Chapter 12: Advanced Networking Devices Flashcards
1
Q
What is a virtual private network?
A
-all computers should be on the same network. have the same network id.
2
Q
What is PPTP?
A
Point-to-Point tunneling protocol.
- places end points on the client and the server.
- server endpoint: routing and remote access server.
- only available on a windows server.
3
Q
What is L2TP?
A
Layer 2 Tunneling Protocol
- moved endpoint on local LAN from server program to a VPN-capable router. “VPN concentrator”
- no authentication or encryption.
- uses IPsec for security needs.
4
Q
What is SSLVPN
A
- works at application layer
- don’t need special client software
- connect to VPN server with web browser.
- SSL portal: secure webpage
- tunnel VPNs: web browser runs java or flash
5
Q
What is a VLAN?
A
- segments networks using switches
- takes a single broadcast domain and chop it up into multiple broadcast domains.
6
Q
What is trunking?
A
transferring VLAN traffic between two or more switches.
- Interlink switch(ISL): cisco version
- IEEE 802.1Q trunk standard
7
Q
what is VTP?
A
Virtual trunk protocol
- automate the updating of multiple VLAN switches.
- put switch into state of server, client or transparetn
- changes to VLAN of server switch propagate to clients
- transparent mode: does not update settings.
8
Q
Describe intervlan routing.
A
- each vlan is a separate broadcast domain
- to get data from one VLAN to another need to use a router.
- need a switch that can create virtual routers to interconnect VLANs.
- multilayerswitch: operates at layer 2 and 3 and is very useful in load balancing, QoS, network protection.
9
Q
What is load balancing?
A
-a bunch of servers look like a single server through a server cluster.
10
Q
What is DNS load balancing?
A
- browser caching reduces effectiveness.
- each web server gets its own public ip address.
- each DNS server for the domain has multiple “A” DNS records that each has the same FQDN.
- DNS server cycles around the records “Round robin”
- BIND DNS: similar to round robin; can add weighting.
11
Q
What is a multilayer or content switch
A
- web servers behing single IP
- multilayer switch(layer 3 and 4): router performs NAT and port forwarding and can query hidden web servers and send HTTP request to servers with less load.
- content switch: Layer 7 (content filter network appliance): can read incoming HTTP(S) requests, can handle SSL certs and cookies, pass cookie to HTTP requesters(web browsers).
12
Q
Describe IDS.
A
Intrusion Detection System
- runs on dedicated IDS box
- inspects incoming packets looking for intrustions such as virus, illegal login attempts
13
Q
Describe an intrusion prevention system.
A
-react to an attack.
