2.6 Common Network Configuration Flashcards
DNS Hierarchy
- Root servers at the top
- Top Level Domain (TLD) Server
- .com, .org, .net, etc
Country Code TLD Server
- .us, .ca, etc - Servers for specific domains
Address Records: A vs AAAA
Defines the IP address of a domain
(A) records are for IPv4 addresses
(AAAA) records are for IPv6 addresses
Mail Exchange (MX) Record
Specifies the mail server responsible for accepting email messages on behalf of a domain name
Text (TXT) Records
- DNS record in text format
- Contains information about your domain
- can be used for verification
- spam management: SPF, DKIM, DMARC
Domain Keys Identified Mail (DKIM)
- Sender can digitally sign and authenticate outgoing mail
- used to identify an authorized sender for a particular domain name
Sender Policy Framework (SPF)
A list of all servers authorized to send emails for this domain. Mail servers check to see if incoming mail came from an authorized host.
Domain-Based Message Authentication, Reporting, and Comformance (DMARC)
Domain owners decide what external email servers should do with emails that don’t validate through DKIM or SPF. The policy is written into a DMARC TXT record.
DHCP Scope
Defines the parameters of a DHCP server such as:
IP address range
Subnet mask
Lease duration
DNS server settings
Default gateway
VOIP servers
DHCP Dynamic vs Automatic Assignment
Dynamic:
- assign address from DHCP pool
- address reclaimed after lease period
Automatic:
- DHCP server keeps list of past assignments
- devices are assigned the same IP if still available
DHCP Leases
- temporary IP address assignment
- address is reclaimed after lease period
- lease period is administratively configured
DHCP Reservation
- assign a specific IP address to a device based on MAC address
- IP address is always assigned to the same device when connected to the network
VLAN
- a group of devices in the same broadcast domain across the same physical device
- save money and energy
Ex. One switch can be split into multiple separate VLANs (networks) instead of having a switch for each network
VPN
Virtual Private Network
- sends encrypted data across a public network
- usually a combination of software and hardware
- many VPNs are now software based