System Management

Course at a glance

• 40 lessons in 11 units.
• Format: self-paced lessons with Cisco IOS configurations, show command output, and video.
• Last updated: October 2026.

What is System Management?

System management is everything you do to keep your network devices running, secure, and under control. It includes the operating system itself (the filesystem, boot process, images, and licenses), access to the device, configuration changes, and monitoring. Most of it is done with protocols that every network uses: SSH for remote access, AAA with RADIUS or TACACS+ for authentication, Syslog and SNMP for monitoring, NTP for time, and CDP or LLDP to find out what’s connected where.

Why does it matter? When something breaks, you want to know about it before your users call, and you want to know exactly what happened and when. That only works when your devices send Syslog messages and SNMP traps to a central server and their clocks are synchronized with NTP. Archives and change logging tell you who changed what. On the security side, you don’t want Telnet in plaintext or a single shared password; you want SSH, central AAA, and protection for the control plane so an attack can’t overload the CPU.

Who needs it? Every network engineer who manages routers and switches. These tools are also the foundation of network monitoring systems and of newer approaches like cloud-managed networks, where a dashboard takes over many of these tasks.

System Management Learning Roadmap

This roadmap follows the course units. Each topic has a short explanation and links to the lessons where we cover it in detail.

Cisco IOS Basics

Cisco IOS has a filesystem, just like your computer: the IOS image is stored on flash memory and the startup configuration on NVRAM. When a router boots, it runs a POST, loads a bootstrap program, and then boots the first IOS image it finds unless you tell it otherwise with the boot system command. The configuration register (0x2102 by default) controls settings like the console speed and whether the router ignores NVRAM. We also cover how to upgrade an image with TFTP, FTP, or SCP, how licensing works, and how IOS XE differs from IOS: it runs IOS as a process on top of Linux.

Device Access, Security and AAA

By default, you can access user and privileged mode without a password, so the first step is to secure them. If you lock yourself out, password recovery through the console and the configuration register gets you back in. For remote access, Telnet is easy but sends everything in plaintext, so we use SSH instead. With many devices, local usernames become an administrative nightmare. AAA lets you use a central RADIUS or TACACS+ server for authentication, authorization, and accounting, and privilege levels, combined with local command authorization, let you decide which commands a user can run. We also configure AAA on a switch with 802.1X, and install a TACACS+ server on Linux.

Configuration Management

Copying a file to the running configuration merges it with the current configuration; it doesn’t replace it, which surprises many people. To replace a configuration, you use configure replace. The archive feature creates snapshots of your configuration, so you can compare versions and roll back. Configuration change notification and logging keeps track of every change and the user who made it, and can send it to a Syslog server.

Logging and Monitoring

Syslog messages tell you in real time when something interesting happens, like an interface going down. They have eight severity levels, from 0 (emergency) to 7 (debug), and you can store them locally or send them to a Syslog server. SNMP lets a network management system poll devices and receive traps. SNMPv2 uses a community string without encryption, while SNMPv3 adds users, authentication, and encryption. NetFlow tracks the flows in your network, so you can see which applications use your bandwidth.

NTP, CDP and LLDP

Log messages are only useful when the timestamps are correct, so your devices synchronize their clocks with NTP over UDP port 123. NTPv4 adds IPv6 support and better security. CDP and LLDP are layer two discovery protocols that tell you which devices are directly connected, on which interfaces, and with which IP addresses. CDP is Cisco proprietary and enabled by default; LLDP (IEEE 802.1AB) is the open standard, so it also works with other vendors and devices like IP phones.

Troubleshooting, Performance and EEM

Traceroute shows the path to a destination, so you can find where traffic stops. Conditional debugging filters debug output to a single interface or other condition, which keeps a busy router usable. Embedded Packet Capture (EPC) captures packets on the router itself and exports them as a PCAP file for Wireshark, and ERSPAN uses GRE to send mirrored traffic across a routed network. Performance Monitor extends Flexible NetFlow with metrics like jitter and packet loss. With Embedded Event Manager (EEM), the router runs commands automatically when an event occurs, for example when a Syslog message shows up or IP SLA reports a failure.

Control and Management Plane Protection

Routers have to process routing protocol, management, and other packets destined to themselves. When the route processor receives too many of these packets, it can’t keep up. A router security policy describes how you protect your routers in a consistent way. CoPP (Control Plane Policing) uses class-maps and policy-maps to rate limit traffic to the control plane, and MPP (Management Plane Protection) restricts which interfaces and protocols, like SSH and SNMP, are allowed to manage the router.

Network Maintenance and Cloud Management

Network maintenance is everything you do to keep a network running: troubleshooting, installing hardware and software, monitoring performance, documentation, and security. Structured tasks are planned in advance; interrupt-driven tasks are the problems you fix when they happen. Maintenance models like FCAPS help you organize this. Cloud-managed networks, like Cisco Meraki, move management to a cloud dashboard with features like zero-touch provisioning.

Ready to master System Management?

Get access to all 40 System Management lessons and every other course on NetworkLessons.com.

Sign up