click below
click below
Normal Size Small Size show me how
N+ 2.Implementations
2 > Network Implementations
| Term | Definition |
|---|---|
| VoIP | Voice over Internet Protocol |
| POTS | Plain Old Telephone Service |
| HVAC | Heating, Ventilation, and Air Conditioning |
| IoT | Internet of Things |
| SCADA/ICS | Supervisory Control and Data Acquisition / Industrial Control Systems |
| Hub | Multi-port Repeater - traffic going in one port is repeated to every other port - OSI 1 - half duplex |
| Bridge | Connects two different networks - can connect two different topologies - OSI 2 -- distributes traffic based on MAC address - e.g. modern bridge > wireless access point -- bridges wired Ethernet to wireless |
| Switch | Bridging done in hardware OSI 2 - ASIC Application specific integrated circuit - forwards traffic based on data link address |
| Router | Routes traffic between IP subnets OSI 3 - routers inside of switches sometimes called "layer 3 switches" - L2 = switch - L3 = router - often connects diverse network types -- LAN, WAN, copper, fibre |
| Access Point | NOT a wireless router OSI 2 - a wireless router is a router and an access point in a single device. An access point is a bridge - extends the wired network onto the wireless network |
| Cable Modem | Broadband |
| DSL / ADSL | Asymmetric Digital Subscriber Line - dl faster than ul |
| Repeater | Receive signal, regenerate, resend |
| Media Converter | OSI 1 Exend a copper wire over a long distance - convert it to fibre and back again |
| ASIC | Application specific integrated circuit |
| Layer 3 Capable Switch | A switch L2 and router L3 in the same physical device |
| Wireless LAN Controllers | Centralized management of access points |
| Load Balancer | - configurable load - TCP offload - SSL offload - Caching - Prioritization - Content switching |
| IDS / IPS | Intrusion Detection System / Intrusion Prevention System - exploits against os, applications, etc - buffer overflows, XXS, etc |
| Proxies | Sits between the users and the external network - receives the user requests and sends the request on their behalf - useful for caching info, access control, URL filtering, content scanning |
| Application Proxies | Most proxies in use are app proxies |
| VPN Concentrator | Concentrator / head-end - enc/dec access device - often integrated into firewall |
| PBX | Private Branch Exchange - analog telephone lines to each desk |
| VoIP PBX | Integrate VoIP devices with a corporate phone switch |
| Voice Gateway | Convert between VoIP protocols and traditional PSTN (Public Switched Telephone Network) protocols - often built in to VoIP PBX |
| Network-based Firewalls | Filter traffic by port number or application Encrypt traffic - VPN between sites Most firewalls can be L3 devies - often sits on the ingress/egress of the network - NAT - Dynamic Routing |
| Dynamic Routing Protocols | Listen for subnet info from other routers Provide subnet info to other routers Determine the best path based on the gathered info When network changes occur, updatae the available routes |
| Distance-vector Routing Protocols | Info passed between router contains network details - will take the shortest hops, no matter if it is faster otherwise |
| RIP | Routing Information Protocol 520 |
| EIGRP | Enhanced Interior Gateway Protocol |
| Link-state Routing Protocols | Info passed between routers is related to the current connectivity |
| OSPF | Open Shortest Path First - large, scalable routing protocol |
| Hybrid Routing Protocols | A little link-state, a little distance-vector - BGP Border Gateway Protocol -- determines route based on paths, network policies, or configured rule-sets |
| BGP | - BGP Border Gateway Protocol -- determines route based on paths, network policies, or configured rule-sets |
| Routing Tables | A list of directions for your packets - a table with many routes to your destination - packet stop at every router and ask for directions Routing tables in routers, workstations, and other devices |
| The Hop | A hop - a packet passes through a router - router doesn't need to know how to get everywhere --it just needs to know how to get out of here |
| Administrative Distances | Used by the router to determine which routing protocol has priority |
| Traffic Shaping | Control by bandwidth usage or data rates - Manage the QoS |
| MAC Address | Ethernet Media Access Control Address - the "physical" address of a network adapter - 48 bits/6 bytes long - hexadecimal 8c:2d:aa: / 4b:98:a7 -- OUI Organizationally Unique Identifier / Network Interface Controller Specific (serial number) |
| Duplex | Half - cannot send and receive simultaneously Full - data can be sent and received |
| CSMA/CD | Carrier Sense Multiple Access / Collision Detection |
| The Ethernet Frame | - Preamble 7 - Start frame delimiter 1 - Destination MAC 6 - Source MAC 6 - EtherType 2 - Payload 46-1500 - Frame Check Sequence |
| The Switch | -Forward or drop frames based on the destination MAC address -Gather a constantly updating list of MAC addresses -Maintain a loop-free environment --using STP |
| ARP | Address Resolution Protocol - determine a MAC address based on an IP address = arp -a == view local ARP table |
| NDP IPv6 | Neighbour Discovery Protocol - no broadcasts - neighbour MAC Discovery |
| PoE | Power over Ethernet |
| LAN | Local Area Networks - group of devices in the same broadcast domain |
| VLAN | Virtual LAN - group of devices in the same broadcast domain - separated logically instead of physically |
| 802.1Q Trunking | VLAN Trunk - we can send multiple VLANs across that trunk and break them out into the appropriate VLAN on the other side - VLAN header added to ethernet fame after Source MAC |
| Loop Protection | 802.1D IEEE to prevent loops |
| STP | Spanning Tree Protocol States - Blocking - Listening - Learning - Forwarding - Disabled |
| Root Port | - interface that is closest to root of network |
| Designated Port | - all other operational ports on every other bridge |
| Blocked Ports | SPT identifies potential loops and will disable or block individual ports so that a loop will not occur |
| RSTP | Rapid STP 802.1W |
| Speed and Duplex | 10/100/1000/10GB - half/full -auto and manual - needs to match on both sides |
| IP Address Management | - OSI 3 interfaces - VLAN interfaces - management interfaces - IP address, subnet mask/CIDR block, default gateway, DNS |
| LACP | Link Aggregation Control Protocol - multiple interfaces acts like one big interface |
| Port Mirroring | - copy traffic from one interface - packet captures |
| Jumbo Frames | Ethernet frames with more than 1500 bytes - 9000 bytes is the norm |
| Port Security | - prevent unauthorized users from connecting to a switch interface > alert or disable port - based on source MAC address |
| Straight-through cables | - patch cables - most common Ethernet cable - connect workstations to network devices |
| MDI | Media Dependent Interface - NIC |
| MDI-X | Media Dependent Interface Crosser - Network Switch |
| Cross-over cables | - Connect MDI to MDI - Connect MDI-X to MDI-X - Auto MDI-X is on most ethernet devices |
| Workstation to Switch? | ST |
| Router to Switch? | ST |
| Switch to Switch? | C |
| Router to Router? | C |
| Workstation to Workstation? | C |
| Workstation to Router? | C - workstations and routers are both MDI devices so crossover |
| 802.11 | Wireless Networking |
| 802.11n | -4G -2.4/5GHz - 40MHz channels - 600Mb/s - 4 x MIMO |
| MIMO | Multiple input multiple output |
| 802.11ac | -5G -5GHz -up to 160MHz channels -8 MU-MIMO downlink streams -~7Gb/s |
| MU-MIMO | Multiple User MIMO |
| 802.11ax | -6G 2.4/5GHz - 20/40/80/160MHz channels - 9.6Gb/s - 8 bidirectional MU-MIMO streams - OFDMA |
| OFDMA | Orthogonal frequency-division multiple access - improves high density installations |
| IBSS | Independent Basic Service Set - two devices communicate directly using 802.11 -- no access point required -Ad hoc |
| SSID | Service Set Identifier - every wireless network needs a name |
| BSSID | Basic Service Set Identifier - hardware address of an access point - MAC address |
| ESSID | Extended Service Set Identifier -network name shared across access points |
| Omnidirectional antenna | - signal is evenly distributed on all sodes |
| Directional antenna | - send and receive in a single direction - increased distances - e.g. yagi, parabolic |
| WPA2 | - wi-fi protected access |
| CCMP block cipher mode | Counter Mode with Cipher Block Chaining Message Authentication Code Protocol Counter/CBC-MAC Protocol |
| WPA3 | - wi-fi protected access 3 |
| GCMP block cipher mode | Galois/Counter Mode Protocol |
| SAE WPA3 | Simultaneous Authentication of Equals - everyone uses a different session key, even with the same PSK |
| GSM | Global System for Mobile Communications |
| CDMA | Code Division Multiple Access |
| LTE | Long Term Evolution - 4G - converged standard (GSM CDMA) 150Mb/s |
| LTE-A | LTE Advanced - 300Mb/s |
| 5G | - 10Gb/s |