COMPTIA NETWORK+ N10-009 PART II

WIRELESS NETWORKING

• 802.11

• MANAGED BY IEEE LAN/MAN

• STANDARDS COMMITTEE - IEEE802

• MANY UPDATES OVER TIME

• i.e.) 802.11ax IS WIFI 6

IEEE

• INSTITUTE OF ELECTRICAL & ELECTRONICS ENGINEERS

WIFI TRADEMARK

• WIFI ALLIANCE HANDLES INTEROPERABILITY TESTING

LONG TERM EVOLUTION (LTE)

• CONVERGED STANDARD (GSM & CDMA PROVIDERS)

• BASED ON GSM & EDGE

• STANDARD SUPPORTS DOWNLOAD RATES OF 15 Mbit/S

EDGE

• ENHANCED DATA RATES FOR GSM EVOLUTION

LTE ADVANCED (LTE - A)

• STANDARD SUPPORTS DOWNLOAD RATES OF 300 Mbit/S

5G

• LAUNCHED IN 2020

• HIGHER FRQUENCIES

• EVENTUALLY 10 GIGABITS PER SECOND

• SLOWER SPEEDS FROM 100-900Mbit/S

• BANDWIDTH BECOMES LESS OF A CONSTRAINT

• LARGE DATA TRANSFERS

• FASTER MONITORING & NOTIFICATION

• ADDITIONAL CLOUD PROCESSING

SATELLITE NETWORKING

• COMMUNICATION TO SATELLITE

• NON-TERRESTIAL COMMUNICATION

• HIGH COST RELATIVE TO TERRESTRIAL NETWORKING

• 100Mbit/s down, 5 Mbit/s UP ARE COMMON

• DIFFICULT-TO-NETWORK SITES

• RELATIVELY HIGH LATENCY

• HIGH FREQUENCIES (2GHz)

RAIN FADE

• OCCURS WITH SATELLITE NETWORKING WHERE A STORM AFFECTS CONNECTIVITY WHEN A STORM IS GOING BY

ETHERNET

• MOST POPULAR NETWORKING TECHNOLOGY IN THE WORLD

• DIFFERENT TYPES

  • SPEEDS, CABLING, CONNECTORS, EQUIPMENT

• i.e.) TWISTED PAIR COPPER OR FIBER

IEE ETHERNET STANDARDS

• IEEE 802.3 COMMITTEE

• INSTITUTE OF ELECTRICAL & ELECTRONICS ENGINEERS

• ALL TYPES & STANDARDS OF ETHERNET

• COPPER & FIBER

BASE

• BASEBAND

• SINGLE FREQUENCY USING ENTIRE MEDIUM

• i.e.) BROADBAND USES MANY FREQUENCIES (SHARING THE MEDIUM)

FIBER COMMUNICATION

• TRANSMISSION BY LIGHT

• NO RF SIGNAL

• SIGNAL SLOW TO DEGRADE

  • TRANSMISSION OVER LONG DISTANCES

• IMMUNE TO RADIO INTERFERENCE

MULTIMODE FIBER

• SHORT-RANGE COMMUNICATION

• UP TO 2KM

• INEXPENSIVE LIGHT SOURCE

  • i.e.) LED

LED

• LIGHT EMITTING DIODE

SINGLE-MODE FIBER

• LONG RANGE COMMUNICATION

• UP TO 100KM WITHOUT PROCESSING

• EXPENSIVE LIGHT SOURCE

• i.e.) LASER BEAMS

TWISTED PAIR COPPER CABLING

• TWO WIRES WITH EQUAL & OPPOSITE SIGNALS

• TRANSMIT+, TRANSMIT- OR RECEIVE+, RECEIVE-

“CATEGORY” OF CABLE

• CABLE STANDARDS

• i.e.) CATEGORY 6, CATEGORY 7

• CHECK IEEE STANDARDS TO DETERMINE MINIMUM CABLE CATEGORY

• i.e.) MINIMUM CABLE CATEGORY FOR 1000BASE-T IS CATEGORY 5

COAXIAL CABLE

• 2 OR MORE FORMS SHARE A COMMON AXIS

• i.e.) RG-6

  • USED IN TV / DIGITAL CABLE

  • HIGH-SPEED INTERNET OVER CABLE

TWINAXIAL CABLE

• 2 INNER CONDUCTORS

• AKA: TWINAX

• COMMON ON 10 GIGABIT ETHERNET SFP+ CABLES

• FULL DUPLEX COMMUNICATION OVER SINGLE CABLE

• LIMITS DISTANCE TO SEND SIGNAL TO ABOUT 5 METERS

• LOW COST

• LOW LATENCY COMPARED TO TWISTED PAIR

PLENUM

• IMPLIES THAT THERE IS A SHARED AIRSPACE

• NO DUCT WORK

• CONSIDER USING PROPER TYPE OF NETWORK CABLES IN SHARED PLENUM

• CONCERN IN FIRE IF NETWORK CABLE TYPE PRODUCES A LARGE AMOUNT OF SMOKE OR HAZARDOUS FUMES IF IT CAUGHT ON FIRE - WOULD BE DISTRIBUTED TO EVERYONE IN BUILDING

NO PLENUM

• DROP CEILING WITH DUCT WORK

• AIR SUPPLY HAPPENS TO FLOW

• RETURN AIR USING ADDITIONAL DUCT WORK TO GO BACK TO HEATING OR COOLING SYSTEM

• PLENUM NOT POSSIBLE DUE TO DUCT WORK

POLYVINYL CHLORIDE (PVC)

• TRADITIONAL CABLE JACKET

FLUORINATED ETHYLENE POLYMER (FEP)

• FIRE-RATED CABLE JACKET

• PLENUM-RATED CABLE

• MUCH SAFER IN FIRE

• MAY NOT BE AS FLEXIBLE

• MAY NOT HAVE SAME BEND RADIUS

LOW-SMOKE POLYVINYL CHLORIDE (LOW-SMOKE PVC)

• FIRE-RATED CABLE JACKET

• PLENUM-RATED CABLE

• MUCH SAFER IN FIRE

• MAY NOT BE AS FLEXIBLE

• MAY NOT HAVE SAME BEND RADIUS

TRANSCEIVER

• TRANSMITTER & RECEIVER

• USUALLY COMBINED WITHIN SAME PIECE OF EQUIPMENT

• PROVIDES MODULAR INTERFACE

• ADD TRANSCEIVER THAT MATCHES YOUR NETWORK

• i.e.) IF YOU NEED COPPER CONFIGURATION FOR GIGABIT ETHERNET, YOU SLIDE IN A COPPER ETHERNET GIGABIT TRANSCEIVER

• i.e.) IF YOU NEED A FIBER-BASED 10 GIG CONNECTION, YOU SLIDE IN A 10 GIG FIBER TRANSCEIVER

• DIFFERENT TYPES SUCH AS ETHERNET OR FIBRE CHANNEL

  • NOT COMPATIBLE WITH EACH OTHER

• DIFFERENT MEDIA TYPES

  • FIBER & COPPER

SMALL FORM-FACTOR PLUGGABLE (SFP)

• COMMONLY USED TO PROVIDE 1 Gbit/s FIBER

• 1 Gbit/s RJ45 SFPs ALSO AVAILBLE

• i.e.) PLUG IN FIBER SFP & CONNECT FIBER CONNECTIONS TO THAT PARTICULAR

• i.e.) IF YOU NEED COPPER, YOU CAN SLIDE IN COPPER SFP & PLUG IN RJ45 CONNECTOR

ENHANCED SMALL FORM-FACTOR PLUGGABLE (SFP+)

• EXACTLY SAME PHYSICAL SIZE AS SFP

• SUPPORTS DATA RATES UP TO 16 Gbit/s

• COMMON WITH 10 GIGABIT ETHERNET

QUAD SMALL FORM-FACTOR PLUGGABLE (QSFP)

• ENSURE AS MUCH CONNECTIVITY INTO SINGLE SPACE AS POSSIBLE

• i.e.) 4 CHANNEL SFP = 4 1 Gbit/s = 4 Gbit/s

ENHANCED QUAD FORM-FACTOR PLUGGABLE (QSFP+)

• i.e.) 4 CHANNEL SFP+ = 4 10 Gbit/s = 40 Gbit/s

SUBSCRIBER CONNECTOR (SC)

• AKA: SQUARE CONNECTOR, STANDARD CONNECTOR

• PUSHES ON TO LOCK

• PULL CONNECTOR TO UNLOCK

• POPULAR FIBER CONNECTOR

• COMMON IN DATA CENTERS

LOCAL CONNECTOR (LC)

• AKA: LUCENT CONNECTOR, LITTLE CONNECTOR

• POPULAR FIBER CONNECTOR

• SMALLER & MORE COMPACT

• LOCKS IN PLACE WITH CLIP

• PRESS TO RELEASE

STRAIGHT TIP (ST)

• BAYONET CONNECTOR

• STICK & TWIST

• PUSH ON & TURN

• LOCKS IN PLACE

• TURN TO UNLOCK

MULTI-FIBER PUSH ON (MPO)

• AKA: MTP, MTP MPO CONNECTOR

  • CORNING BRAND

• 12 FIBERS IN A SINGLE CONNECTOR

• SAVE SPACE & MANAGE 1 CABLE

• PUSH TO LOCK IN PLACE

• PULL CONNECTOR TO UNLOCK

REGISTERED JACK TYPE 11 (RJ11 CONNECTOR)

• 6 POSITION, 2 CONDUCTOR (6P2C)

• i.e.) TELEPHONE & DSL CONNECTION

REGISTERED JACK TYPE 45 (RJ45 CONNECTOR)

• 8 POSITION, 8 CONDUCTOR (8P8C)

• i.e.) ETHERNET

F-CONNECTOR

• COAXIAL CABLE

• STANDARD CONNECTOR TYPE

• THREADED CONNECTOR

• CABLE MODEM

• i.e.) CABLE TV

• DOCSIS

DOCSIS

• DATA OVER CABLE SERVICE INTERFACE SPECIFICATION

BAYONET NEILL-CONCELMAN (BNC) CONNNECTOR

• PAUL NEILL (BELL LABS) & CARL CONCELMAN (AMPHENOL)

• COMMON COAXIAL CABLE CONNECTOR

• COMMON WITH TWINAX & DS3 WAN LINKS

• i.e.) VIDEO CONNECTIONS

• SECURE CONNECTIONS

NETWORK TOPOLOGY

• USEFUL IN PLANNING A NEW NETWORK

• ASSISTS IN UNDERSTANDING SIGNAL FLOW

  • TROUBLESHOOTING PROBLEMS

STAR / HUB & SPOKE

• USED IN MOST LARGE & SMALL NETWORKS

• ALL DEVICES ARE CONNECTED TO A CENTRAL DEVICE

• i.e.) SWITCHED ETHERNET NETWORKS (SWITCH IS IN THE MIDDLE)

MESH

• MULTIPLE LINKS TO THE SAME PLACE

• FULLY CONNECTED

• PARTIALLY CONNECTED

• i.e.) ONE LINK COMMUNICATING TO ANOTHER & IT MIGHT FOLLOW ONE PATH TO GET TO THAT LOCATION OR MAY FOLLOW AN ALTERNATE PATH

• REDUNDANCY, FAULT-TOLERANCE, LOAD BALANCING

• USED IN WANs

LOAD BALANCING

• HALF OF DATA IS SENT OVER ONE CONNECTION & OTHER HALF OF DATA IS SENT OVER A DIFFERENT CONNECTION

HYBRID

• COMBINATION OF ONE OR MORE PHYSICAL TOPOLOGIES

• MOST NETWORKS ARE HYBRID

• i.e.) ONE PART OF NETWORK MIGHT BE STAR NETWORK, OTHER PART MAY BE POINT-TO-POINT, & THIRD PART MIGHT BE MESH NETWORK

SPINE & LEAF

• EACH LEAF SWITCH CONNECTS TO EACH SPINE SWITCH & VICE VERSA

• INDIVIDUAL SWITCHES ARE “SPINE” OF THE NETWORK

• SWITCHES ARE IN THE MIDDLE THAT ARE “LEAF” OF THE NETWORK

• DIFFERENT DEVICES CONNECT TO THE LEAF

• LEAF SWITCHES & SPINE SWITCHES DO NOT CONNECT TO EACH OTHER

TOP-OF-RACK SWITCHING

• EACH LEAF IS ON “TOP” OF PHYSICAL NETWORK RACK

• MAY INCLUDE GROUP OF PHYSICAL RACKS

• ADVANTAGE: SIMPLE CABLING, REDUNDANCY, & FAST

• DISADVANTAGE: ADDITIONAL SWITCHES MAY BE COSTLY

POINT-TO-POINT

• ONE-TO-ONE CONNECTION

• OLDER WAN LINKS - “POINT TO POINT T-1”

• i.e.) CONNECTIONS BETWEEN BUILDINGS ON UNIVERSITY CAMPUS

CORE

• 1st TIER OF THREE-TIER ARCHITECTURE

• “CENTER” OF NETWORK

• WEB SERVERS, DATABASES, APPLICATIONS

• MANY HAVE ACCESS TO THIS

DISTRIBUTION

• 2nd TIER OF THREE-TIER ARCHITECTURE

• MIDPOINT BETWEEN CORE & USERS

• COMMUNICATION BETWEEN ACCESS SWITCHES

• MANAGE PATH TO END USERS

ACCESS

• 3rd TIER OF THREE-TIER ARCHITECTURE

• WHERE USERS CONNECT

• END STATIONS, PRINTERS

THREE-TIER ARCHITECTURE

• i.e.)

  • SINGLE CAMPUS HAS 2 SEPARATE BUILDINGS

  • USERS ARE CONNECTED ON EACH FLOOR OF BUILDING TO ACCESS SWITCH

  • EACH ACCESS SWITCH CONNECTS TO 1 OR MORE DISTRIBUTION SWITCHES

  • DISTRIBUTION SWITCHES ARE CONNECTED TO CORE OF NETWORK (MAY BE IN CENTRAL DATA CENTER)

COLLAPSED CORE

• TWO-TIER MODEL

• GOOD FOR SMALLER ORGANIZATIONS

• COMBINE CORE & DISTRIBUTION LAYERS (COLLAPSE TOGETHER)

• SIMPLER TO DESIGN & SUPPORT

• LESS EXPENSIVE TO IMPLEMENT

• NOT A LOT OF OPTIONS FOR REDUNDANCY

EAST-WEST TRAFFIC

• TRAFFIC BETWEEN DEVICES IN THE SAME DATA CENTER

• RELATIVELY FAST RESPONSE TIMES

• i.e.) TRAFFIC WITHIN LOCAL DATA CENTER - FILE SERVER SENDING INFORMATION TO IMAGE SERVER

NORTH-SOUTH TRAFFIC

• INGRESS / EGRESS TO OUTSIDE DEVICE

• DIFFERENT SECURITY POSTURE THAN EAST-WEST TRAFFIC

• i.e.) IF DATA COMES INTO NETWORK FROM INTERNET OR WE SENT INFORMATION OUT TO INTERNET

BINARY

• BIT - A ZERO OR ONE

BYTE

• EIGHT BITS

• OFTEN CALLED “OCTET”

SOFTWARE DEFINED NETWORKING (SDN)

• NETWORKING DEVICES HAVE DIFFERENT FUNCTIONAL PLANES OF OPERATION

• DATA, CONTROL, & MANAGEMENT PLANES

INFRASTRUCTURE LAYER / DATA PLANE

• PROCESS NETWORK FRAMES & PACKETS

• FORWARDING, TRUNKING, ENCRYPTING, NETWORK ADDRESS TRANSLATION (NAT)

CONTROL LAYER / CONTROL PLANE

• MANAGES ACTIONS OF DATA PLANE

• ROUTING TABLES, SESSION TABLES, NETWORK ADDRESS TRANSLATION (NAT) TABLES

• DYNAMIC ROUTING PROTOCOL UPDATES

APPLICATION LAYER / MANAGEMENT PLANE

• CONFIGURE & MANAGE THE DEVICE

• SSH, BROWSER, API

SOFTWARE DEFINED NETWORKING IN WIDE AREA NETWORK (SD-WAN)

• WAN BUILT FOR CLOUD

• CLOUD-BASED APPLICATIONS COMMUNICATE DIRECTLY TO CLOUD

DATA CENTER INTERCONECT (DCI)

• CONNECT MULTIPLE DATA CENTERS TOGETHER

• CONNECT & SEGMENT DIFFERENT CUSTOMER NETWORKS

• DISTRIBUTE APPLICATIONS EVERYWHERE

VIRTUALS EXTENSIBLE LAN (VXLAN)

• DESIGNED FOR LARGE SERVICE PROVIDERS

• OVER 16 MILLION POSSIBLE VIRTUAL NETWORKS

• TUNNEL FRAMES ACROSS LAYER 3 NETWORK

• BUILT TO ACCOMMODATE LARGE VIRTUAL ENVIRONMENTS

VIRTUALS EXTENSIBLE LAN (VXLAN) TUNNEL

• USES EXISTING IP NETWORK TO PROVIDE TRANSPORTATION

• ENCAPSULATE INFORMATION IN ONE DATA CENTER, SEND IT THROUGH THE TUNNEL, & DECAPSULATE IT ON THE OTHER END

ZERO TRUST

• COVERS EVERY DEVICE, EVERY PROCESS, EVERY PERSON

• EVERYTHING MUST BE VERIFIED

• ENSURE ONLY RIGHT USERS ARE ACCESSING RIGHT TYPE OF DATA

ADAPTIVE IDENTITY

• POLICY-BASED AUTHENTICATION

• EVERY AUTHENTICATION PROCESS CONSIDERS WHO IS TRYING TO AUTHENTICATE TO THE NETWORK

POLICY-DRIVEN ACCESS CONTROL

• POLICY-BASED AUTHENTICATION

• COMBINE ADAPTIVE IDENTITY WITH PREDEFINED SET OF RULES

• EVALUATES EACH ACCESS DECISION BASED ON POLICY & OTHER INFORMATION

• GRANT, DENY, REVOKE

AUTHORIZATION

• DETERMINE WHICH APPLICATION & DATA ARE ACCESSIBLE

• DIFFERENT RIGHT DEPENDING ON USER

LEAST PRIVILEGE ACCESS

• RIGHTS & PERMISSIONS SET TO BARE MINIMUM

• ALL USER ACCOUNTS MUST BE LIMITED

• DON’T ALLOW USERS TO RUN WITH ADMIN PRIVILEGES

SECURE ACCESS SERVICE EDGE (SASE)

• UPDATE SECURE ACCESS FOR CLOUD SERVICES

• SECURELY CONNECT FROM DIFFERENT LOCATIONS

• “NEXT GENERATION” VPN

• SASE CLIENTS ON ALL DEVICES

INFRASTRUCTURE as CODE (IaC)

• DESCRIBE INFRASTRUCTURE

• DEFINE SERVERS, NETWORK, & APPLICATIONS AS DEFINITION FILES

• MODIFY INFRASTRUCTURE & CREATE VERSIONS

• USE DESCRIPTION (CODE) TO BUILD OTHER APPLICATIONS INSTANCES

PLAYBOOK

• SERIES OF STEPS YOU WOULD FOLLOW IN ORDER TO BE ABLE TO RESOLVE OR ADRESS A PARTICULAR ISSUE

• i.e.) DATA BREACH, RECOVER FROM RANSOMWARE

SECURITY ORCHESTRATION, AUTOMATION, & RESPONSE (SOAR)

• MANAGEMENT CONSOLE THAT ALLOWS YOU TO CENTRALIZE THE OPERATIONS OF EVERYTHING YOU’RE DOING WITH SECURITY IN YOUR ENVIRONMENT

SOURCE CONTROL

• MANAGE ANY TYPE OF CHANGE YOU MAY WANT TO IMPLEMENT INTO THOSE DEFINITION FILES

• TEST CONFIGURATIONS & DEPLOY THEM INTO PRODUCTION STATE

• PREVENTS MANY DIFFERENT PEOPLE FROM MAKING THEIR OWN MINOR CHANGES TO CONFIGURATION FILE

IPv6

• PROVIDES LARGER ADDRESS SPACE

• HAS ROOM TO GROW

• 128-BIT ADDRESS

TUNNEL

• ENCAPSULATE ONE PROTOCOL WITHIN ANOTHER

DUAL-STACK

• HAVE THE OPTION TO USE BOTH IPv4 & IPv6

TRANSLATE

• TRANSLATE & CONVERT BETWEEN IPv4 & IPv6

6TO4 ADDRESSING

• SEND IPv6 OVER TO EXISTING IPv4

• CREATES IPv6 ADDRESS BASED ON IPv4 ADDRESS

• REQUIRES RELAY ROUTERS

• NO ONGER AVAILABLE IN WINDOWS

4IN6 ADDRESSING

• TUNNEL IPv4 TRAFFIC ON IPv6 NETWORK

DUAL-STACK ROUTING

• RUN BOTH IPv4 & IPv6 AT THE SAME TIME

• INTERFACES WILL BE ASSIGNED MULTIPLE ADDRESS TYPES

NETWORK ADDRESS TRANSLATION (NAT) 64

• SEAMLESSLY TRANSLATE IPv4 & IPv6

• NEED SPECIALIZED ROUTER - NAT64-CAPABLE ROUTER

DOMAIN NAME SYSTEM (DNS) 64

• USES SPECIALIZED DNS SERVER TO TRANSLATE DNS REQUESTS FROM IPv4 TO IPv6

• IMPORTANT TO NAT64 PROCESS

STATIC ROUTING

• ADMINISTRATIVE CREATION OF A ROUTING TABLE

• YOU’RE IN CONTROL

STUB NETWORKS

• REMOTE LOCATIONS WHERE YOU MIGHT HAVE A SINGLE INTERNET CONNECTION INTO THAT REMOTE SITE

• ALL COMMUNICATION TAKE PLACE OVER THAT SINGLE CONNECTION

DYNAMIC ROUTING

• ROUTERS SEND ROUTES TO OTHER ROUTERS

• ROUTING TABLES UPDATED IN REAL-TIME

DYNAMIC ROUTING PROTOCOLS

• LISTEN FOR SUBNET INFO

• PROVIDE SUBNET INFORMATION TO OTHER ROUTERS

• DETERMINE BEST PATH BASED ON THIS INFO

• WHEN NETWORK CHANGES OCCUR, UPDATE THE AVAILABLE ROUTES

ENHANCED INTERIOR GATEWAY ROUTING PROTOCOL (EIGRP)

• PARTLY PROPRIETARY TO CISCO

• RELATIVELY EASY TO ENABLE & USE

• LOOP FREE OPERATION

• MINIMIZE BANDWIDTH USE

OPEN SHORTEST PATH FIRST (OSPF)

• COMMON INTERIOR GATEWAY PROTOCOL

• USED WITHIN SINGLE AUTONOMOUS SYSTEM (AS)

• AVAILABLE ON ROUTERS FROM MANY DIFFERENT MANUFACTURERS

AUTONOMOUS SYSTEM (AS)

• NETWORK WHERE YOU HAVE FULL CONTROL OF SYSTEMS

LINK-STATE PROTOCOL

• REFER OPEN SHORTEST PATH FIRST (OSPF) AS THIS

• DETERMINES WHAT THE BEST ROUTE IS BASED ON UPTIME & AVAILABILITY BETWEEN DIFFERENT OSPF ROUTERS

• LOW COST & FAST PATH WINS

• IDENTICAL COSTS ARE LOAD BALANCED

BORDER GATEWAY PROTOCOL (BGP)

• IF YOU NEED TO ROUTE TRAFFIC OUTSIDE OF AUTONOMOUS SYSTEM (AS) TO OTHER ORGANIZATIONS

• COMMONLY USED IN WIDE AREA NETWORKS (WAN) & INTERNET CONNECTIONS

ADMINISTRATIVE DISTANCE

• USED BY ROUTER TO DETERMINE WHICH ROUTING PROTOCOL HAS PRIORITY

• THE LOWER THE ADMINISTRATIVE DISTANCE, THE BETTER THE ROUTE MIGHT BE

FIRST HOP REDUNDANCY PROTOCOL (FHRP)

• COMPUTER IS CONFIGURED WITH SINGLE DEFAULT GATEWAY

• DEVICES USE A VIRTUAL IP (VIP) FOR DEFAULT GATEWAY

• IF ROUTER DISAPPEARS, ANOTHER ONE TAKES ITS PLACE

• DATA CONTINUES TO FLOW

SUBINTERFACES

• ASSIGN MULTIPLE INTERFACES TO A SINGLE PHYSICAL INTERFACE

• CONFIGURE OPTIONS FOR EACH INTERFACE

NETWORK ADDRESS TRANSLATION (NAT)

• WAY TO EXTEND FUNCTIONALITY OF IPv4

• TRANSLATE IPv4 FROM PRIVATE TO PUBLIC ADDRESS

PORT ADDRESS TRANSLATION (PAT)

• DIFFERENT FORM OF NAT

LOCAL AREA NETWORK (LAN)

• GROUP OF DEVICES IN THE SAME BROADCAST DOMAIN

VIRTUAL LAN

• GROUP OF DEVICES IN THE SAME BROADCAST DOMAIN

• SEPARATED LOGICALLY INSTEAD OF PHYSICALLY

NATIVE VLAN

• DOESN’T ADD 802.1Q HEADER

• CONNECTS SWITCHES WITHOUT TAG

• SOME DEVICES WON’T TALK TO 802.1Q

• SHOULD MATCH BETWEEN SWITCHES - ERROR MESSAGE IF IT DOESN’T MATCH