Learn / Labs / Tools

Networking & Remote Access

DNS, connectivity, routing, ports and protocols, VPN, remote access, file-transfer access paths, and network-facing operational troubleshooting.

3 guides10 labs9 tools1 capability mapsBrowse all topic paths

Capability Maps

How this path becomes useful work

Host Connectivity and Service Health

Check whether a host and required service are reachable before guessing at firewall, DNS, or app fixes.

Free boundary
Standalone checks, local host lists, local CSV or console output, and clear validation without a shared reporting suite.
Paid value later
Inventory-driven targeting, history, dashboards, scheduled runs, alert routing, ticket payloads, and polished multi-environment reporting.
01

Learn

Understand Networking & Remote Access

Technical guides that explain the concepts, architecture, decisions, and durable operator patterns.

02

Labs

Practice Networking & Remote Access

Hands-on labs that turn the concepts into working systems and repeatable environments.

Build a Home Network Visibility Dashboard with ntopng, Syslog, and VLAN Traffic SummariesBuild an ntopng visibility dashboard around one explicit traffic-observation topology, then prove traffic from the intended VLANs actually reaches the sensor and is attributed correctly.Network VisibilityIntermediate2-3 hoursBuild a Raspberry Pi Split-Tunnel Travel Gateway with WireGuardBuild one concrete two-interface Raspberry Pi travel-gateway topology, route only home-lab subnets through WireGuard, and prove behavior from a genuinely external network.Admin AccessIntermediate2-3 hoursBuild a Restricted Tailscale RDP Administration PathCreate one explicit Windows remote-admin path where RDP is reachable only over the intended Tailscale network and identity policy, then prove both allowed and denied access paths.Admin AccessIntermediate2-3 hoursBuild a Small Identity Lab with Authentik or KeycloakCreate one small identity-provider Lab using either Authentik's official Compose bundle or Keycloak's current development container, then validate a realm/application/user flow...Identity and SecretsIntermediate90-150 minutesBuild a Small Office Network Monitoring Stack with LibreNMS, Syslog, and Alert RoutingBuild a small-office monitoring path that proves one SNMP device, one syslog event, and one routed alert end to end instead of installing three disconnected products.Network VisibilityIntermediate4-6 hoursCreate a Secondary Pi-hole DNS Node and Test Resolver ResilienceBuild an independent secondary Pi-hole resolver, align the settings that should match the primary, and test both resolvers before advertising them together to clients.Local DNSIntermediate90-120 minutesCreate a WireGuard plus Split DNS Lab for Secure Remote Access to Self-Hosted ServicesBuild a two-client WireGuard lab with split DNS, explicit routing, resolver selection, firewall/NAT boundaries, and deterministic failover/teardown tests.Local DNSIntermediateApproximately 2 hoursCreating a WireGuard Jump Host with MFA-Friendly Access PatternsBuild a WireGuard transport to a hardened jump host, then enforce MFA at the administrative login boundary instead of implying that WireGuard itself provides MFA.Remote NetworkingIntermediate2-3 hoursPowerShell Health-Check Pack for Active Directory, DNS, DHCP, and Certificate ExpirationBuild a parameterized PowerShell health-check pack with testable AD, DNS, DHCP, and certificate functions, structured results, and controlled negative tests.Local DNSIntermediate2-3 hoursSmall Office DHCP and DNS Evidence Audit with PowerShellCollect DHCP scopes/leases and DNS records read-only, then run explicit stale/conflict checks instead of changing execution policy or treating raw exports as an audit conclusion.Local DNSIntermediate2-3 hours
03

Tools

Operate Networking & Remote Access

Free operator tools for checks, scripts, evidence, reporting, and practical infrastructure work.

DHCP scope utilization reportA read-only DHCP scope report that surfaces high utilization, exhausted ranges, and cleanup candidates.ScriptConnectivity and Network TriageRead-onlyDNS and DHCP Health CheckA read-only two-client DNS failure workflow that collects the same evidence on the affected and known-good Windows clients, compares suffix, resolver, cache, and query paths side by side, and narrows the first actual delta before any reset.ChecklistDNS and DHCPRead-onlyDNS resolution and reverse lookup auditA read-only DNS audit that compares forward and reverse lookup results across host lists and expected DNS servers.ScriptConnectivity and Network TriageRead-onlyFree network scanner and port inventory guideA practical guide to free network scanning options for host discovery, port inventory, and safe scan scoping.Recommended toolFreeware Utilities Worth KeepingReview before runningPowerShell server connectivity quick checkA concise read-only connectivity triage script that separates DNS, ICMP reachability, and expected TCP-port failures before escalation.ScriptConnectivity and Network TriageRead-onlyRDP Connectivity ChecklistA structured check for RDP failures before changing firewall rules, user rights, or server policy.ChecklistRemote AccessRead-onlyRDP failure triage scriptA read-only RDP triage script pattern for DNS, TCP 3389, listener state, firewall evidence, sessions, and event logs.ScriptConnectivity and Network TriageRead-onlySysinternals first-response kit guideA practical Sysinternals first-response map for process, file handle, startup, network, login, and registry symptoms.Recommended toolFreeware Utilities Worth KeepingRead-onlyWireshark packet capture triage guideA packet-capture triage guide for DNS, TLS, DHCP, SMB, RDP, retransmissions, and sensitive-data handling.Recommended toolConnectivity and Network TriageReview before running