Chapter 3: Network Operations

Logical Network Diagram

llustrates how data flows within a network, showing the interconnec ons between devices, subnets, and other network components without detailing the physical connections

Asset Inventory

helps in strategic planning, compliance, and budgeting for upgrades and maintenance.

Software Inventory

vital for ensuring compatibility, planning upgrades, and managing security patches.

Licensing Management

tracking the number of licenses, usage rights, expiration dates, and renewals for all software products.

IP Address Management (IPAM)

prevent IP conflicts by providing a clear inventory of allocated and available IP addresses, supports the integration and management of DHCP and DNS services, and enhances network reliability and security through meticulous tracking of IP address assignments.

Wireless Survey and Heat Map

assesses the coverage and performance

Life-Cycle Management in Networking

lifespan of network equipment from acquisition to disposal.

End-of-Life (EOL)

point when a product is no longer produced, sold, or supported by the manufacturer.

End-of-Support (EOS)

marks the date when a manufacturer stops providing technical support and software updates for a product.

Software Management in Network Lifecycle

ensures that systems remain secure, functional, and in compliance with industry standards.

Firmware Updates

crucial for the hardware's reliability and performance, requiring careful scheduling to avoid operational interruptions.

Configuration Management

maintenance and control of all hardware and software configurations within an IT infrastructure.

Production Configuration

settings and setups that are ac vely used in the operational environment of the network.

Backup Configuration

storing a copy of the device configurations to prevent data loss in case of hardware failure, software issues, or other disruptions.

Baseline

golden configuration is a template of approved se ngs and configurations that serves as a standard for deploying new devices or restoring existing ones.

Simple Network Management Protocol

widely used protocol for network management, allowing administrators to monitor, configure, and control network devices.

SNMP Traps

unsolicited messages sent from an SNMP-enabled device to a management station, no fying it of significant events or conditions. Traps enable proactive monitoring and alerting

SNMP v2

widely used due to its simplicity and effec veness in network monitoring and management, but it lacks robust security features, relying on plain text community strings for authentication.

SNMP v3

most secure version of the Simple Network Management Protocol, providing important security enhancements over its predecessors.

Flow Data

capturing and analyzing metadata about network traAic, such as source and destination IP addresses, port numbers, and protocol types.

Packet Capture

intercep ng and logging traAic that passes over a digital network, helps with examining network traffic

Baseline Metrics

standard level of normal network performance, including typical traAic volume, performance speeds, and error rates.

Log Aggregation

process of collec ng, consolida ng, and analyzing computer-generated log messages from various sources across the network.

Syslog Collector

gathering log data generated by devices within a network.

Security Information and Event Management

real-me analysis of security alerts generated by network hardware and applications.

Application Programming Interfaces (APIs)

network management to allow seamless integra on between diAerent software systems.

Port Mirroring

traAic of a specific port or multiple ports is duplicated and sent to a designated monitoring port.

Recovery Point Objective

maximum acceptable amount of data loss measured in time before a disaster occurs.

Recovery Time Objective

targeted dura on of me and a service level within which a business process must be restored after a disaster or disruption to avoid unacceptable consequences associated with a break in business continuity.

Mean Time to Repair

average me required to repair a failed component or device and return it to normal operations.

Mean Time Between Failure (MTBF)

calculated average me between failures of a system or component during its operational lifespan.

Cold Site

backup loca on that has the necessary infrastructure to support IT operations (like power and networking) but does not have the servers, storage, or other equipment set up un l needed.

Warm Site

partially equipped with network connections and equipment and can be made operational with relatively short notice.

Hot Site

fully opera onal data center with hardware and software, telecommunications, and staA necessary to resume operations immediately after a disaster.

Tabletop Exercises

team members walk through various disaster scenarios to evaluate the effectiveness of the disaster recovery plan.

Validation Tests

actual execu on of the disaster recovery processes to verify that systems and data can be restored in accordance with the recovery objectives.

Name Resolution

conver ng human-readable domain names into IP addresses that networking equipment can understand and use to route data.

Address (A) Record

maps a domain name to its corresponding IPv4 address, allowing users to access websites using human-readable domain names instead of numerical IP addresses.

AAAA Record

t maps a domain name to an IPv6 address

Canonical Name (CNAME)

maps an alias name to a true or canonical domain name.

Mail Exchange (MX) Record

specify the mail servers responsible for receiving email messages on behalf of a domain.

Text (TXT) Record

verifying domain ownership and implemen ng email security measures like SPF and DKIM.

Nameserver (NS) Record

specific domain, indicating authoritative servers that can answer queries for the domain.

Pointer (PTR) Record

map an IP address to a domain name, essentially the opposite of A or AAAA records

Hosts File

map hostnames to IP addresses.

Time Protocols

consistent and accurate time across all devices within a network.

Network Time Protocol (NTP)

oldest and most commonly used protocols to synchronize the clocks of computers over a network.

Precision Time Protocol (PTP)

used for very precise me synchronization

Network Time Security (NTS)

designed to provide security improvements over the original protocol.

Clientless VPN

allows users to securely access network resources through a web browser without the need for installing dedicated VPN client software.

In-Band Management

same network connec ons and paths used for normal data traAic.