General Networking Flashcards
mTLS
- Mutual TLS; zero trust security model–no network traffic is trusted by default
- Both sending/receiving entities verify each other’s identity when communicating
- analogy: alice sends message in an ssl envelope and places personal seal on it. bob replies in his ssl envelope and stamps his personal seal on it. Both parties know what each other’s seals look like
- not extremely common due to extra overhead in managing certificates and TLS handshake process; maybe about 1/3 of applications
Top materials that can affect wifi signal strength
- Concrete
- Metal
- Water
- Brick walls
- Drywall
- Some coatings on mirrors/glass
OSPF
Open shortest path first (oh, so pretty fast)–layer 3 routing protocol that uses LSAs to learn about neighboring OSPF routers.
- Primarily used when routing within an autonomous system /interior
-Used in enterprise networks - fast convergence
- finds best route based on total cost of the path (bandwidth)
BGP
Border Gateway Protocol (big global player)–L3 routing path vector protocol that facilitates routing across different autonomous systems (internet routing)
- requires more granular control compared to OSPF
- BGP typically won’t be used for internal routing unless its within the same AS (iBGP)
- provides redundancy across carriers/ISPs
- Best routing path criteria can be unique to different vendors
Difference between Wifi 6 and Wifi 6e
-6e is an extension on 6
-up to 8 160mhz channels
-6e is not backwards compatible with wifi5 and below
SNMP Manager
Piece of software that runs on Network Management Stations (NMS) that can retrieve or push config to SNMP capable terminals.
The SNMP manager would provide a topology of all the connected devices and inform the network admin of any potential issues with specific devices such as bandwidth/CPU issues or any other hardware faults that need to be addressed.
SNMP Managers send commands via GET/SET
SNMP Agent
A software component on the managed device that relays information to the snmp manager or sets configuration sent from the manager.
E.g., GET VLAN info for 1/0/1 or SET VLAN 50 for 1/0/1
Management Information Base (MIB)
Database or collection of information or components that can be viewed or configured via SNMP.
Each component within the MIB is known as an Object Identifier (OID) that the SNMP manager can reference.
SNMP Trap / SNMP Inform
A trigger configured on an SNMP agent that alerts the SNMP manager when a certain condition is met.
An SNMP Inform is the same as the trap but requires ACK from the manager. Agent will resend INFORM if no ACK is received
SNMP Community String
The password in order to carry out SNMP operations in SNMPv2c. Plain text string
SNMPv3
Provides security and modularity over SNMPv2c. Allows administrator to control what “view” an authorized user is allowed to read/write.
SNMP “View”
A set of OID structures that the set of users can perform actions on.
SNMP Group
The group is a container that has a set of permissions (view) and the set of users that can r/rw
Core layer
Backbone of the network and connects to other network “blocks” (if there are enough blocks to justify the use of a core switch). Core switches are high capacity/performance and connect to other switches or devices/services such as:
-Core routers
-Aggregation Switches
-WAN optimizers/accelerator
-Data centers/servers
-Can collapse into distribution layer
Distribution layer
Runs between access layer and core layer. Layer 3 capable devices that provides routing, policy-based connectivity, or WAN access. Can connect to:
-Internet
-Firewalls/IPS/IDS
-Can also collapse into access layer
-WAN router
-VPN concentrators