> For the complete documentation index, see [llms.txt](https://docs.vergeos-demo.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.vergeos-demo.com/learn-the-platform/module-4-networking/04-networking.md).

# Overview

## Learning Objectives

By the end of this module, you will be able to:

* **Configure external and internal networks** in VergeOS for production workloads
* **Set up VLANs and firewall rules** to segment and secure network traffic
* **Configure dynamic routing** (BGP/OSPF) for enterprise environments
* **Troubleshoot common networking issues** using VergeOS diagnostic tools

## Prerequisites

* Completion of [Module 1: Architecture Fundamentals](/learn-the-platform/module-1-architecture-fundamentals/01-architecture.md) -- understanding of core fabric networking
* Completion of [Module 3: Installation](/learn-the-platform/module-3-installation/03-installation.md) -- a running VergeOS cluster to configure

## Estimated Time

**3 hours** (1.5 hours reading + 1.5 hours lab)

## Topics

* [**Network Concepts & Types**](/learn-the-platform/module-4-networking/01-network-concepts.md) — The VergeOS networking model: network types (internal, external, core, DMZ, maintenance), default-secure isolation, and software-defined networking fundamentals.
* [**External Networks**](/learn-the-platform/module-4-networking/02-external-networks.md) — Connecting VergeOS to upstream physical networks, IP addressing, gateway configuration, bonding modes, and provider network integration.
* [**Internal Networks & DHCP/DNS**](/learn-the-platform/module-4-networking/03-internal-networks.md) — Creating isolated virtual networks for workloads, built-in DHCP and DNS services, inter-network routing via DMZ, and tenant self-service networking.
* [**Firewall Rules, NAT & VLANs**](/learn-the-platform/module-4-networking/04-firewall-nat-vlans.md) — Rule types (accept/drop/reject, NAT/PAT translate), rule processing order, VLAN trunking, VPN overview (WireGuard/IPsec), and micro-segmentation.
* [**Lab: Network Configuration**](/learn-the-platform/module-4-networking/lab.md) — Build a multi-network environment with external access, internal segmentation, and firewall rules.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.vergeos-demo.com/learn-the-platform/module-4-networking/04-networking.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.