Core Concept Protocols Flashcards
First Hop Redundancy
Provides redundant gateway services for the LAN.
Is an important part of network failover and disaster recovery
Supported on routers and layer 3 switches
Layer 3 switches share a virtual IP address and a virtual mac address with a standby router
Standby routers picks up the virtual ip and mac address if the active gateway fails
First Hop Redundancy Protocols
HSRP Hot Standby Router Protocol
VRRP Virtual Router Redundancy Protocol
GLBP Gateway Load Balancing Protocol
CARP Common Address Redundancy Protocol
HSRP
Hot Standby Router Protocol
Allows you to configure two or more routers as standby routers and only a single router as an active router at a time
Establishes a fault tolerant default gateway.
Cisco Proprietary, popular and easy to configure
VRRP
Virtual Router Redundancy Protocol
Open Source. Functions similarly to HSRP
GLBP
Gateway Load Balancing Protocol
Can present multiple gateways in a single instance and provides load balancing across the gateways
Cisco Propriety
CARP
Common Address Redundancy Protocol
Similar to HSRP and VRRP
NAT
Network Address Translation
Performed by routers and firewalls
Simplest form, NAT is just a one to one address mapping
Static NAT
single specific internet address to a single specific internal address
Dynamic NAT
uses a pool of internet addresses to provide to internal devices
PAT
Port Address Translation
Tracks the NAT sessions by using random TCP port numbers for each session
Number one use is to translate a group of private addresses into a public address that is routable on the internet
SNAT
Source NAT
SNAT is the same as NAT
changes the source address of the packets passing through the router
DNAT
Destination NAT
Changes the destination address of the packets passing through the router
Port Forwarding
Any traffic arriving on a specific TCP or UDP port will be forwarded to a defined internal host and port
Examples of when to use this, for Web Servers for ports 80 (HTTP) and 443 (HTTPS), for a Mail Server port 25 (SMTP), for an IP camera so it’s not hogging the web port 80
Used to access servers or systems that are behind a firewall
Can restrict allowed network resources for added security
DNS
Domain Naming System
Resolves IP (Internet Protocol) addresses based on Fully Qualified Domain Names (FQDN)
FQDN
Fully Qualified Domain Name
Identifies the specific server or host at the domain
Root Domain
.
Literally a dot, a period whatever you wanna call it. It’s invisible, at the very end of the url, but you can type it and it will bring you to the correct website
Top Level Domain
Last part of the website
.com, .gov, .org, .edu
Second Level Domain
The name of the website, coming before the top level domain
google.com with google being the second level domain
Host Domain
The beginning of the website
www. world wide web
mail. mail.google.com
web. something.com
URL
Uniform Resource Locator
Includes the FQDN and protocols such as http, https, and ftp
Public DNS Server
Resolves public FQDNs to IP addresses
Free to use DNS server on the public internet
Ex: Google DNS
Private DNS Server
Private DNS names are associated with an organization/s private IP Addresses
Not part of the public DNS
Split Horizon DNS
Split Brain.
A mechanism for DNS servers to supply different results based on the source
The organization may need the internal DNS lookups for the website to map to an internal private IP address, while DNS lookups from the public internet would map to the public IP address
Forward Lookup Zone
Resolves FQDNs to IP Addresses
Reverse Lookup Zone
Resolves IP addresses to FQDNs
SOA
Start of Authority Record
The authoritative name server for a domain. Only one exists per Forward Lookup Zone
NS
Name Server Record
Provides for quick FQDN to IP Address resolution
At least one NS is specified per Lookup Zone. Can have multiple NS records for secondary servers
A Record
Host record
Simply and FQDN and an Ipv4 address
AAA Record
Host reconrd
FQDN and IPv6 address
CNAME
Alias Record
www.example.com == example.com
MX
Mail Exchange Record
Used to point to a mail server, needs FQDN and ipv4 address
Usually points to an A Record
SRV
Service Location Record
Defines the location of various servers
Not used as much as the rest