Free tech learning for everyone, from basics to pro

ProjectsLabsBeginner

Project: documenting a network (diagrams, IP plan, runbooks)

In short: Good documentation is what lets someone else run your network at 3 a.m. In this project you document a lab or small network properly, with diagrams at the right layers, an IP plan, an inventory, runbooks and a change log, and turn it into a strong portfolio piece.

Goal and requirements

The goal is a documentation set that a new engineer could use to understand, support and safely change a network without asking you. It is one of the most valued and least practised skills in junior engineers, so it stands out on a CV.

  • A network to document: your home lab, a Packet Tracer design such as the small office project, or, with written permission, a real small network. Remove anything sensitive.
  • Tools: diagrams.net (draw.io) or similar; a spreadsheet or NetBox for IP addresses and devices; Markdown in Git for runbooks.
  • Standards: consistent names, icons, colours and a legend on every diagram.
A complete network documentation setNetwork docskept in one placeDiagramsL1, L2, L3IP plansubnets, VLANsInventorydevices,versionsRunbookshow-to tasksChange logwhat, who, why
Figure 1. Five document types cover what an engineer needs to understand, operate and change a network.

Design

Physical versus logical diagramPhysical (Layer 1)Racks, devices, portsCable IDs and mediaPatch panelsUsed for cabling workLogical (Layer 3)Subnets and gatewaysRouting and VPNsFirewalls and zonesUsed for design and faults
Figure 2. Physical diagrams show where things are plugged in; logical diagrams show how traffic flows.

Agree a naming convention first, for example site-role-number such as hq-sw-01 and br1-rtr-01. Then build the IP plan, because diagrams refer to it.

VLANNameSubnetGatewayDHCP range
10STAFF192.168.10.0/24192.168.10.1.100 to .200
20GUEST192.168.20.0/24192.168.20.1.100 to .250
30VOICE192.168.30.0/24192.168.30.1.100 to .200
99MGMT192.168.99.0/24192.168.99.1None (static)

The VLSM calculator helps you size subnets without waste.

Build plan

  1. Discover: collect facts from each device with read-only commands and save the output.
  2. Fill in the inventory: hostname, model, serial, software version, management IP, location, support status.
  3. Draw the physical diagram, then the Layer 2 (VLANs, trunks) and Layer 3 (subnets, routing) diagrams. Add a legend, date and version to each.
  4. Write three runbooks with numbered steps, verification and rollback: add a VLAN, replace a failed switch, restore a config backup.
  5. Start a change log and record every change from now on.
  6. Optional: load the data into NetBox so it becomes a source of truth for automation.
show version
show inventory
show ip interface brief
show interfaces status
show vlan brief
show interfaces trunk
show cdp neighbors detail
show lldp neighbors detail
show ip route
show running-config
git clone -b release https://github.com/netbox-community/netbox-docker.git
cd netbox-docker
docker compose pull
docker compose up -d

Deliverables and how to present it

  • Three diagrams (physical, L2, L3) exported as PDF and kept as editable source files.
  • IP plan and inventory as a spreadsheet or NetBox export.
  • Three runbooks and a change log template with sample entries.
  • A one-page "network at a glance" summary for managers.

On a CV: "Produced full documentation for a 4-VLAN, two-site network: layered diagrams, IP plan, inventory and runbooks with rollback steps." Interviewers often ask, "How would you hand over a network?" This project is your answer. Never publish real public IP addresses, serial numbers or passwords from any employer.

Practice

Why draw separate physical and logical diagrams?
They answer different questions: where cables go versus how traffic is routed and filtered; one crowded diagram does both badly.
What three parts should every runbook include?
Numbered steps, a way to verify success, and a rollback plan if it goes wrong.
Why create the IP plan before the diagrams?
Diagrams label subnets, gateways and VLANs from the plan, so the plan must exist and be agreed first.

Key takeaways

  • Agree naming conventions before you document anything.
  • Keep physical, Layer 2 and Layer 3 diagrams separate, with legends.
  • An IP plan and inventory are the backbone of the set.
  • Runbooks need steps, verification and rollback.
  • Remove sensitive data before sharing any documentation.
Tracks your learning on this device only. See your progress on the learning paths.

About the author

Mohamed Fayas

Founder of FM TecHub. CCNA certified, with a BTEC HND in Network Engineering, and BEng (Hons) in Computer Networking and Cloud Security. He writes practical, plain-English guides on networking, security and cloud.

More about the author

Original content written by Mohamed Fayas for FM TecHub. © 2026 FM TecHub. You're welcome to share a link to this page; please don't copy the text elsewhere without permission.

Stay up to date by email

New notes, tools and security news from FM TecHub, explained simply. Free.

We only use your email to send these updates. See our privacy policy.