Network +

Study Guide and Reference

OSI Model Layers

You will need to identify the seven layers of the OSI model and describe their functions.

Layer
Function:
Devices
Protocols
Application Gives client and server applications access to network. Servers run services, clients run client apps, like Web Servers and browsers, Email servers, and Outlook, etc... Gateway Servers
Network Servers
Client Computers
SNMP, SMTP, FTP, TELNET, HTTP, NCP, SMB, AppleTalk
Presentation Encodes and converts user information  Provides protocol conversion, encryption, and compression.   GIF, JPG, AVI, MP3, Zip, NCP, AFP, TDI, Fonts, PDF, Etc...
Session Opens manages, and closes conversations between two computers. It performs name recognition and the functions such as security.   NetBIOS, SSL, Kerberos
Transport Sequences data packets, and requests retransmission of missing packets. It also repackages messages for more efficient transmission over the network.   TCP, UDP, NetBEUI, SPX, NWlink
Network Handles all aspects of network addressing, like host (IP) addresses and routing data packets across networks. Router, Brouter IP, IPX, NWlink, NetBEUI
Data Link Transmits frames of data from computer to computer on the same network segment. Handles basic electronic signaling. Switch, Bridge, and Brouter ARP, MAC Addresses
Physical Defines cabling and connections. Transmits data over the physical media. Repeaters, Hubs, Transceivers, Amplifiers None

The Open Systems Interconnection (OSI) Reference Model is a reference model that is used in the design of network devices and protocols. Use the OSI model as a reference map to identify the place of all network hardware, protocols, software, and general concepts.

Physical Layer

Cables

Thin net Coaxial - Also known as the RG-58 family. This is a 1/4-inch thick cable that carries a signal up to 1 85 meters, and has a 50 ohm impedance. When troubleshooting this cable, the cable terminator must read 50 ohms.

Thick net Coaxial A 1/2-inch thick cable that carries a signal up to 500 meters. A transceiver is used to make a physical connection with the thick net core.

Unshielded Twisted Pair-Twisted pair wiring, carries a signal up to 100 meters. This cable is susceptible to crosstalk.

Shielded Twisted Pair - Twisted pair wiring, carries a signal up to 100 meters. This cable has a foil or braided jacket around the wiring to help reduce crosstalk and to prevent electromagnetic interference.

Fiber-Optic This cable carries light pulse signals through a glass core at speeds of between 100 Mbps and 200,000 Mbps.

Media connectors

RJ-11 A 4-wire connector used to connect telephone equipment in North America.

RJ-45 An 8-pin modular plug that is used to terminate UTP and STP cables. This connector can be used for both Ethernet and Token Ring applications.

AUl/DlX - Used to connect RG8 or RG11 (10BaseS) coaxial cable to another cabling •system or to a communications device such as a computer or router.

BNC - A 2-pin connector used to connect coaxial cables. It uses a twist lock mechanism, which prevents the cable from disconnecting.

FSD (Fixed Shroud Device) - A fiber optic connector. One example is the MIC (Media Independent Connector( dual-fiber connector.

ST (Straight Tip) -A frequently used fiber optic connector. It is a keyed BNC-style connector.

SC (Subscriber Connector) - An international standard Push-Pull connector. The SC connector has an advantage over the ST connection because it has both transmit and receive fibers in a single duplexed plug.

Designation Supported
Media

Media
Connector

Max Segment
Length
Transfer
Speed
Topology
10Base-5 (Thick Net) Coaxial AUI (Vampire) 500 m 10 Mbps Bus
10Base-2 (Thin Net) Thin Coaxial (RG-58 A/U) BNC 185 m 10 Mbps Bus
10Base-T
(Twisted Pair)
Category 3 or 5 UTP unshielded twisted-pair RJ-45 100 m 10 Mbps Star
100Base-TX
(Twisted Pair)
Category 5 UTP
unshielded twisted-pair
RJ-45 100 m 100 Mbps Star
10Base-FL Fiber-optic ST or SC 2000 m 100 Mbps + Star or
point-to-point
100Base-FX Fiber-optic ST or SC 2000 m
 
100 Mbps +
 
Star or
point-to-point
1000Base-T
(GigaBit)
Category 5 RJ-45 100 m 1 Gbps Star

Logical and physical network topologies

• Star - Connects peripheral devices via point-to-point links to a central location (a hub or a switch). Most networks are configured in a star, which permits simplified addition, moving, and changing. System failure from any individual segment break is minimized.

• Bus - Consists of a linear transmission medium (like Coaxial cable) that is terminated at both ends. Nodes attach directly to the bus. More difficult than a star to add, move or change layout. The entire bus is effected by a segment break.

• Mesh - Consists of a network where each device has a point-to-point connection to every other device on the network. Too complex and costly for networks with a large number of devices. Usually used on a network backbone.

• Ring - Provides a closed-loop transmission medium. Repeaters at each node connection repeat the signals. This is done to minimize any signal degradation. Used in older networks, and as high speed network backbones.

• Wireless - Uses radio transmission to connect nodes with a central wireless access point.

Data Link Layer

Networking Technologies

Access methods
An access method is a set of rules determining how network devices can communicate simultaneously on the same media, and how network devices respond when a data collision occurs.

CSMA/CD (Carrier Sense Multiple Access with Collision Detection) Standard Ethernet networks use CSMA/CD. This standard enables devices to detect a collision. After detecting a collision, a device waits a random delay time and then attempts to re-transmit the message. If the device detects a collision again, it waits twice as long to try to re-transmit the message. This is known as exponential back off

• CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance) - This methodology attempts to avoid collisions. An alert message notifies nodes of an impending transmission. Any collisions that occur will be during this alert sequence rather than during actual data transmission. Because the alert sequence is shorter than an actual data transmission, the retransmit of lengthy data is avoided.

• Token passing - A token is passed around the ring to which the computers are connected. The computer that grabs the token is able to send data over the network. When the token returns to its source with an acknowledgment from the destination, the source relinquishes the token and continues passing it around the ring, permitting another workstation to send data out on the network.

MAC Addresses

MAC address - Also known as the physical addresses, operates on the data link layer (MAC sublayer). Each address is a unique 12-digit hexadecimal ID number, which is hard coded to the network adapter by the factory, and is used by devices to direct packets to other devices.

Example: 00-04-3C-BA-10-8E

To see your computer's Physical Address, type IPCONFIG /ALL at a command prompt.

Network Layer Protocols

Protocols

Routable transport protocols

• TCP/IP - Internet protocol. Used by UNIX and Windows networks.

• IPX/SPX - Fast protocol for small and large Novell networks. Also known in Windows as NWLink.

Non-routable transport protocols

• NetBEUI - Microsoft protocol designed for small LANs. Not compatible with UNIX networks.

TCP/IP

IP - Internet Protocol addressing is the standard for data packet delivery over the Internet. IP also defines how data packets can be routed across the network to their destinations. Routers forward each packet across the Internet based on its destination IP address. Each device attached to the Internet or any IP network must have a unique IP address. IP operates on the OSI Network Layer because it is responsible for network addressing.

TCP - Transmission Control Protocol is connection-based Internet protocol responsible for breaking data into packets, which the IP protocol sends over the network. This protocol provides a reliable, sequenced communication stream for network communication. TCP operates on the OSI Transport Layer because it is responsible for data transport.

UDP - User Datagram Protocol runs on top of IP and is used as an alternative to TCP. UDP does not, however, provide any error checking for guaranteeing packet delivery. Because UDP is not as complex as TCP, it is also faster. UDP is a connectionless transport protocol. UDP operates on the OSI Transport Layer because it is responsible for data transport.

FTP - File Transfer Protocol, is used for exchanging files in a TCP/IP environment and is implemented at the application layer of the OSI model. FTP operates on the OSI Application Layer because it is operates as an application (FTP server or FTP client software)

TFTP - Trivial File Transfer Protocol is a file transfer protocol that transfers files to and from a remote computer running the TFTP service. TFTP was designed with less functions than FTP. TFTP is also on the OSI application layer.

SMTP - Simple Mail Transfer Protocol, is used to transfer messages between two remote computers. It is used on the Internet, and is part of the TCP/IP protocol stack. SMTP operates on the OSI Application Layer because it is operates as a server service.

POP3 - Post Office Protocol, used to retrieve e-mail from a mail server. POP is used on Email servers as a service that hold users messages, and allows users to connect, authenticate, and receive messages. This puts POP3 on the OSI Application layer.

HTTP - Hypertext Transfer Protocol is the underlying protocol for the World Wide Web. HTTP defines how all resources on the web are transferred and what action web servers and browsers should take in response to commands. This puts HTTP on the OSI Application layer.

HTTPS / SSL - HTTPS is HTTP using a Secure Socket Layer (SSL). A secure socket layer is an encryption protocol invoked on a Web server that provides secure web connections. Most implementations of the HTTPS protocol involve online purchasing or the exchange of private information. Like HTTP, HTTPS and SSL are on the OSI Application layer. 

Telnet - Short for Telecommunication Network, a virtual terminal protocol allowing a user logged on to one TCP/IP host to access other hosts on the network. Telnet is on the OSI Application layer. 

ICMP - Internet Control Message Protocol is a maintenance protocol in the TCP/IP suite, required in every TCP/IP implementation, that allows two nodes on an IP network to share IP status and error information. ICMP is used by the PING and TRACERT utilities to determine the readability of a remote system.

ARP - Address Resolution Protocol, is a TCP/IP protocol used to convert an IP address (network layer) into a physical address (Data Link layer). 

lPSec - Provides authentication and encryption over the Internet. Operates at the OSI Network layer.

L2TP- Used with IPSec to create Virtual Private Network (VPN) connections.

Kerberos - Provide strong authentication for client/server applications by using secret-key cryptography. Kerberos is used to authenticate user and computer accounts in Microsoft Active Directory networks.

TCP/IP Ports

Port Protocol
21 FTP
23 Telnet
25 SMTP
53 DNS
69 TFTP
80 HTTP
110 POP3
119 NNTP
161 SNMP
443 SSL

Remote access protocols
These protocols are used to establish dial-up and VPN connections.

• SLIP (Serial Line IP) - Provides dial-up Communications, but is unable to simultaneously transfer multiple protocols.
• PPP (Point-to-Point Protocol)
- Performs dynamic lP addressing, multi-protocol support, password login, and error control.

• PPTP (Point-to-Point funneling Protocol) - Provides a means to secure client connections over the Internet through account authentication. Through Virtual Private Networks (VPNs), secure communications are supported over standard Internet connections.
•
L2TP (Layer Two Tunneling Protocol) - Provides a means to secure client connections over the Internet through certificate authentication. Through Virtual Private Networks (VPNs), secure communications are supported over standard Internet connections.

• RAS (Remote Access Server) - A computer with one or more modems installed to facilitate remote connections to a network.

Hardware

Network Devices:

Device OSI Layer Description
Network Interface Card (NIC) Physical The device that makes it possible for a computer to interface with the network.
Hub Physical A central connecting point for network wiring.
Repeater Physical Attempts to preserve signal integrity and extend the distance over which data can safely travel by regenerating incoming signals.
Switch Data Link Takes an incoming packet of data and looks inside at the destination hardware address, and then sends the packets out the port connected to the destination machine.
Bridge Data Link Network device that can read the specific physical address of devices on one network and filter information before passing it on to another network segment.
Router Network A connection between two networks that specifies message paths and might perform other functions, such as data compression.
Brouter Network / Data Link Handle both routable and non-routable features by acting as routers for routable protocols and bridges for non-routable protocols.
Gateway Application (All) Usually a server that connects two different networking environments. (like connecting TCP/IP and IPX/SPX networks, or connecting TCP/IP hosts to a mainframe)

Modems - A peripheral device that permits a personal computer, microcomputer, or main­frame to receive and transmit data in digital format across voice-oriented communications links, such as telephone lines.

Segment - The portion of the network on either side of a router.

Network Services

• DNS (Domain Name Services) - Used to resolve a DNS host name to an IP address. DNS provides access to internet resources and local network resources by using a hierarchical naming structure.

• HOSTS - File which contains mappings between DNS host names and their IP addresses.

• WINS (Windows Internet Naming Service) - Used to resolve a NetBIOS computer name to an IP address. A NetBIOS name is a computer name. WINS is used on Microsoft networks to support Windows 9x and Windows NT 4.0 hosts.

• LMHOSTS - File which contains mappings between NetBIOS computer names and their IP addresses.

• DHCP - Provides an automated means of managing host lP addresses. The DHCP server is configured with IP address information, including a range of valid addresses and a lease period for those addresses. Client computers request IP addressing information from the server in a broadcast at startup. The range of valid addresses is called a scope.

IP addresses (version 4)

A 32-bit address, written as four octets or bytes, separated by periods.

Class Subnet Mask Address Range:
A 255.0.0.0 1.0.0.0-126.0.0.0
B 255.255.0.0 128.0.0.0-191.255.0.0
C 255.255.255.0 192.0.0.0 - 223.255.255.0
D N/A 224.0.0.0-239.0.0.0
E N/A 240.0.0.0 - 255.0.0.0

• VLANs (Virtual Local Area Networks)

Groups of network nodes that form a single broadcast domain based upon logical associations rather than physical connections or location. VLANs usually use a switch operating at Layer 2 of the OSI Model, but you’ll usually (but not always) need a Layer 3 device, such as a router, to allow VLANs to communicate with each other.

• Remote access connection technologies

Access Attainable

Technology method speeds

Subscriber Connections:
Connection: Speed
Regular Dial-up (modem) Up to 53 Kbps
ISDN Dial-up (Digital) 64 Kbps to 128 Kbps
DSL Varies greatly; 1 Mbps upstream and up to 32 Mbps downstream
Cable 512 Kbps to 5Mbps
Satellite 400 Kbps
Permanent Connections:
Connection: Speed
T1 1.45 Mbps
T3 45 Mbps

Packet switching networks (term) Packets are relayed across networks along the best route available.

• X.25 - Designed to connect remote terminals to mainframe host systems. Very slow due to constant error-checking.

• Frame Relay - Point-to-point system that uses digital leased lines. Requires frame relay capable bridge or router for transmission.

• AIM - Advanced implementation of packet switching. Transmits at speeds of 1 55 Mbps to 622 Mbps with capabilities of higher speeds. Uses switches as multiplexers to permit several computers to simultaneously transmit data on a network.

• ISDN - Transmits at 1 28k/sec. Has three data channels: two B channels @ 64k/sec and one D channel @ 1 6k/sec. The B channels carry data, while the D channel performs link management and signaling.

• FDDI - 100 Mbps token-passing ring network that uses fiber-optic media. Uses a dual-ring topology for redundancy and in case of ring failure. Each ring is capable of connecting 500 computers over 100 kilometers (62 miles). Can be used as a network backbone.

Network Security

Firewall - A firewall is used to prevent unauthorized access to or from a network. They are frequently used to prevent unauthorized users from accessing private networks connected to the Internet, especially intranets. All messages entering or leaving the intranet pass through the firewall, which examines each message and blocks those that do not meet the specified security criteria.

Firewall techniques:  

• Public network - A public network is a network where all hosts are exposed to the Internet with no firewall.

• DMZ - A section of the network that is partially exposed to the Internet.

• Private network - A network that is guarded by some form of firewall.

Typical Network:

INTERNET
PACKET
FILTER
FIREWALL
 
DMZ:
Web and Email Servers,
VPN Servers, etc...
NAT Firewall
or
Proxy Server
Private Network:
Internal Servers
Client Computers

Types of firewalls

Tools and Utilities

TCP/IP troubleshooting utilities.

• Tracert - Determines the route a packet took to reach its destination.

• Ping - Will send ICMP echo packets to verify connections to a remote host (or test the local TCP/IP installation if using the loopback address).

• Arp - Used to gather hardware addresses of local hosts and the default gateway, you can view the ARP cache and check for invalid or duplicate entries.

• Netstat - This command displays protocol statistics and gets information about TCP/IP connections.

• Nbtstat - Reports statistics and connections for NetBIOS over TCP/IP. Used for DNS and WINS name resolution, local cache Iookup, and referral to LMHOSTS and HOSTS files. Troubleshoots name-to-address mappings.

• lpconfig - command line utility utilities display IP-addressing information for the local computer.

• Nslookup - A graphical version of IPCONFIG available in Windows 95/98.

• Nslookup - Queries a name server to determine which name resolves to which IP address.

Basic networking tools.

• Wire Crimper - A hand tool used primarily to attach terminations to network cables in a process known as “crimping.” This involves a squeezing pressure to force the end in place on the cable.

• Media tester - Large as network hand tools go, this tests network media to be sure it meets manufacturer’s requirements.

• Tone generator - Software that will play sounds, such as sine, triangle, impulse, or white noise, using a computer’s sound card. Ideal tool for testing sound on a computer.

• Optical tester - A hand-held device that measures optical parameters.

• Time Domain Reflectometer (TDR) - A sophisticated tool used to find a break in the middle of a cable.

• Loopback adapter - Transmits a signal across a medium while the sending device waits for the return of the signal.

• Screwdrivers - Helpful for opening systems, removing and replacing boards, and attaching cables.

• Standard pliers - Necessary for certain types of clips.

• Long-nose (needle-nose) pliers - Helpful for pulling or replacing jumpers. Also used for straightening bent pins on DIP packages.

• Nut drivers (or a small socket set) - Necessary for hex-topped screws.

• Tweezers - Useful for picking up small items that you have dropped.

• Torx (spline) drivers - Necessary for getting into some system enclosures, including many Macintosh and some Compaq systems.

• Multimeter (VoIt-Ohm-Meter) - Useful for checking power supply voltages.

Network Server Concepts

Backup strategies

• Full backup - This will back up all of the data on the server. File archive bits will be reset.

• Incremental backup - This will back up any data that has changed after the last backup (full or incremental). File archive bits will be reset.

• Differential backup - This will back up any data that has changed after the last full backup. File archive bits will not be reset.

Backup tapes should be stored in off-site locations, so that the servers and backups cannot be destroyed by the same disaster.

Upgrading the network

To upgrade a network to 100 Mbps Ethernet, you must do all of the following:

• Upgrade all hubs to switches or 100 Mbps hubs.

• Upgrade the wiring to CAT 5 UTP/STP.

• Upgrade all network cards to 100 Mbps.

Redundant Array of Independent Disks

A set of specifications describing hard disk fault tolerance configurations.

• RAID Level 0 - Disk striping without parity. Data is distributed across a series of drives. This is not a fault tolerance specification. It increases the speed of disk I/O.

• RAID Level 1 - Mirror sets (including duplexing). Data is mirrored across two disk drives. Mirroring a pair of disks reduces the total disk storage by one half.

• RAID Level 5 - Stripe sets with parity. Data and parity blocks are spread across all drives in the array. These eliminate the dedicated parity drive and thereby you can read and write multiple transactions to be performed in parallel.

Questions to ask when developing a disaster recovery plan.

• What will the company need if disaster strikes?
• What departments have priority for getting back online first?
• How much of the data is at risk?
• What is the minimum and maximum downtime you can afford?
• What is your cost per minute if your system is down?
• Are there redundant networks that can replace your failed system?
• Would a clustered environment minimize your risk?

Basic disaster recovery guidelines for larger enterprises.

• Always keep a set of the data OFFSITE.
• Establish an alternative site (cold site, offsite new building, or maybe even a different state).
• Prepare a special group of people to work at your alternative site and devise a plan to get them to the new site from the disaster site. Consider a rotating schedule of different technical staff members.
• Decide which products are needed to support the recovery process, acquire them, and train in their use.
• Some disaster recovery scenarios even include having a complete duplicate of your server standing by in case of disaster.
• Simple items such as a UPS can save you a lot of headaches, such as in the case of power failures.
• Disaster-recovery management should always begin with a planning meeting.

 .