```
DHCP Scope
It is the range of IP addresses that an be assigned to network system by DHCP
- IP SCOPE
Starting IP: - 192.168.2.10
- Ending IP: - 192.168.2.200
```
IP of 4th octet ---- 1 to 254 possible = 2^n-2
Assign IP Addresses outside scope to Network routers, DHCP, etc
DHCP Reservations
- When you tell DHCP to always assign a specific IP address to a specific System
- Still a dynamic IP address but it is reserved
- Is a Reserved IP Address dynamic or Static?
- Dynamic
- Static IP Address: It is assigned by admin and remains permanent whether at work or at home
- Dynamic IP Address: It is assigned by DHCP and changes
- Reserved IP Address: - Will always be assigned when at work but changes at home
- No one else will get this IP Address even if user is away
IMAGES
IMAGES
Default Gateway address is your local IP Address assigned by DHCP
VPN (Virtual Private Network) – ISP still collects your data
Public IP assigned by ISP
TCP/IP (Transport Control Protocol /Internet Protocol)
TCP (Transmission or Transport Control Protocol) : - It is considered a data transporter. It transmits data from one system to another
IP (Internet Protocol): - It is considered a data carrier
TCP (Data Transporter)
What is the Difference between TCP and UDP?
TCP is connection oriented because it establishes a connection between sender and receiver before data is sent. This makes it more secure and slower. Retransmission possible.
UDP is a connection that does not establish a connection before sending data making it faster, and not reliable. Retransmission is not possible with UDP transmission
WINSCP: It works with TCP and IP to transmit information
TCP/IP Troubleshooting Tools
Or Networking Troubleshooting Tools
WINDOWS COMMANDS
1. Ipconfig
a. Displays limited network configuration information
2. Ipconfig /all
a. Displays detailed network configuration information (all)
b. For example, it displays DNS, Default Gateway, DHCP lease, and DHCP information
3. Ipconfig /release
a. It will drop an IP Address of a system
b. This system will drop off the internet or LAN
c. Using /release/renew will cause system to lose IP Address, and connection to the server to download if in the middle of a download (may prefer /flushdns if halting internet or halting download would be a problem)
4. Ipconfig /renew
a. It will request a new DHCP IP Address for a system
5. Ipconfig /flushdns
a. It clears DNS information from the RAM
b. It clears DNS information in the RAM cache which will force DHCP to create a new DNS
c. This would help you in a situation where DNS 1 is down and need to use DNS2 backup
d. Either reboot or use this command to delete all DNS information when you cannot reboot (like for a server)
e. In Business setting usually create primary and secondary DNS so when one goes down use the other one
f. Google Free DNS servers: Google 8.8.8.8 or Google 8.8.4.4 – They will resolve public hostnames only and not local hostnames. These are used as secondary DNS which will serve as a backup when DNS is down
g. IMAGES
h. IMAGES
6. Ping
a. It is a tool used to test or check for connectivity between 2 network systems
b. It checks if your system is connecting to my system? Or the internet? Or the DNS server?
c. For example when you ping Google.com should get response with google Ip address ping
7. Up arrow
a. It will recall the previous command line
b. Same in LINUX/UNIX systems in Bash shell
8. Nslookup (Name Server Lookup)
a. It is used to query the DNS database for information in the database
9. Nslookup
a. It will search the DNS Database for the IP address associated with the hostname
b. A forward lookup is performed in DNS involving an A record
c. Hostname to IP Address is a forward Lookup involving a A record
10. Nslookup
a. It will search the DNS database for the hostname associated with IP Address
b. A Reversee lookup is performed in DNS involving a PTR (pointer) Record
c. IP Address to Hostname is a reverse lookup involving a PTR record
11. Arp -a
a. It displays an arp table or current ARP entries
12. cls
a. It clears command line in Windows
13. clr
a. It clears command line in LINUX/UNIX
14. arp /a
a. It displays the arp Table or current ARP entries
15. arp /v
a. It displays the arp Table or current ARP entries in verbose mode
b. Admin level
16. inet addr
a. Specifies internet addresss
17. N if addr
a. It displays the ARP entries for the network interface
18. Ipconfig /allcompartments
a. It displays the information about all compartments
19. Ipconfig /allcompartments /all
a. It displays the detailed information about all compartments
20. Tracert
a. It is used to display the path of traffic flow or flow of traffic from sending system to the receiving system across a maximum of 30 routers or hops
b. Pronounced Trace it
c. You cannot trace them if they are in the cloud (Cloud does not have backbone problems (central support to rest of the system)
d. Tracert Output looks like: 1 8ms 10ms 8ms Fios (192.168.2.1)
21.
Non authoritative answer
This is when the response is not an admin response but a receiving system answer
“Server Unknown” response which comes with an IP address is likely due to a firewall
Bandwidth:- Maximum rate of transfer of data across a given path or medium
Bandwidth issue: - When bandwidth provided limits the amount and speed of data transfer slowing down information access
ARP (Address Resolution Protocol)
a. It maps IP Addresses to MAC addresses
MAC ( Media Access Control) or Hardware address or ethernet address or Physical address
a) A MAC address is a unique alphanumeric (uses number as and letters)address assigned to a network device by the vendor
b) Phone has a MAC address
c) NIC, router or switch has MAC address
How do you get a Mac Address of a System?
a) Search bar/Command Prompt/arp -a (check arp table)
b) If not there, ping system then arp -a it will display MAC address
How do you display an ARP table in Windows?
Search bar/ Command Prompt/Arp -a
Output
IP Address MAC address Type
192.168.56.255
ff-ff-ff-ff-ff-ff
Static
How do you display or trace path of traffic flow?
a) Search bar/Command Prompt/tracert
Troubleshoot Networking Problem: If the Folks in NY cannot connect, is the server down?
HQ
MD Webserver IP: - 10.7.8.7
1. Ping NY IP Address (10.7.8.7)
a. If you get a response, then network is not down
2. Call field office in GA
a. Yes can access network
3. Call NY Field office
a. Cannot Access Network
b. So what is the problem?
4. Tracert 10.7.8.7 (NY IP Address)
a. Tracert drops in NJ field office (see error message: Request Timed Out)
b. If get timed out but continues to receiving system then that means a firewall is not releasing the information
c. If it just stops at field office then problem may be at that field office
5. Call NJ Field Office
a. Let you know Verizon down in area
b. Call Verizon. Get Ticket #: 344AC3
c. Find dour how soon problem will be resolved from Verizon
d. Create in-house ticket
e. Always be thorough
PING
a. It is a tool used to test or check for connectivity between 2 network systems
b. Even if we get one response out of 4 requests it is a positive ping
c. If you can ping a system, then it is not a network connectivity issue
d. Sometimes lose packets when you ping because of internet traffic congestion (means it takes forever for signal to get to receiver)
IMAGES
IMAGES
A positive ping:
a) It is when the receiving system responds to a ping request from the sending system
b) It receives replies and a positive round trip information from receiving system
A negative ping: -
a) It is when the receiving system does not respond to a ping request from the sending system
Negative Ping Response Types:
1. Request timed Out for all 4 requests
2. Destination host Unreachable for all 4 requests
ICMP (Internet Connection Messaging Protocol): It is responsible for transmitting ping traffic
Typical Ping Response
Reply 8.8.8.8 bytes =32 time 7ms TTL =54
Bytes =32 – Amount of data sent
Time -=7ms - Time it took to respond (returning time)
TTL (Time to Live)
a) It is the maximum time allows for the receiving system to respond to the ping signal before it is dropped by the sending system eg TTL = 54ms – means it will be dropped after 54 ms
b) It is set by system based on the internet traffic
IP Addressing
IP Address: - It is a number that is assigned to a system in a network by the DHCP or Admin that enables it to communicate with other systems in the network
If system Admin assigns an IP Address, it is STATIC
When DHCP assigns an IP Address, It is DYNAMIC
If it is a reserved IP Address, It is still DYNAMIC
Recommendation: System Hardware (eg Routers, Switch, Default Gateway) should be given only STATIC IP Addresses
TYPES OF IP ADDRESSES
Type Main Description
IPv4 It has about 4.7 billion IP addresses. It is made up of only numbers.
Ipv6 It has about 340 undercillion IP Address. It is made up of alphanumeric (both numbers and letters)
What is Undercillion?
Million Billion Trillion Quatrillion Quintillion Sextillion Septillion Octillion Nonillion Decillion Undecillion
What is the difference between IPv4 and IPv6 addresses?
IPv4
1. It is made up of only numbers
2. It has no inbuilt security
3. It is faster and that’s why it is used by System Admins 99% of the time as have enough Ipv4 addresses for a LAN
4. Structure of IPv4: X.X.X.X (where x is a number)
IPv4 is……For example, 192. 168. 2. 1
4 Octets Octet Octet Octet Octet
32 bits 8 bits 8 bits 8 bits 8 bits
1 byte 1 byte 1 byte 1 byte 1 byte
5. It is a 32 bit number assigned to a network system by an Admin or DHCP server in order to allow the system to communicate to LAN
IPv6
1. It has 128 bitalphanumeric IP addresses (have numbers and letters)
2. It has a lot more IP Addresses than IPv4 (only numbers)
3. It has an inbuilt security called IPSEC
4. It is more secure and slower in data transmission due to security overhead included in IPv6
5. It is mostly used by ISPs (internet Service Providers)
6. Mainly dealt with by Cisco Adminss who go into details into IPv6 and its structure
7. How do you disconnect an IPv6 address?
a. Search bar/Control Panel/Network and Internet/Network & Sharing Centere/Change adaptor settings/Right Click NIC/Properties/Disconnect or unselect IPv6
IPv4 Classes
Helps you troubleshoot Ip related issues
Classes First Octet Range
X.-.-.-. eg 192.1.1.1 Subnet Mask Function
Class A
1-126 255.0.0.0 Used for computers
LOOPBACK ADDRESS
(reserved for Loopback Address) 127
127.0.0.1 N/A It is referred to as the local host. It is used to troubleshoot the Ip Stack of a system eg Windows or LINUX
Class B
128-191 255.255.0.0 Used for computers
Class C
192-223 255.255.255.0 Used for computers
Class D
224-239 N/A Used for Broadcasting and Multicasting
Class E
240-255 N/A Used for Research
Broadcasting: - It is sending something to every system in a network
Subnet Mask:
1. it is used to separate the network address portion from the host address portion
2. The IP address has 2 parts
a. Network address portion which is always STATIC (defines the LAN address)
b. Host address portion which is always dynamic
3. The IP address can only be separated by subnet mask
ONLY SYSTEMS WITH SAME NETWORK ADDRESS CAN TALK TO EACH OTHER. !!! This is important for troubleshooting Networking issues !!!
Examples: NOTE:255s in subnet mask determine Network address and 0s determine the Host address
First Octet determines Class
CLASS B
172 168 2 4 IP Address
255 255 0 0 Subnet Mask
Network address: 172.168 Host Address: 2.4
```
CLASS A
10 3 7 1 IP Address
255 0 0 0 Subnet Mask
Network address:
10 Host Address: 3.7.1
```
```
CLASS C
192 168 2 10 IP Address
255 255 255 0 Subnet Mask
Network address: 192.168.2 Host Address:
10
```
IMAGES
IMAGES
192. 168.2.10 192.168.2.11 WHAT IS THE PROBLEM?
255. 255.255.0 255.255.255.0
192. 168.2.12
255. 255.0.0
192. 168.2.10 192.168.2.11 WHAT IS THE PROBLEM?
255. 255.255.0 255.255.255.0
192. 168.2.12
255. 255.0.0
PC Web Configurations Network Address NOTES
1 192.168.2.10
255.255.255.0 192.168.2 Able to connect to PC2 only. Same network address.
2 192.168.2.11
255.255.255.0 192.168.2 Able to connect to PC1 only. Same network address.
3 192.168.2.12
255.255.0.0 192.168 Cannot connect to PC1 and PC2 because it has a different network address (not in the same network) and needs a router to connect
Subnet mask set by Admin as Admin sets up DHCP and tells it what Class IP address is so DHCP will keep same network address for all assigned IP addresses For example, it will keep all first 3 octet numbers for Class C and only change 4th octet
CIDR (Classless Interdomain Routers)
1. It is used to conserve IP addresses.
2. It is used when the Standard IP class format is not respected
3. It can still route traffic but disregards the IP class conventions to conserve IP addresses
Address CLASS
IP Address 10.0.0.29 CLass A IP Address
Subnet Mask 255.255.255.0 Class C Subnet Mask
Some ISPs do this like Comcast – IP Address and Subnet Mask having 2 different classes that do not much
Total Number of IP Hosts
Formula: Total # of IP Hosts = 2n – 2
(n= Total # of host bits)
```
Class A (4th octet = 8bits) 28 -2 = 264
Class B 216 -2= 65534
Class C 224 -2 = 1.7 * 107
Number of Computers or hosts that can be assigned a unique IP address under each class
For example
Class C
IP Address 192.168.1.2
Subnet Mask 255.255.255.0
Host Address x.x.x.2
Available Octet x x x 8bits (to assign out)
264 hosts
```
```
Class B
IP Address 172.168.1.10
Subnet Mask 255.255.0.0
Host Address x.x.1.10
Available Octet x . x . 8bits . 8bits (to assign out)
65534 hosts
```
```
Class A
IP Address 10.0.0.20
Subnet Mask 255.0.0.0
Host Address x.0.0.20
Available Octet x . 8bits . 8bits . 8bits (to assign out)
17 million hosts
```
Number Range in Each Ipv4 Octet
```
Eg. Ip Address 192.168.1.1
Octet 1 Octet 2 Octet 3 Octet 3
4 Octets Octet Octet Octet Octet
32 bits 8 bits 8 bits 8 bits 8 bits
1 byte 1 byte 1 byte 1 byte 1 byte
NUMBER RANGE
AVAILABLE TO BE ASSIGNED IN EACH OCTET 1
.
.
.
.
.
126
```
```
128
.
.
.
.
223 0
.
.
.
.
.
255 0
.
.
.
.
.
255 1
.
.
.
.
254
Total Number 222 256 (includes 0) 256 (includes 0) 254
```
FAKE IP ADDRESSES
End with 1 or 255 or greater eg 192.162.2.256 or 192.162.2.0 or 192.162.1.0 (Invalid IP Addresses)
Loopback Address
127.0.0.1
1. It is referred to as a local host
2. It is used to troubleshoot the IP Stack of a system in Windows or LINUX
3. This is why the 1st octet cannot be assigned 127
IMAGES
IMAGES
IP Stack:
IMAGES
IMAGES (Notebook 3)
1. It is the program that runs the IP system of an operating system
2. Malware corrupts IP stack (or you can mess it up on your own) to make you unable to connect to the internet and so loopback address is used to troubleshoot a defective IP Stack
3. A positive loopback ping means the IP stack is good
4. A Negative loopback ping means the IP stack is bad
5. Also, if you cannot connect to the internet no matter what you do, then need to check if you have a bad IP stack
How do you troubleshoot a bad IP Stack
1. Search bar/Command Prompt/ping 127.0.0.1
2. If positive ping, then IP Stack is good
3. If negative ping, then IP Stack is bad
How do we fix a Negative Loopback ping/bad IP Stack?
1. In Windows
a. Download, install and execute the winsock fix utility from Microsoft website. Free.
2. In UNIX/LINUX
a. Type: #sys-unconfig - in command line to fix bad IP Stack
Troubleshooting Network Issues
1. Network Related Issues – Default Gateway, DHCP, Firewall, Switch, Router
2. System Related Issues – Configuration, Software related issues, Hardware related issues, Malware Infection
Troubleshoot why you would not be able to ping 8.8.8.8?
1. NIC Problem
2. Default Gateway issue
3. Malware (Bad IP Stack)
4. Bad Cable
5. Router Firewall
6. No Internet blocked by ISP
7. IP Conflict
8. Bad IP
9. Network Configuration Error
Load Balancer
Why do you get 2 different IP Addresses for one domain like Facebook.com
Facebook.com Domain has load balancer, that can be daisy chained, that receives IP address request and sends request for IP address to least utilized server among multiple servers that are located globally.
SERVERS
192.168.1.1 192.168.1.2 192.168.1.1 192.168.1.1 192.168.1.1 IP ADRESSES
TOKYO, DUBLIN NEW YORK BEIJING LONDON LOCATION
This ensures that domain will not be overloaded
Most servers are set up like this
Syncronization/Clustering:
Information in each server is duplicated across servers. It could be across 1000s of servers.