Networking Devices Flashcards
Hub
• “Multi-port repeater” • Traffic going in one port is repeated to every other port • OSI Layer 1 • Everything is half-duplex • Becomes less efficient as network speeds increase • 10 megabit / 100 megabit • Difficult to find today
Bridge
• Imagine a switch with two to four ports
• Makes forwarding decisions in software
• Connects different physical networks
• Can connect different topologies
• Gets around physical network
size limitations / collisions
• OSI Layer 2 device
• Distributes traffic based on MAC address
• Most bridges these days are wireless access points
• Bridges wired Ethernet to wireless
Switch
- Bridging done in hardware
- Application-specific integrated circuit (ASIC)
- An OSI layer 2 device
- Forwards traffic based on data link address
- Many ports and features
- The core of an enterprise network
- May provide Power over Ethernet (PoE)
- Multilayer switch
- Includes Layer 3 (routing) functionality
Router
• Routes traffic between IP subnets • OSI layer 3 device • Routers inside of switches sometimes called “layer 3 switches” • Layer 2 = Switch • Layer 3 = Router • Often connects diverse network types • LAN, WAN, copper, fiber
Firewall
- Filters traffic by port number
- OSI layer 4 (TCP/UDP)
- Some firewalls can filter through OSI layer 7
- Can encrypt traffic into/out of the network
- Protect your traffic between sites
- Can proxy traffic
- A common security technique
- Most firewalls can be layer 3 devices (routers)
- Usually sits on the ingress/egress of the network
Wireless access point (WAP)
• Not a wireless router • A wireless router is a router and a WAP in a single device • WAP is a bridge • Extends the wired network onto the wireless network • WAP is an OSI layer 2 device
Converting media
- OSI Layer 1
- Physical layer signal conversion
- Extend a copper wire over a long distance
- Convert it to fiber, and back again
- You have fiber
- The switch only has copper ports
- Almost always powered
- Especially fiber to copper
Wireless range extender
• Wireless never seems to stretch far enough • We can’t always choose where to install an access point • Extend the reach of a wireless network • A wireless repeater
VoIP endpoint
• Some people still communicate using voice
• We now send this using VoIP
• The device can now be anything
• Traditional phone handset, desktop application,
mobile device app
Multilayer switches
• A switch (Layer 2) and router (Layer 3) in the same
physical device
• Layer 2 router?
• Switching still operates at OSI Layer 2, routing still
operates at OSI Layer 3
• There’s nothing new or special happening here
Wireless networks everywhere
- Wireless networking is pervasive
- And you probably don’t just have a single access point
- Your access points may not even be in the same building
- One (or more) at every remote site
- Configurations may change at any moment
- Access policy, security policies, AP configs
- The network should be invisible to your users
- Seamless network access, regardless of role
Wireless LAN controllers
- Centralized management of WAPs
- A single “pane of glass”
- Deploy new access points
- Performance and security monitoring
- Configure and deploy changes to all sites
- Report on access point use
- Usually a proprietary system
- Wireless controller is paired with the access points
Balancing the load
- Distribute the load
- Multiple servers
- Invisible to the end-user
- Large-scale implementations
- Web server farms, database farms
- Fault tolerance
- Server outages have no effect
- Very fast convergence
Load balancer
- Configurable load
- Manage across servers
- TCP offload
- Protocol overhead
- SSL offload
- Encryption/Decryption
- Caching
- Fast response
- Prioritization
- QoS
- Content switching
- Application-centric balancing
IDS and IPS
• Intrusion Detection System / Intrusion Prevention
System
• Watch network traffic
• Intrusions
• Exploits against operating systems, applications, etc.
• Buffer overflows, cross-site scripting, other
vulnerabilities
• Detection vs. Prevention
• Detection – Alarm or alert
• Prevention – Stop it before it gets into the network