC. Review the vSphere client and VM extensions.

Explore the VMware ESXi hypervisor architecture and the vSphere Web Client as a single management plane to manage data centers, hosts, clusters, networks, and virtual machines.

Discover virtualization features enabling high availability, live migration, resource load balancing, and fault tolerance in VMware ESXi. Understand snapshots, templates, cloning, and provisioning that improve storage efficiency and disaster recovery.

Discover how to clone a virtual machine to a template and deploy new VMs from it in vSphere, with thin provisioning and OS customization.

Clone a VM to a template, manage storage with thin provisioning, and use the vSphere client search to locate and deploy web server templates.

Enable and configure vSphere high availability in a host and cluster lab, including HA settings, admission control, heartbeat data stores, and VM monitoring to ensure fast failover.

Learn to monitor vSphere performance through the vSphere client and vRealize, tracking CPU, memory, and network health with real-time and historical charts, VM migration, power controls, and exportable reports.

Explore VMware vSphere port groups and standard switches, and learn to create or edit a standard switch with adapters and VLANs.

Explore how hosts, physical and VM interfaces, and vSwitch configurations create standard and distributed virtual switches, port groups, uplinks, and NIC teaming for network traffic in the lab.

Walk through configuring a distributed virtual switch, adjusting general and advanced properties, enabling NetFlow, port mirroring, health checks, private VLAN, and viewing topology in the VCA client.

Learn how to create a distributed port group on a distributed virtual switch, configure port binding, allocation, VLAN types, and advanced policies in vSphere.

Gain associate-level knowledge of wireless fundamentals, antennas, packet reception, device installation, frame formats, and controller-based deployment through 18 videos.

Explore how FHSS, DSSS, and OFDM use different spectrum methods in a 2.4 GHz wireless LAN, detailing channel layouts, non-overlapping channels, and parallel subcarrier processing.

Explore interference and effects of physical objects on wireless signals, including co-channel and neighboring channel interference, how reflection, absorption, scattering, refraction, diffraction, and fragile zone influence access point placement.

Explore antenna characteristics, including isotropic, omnidirectional and directional types, gains, beam width, and polarization; compare dipole, monopole, patch, Yagi, and parabolic antennas across 2.4 GHz and 5 GHz.

Explore wireless networks with a focus on wireless LANs, featuring access points, basic service sets, ssid, and roaming across an extended service set behind a wired distribution system.

Explore the 802.11 frame format, including the preamble, address fields (address 1–4), data and FCS, duration for collision avoidance, ssid learning, and wireless-to-wired and wireless-to-wireless communications.

Explore 802.11 frame types: management, control, and data, including beacons, probes, authentication, and association, plus RTS/CTS and power saving for reliable wireless communication.

Understand how clients scan for access points via passive beaconing and active probing, authenticate and associate, then roam between APs while buffering data using the rds distribution system.

Establish Capwap tunnels between wireless access points and the controller to manage control and data planes over IP-based tunnels using UDP 5246 with optional DTLS encryption, enabling centralized wireless management.

Explore centralized wireless network architecture and Flex Connect architecture, compare CAPWAP tunnels between WLC and AP, and learn how Flex Connect enables local switching with latency guidance.

Perform the initial setup of a virtual WLC by configuring the management IP, subnet mask, and gateway, then create a cloud demo WLAN with a WPA passphrase.

Learn how an access point boots, discovers the WLC via DHCP, DNS, or broadcast, and builds a Capwap control tunnel to join the controller.

Master a structured wlan troubleshooting approach, top-down or bottom-up, from client to access point, check capwap tunnels, IP reachability, and DHCP/DNS, and define problems with ping and traceroute.

Explore Cisco Meraki basics, product lines, and concepts through 15 videos to build your profile and showcase Meraki knowledge alongside routing, switching, wireless, and virtualization.

Learn how to configure traffic shaping rules on a Cisco Meraki MX device, including application-based limits for Netflix and Pandora, VoIP and video conferencing prioritization, per-client bandwidth, and content filtering.

Learn how to configure Meraki firewall rules, including layer three outbound, layer seven, and port forwarding with 1-to-1 and 1-to-many NAT, plus DNS name support.

Explore how Cisco Meraki intrusion detection and prevention logs anomalies in IDS mode and blocks traffic in IPS mode, with rule sets, Cvss scoring, malware, and app detection.

Explore how to access and navigate GCP reference materials, labs, and community resources to support cloud certification prep and begin your learning journey.

Cloud computing provides on-demand, pay-for-use access to a shared pool of configurable computing resources—network, servers, storage, and applications—rapidly provisioned and released to cut costs and boost profit.

Learn how regions and zones enable high availability with multi-region, multi-zone redundancy and site data center design, and examine latency when redirecting traffic between regions.

Explore Google Cloud resource hierarchy from organization to folders to projects, and learn to create a new project in the cloud console with a unique project ID and project number.

the lab demonstrates assigning IAM roles to a principal, including compute viewer, compute admin, and service account user, while creating and managing a GCP Compute Engine VM instance.

Explore cloud identity options in Google Cloud, including login via Google account and Google Groups with identity domain. Learn to create and attach service accounts to virtual machine instances.

Examine Google identity domain and Google workplace, with corporate domains, Google groups, and workspace apps like Gmail, docs, calendar, sheets, slides, chat, meet, plus storage, cloud, and pricing details.

Set up a monthly budget in the Google Cloud Console, assign the project, monitor all services, and configure 60% threshold alerts with email or pub/sub notifications.

Create the billing export for BigQuery, set up a data set, enable standard usage cost and detailed usage cost, and review the export outputs.

Explore Google Cloud Shell, an online Linux-based development and operations environment that emphasizes the CLI for fast troubleshooting, with persistent home storage and an integrated editor.

Learn to upload and download files in Google Cloud Shell, create and manage storage buckets with gsutil, and use copy commands to move images to cloud storage.

Begin section two by planning and configuring cloud solutions, covering pricing calculator, compute resources, data storage resources, and networking resources from Google Cloud. The next section focuses on deployment and implementation.

learn to use the Google Cloud pricing calculator to estimate compute engine costs: instances, OS options, vCPU, RAM, and disk for services like GKE, AI services, and cloud storage.

Watch three pre-videos introducing infra as a service, platform as a service, and software as a service to prepare for section 2.2; complete them to understand section 2.2.

Explore IaaS with AWS as a leading example, outlining provider and consumer responsibilities. Review core AWS services like EC2, S3, VPC, and Route 53, plus regions and availability zones.

Explore platform as a service with azure, where the provider delivers the operating system and infrastructure software, and you host your application via the azure portal.

Explore software as a service and the cloud evolution from IaaS to SaaS, with anything as a service, and examples like desktop as a service, DRaaS, and BaaS.

Learn about spot VMs, formerly preemptible VMs, their steep discounts, and how they may be terminated or restarted for fault-tolerant workloads on Google Cloud.

Compare Google Cloud Compute Engine and container and serverless options, from infra as a service to functions as a service, including App Engine, Cloud Run, and Cloud Functions.

Plan and configure storage options across Cloud SQL, Cloud Spanner, BigQuery, Bigtable, Cloud Storage, Datastore, and Firestore, balancing relational and NoSQL models with vertical and horizontal scaling.

Explore cloud storage scalability, uptime, and storage classes—standard, nearline, coldline, archive—balancing access frequency and cost. Learn to create a bucket with labels, location, security, and encryption.

Section 3 starts the deployment and implementation of compute instances using Cloud Console, Cloud SDK, and shell, covering auto scale managed instance groups, SSH keys, monitoring, logging agent, and quotas.

Explore Compute Engine to create a vm instance in the GCP console, configure regions, machine type, boot disk, and access controls, then use CLI for rapid deployment.

Spin up a Google Cloud VM instance using shell and SDK, compare GUI and CLI workflows, and connect via SSH using the external IP.

Learn to attach and create disks for a GCP VM, including adding new disks, attaching existing ones, and adjusting sizes from 10 to 14 GB.

Explore availability policy options for VM instances in Google Cloud, including standard, spot, on host maintenance, and automatic restart to handle non user initiated events.

Update the lab environment with apt-get, install Python and related plugins, verify Python and pip are ready, then set up net maker and SSH tools for Linux networking tasks.

Master Linux file system navigation from the root directory to nested folders using pwd, ls with options, cd with absolute and relative paths, and commands like sudo and ssh.

Explore Debian and Red Hat Linux distributions and package management across Debian and Red Hat families, including Ubuntu and CentOS, with hands-on apt and yum workflows to install software.

Learn practical Linux file and directory operations, including creating files and directories with touch and mkdir, editing with nano or vi, and managing files with cp, mv, and rm.

Explore essential Linux commands for viewing and managing files and directories, including more, less, cat, head, tail, ls -la, copy, diff, and creating test files on a CentOS Ansible server.

Learn Linux file permissions and process management, including owner, group, and others; use chmod to grant or revoke rwx rights, and monitor processes with top and ps.

Explore essential Linux networking commands and concepts, including ifconfig, ip link and ip address, netstat, route, and dig, with hands-on interface configuration on Ubuntu and manual IP assignment.

Install bind utils on CentOS to use dig for DNS queries (A, MX, CNAME) and host for IP resolution; SSH, IP route, and arp -n for IP-to-MAC bindings.

Explore user defined functions in Python, learn passing arguments, default values, and variable length args (* and **), and build practical programs like area of circle with input and return.

Practice exercises reinforce defining and calling functions, using input and print, applying conditionals to build a calculator, find the biggest among two numbers, and evaluate pass/fail with a 40% threshold.

Learn basic control flow with if and else statements, boolean logic, and comparisons, and practice with lab exercises using user input to decide which prints occur.

Explore while and for loops, including nested iterations and flow chart intuition, with practical Python examples like counting to six, squaring numbers, and iterating dictionaries.

Explore break, continue, and pass in Python loops, showing how break exits, continue skips, and pass acts as a placeholder in a Cisco company string example.

Explore functions and arrays with parameters, return values, local/global scope, recursion, and string slicing, plus fruitful functions and dead code, via Python examples.

Demonstrates recursion through a factorial example, explains string slicing and immutability in Python, and showcases inbuilt string functions like split, replace, and count.

Explore list operations and tuples in Python, focusing on mutability and common methods such as append, extend, insert, pop, remove, reverse, and sort, with for and while loops for iteration.

Explore list mutability, aliasing, and cloning, and master list operations, slices, and list comprehensions, then compare immutable tuples, tuple assignment, and basic tuple operations.

Master Python file handling by reading, writing, and appending text and binary files, with operations like open and close, and use sys to access command line arguments.

Explore Python imports and packages by importing functions from other files, using built-in modules like date, time, and calendar, and packaging code for reuse.

Explore switches and routers, watch videos on MAC VLAN, firewall, and load balancer, and then move into the routing section.

Explore the purpose of mac and IPv4 addresses, distinguishing physical and logical addressing, and learn how mac operates at the data link layer while IPv4 enables global routing via gateways.

Learn how to segment networks with VLANs, create VLANs on switches, assign access ports, and configure trunks with 802.1Q and ISL, including manual and dynamic options.

Explore networking components including switches, routers, firewalls, and load balancers, with a focus on load balancer features across Cisco, NSX, and other vendors.

Explore the evolution to next generation firewalls that block outsiders, implement IPS/IDS rules, and enable web filtering, malware protection, and DNS security at the network edge.

Explore the use and benefits of NSX-T load balancers, including scale-out and high availability, and the architecture with virtual servers, pools, monitors, and tier one gateways.

Move into routing basics and learn VRF, IRB, OSPF, and BGP. Explore IGP concepts, LSA protection, best path selection criteria, and route filtering with labs on routers and switches.

Understand administrative distance as the trustworthiness guiding path selection between IGP and RIP, and learn to tune it with the distance command for traffic engineering and failover using static routes.

Learn the fundamentals of route redistribution between OSPF and RIP in multi-protocol networks, including metrics, default metrics, and two-way redistribution, demonstrated by a lab that reveals potential routing loops.

Discover how two-way redistribution between OSPF and RIP can cause routing loops due to metric differences. Learn to fix loops with distribute lists and ACLs, and tune administrative distances.

Examine route map theory and its use in prefix lists, distribute lists, and ACL-based policies to manage routing and redistribution, with labs on PBR and BGP attributes.

Apply policy based routing using route maps and ACLs to control next-hop selection across two ISP links, demonstrating traffic segregation and load balancing for hosts on a lab network.

The lecture explains virtual routing and forwarding (VRF) as layer 3 virtualization that segments routing tables for customers and networks, with VRF Lite and MPLS for scalable end-to-end segmentation.

Configure a vrf lite lab with a vf and global routing, advertise loopback and link networks via erp, then test connectivity from r1 to r4 and r3.

Enable bidirectional forward detection (bfd) to detect failures in subseconds with low cpu usage, linking to ospf, isis, and ipv6, enabling rapid convergence across routing protocols in asynchronous mode.

Explore eigrp troubleshooting by building a solid erp foundation, with a 13-video playlist covering erp basics, neighbors, topology, routing convergence, labs on load balancing, authentication, and summarization.

Explore how eigrp neighbors form via a three-way handshake (hello, init with null bit, ack) using multicast packets and timers, transitioning from pending to active for routing information in subnet.

Learn how eigrp builds neighbor relationships with hello and init messages, then exchanges reliable and unreliable packets like update, query, and ack, using flags such as rs, eod, and cr.

Explore the ERP metric in EIGRP, including classical and named modes, and learn how bandwidth, delay, throughput, latency, reliability, load, and internal tags shape the formula.

Configure ERP, assign IP addresses to interfaces and a loopback, then verify neighbor, topology, and routing tables; explore IGP, autonomous system, and dual algorithm metrics.

Explore EIGRP load balancing with unequal cost paths using feasible successor and variance, enabling flow-based routing and stub strategies to prevent stuck in active conditions.

Configure eigrp authentication with a keychain and md5 on interface e0/0 to converge neighbors, then explore unequal cost load balancing variance and stub routing.

Explore how to configure ERP with passive interfaces, auto and manual summarization, and authentication, including keychains and metrics, to optimize neighbor relationships and routing in networks.

Practice ERP troubleshooting with a lab, validating baseline IP configurations, redistribution, and best path decisions, using show, log, event history, and debug tools safely.

In this EIGRP troubleshooting lab, diagnose a suboptimal path caused by redistribution with OSPF and fix it by adjusting administrative distance to prefer the internal route.

Learn how OSPF uses a link-state approach with neighbor, topology, and routing tables, guided by the Dijkstra algorithm across area zero and other areas.

Understand ospf lsa types one through five, plus six and seven, abrs (area border routers), dr/bdr, router IDs, inter-area and external routing, and neighbor formation via hello packets and priorities.

Explore OSPF neighbor states from down to full, learn DR and BDR roles on broadcast networks, and perform a lab to build neighbor, topology, and routing tables using area zero.

Configure and verify OSPF in a two-area topology, assign areas zero and 20, advertise networks, and convert E0/0 to point-to-point or broadcast, then test passive interface behavior and neighbor relationships.

Explore OSPF authentication and virtual links, configure plain text or MD5 authentication at the area zero interface, and implement virtual links to connect areas via a transit router.

Configure and verify an OSPF lab with MD5 authentication and a virtual link to make area one transit, enabling authentication keys across area zero, area one, and area two.

Learn how OSPF summarizes area routes to reduce router CPU load using area ranges and default routes, and explore area types, stub, not so stubby, and type seven LSA behavior.

Explore OSPF area types like not-so-stub areas and their default route behavior, and learn to inject default routes with default-information originate and the always option.

Perform a hands-on lab on OSPFv3, configuring IPv6 unicast routing across five virtual routers, verifying neighbors, router IDs, and database content, and exploring self-originated aliases in area zero.

Learn to troubleshoot OSPF adjacency issues between routers by diagnosing authentication mismatches, TTL security, IP subnet errors, and stub configurations, using debugging commands to restore neighbor relationships.

Explain border gateway protocol (BGP) as an exterior gateway protocol that runs over any IGP to connect multiple autonomous systems, using TCP port 179 and offering extensive tunability.

Explore configuring and verifying BGP neighbors, and explain the BGP synchronization rule, including when iBGP full mesh is needed and why synchronization is disabled by default.

Configure a BGP route reflector lab with peer groups, advertise a loopback, verify routes via show commands, and use templates to simplify IBGP and route reflection.

Explore how BGP selects the best path among multiple routes using weight, local preference, med, and origin, with inbound attributes shaping outbound decisions.

Explore BGP best path selection across four autonomous systems by configuring networks, loopback prefixes, prefix lists, and route maps; use weight and local preference to steer next hops.

Use loopback interfaces, prefix lists, and route maps to influence BGP best path selection, setting local preference to route via router three as primary and router four as backup.

Explore AC firewall fundamentals with hands-on labs on basic principles, dynamic routing, NAT tasks, and active active and active passive failovers to gain practical, up-to-date knowledge.

Firewall acts as a gateway between trusted and untrusted zones and performs stateful and stateless filtering of traffic against IP, subnet, and application rules to block malicious access.

Explore azure firewall security labels and zone separation inside, dmz, and outside with 0 to 100 levels, and learn how to permit intra- and inter-interface traffic using dedicated commands.

Explore how a stateful firewall uses dynamic packet filtering, builds a state table during TCP/UDP handshakes, and enforces inside to outside trusted zone rules with flags and connection state.

Build a VIRL-based lab using VM master to design a topology with a virtual firewall, layer-2 switch, and router, then start the simulation and access devices via telnet or SSH.

Enable telnet and ssh across R1, R2 to AC firewall by creating loopback object groups and a single ACL, then configure 1024-bit ssh with Cisco.com and a 15-minute inactivity timeout.

Configure icmp echo and echo-reply rules in an access-list to permit ping from outside to inside and inside to outside, then create a login banner on the inside interface.

Execute a dynamic routing lab implementing eigrp between r1 and the ac firewall, configure md5 authentication on g0/1 interfaces, verify igp neighbor, and prepare for ospf in the next phase.

Configure the OSPF relationship between R2 and ASA1v by removing static routes, setting router IDs, advertising networks in area zero, and enabling MD5 authentication, verifying neighbors.

Redistribute between ERP and OSPF in a two-way setup, configuring ERP to OSPF and OSPF to ERP, then verify connectivity with telnet and ping.

Build a nat lab topology with a firewall and three routers, using loopback addresses to emulate servers, and define inside, dmz, and outside ip schemes for nat configurations in virl.

Configure baseline router and firewall settings using templates, assign hostnames and ip addresses to interfaces and loopbacks, and deploy via scripts across all devices, and verify with show commands.

Configure static auto NAT on the ASA to map the DMZ web server 3333 to the outside address 20.1.1.50, then verify with show commands.

Configure a static manual nat on the asa between inside pc and web server three in the dmz. This identity nat preserves the destination while the source changes.

Integrate the FMC with the FTD and configure inside, DMZ, and ISP. Create a static ISP route, deploy the HQ FTD template, and verify with CLI show routes.

Navigate the firepower HQ FTD CLI and Linux shells across three cells, using expert and sudo su, then verify version, interfaces, and routes with show commands.

Learn to configure auto nat rules for inside to outside and dmz to outside traffic, including translation objects, dynamic vs static rules, and enabling access policies to override implicit deny.

Create, edit, move, and deploy firewall policies to enforce allow or block actions, explore mandatory and base policies, and configure DMZ access for HTTP, SSH, and FTP.

Configure remote ftd interfaces for lan and isp with static ipv4 addresses, push the fmc configuration, set a default route, and review the nat and access policies for testing.

Attach the remote FTD policy to the DNAT rule, deploy the changes to HQ and remote FTDs, and verify connectivity by pinging the public address and testing site access.

Configure an ssl policy with a local ca, generate internal certificates, add a man-in-the-middle policy with decrypt and reassign, define zones and networks, deploy and test.

Verify ssl policy by installing FMC root certificate as a trusted CA on the host and in Firefox and Chrome, then test google.com to confirm trust after browser import.

Verify security policy by testing downloads and uploads from external servers and observing FMC file events, including block, detect, and malware cloud lookup for office documents.

Configure platform settings on the FMC, including banner, SMTP, and syslog with buffer sizes; create and deploy policies across devices from a central management engine.

Configure a hub-and-spoke site-to-site vpn between HQ and remote office using ipsec with ikev2, define hub and spoke endpoints, protected networks, and dynamic crypto maps; deploy policies and verify routes.

Explore the system monitor and health on the FMC dashboard; view audits, syslog, and stats for devices; generate troubleshooting logs and explore health alerts and advanced troubleshooting options.

Navigate FMC to monitor events, filter connections, and view block or SSL events, then explore network maps, host vulnerability reports, and generate HTML network risk reports.

Explore the FMC API explorer workflow, including login, creating an API admin user, and navigating API info and services. Preview the Python programming segment in the next recording.

Master sd-wan basics and bring-up process within a job oriented networking track. Explore video sequence from fundamentals to advanced topics, including cloud automation, Linux, Python, routing, switching, firewall, and firepower.

Explore SD-WAN basics and the decoupled control, management, and orchestration planes. Identify how Vmanage, Vbond, and Vsmart coordinate edge devices, IPsec data planes, and system wide onboarding.

Master plug-and-play deployment with BNP, smart accounts, and the PNP portal. Learn to use vbond, vmanage, and vsmart templates to push configurations and images.

Build and manage device templates and feature templates in vmanage, assemble system-wide and vpn templates (vpn zero, vpn ten, interfaces), and push configuration to edge devices via netconf.

Learn SD-WAN policy fundamentals, including OMB/OMP/BGP route selection, graceful restart, and the building blocks of centralized and localized data and control policies with match-action rules.

Explore control policy and multi topology routing by building policies with policy building blocks, deploying them via Vmanage and Vsmart, and implementing route leaks between VPN ten and VPN 20.

Learn to design and apply sd-wan control and data policies for a two-DC topology, using site lists and prefixes to route branches to DC1 or DC2, with cflow collection.

Explore application aware routing policy in sd-wan by configuring data policies, app route policies, and sla-driven path selection between mpls and internet, using bfd to measure loss latency and jitter.

Explore vpn membership policy that restricts ipsec tunnels to vpn ten and vpn twenty while vpn forty accesses the internet, and how local policy in device templates controls route policy.