4 - Network Fundamentals Flashcards
Benefits of layered network model approach
Easier troubleshooting
Standardizes networking architecture
Allows vendor interoperability
Each layer only communicates with peer layer
TCP/IP
Network model developed by DARPA and university volunteers
Became standard by late 90s
RFC
Request for Comment
Used to define standardized protocols
Network Model Layers
– OSI
– TCP/IP (old and new)
- OSI
1. Physical
2. Data Link
3. Network
4. Transport
5. Session
6. Presentation
7. Application - TCP/IP (Old)
1. Link
2. Internet
3. Transport
4. Application - TCP/IP (New)
1. Physical
2. Data Link
3. Network
4. Transport
5. Application
PDU
Generic term for unit of info transmitted within network model
Physical - Bits
Data Link - Frame
Network - Packet
Transport - Segment (TCP), Datagram (UDP)
Application - Data
Application Layer (TCP/IP)
- Purpose/Functions
- Example protocols
- Provide services to app software
- Defines how programs interface w/ transport layer
- Functions:
– ID’ing communication partners
– Determining resource availability
– Synchronizing communication
Examples: HTTP, DNS, DHCP, HTTPS, FTP, TFTP, Telnet, SSH, NTP, SNMP
DHCP
- Port
- Description
- Layer
- Min info obtained
- UDP Port 67 (client to server, broadcast) and 68 (server to client, unicast)
- Dynamically assign IP address, lease length, subnet mask, and default gateway (minimum) and DNS IP (optional)
- Uses “DORA” process
- Application Layer
DORA
- Discover, Offer, Request, Acknowledgement
- DHCP Client broadcasts to find DHCP server
- Server offers IP address/parameters
- Client accepts
- Server acknowledges acceptance and delivers lease info
DNS
– port
– layer
TCP/UDP Port 53
Application Layer
HTTP
TCP 80, 8008, 8080
Identified using URIs or URLs, used since 1990
Application Layer
HTTPS
– Port
– Info
– Layer
TCP 443
If NTP is not synchronized, cert signing can fail
Self-signed certificates provide confidentiality but do not confirm identity
Application Layer
FTP
– port
– layer
TCP 20 (Data) and 21 (Control)
Application Layer
TFTP
– Port
– Description
– Layer
- UDP 69
- Very basic FTP functionality
– Requires small amount of memory
– Can only read and write files from/to a remote server
– Cannot list directories
– No user authentication
– Typically used for storage/retrieval of Cisco switch config files - Application Layer
Telnet
– port
– layer
TCP 23
Sends username/PW in plaintext
Application Layer
SSH
– Port
– Layer
TCP 22
Application Layer
NTP
– Port
– Description
– Layer
UDP 123
Synchronize time down to a millisecond or fraction of a millisecond
Can use different methods such as radio and satellite
Application Layer
Transport Layer (TCP/IP)
– Description/functions
– Example protocols
Communication session management
Defines level of service and status of connection when transporting data
Examples: TCP and UDP
TCP (Protocol)
- Two functions:
– Flow control provided by sliding windows
– Reliability provided by sequence numbers and acknowledgements - Breaks messages into segments
TCP Segment Header
- Fields
Fields:
source port
destination port
sequence/acknowledgement numbers
control bits (SYN, ACK, FIN, etc.)
window size
TCP Window Size
Controls communication flow
sets # of messages transmitted before waiting for ack (ack # matches the seq number of the next segment to be sent)
Ex: Window size 1 - each segment must be acknowledged before another is sent
Can be changed to maximize bandwidth efficiency
UDP Header
64 bits long
Only includes Source port, Destination port, Length, and checksum
Socket
– Purpose
– 3 Parts
Used to track different concurrent network sessions
Includes IP address, TCP/UDP, and port number
Port number ranges
- Well-known: 0-1023
- User/Registered: 1024-49151
– Users connect to registered ports using ephemeral source ports - Dynamic/ephemeral: 49152-65535 (1025-5000 if older than win XP)
TCP/IP Layer Interaction
Adjacent layers work together on the same system
Same layers communicate with the same layer on a different system
Network Layer (TCP/IP)
Primary protocol is IP
Packages data into IP datagrams
Routes IP datagrams
Protocol Ex: IPv4/6, ARP, ICMP (ping)
Internet Protocol (IP)
Defines how data is sent from one computer to another on the internet
Messages divided into “packets”
IPv4 Packet Structure
Divides data segments (from Transport Layer) into packets
Encapsulated data called IP Payload
IPv4 Header
– Size
– Fields
Max size 60 bytes, min 20 bytes
Includes info such as as IP version, Internet header length (IHL), Differentiated Services Code Point (DSCP)(type of service), Total Length of entire IP packet, Identification number, Flags, Fragment Offset, TTL, Protocol, Header Checksum, Source Address, Destination Address, and Options
IPv6 Packet Structure
– Two parts
Two main parts: Header/header extensions and Payload
IPv6 Header
– 8 items
Fixed 40 byte length
Contains:
- Version (4 bit)
- Traffic class (8 bits describing packet’s priority)
- Flow Label (20-bits for QoS Management)
- Payload Length (16-bit)
- Next Header (describes next extension header or where payload begins)
- Hop Limit (8 bits, similar to TTL)
- Source Address (128 bits)
- Destination Address (128 Bits)
IPv6 Packet Contents
Two Parts:
Extension Header – move variable length fields from IPv4 headers into the packet, such as authentication extension header and encapsulating security payload extension header
Upper Layer Protocol Data Unit (Payload) – comes after final extension header
ARP
Map IP address to MAC address
Allows communication on Ethernet LAN
Layer 2 protocol
ICMP
Provides feedback about problems in the network
Usually formed from a normal IP packet that has generated an ICMP response
Uses the following defined messages:
- Destination Unreachable
- Time Exceeded
- Parameter Problem
- Subnet Mask Request
- Redirect
- Echo
- Echo Reply
- Timestamp
- Timestamp Reply
- Information Request
- Information Reply
- Address Request
- Address Reply
Data Link Layer (TCP/IP)
Handles MAC addressing
Detects errors that may occur in physical layer
Frame Check Sequence - receiver checks for frame transmission errors and discards frame if one occurs
Primary protocols: Ethernet (IEEE 802.3) and PPP, STP
MAC Address
- hardware’s physical address, tied to NIC
- Layer 2 address
- Can’t be changed but may be spoofed
- 48 bits in length
– First 6 hex digits (24 bits) = organizational unique identifier (OUI)
– Last 6 (24 bits) are interface serial number
Ethernet Frame Structure
IEEE 802.3 standard
Includes:
- Preamble – signals start of frame and enables sync
- Start Frame Delimiter (SFD) – Signifies that destination MAC starts next byte
- Destination MAC
- Source MAC
- Type – Defines protocol inside the frame (IPv4/6, etc.)
- Data and Pad – Payload Data (46 bytes)
- Frame Check Sequence (FCS) – 32-bit cyclic redundancy check (CRC) for detecting corrupted data
Spanning Tree Protocol (STP)
Prevents frame loops within a switched network
Physical Layer (TCP/IP)
Encodes a signal onto medium for transmission