click below
click below
Normal Size Small Size show me how
N+ 2.Implementations
2 > Network Implementations
Term | Definition |
---|---|
VoIP | Voice over Internet Protocol |
POTS | Plain Old Telephone Service |
HVAC | Heating, Ventilation, and Air Conditioning |
IoT | Internet of Things |
SCADA/ICS | Supervisory Control and Data Acquisition / Industrial Control Systems |
Hub | Multi-port Repeater - traffic going in one port is repeated to every other port - OSI 1 - half duplex |
Bridge | Connects two different networks - can connect two different topologies - OSI 2 -- distributes traffic based on MAC address - e.g. modern bridge > wireless access point -- bridges wired Ethernet to wireless |
Switch | Bridging done in hardware OSI 2 - ASIC Application specific integrated circuit - forwards traffic based on data link address |
Router | Routes traffic between IP subnets OSI 3 - routers inside of switches sometimes called "layer 3 switches" - L2 = switch - L3 = router - often connects diverse network types -- LAN, WAN, copper, fibre |
Access Point | NOT a wireless router OSI 2 - a wireless router is a router and an access point in a single device. An access point is a bridge - extends the wired network onto the wireless network |
Cable Modem | Broadband |
DSL / ADSL | Asymmetric Digital Subscriber Line - dl faster than ul |
Repeater | Receive signal, regenerate, resend |
Media Converter | OSI 1 Exend a copper wire over a long distance - convert it to fibre and back again |
ASIC | Application specific integrated circuit |
Layer 3 Capable Switch | A switch L2 and router L3 in the same physical device |
Wireless LAN Controllers | Centralized management of access points |
Load Balancer | - configurable load - TCP offload - SSL offload - Caching - Prioritization - Content switching |
IDS / IPS | Intrusion Detection System / Intrusion Prevention System - exploits against os, applications, etc - buffer overflows, XXS, etc |
Proxies | Sits between the users and the external network - receives the user requests and sends the request on their behalf - useful for caching info, access control, URL filtering, content scanning |
Application Proxies | Most proxies in use are app proxies |
VPN Concentrator | Concentrator / head-end - enc/dec access device - often integrated into firewall |
PBX | Private Branch Exchange - analog telephone lines to each desk |
VoIP PBX | Integrate VoIP devices with a corporate phone switch |
Voice Gateway | Convert between VoIP protocols and traditional PSTN (Public Switched Telephone Network) protocols - often built in to VoIP PBX |
Network-based Firewalls | Filter traffic by port number or application Encrypt traffic - VPN between sites Most firewalls can be L3 devies - often sits on the ingress/egress of the network - NAT - Dynamic Routing |
Dynamic Routing Protocols | Listen for subnet info from other routers Provide subnet info to other routers Determine the best path based on the gathered info When network changes occur, updatae the available routes |
Distance-vector Routing Protocols | Info passed between router contains network details - will take the shortest hops, no matter if it is faster otherwise |
RIP | Routing Information Protocol 520 |
EIGRP | Enhanced Interior Gateway Protocol |
Link-state Routing Protocols | Info passed between routers is related to the current connectivity |
OSPF | Open Shortest Path First - large, scalable routing protocol |
Hybrid Routing Protocols | A little link-state, a little distance-vector - BGP Border Gateway Protocol -- determines route based on paths, network policies, or configured rule-sets |
BGP | - BGP Border Gateway Protocol -- determines route based on paths, network policies, or configured rule-sets |
Routing Tables | A list of directions for your packets - a table with many routes to your destination - packet stop at every router and ask for directions Routing tables in routers, workstations, and other devices |
The Hop | A hop - a packet passes through a router - router doesn't need to know how to get everywhere --it just needs to know how to get out of here |
Administrative Distances | Used by the router to determine which routing protocol has priority |
Traffic Shaping | Control by bandwidth usage or data rates - Manage the QoS |
MAC Address | Ethernet Media Access Control Address - the "physical" address of a network adapter - 48 bits/6 bytes long - hexadecimal 8c:2d:aa: / 4b:98:a7 -- OUI Organizationally Unique Identifier / Network Interface Controller Specific (serial number) |
Duplex | Half - cannot send and receive simultaneously Full - data can be sent and received |
CSMA/CD | Carrier Sense Multiple Access / Collision Detection |
The Ethernet Frame | - Preamble 7 - Start frame delimiter 1 - Destination MAC 6 - Source MAC 6 - EtherType 2 - Payload 46-1500 - Frame Check Sequence |
The Switch | -Forward or drop frames based on the destination MAC address -Gather a constantly updating list of MAC addresses -Maintain a loop-free environment --using STP |
ARP | Address Resolution Protocol - determine a MAC address based on an IP address = arp -a == view local ARP table |
NDP IPv6 | Neighbour Discovery Protocol - no broadcasts - neighbour MAC Discovery |
PoE | Power over Ethernet |
LAN | Local Area Networks - group of devices in the same broadcast domain |
VLAN | Virtual LAN - group of devices in the same broadcast domain - separated logically instead of physically |
802.1Q Trunking | VLAN Trunk - we can send multiple VLANs across that trunk and break them out into the appropriate VLAN on the other side - VLAN header added to ethernet fame after Source MAC |
Loop Protection | 802.1D IEEE to prevent loops |
STP | Spanning Tree Protocol States - Blocking - Listening - Learning - Forwarding - Disabled |
Root Port | - interface that is closest to root of network |
Designated Port | - all other operational ports on every other bridge |
Blocked Ports | SPT identifies potential loops and will disable or block individual ports so that a loop will not occur |
RSTP | Rapid STP 802.1W |
Speed and Duplex | 10/100/1000/10GB - half/full -auto and manual - needs to match on both sides |
IP Address Management | - OSI 3 interfaces - VLAN interfaces - management interfaces - IP address, subnet mask/CIDR block, default gateway, DNS |
LACP | Link Aggregation Control Protocol - multiple interfaces acts like one big interface |
Port Mirroring | - copy traffic from one interface - packet captures |
Jumbo Frames | Ethernet frames with more than 1500 bytes - 9000 bytes is the norm |
Port Security | - prevent unauthorized users from connecting to a switch interface > alert or disable port - based on source MAC address |
Straight-through cables | - patch cables - most common Ethernet cable - connect workstations to network devices |
MDI | Media Dependent Interface - NIC |
MDI-X | Media Dependent Interface Crosser - Network Switch |
Cross-over cables | - Connect MDI to MDI - Connect MDI-X to MDI-X - Auto MDI-X is on most ethernet devices |
Workstation to Switch? | ST |
Router to Switch? | ST |
Switch to Switch? | C |
Router to Router? | C |
Workstation to Workstation? | C |
Workstation to Router? | C - workstations and routers are both MDI devices so crossover |
802.11 | Wireless Networking |
802.11n | -4G -2.4/5GHz - 40MHz channels - 600Mb/s - 4 x MIMO |
MIMO | Multiple input multiple output |
802.11ac | -5G -5GHz -up to 160MHz channels -8 MU-MIMO downlink streams -~7Gb/s |
MU-MIMO | Multiple User MIMO |
802.11ax | -6G 2.4/5GHz - 20/40/80/160MHz channels - 9.6Gb/s - 8 bidirectional MU-MIMO streams - OFDMA |
OFDMA | Orthogonal frequency-division multiple access - improves high density installations |
IBSS | Independent Basic Service Set - two devices communicate directly using 802.11 -- no access point required -Ad hoc |
SSID | Service Set Identifier - every wireless network needs a name |
BSSID | Basic Service Set Identifier - hardware address of an access point - MAC address |
ESSID | Extended Service Set Identifier -network name shared across access points |
Omnidirectional antenna | - signal is evenly distributed on all sodes |
Directional antenna | - send and receive in a single direction - increased distances - e.g. yagi, parabolic |
WPA2 | - wi-fi protected access |
CCMP block cipher mode | Counter Mode with Cipher Block Chaining Message Authentication Code Protocol Counter/CBC-MAC Protocol |
WPA3 | - wi-fi protected access 3 |
GCMP block cipher mode | Galois/Counter Mode Protocol |
SAE WPA3 | Simultaneous Authentication of Equals - everyone uses a different session key, even with the same PSK |
GSM | Global System for Mobile Communications |
CDMA | Code Division Multiple Access |
LTE | Long Term Evolution - 4G - converged standard (GSM CDMA) 150Mb/s |
LTE-A | LTE Advanced - 300Mb/s |
5G | - 10Gb/s |