diff --git a/docs/src/overview/network-physical-wiring.drawio.svg b/docs/src/overview/network-physical-wiring.drawio.svg
new file mode 100644
index 0000000000..de80b9b32d
--- /dev/null
+++ b/docs/src/overview/network-physical-wiring.drawio.svg
@@ -0,0 +1,510 @@
+
diff --git a/docs/src/overview/network-vrfs.drawio.svg b/docs/src/overview/network-vrfs.drawio.svg
new file mode 100644
index 0000000000..a274bb0b42
--- /dev/null
+++ b/docs/src/overview/network-vrfs.drawio.svg
@@ -0,0 +1,496 @@
+
diff --git a/docs/src/overview/networking.md b/docs/src/overview/networking.md
index 0bf0850764..3cf350c310 100644
--- a/docs/src/overview/networking.md
+++ b/docs/src/overview/networking.md
@@ -189,11 +189,18 @@ Reference: See the [CLOS overview picture](#CLOS)
| Management Server | Jump-host to access all network switches within the CLOS topology for administrative purpose. |
| Management Switch | Connected to the management port of each of the network switches. |
+![Physical Wiring](network-physical-wiring.drawio.svg)
+
+> Picture 5: This illustration shows an example of a suitable physical wiring inside a metal-stack partition.
Tenant servers are organized into a layer called projects. In case those tenant servers require access to or from external networks, a new tenant server to function as a firewall is created. Leaf and spine switches form the fundament of the CLOS network to facilitate redundancy, resilience and scalability. Exit switches establish connectivity to or from external networks. Management Switch and Management Server are mandatory parts that build a management network to access the network switches for administration.
To operate the CLOS topology, software defined configuration to enable BGP, VRF, EVPN and VXLAN must be set up.
+![Network VRFs across the different switch layers](network-vrfs.drawio.svg)
+
+> Picture 6: This illustration shows the VRF tenant separation and VRF termination happening on the firewall for the tenant VRF and external network VRFs.
+
### Network Operating Systems
SONiC as the network operating system will be installed on all network switches (leaves, spines, exit switches) within the CLOS topology. SONiC cannot be installed on bare metal servers that require BGP/EVPN but does not have a switching silicon.