Mujtaba Khattak
Mujtaba Khattak is a network solutions architect specializing in SD-WAN, cloud infrastructure, and network optimization. He holds a BS in Artificial Intelligence from SZABIST, an MBA from Virtual University (VU), and Cisco certifications (CCNA and CCNP). As the founder of NetworkUstad.com, He produce technical guides and tutorials on networking, cybersecurity, and AI applications.
Spanning Tree Root Bridge: Election, Bridge ID, and Configuration
Every spanning-tree-enabled switched network has a single switch designated as the root bridge. It serves as the reference point every other switch in the broadcast domain measures its path against, and the spanning tree algorithm uses it to determine which redundant paths to block. The root bridge is chosen through an automatic election process every...
Spanning Tree Port Roles Explained: Root, Designated, Alternate, and Backup
Spanning Tree Protocol doesn’t block loops by disabling switches. It blocks loops by assigning every active port a specific role, then forwarding or blocking traffic based on that role alone. Understanding what each role does — and which roles belong to classic STP versus Rapid STP — is the difference between reading a show spanning-tree...
Network Redundancy: Layer 1/2 Loops, STP, and Failover Design
Network redundancy means building more than one path for data to travel, so a single failed link or device doesn’t take down access to network resources entirely. It’s a foundational design principle behind the three-tier hierarchical model (core, distribution, access), and it comes with a real, important trade-off: physical redundancy alone can create Layer 2...
How to Configure Port Address Translation (PAT)
Port Address Translation (PAT), also called NAT overload, lets many internal devices share a single public address, distinguished from each other by port number rather than needing a separate address for each device. This is the guide that completes our shared NAT lab — if you’ve worked through Static NAT and Dynamic NAT already, PAT...
How to Configure Dynamic NAT
Dynamic NAT automatically maps inside local addresses to a pool of inside global addresses, first-come-first-served — the middle ground between static NAT’s permanent one-to-one mappings and PAT’s many-to-one port sharing approach. It’s the right choice when a known, moderate number of internal devices need outbound internet access, without needing a dedicated public address reserved for...
How to Configure Static NAT on Cisco Routers
Static NAT maps inside and outside addresses one-to-one. It allows external devices to establish a session with internal devices using a statically assigned public address. For example, an internal web server is mapped to a specific inside global address, letting outside clients reach it using a public IP while the server itself keeps its private...
What Are the Types of NAT Translation?
There are three types of NAT: static NAT, dynamic NAT, and Port Address Translation (PAT), also called NAT overload. They all solve the same underlying problem — mapping private addresses to public ones — but they differ significantly in how permanent the mapping is and how many public addresses they actually require to function. This...
NAT Terminology Explained: CCNA 200-301 Must-Know Address Types
As discussed before, NAT translates private IP addresses into public IP addresses. In the process of translation, there are different operations involved, and understanding each of them requires understanding NAT terminology. Before understanding NAT in detail, it is important to understand the four NAT address types — inside local, inside global, outside local, and outside...
Configuring a Stateful DHCPv6 Server on a Cisco Router
Stateful DHCPv6 is the IPv6 mode that behaves the way DHCPv4 always has: the server assigns the address itself, tracks which client has which address, and hands out supplementary options alongside it — no SLAAC involved on the client side at any point. That’s the core distinction from stateless DHCPv6, and it changes almost every...
SLAAC and DHCPv6
Recall that the router sends a Router Advertisement (RA) message, and the settings within that RA message decide whether a client can obtain its IPv6 address information automatically using SLAAC, DHCPv6, or a combination of both. This guide covers both methods, the three possible RA flag combinations, and how to configure and verify each on...