Networking CSCI N321 – System and Network Administration Copyright © 2000, 2012 by Scott Orr and...
-
Upload
alexandra-griffin -
Category
Documents
-
view
233 -
download
7
Transcript of Networking CSCI N321 – System and Network Administration Copyright © 2000, 2012 by Scott Orr and...
Networking
CSCI N321 – System and Network Administration
Copyright © 2000, 2012 by Scott Orr and the Trustees of Indiana University
Section Overview
TCP/IP Basics
TCP/IP Configuration
TCP/IP Network Testing
Dynamic Host Config Protocol (DHCP)
Wireless Networking
References
CQU 85321 System Administration Course Chapter 15
TCP/IP Protocol Stack
Physical Layer (media)Physical Layer (media)
Link Layer (Device Drivers)Link Layer (Device Drivers)
Network Layer (IP)Network Layer (IP)
Transport Layer (TCP,UDP)Transport Layer (TCP,UDP)
Application (FTP, HTTP, DNS)Application (FTP, HTTP, DNS)
EE IPIP T/UT/U
TCP/IP Packet Encapsulation
UTP/PSTNUTP/PSTN
Ethernet/PPPEthernet/PPP
IPIP
TCP/UDPTCP/UDP
ServiceService DataData
DataData
T/UT/U DataData
IPIP T/UT/U DataData
EE
Connecting to a Network
Hostname and IP Address assignmentConfiguration of hardwareDefault route (gateway) assignmentName Service ConfigurationTesting and troubleshooting
Hostnames
Uniquely identifies each systemFully Qualified Domain Name hostname.site.domain[.country] Country: 2 letter identifier for country Domain: Type of site (edu, com, org) Site: Unique name of organization Hostname: Unique name of system
hostname: Display or set system name
IP Addresses
Unique for each connection (interface)Consists of 4 octets (#.#.#.#) Network portion Host portion
Special Addresses Network Address Broadcast Address
IP Address Classes
ClassClass 11stst Byte Byte FormatFormat Total HostsTotal Hosts
A 0 – 126 N.H.H.H 16 Million
B 128 – 191
N.N.H.H 64 Thousand
C 192 – 239
N.N.N.H 254
D 224 – 239
- (Multicast)
E 240 – 254
- (Experimental)
Subnet Masks
Splits networks into subnetworksSeparates address into 2 parts 1’s – Network Portion 0’s – Host Portion
Example: Class C Network Address: N.N.N.H Mask: 255.255.255.0 (255 =
11111111) CIDR Notation: N.N.N.H/24
Interface Configuration
Hardware to connect to networkCommon interfaces Ethernet Modem
Loopback (lo) Interfaceifconfig – View/Configure interfaceipconfig – View interface (Windows)
Ethernet Addressing
Assigned by manufacturer (hardware)Must be absolutely uniqueAddress format 6 octets in hex (#:#:#:#:#:#) First 3 octets: Manufacturer Identifier Last 3 octets: Card serial number
Used for local network communication
Translates IP addresses to Ethernet (MAC) addresses
Address Resolution Protocol
Who is 10.0.0.3?Who is 10.0.0.3?
10.0.0.110.0.0.1 10.0.0.210.0.0.2 10.0.0.310.0.0.3 10.0.0.410.0.0.4
I am (1:2:3:7:8:9)I am (1:2:3:7:8:9)
arp –a: View the cache
Connects Networks togetherIf destination not on local network, packets sent through gateway
Default Gateways
route: Display/configure routing
RedHat Network Files
/etc/sysconfig/networkHOSTNAMEGATEWAY
/etc/sysconfig/network-scripts/ ifcfg-[interface]
BOOTPROTO ONBOOTIPADDR NETMASKUSERCTL BROADCASTNETWORK
ifup/ifdown [interface]
Name Services
/etc/hosts Local configuration Localhost – 127.0.0.1
/etc/resolv.conf Domain Name Service (DNS) lookup search: domains to search if not FQDN nameserver (3): Nameservers to consult
/etc/nsswitch.conf
DNS Name Resolution
11
22
33
44 55
667788
host.domain.comhost.domain.com dns.domain.comdns.domain.com dns.iupui.edudns.iupui.edu dns.cs.iupui.edudns.cs.iupui.edu
Root ServerRoot Server Non-RecursiveNon-Recursive
RecursiveRecursive
Network Testing
Localhost reachabilityHostname reachabilityLocal network reachabilityInternet network reachabilityDNS resolution
Network tools
ping – Reachability testtraceroute – Routing performancenetstat – Network performance statstcpdump – Packet sniffingnslookup/dig – DNS QueriesConfiguration tools (already discussed)
Dynamic Host Config Protocol
Client broadcasts a request for an IP address and network informationServer leases address to clientLease must be renewed periodicallyEasy to make global network changesLinux: BOOTPROTO=dhcp
Windows Networking
Windows CLI
ipconfig – Display Interface Settingsping – Destination reachabilitytracert – Router hops to destinationnetstat – Performance statisticsnslookup – DNS lookupsroute – Set/Display gatewaynetsh – Change Interface Settings
netsh Examples
Display Interfacesnetsh interface show interface
Configure Interfacenetsh interface ip set address \
local static [ip-addr] [netmask] \
[default-gw] 1
DNS Server Settingnetsh interface ip set dns local \
static [ip-addr]
Wireless Networks
Extend the networkIncluded in many devices now
Laptops Smart Phones DSL/Cable Modems
Bandwidth (YMMV!) 802.11b – 11 Mbps 802.11g – 54 Mbps 802.11n - 150/300/450/600 Mbps
Set Service Identifier (SSID) Shared “key” between clients and Access Point (AP) Automatically detected vs. assigned
Wireless Security Issues
Sniffing / War DrivingBandwidth stealingAccess to private resourcesSecurity Measures Non-broadcasting SSIDs MAC Access Control Lists (ACLs) WEP???? WPA/WPA2
RedHat ifcfg- Additions
TYPE=Wireless
ESSID=[ssid name]
CHANNEL=[1-11]
MODE=[Auto|Managed|Ad-hoc]
Can set manually with /sbin/iwconfig
Virtual Private Networks
Virtual Private NetworkVirtual Private Network
VPNVPNServerServer
ApplicationApplicationServerServer
InternetInternet
Point to Point Tunneling Protocol
Based on Point to Point Protocol (PPP) Generic Routing Encapsulation (GRE)
IP HdrIP Hdr GRE HdrGRE Hdr Encrypted GRE BodyEncrypted GRE BodyPPPPPP DataDataTCPTCPIPIP
WeaknessesWeaknesses Poor EncryptionPoor Encryption Session handshaking done in clearSession handshaking done in clear
IPSec
Part of IPv6 SpecAuthentication Header (AH)
IPv4 HdrIPv4 Hdr Auth HdrAuth Hdr TCP/UDP Hdr & DataTCP/UDP Hdr & Data
Encapsulating Security Payload (ESP)Encapsulating Security Payload (ESP)
IPv4 HdrIPv4 Hdr ESP HdrESP Hdr Encrypted PayloadEncrypted PayloadDataDataTCP HdrTCP Hdr ESP AuthESP AuthESP TlrESP Tlr
Modes: Transport and TunnelModes: Transport and Tunnel