1/86
Looks like no tags are added yet.
Name | Mastery | Learn | Test | Matching | Spaced | Call with Kai | Chat |
|---|
No analytics yet
Send a link to your students to track their progress
WIRELESS MESH
MULTIPLE ACCESS POINTS THAT CAN COMMUNICATE TO EACH OTHER WITHIN A CLOSE AREA
AD HOC MODE
2 DEVICES COMMUNICATE USING 802.11
NO ACCESS POINT REQUIRED
INDEPENDENT BASIC SERVICE SET (IBSS)
TEMPORARY OR LONG-TERM COMMUNICATION
POINT-TO-POINT MODE
CONNECT 2 ACCESS POINTS TOGETHER
EXTEND WIRED NETWORK OVER DISTANCE
i.e.) BUILDING TO BUILDING OR SITE TO SITE
MAY NEEED SPECIALIZED WIRELESS EQUIPMENT
i.e.) OUTDOOR ANTENNAS OR ACCESS POINTS
INFRASTRUCTURE MODE
CLIENTS COMMUNICATE TO AN ACCESS POINT
ACCESS POINT FORWARDS TRAFFIC
CLIENTS CAN COMMUNICATE TO WIRED NETWORKS
CLIENTS CAN COMMUNICATE TO EACH OTHER IF ACCESS POINT ALLOWS
DISTRIBUTION FRAME
PASSIVE CABLE TERMINATION
PUNCH DOWN BLOCKS
PATCH PANELS
MOUNTED ON WALL OR FLAT SURFACE
ALL TRANSPORT MEDIA (COPPER, FIBER, VOICE & DATA)
OFTEN USED AS A ROOM OR LOCATION NAME
MAIN DISTRIBUTION FRAME (MDF)
CENTRAL POINT OF NETWORK / DATA CENTER
TERMINATION POINT FOR WAN LINKS
CONNECTS INSIDE TO OUTSIDE
PERFECT TESTING POINT IN BOTH DIRECTIONS
CENTRAL POINT FOR DATA
INTERMEDIATE DISTRIBUTION FRAME (IDF)
USUALLY IN SEPARATE FLOOR OR BUILDING
EXTENSION OF MAIN DISTRIBUTION FRAME (MDF)
DIRECTLY CONNECTED TO MDF
SWITCHES, ROUTERS
CONNECTS USERS TO NETWORK
COMMON IN MEDIUM TO LARGE ORGANIZATIONS
COPPER PATCH PANEL / PATCH BAY
PUNCH-DOWN BLOCK ON ONE SIDE & RJ45 CONNECTOR ON THE OTHER
MOVE CONNECTION AROUND
KEEP ALL CABLES IN PLACE BETWEEN PATCH PANEL & DESK OUT ON FLOOR
ALL WE HAVE TO CHANGE ARE INTERNAL CONNECTIONS ON INTERMEDIATE DISTRIBUTION FRAME (IDF)
FIBER DISTRIBUTION PANEL
PERMANENT FIBER INSTALLATION
PATCH PANEL AT BOTH ENDS
FIBER BEND RADIUS
CABLE BREAKS WHEN BENT TOO TIGHTLY
DO NOT EXCEED BEND RADIUS
LOOP THE FIBER
SERVICE LOOP
EXTRA FIBER FOR FUTURE CHANGES
INEXPENSIVE INSURANCE
AMPERE (A)
RATE OF ELECTRON FLOW PAST A POINT IN ONE SECOND
i.e.) DIAMETER OF WATER HOSE
VOLTAGE (V)
ELECTRICAL “PRESSURE” PUSHING ELECTRONS
i.e.) HOW OPEN A FAUCET IT
120V OR 240V
WATT (W)
HOW MUCH ENERGY IS BEING CONSUMED
ELECTRICAL LOAD MEASURED IN WATTS
ALTERNATING CURRENT (AC)
~
DIRECTION OF CURRENT CONSTANTLY REVERSES
DISTRIBUTES ELECTRICITY EFFICIENTLY OVER LONG DISTANCES
DIRECT CURRENT (DC)
CURRENT MOVES IN ONE DIRECTION WITH A CONSTANT VOLTAGE
UNINTERRUPTIBLE POWER SUPPLY (UPS)
SHORT-TERM BACKUP POWER
PROTECTION AGAINST POWER OUTAGE
BATTERIES INSIDE OF DEVICE WITH BATTERIES
TYPES: OFFLINE/STANDBY UPS, LINE-INTERACTIVE UPS, & ON-LINE/DOUBLE-CONVERSION UPS
FEATURES: AUTO SHUTDOWN, BATTERY CAPACITY, OUTLETS, PHONE LINE SUPPRESSION
BROWNOUTS
VOLTAGE ON LINES DROP A BIT
SURGES
VOLTAGE ON LINES TEND TO SPIKE
OFFLINE/STANDBY UPS
LEAST EXPENSIVE
WAITING FOR POWER TO GO OUT BEFORE IT KICKS IN
SMALL GAP OF TIME WHERE NO POWER IS AVAILABLE TO SYSTEMS
LINE-INTERACTIVE UPS
IF YOU HAPPEN TO HAVE A BROWNOUT & VOLTAGE BEGINS TO DROP
INCREASES AMOUNT OF POWER PROVIDED TO BE ABLE TO COMPENSATE FOR THAT DROP
ON-LINE/DOUBLE-CONVERSION UPS
MANY DATA CENTERS PREFERENCE
ALWAYS RUNNING ON BATTERY POWER
BATTERIES ARE CONSTANTLY BEING REFRESHED BY POWER SOURCE
IF YOU LOSE POWER SOURCE, THERE IS NO AFFECT ON SYSTEMS THAT ARE CONNECTED UPS - ALWAYS BEEN RUNNING ON THAT PRIMARY BATTERY POWER
POWER DISTRIBUTION UNITS (PDUs)
PROVIDE MULTIPLE POWER OUTLETS
USUALLY IN A RACK
MANAGE POWER CAPACITY
ENABLE OR DISABLE INDIVIDUAL OUTLETS
PHYSICAL NETWORK MAP
SHOWS PHYSICAL LAYOUT OF EQUIPMENT, CABLING, & EVERYTHING IN BETWEEN
LOGICAL NETWORK MAP
HIGHER LEVEL VIEW OF CONNECTIVITY
NOT FOCUSED ON INDIVIDUAL INTERFACES & CABLES
MORE ON HOW ENTIRE NETWORK IS CONNECTED
USEFUL FOR PLANNING & COLLABORATION
RACK DIAGRAM
PHYSICAL VIEW AS IF YOU WERE STANDING IN FRONT OF RACK IN DATA CENTER
PROVIDE DOCUMENTATION FOR INSTALLATION OR CHANGES
DETAILED DIAGRAM OF RACK COMPONENTS
CABLE MAPS & DIAGRAMS
VIEW OF OFFICE & WHERE WIRES ARE INSTALLED IN FACILITY
FOUNDATION OF NETWORK - CABLE & FIBER
PLANNING INSTALLATION
NUMBERING EACH NETWORK DROP
TROUBLESHOOTING AFTER INSTALLATION
ASSET MANAGEMENT
RECORD OF EVERY ASSET
i.e.) LAPTOP, DESKTOP, SERVERS, ROUTERS, SWITCHES, etc. . . .
ASSOCIATE SUPPORT TICKETS WITH DEVICE MAKE & MODEL
FINANCIAL RECORDS, AUDITS, DEPRECIATION
ADD ASSET TAG
WHO OWNS THE PARTICULAR PIECE OF EQUIPMENT
ASSET DATABASE
CENTRAL ASSET TRACKING SYSTEM
ASSIGNED USERS
WARRANTY
LICENSING
IP ADDRESS MANAGEMENT (IPAM)
PLAN, TRACK, & CONFIGURE DHCP & IP ADDRESS SCHEMED BEING USED IN A COMPANY
DOCUMENT WHAT USERS MAY BE USING WHAT IP ADDRESSES
USEFUL TO BE ABLE TO MAP A USER WITH A SPECIFIC IP ADDRESS DURING A PARTICULAR DATE & TIME
IDENTIFY PROBLEMS OR SHORTAGES WE MAY HAVE WITH IP ADDRESSING CONFIGURATIONS
MANAGE IPv4 & IPv6
SERVICE LEVEL AGREEMENT (SLA)
MINIMUM TERMS FOR SERVICES PROVIDED
UPTIME, RESPONSE TIME AGREEMENT, etc. . .
COMMONLY USED BETWEEN CUSTOMERS & SERVICE PROVIDERS
SITE SURVEYS
IDENTIFY ALL ACCESS POINTS THAT WE MIGHT BE USING (EVEN IF ACCESS POINTS ARE ONES WE ARE NOT IN CONTROL OF)
WORK AROUND EXISTING FREQUENCIES
LAYOUT & PLAN FOR INTERFERENCE
PLAN FOR ONGOING SITE SURVEYS
HEAT MAPS
HEAT MAP
IDENTIFIES WIRELESS SIGNAL STRENGTHS
END OF LIFE (EOL)
MANUFACTURER STOP SUPPORTING HARDWARE
MAY CONTINUE TO PROVIDE SECURITY PATCHES & UPDATES
MAY PROVIDE WARRANTY REPAIR
END OF SUPPORT (EOS)
MANUFACTURER STOPS UPDATING A PRODUCT
NO ONGOING SECURITY PATCHES OR UPDATES
***SIGNIFICANT SECURITY CONCERN***
PATCHES & BIG FIXES
SYSTEM STABILITY & SECURITY FIXES
SERVICE PACK - LARGE NUMBER OF UPDATES ALL AT ONCE
MONTHLY UPDATES
EMERGENCY OUT-OF-BAND UPDATES
OPERATING SYSTEM UPDATES
OPERATING SYSTEM UPDATES / SERVICE PACKS, SECURITY PATCHES
USER ACCOUNT CHANGES
MINIMUM PASSWORD LENGHTS & COMPLEXITY
ACCOUNT LIMITATIONS
NETWORK ACCESS & SECURITY
LIMIT NETWORK ACCESS
ANTI-VIRUS, ANTI-MALWARE
FIRMWARE MANAGEMENT
SOFTWARE INSIDE OF HARDWARE
UPGRADE FIRMWARE TO NON-VULNERABLE VERSION
ALWAYS HAVE A ROLLBACK PLAN
SAVE FIRMWARE BINARIES
DECOMMISSIONING
MANAGING ASSET DISPOSAL
SANITIZE MEDIA OR DESTROY
SOME INFORMATION MUST NOT BE DESTROYED - MAY BE A LEGAL ISSUE
CONSIDER OFFISTE STORAGE
DO NOT WANT TO THROW IN NORMAL TRASH
CHANGE MANAGEMENT
UPGRADE SOFTWARE, CHANGE FIREWALL CONFIGURATION, MODIFY SWITCH PORTS
SOMETHING THAT WE CAN TRACK, MONITOR, & MODIFY
CLEAR POLICIES
FREQUENCY, DURATION, INSTALLATION PROCESS, FALLBACK PROCEDURES
DIFFICULT TO IMPLEMENT
SIMPLE NETWORK MANAGEMENT PROTOCOL (SNMP)
DESIGNED TO PROVIDE MANAGEMENT INTERFACE TO DEVICES OVER A STANDARD SET OF PROTOCOLS REGARDLESS OF WHO HAPPENS TO MANUFACTURER THAT DEVICE
DATABASE CONTAINS OBJECT IDENTIFIERS (OIDs)
POLL DEVICES OVER UDP/161
MANAGEMENT INFORMATION BASE (MIB)
QUERYING NUMBER OF DIFFERENT PARAMETERS
DATABASE OF DATA
SIMPLE NETWORK MANAGEMENT PROTOCOL (SNMP) OBJECT IDENTIFIERS (OID)
OBJECT IDENTIFIER CAN BE REFERENCED BY NAME OR NUMBER
SPECIFIC VARIABLE THAT WE PULL BACK TO MANAGEMENT STATION
SERIES OF NUMBERS ASSOCIATED WITH SET OF VALUES
SIMPLE NETWORK MANAGEMENT PROTOCOL (SNMP) TRAP
PROACTIVE ALARM SENT FROM DEVICE TO MANAGEMENT STATION WITHOUT MANAGEMENT STATION NEEDING TO PULL THAT DEVICE FIRST
COMMUNICATE OVER UDP/162
COMMUNITY STRING
SIMPLE PASSWORD-STYLE AUTHENTICATION METHOD
READ-ONLY, READ-WRITE, & TRAP
ARE PUBLIC & PRIVATE
USED WITH SNMP V1 & SNMP V2C
NETFLOW
SUMMARY OF STATS BASED ON FLOWS OF TRAFFIC TRAVERSING THE NETWORK
STANDARD COLLECTION METHOD
MANY PRODUCTS & OPTIONS
NETFLOW PROBE
NETFLOW USUALLY STARTS WITH THIS
WATCHES NETWORK COMMUNICATION
MAYBE SITTING IN MIDDLE OF CONNECTION USING PHYSICAL TAP OR MAYBE USING SWITCHED PORT ANALYZER (SPAN) ON SWITCH TO GATHER THAT INFORMATION
COMPILING STATISTICS BASED ON ALL PACKETS GOING ACROSS THE NETWORK
NETFLOW COLLECTOR
SUMMARY OF ALL INFORMATION WITHIN NETWORK PROBE
DON’T HAVE TO GO TO SEPARATE NETFLOW PROBE’S TO GATHER ALL THE DETAILS
KEEPS DATABASE OF ALL INFORMATION OVER TIME
INCLUDES A REPORT GENERATOR
PROTOCOL ANALYZER
ALLOWS YOU TO SEE EXACT BITS & BYTES SENT ACROSS NETWORK FROM ONE DEVICE TO ANOTHER
GATHERS FRAMES ON NETWORK
VIEW TRAFFIC PATTERNS
LARGE SCALE STORAGE
NETWORK PERFORMANCE BASELINE
PICTURE OF WHAT A NORMAL DAY ON THE NETWORK MAY LOOK LIKE
NORMAL AMOUNT OF UTILIZATION WOULD BE DURING A STANDARD WORK DAY
INTERMITTENT OR ALL-DAY ISSUES
VERY DETAILED VIEW ACROSS MANY DIFFERENT DEVICES ON YOUR NETWORK
IDENTIFY & ALERT WHEN CERTAIN ANOMALIES OCCUR
SYSLOG
STANDARD FOR TRANSFERRING LOG FILES
USUALLY CENTRAL LOGGING COLLECTOR
INTEGRATED INTO SECURITY INFORMATION & EVENT MANAGER (SIEM)
EACH LOG ENTRY IS LABELED
FACILITY CODE & SEVERITY LEVEL
COMMON WITH MOST DEVICES
FACILITY CODE
PROGRAM THAT CREATED THE LOG
ASSOCIATED WITH SYSLOG
SECURITY INFORMATINO & EVENT MANAGEMENT (SIEM)
LOGGING OF SECURITY EVENTS & INFORMATION
SECURITY ALERTS - REAL-TIME
ADVANCED REPORTING FEATURES
LINK DIVERSE DATA TYPES
GATHER DETAILS AFTERN AN EVENT
API INTEGRATION
CONTROL & MANAGE DEVICES
LOG IN TO EACH DEVICE & MAKE CHANGES MANUALLY
APPLICATION PROGRAMMING INTERFACES (API)
INTERACT WITH THIRD-PARTY DEVICES & SERVICES
COMMUNICATE WITH NATIVE LANGUAGE OF THAT DEVICE
IF YOU ARE MANAGING HUNDREDS/THOUSANDS OF DEVICES, YOU CAN MAKE THOSE CHANGES AUTOMATICALLY USING API
PORT MIRRORING
ALLOWS YOU TO USE AN EXISTING SWITCH & REDIRECT TRAFFIC FROM ONE PORT ON THE SWITCH TO A PACKET GATHERING DEVICE THAT YOU HAVE CONNECTED TO A DIFFERENT PORT
AKA: SWITCHED PORT
i.e.) IF WE ARE USING A SWITCH, WE’RE SIMPLY TAKING A COPY OF THIS DATA & SENDING THAT COPY TO A THIRD-PARTY DEVICE (IPS OR NETFLOW COLLECTOR)
TRAFFIC ANALYSIS
VIEW TRAFFIC INFORMATION FROM ROUTERS, SWITCHES, FIREWALLS, etc. . . .
VERY DETAILED
IMPORTANT HISTORICAL INFORMATION
PERFORMANCE MONITORING
FUNDAMENTAL NETWORK STATISTIC
USE SNMP, NETFLOW, etc. . . .
IDENTIFY FUNDAMENTAL ISSUES
AVAILABILITY MONITORING
MOST IMPORTANT STATISTIC
GREEN IS GOOD, RED IS BAD
ALARMING & ALERTING
NOTIFICATION SHOULD AN INTERFACE FAIL TO REPORT
SHORT-TERM & LONG-TERM REPORTING
CONFIGURATION MONITORING
MONITOR CONFIGURATIONS
ALERT ON ANY CHANGES
BACKUP & RESTORE
OFTEN PART OF LARGER MANAGEMENT SYSTEM OR STRATEGY
DISASTER RECOVERY PLAN (DRP)
DETAILED PLAN FOR RESUMING OPERATIONS AFTER A DISASTER
EXTENSIVE PLANNING PRIOR TO DISASTER
BACKUPS
OFF-SITE DATA REPLICATION
CLOUD ALTERNATIVES
REMOTE SITE
MANY THIRD PARTY OPTIONS SUCH AS PHYSICAL LOCATIONS OR RECOVERY SERVICES
RECOVERY TIME OBJECTVE (RTO)
MEASURE IN AMOUNT OF TIME
NEEDS TO BE AS CLOSE TO 0 AS POSSIBLE
HOW QUICKLY WE CAN GET BACK TO RUNNING IF AN OUTAGE OCCURS
RECOVERY POINT OBJECTVE (RPO)
MEASURE IN AMOUNT OF TIME
NEEDS TO BE AS CLOSE TO 0 AS POSSIBLE
HOW MUCH TIME WE LOST WHEN THE OUTAGE OCCURRED
MEAN TIME TO REPAIR (MTTR)
TIME REQUIRED TO FIX THE ISSUE
TIME FROM POINT OF FAILURE TO FULL FUNCTIONALITY
MEAN TIME BETWEEN FAILURES (MTBF)
PREDICT TIME BETWEEN OUTAGES
SITE RESILIENCY
MOVING OF ONE LOCATION TO ANOTHER
RECOVERY SITE IS PREPPED
DATA IS SYNCHRONIZED
REVERT BACK TO PRIMARY LOCATION
COLD SITES
NO HARDWARE, NO DATA, NO PEOPLE
HOT SITES
EASILY MOVE IN & UP & RUNNING
EXACT REPLICA OF DATA CENTER
STOCKED WITH HARDWARE
APPLICATIONS & SOFTWARE CONSTANTLY UPDATED
FLIP A SWITCH & EVERYTHING MOVES
WARM SITES
BETWEEN COLD & HOT SITE
HAS SOME LEVEL OF INFRASTRUCTURE - MIGHT HAVE POWER & RACKS OR ADDITIONAL HARDWARE TO USE
BIG ROOM WITH RACK SPACE
HARDWARE IS READY & WAITING
VALIDATION TESTS
TEST YOURSELVES BEFORE AN ACTUAL EVENT
SCHEDULED UPDATE SESSIONS
USE WELL-DEFINED RULES OF ENGAGEMENT
VERY SPECIFIC SCENARIO
EVALUATE RESPONSE
ACTIVE-PASSIVE
2 DEVICES ARE INSTALLED & CONFIGURED
ONLY ONE OPERATES AT A TIME
IF ONE FAILS, THE OTHER TAKES OVER
CONFIGURATION & REAL-TIME SESSION INFORMATION IS CONSTANTLY SYNCHRONIZED
ACTIVE-ACTIVE
2 DEVICES ARE INSTALLED & CONFIGURED
USE BOTH AT THE SAME TIME
MORE COMPLEX TO DESIGN & OPERATE
DATA CAN FLOW IN MANY DIFFERENT DIRECTIONS
CHALLENGE TO MANAGE FLOWS
DYNAMIC HOST CONFIGURATION PROTOCOL (DHCP)
PROVIDES AUTOMATIC ADDRESS / IP CONFIGURATION FOR ALMOST ALL DEVICES
DORA - DHCP
DISCOVER
FIND DHCP SERVER
OFFER
GET AN OFFER
REQUEST
LOCK IN THE OFFER
ACKNOWLEDGE
DHCP SERVER CONFIRMATION
SCOPE PROPERTIES
IP ADDRESS RANGE & EXCLUDED ADDRESSES
SUBNET MASK
LEASE DURATIONS
OTHER SCOPE OPTIONS
DNS SERVER
DEFAULT GATEWAY
VOIP SERVERS
DHCP POOLS
GROUPING OF IP ADDRESSES
EACH SUBNET HAS ITS OWN SCOPE
SCOPE IS GENERALLY IN SINGLE CONTIGUOUS POOL OF IP ADDRESSES
DHCP EXCLUSIONS CAN BE MADE INSIDE OF SCOPE
DYNAMIC ASSIGNMENT
DHCP SERVER HAS BIG POOL OF ADDRESSES TO GIVE OUT
ADDRESSES RECLAIMED AFTER A LEASE PERIOD
AUTOMATIC ASSIGNMENT
SIMILAR TO DYNAMIC ALLOCATION
DHCP SERVER KEEPS A LIST OF PAST ASSIGNMENTS
ALWAYS GET THE SAME IP ADDRESS
ADDRESS RESERVATION
LOCK IN IP ADDRESSES FOR THOSE DEVICES IN DHCP SERVER
ADMINISTRATIVELY CONFIGURED
CREATE TABLE THAT HAS MAC ADDRESSES OF DEVICES (i.e.) printers, servers)
MANUALLY CONFIGURE IP ADDRESS WITHIN DHCP SERVER THAT WILL ALWAYS BE ASSIGNED TO THAT PARTICULAR MAC ADDRESS
T1 TIMER (DHCP RENEWAL)
NO COMMUNICATION OCCURS BETWEEN DEVICE & DHCP SERVER UNTIL HALF OF THAT LEASE IS COMPLETE
YOUR DEVICE WILL ATTEMPT TO COMMUNICATE TO DHCP SERVER & RENEW THE LEASE
50% OF LEASE TIME BY DEFAULT
T2 TIMER (DHCP RENEWAL)
ORIGINAL DHCP SERVER IS NO LONGER OPERATING PROPERLY OR HAS BEEN REMOVED FROM NETWORK
YOUR DEVICE WILL ATTEMPT TO RENEW LEASE WITH ANY AVAILABLE DHCP SERVER THAT’S ON THE NETWORK
87.5% OF LEASE TIME BY DEFAULT
DHCP OPTIONS
SEPARATE FIELD IN DHCP PROCESS THAT ALLOWS US TO CONFIGURE OTHER SETTINGS THAT ARE RELATED TO TCP/IP
PART OF DHCP RFC
256 (254 USABLE) OPTIONS
SUBNET MASK, DOMAIN NAME SERVER, DOMAIN NAME
OPTIONS ARE CONFIGURED ON DHCP SERVER
NOT ALL DHCP SERVERS SUPPORT OPTION CONFIGURATION
DHCP SERVER
REQUIRES REDUNDANT DHCP SERVERS
ONGOING ADMINISTRATION
STATELESS ADDRESSING
ASSIGN IP ADDRESS TO ITSELF & BE ABLE TO COMMUNICATE WITH ANYONE ON THE NETWORK
NO SEPARATE SERVER KEEPING THE STATE
NO TRACKING OF IP OR MAC ADDRESS
LEASE TIMES DON’T EXIST
NEIGHBOR DISCOVERY PROTOCOL (NDP)
USED FOR IPv6 STATELESS ADDRESSING & OTHER PURPOSES
NO BROADCAST
OPERATES MULTICAST OVER ICMPv6
DISCOVERS ROUTERS
ROUTER SOLICITATION (RS) & ROUTER ADVERTISEMENT (RA)
STATELESS ADDRESS AUTOCONFIGURATION (SLAAC)
AUTOMATICALLY CONFIGURE AN IP ADDRESS WITHOUT A DHCP SERVER
DETERMINE IP PREFIX USING NEIGHBOR DISCOVERY PROTOCOL (NDP)
USE IP PREFIX WITH MODIFIED EUI-64 ADDRESS
DUPLICATE ADDRESS DETECTION (DAD)
NO DUPLICATE IP’s
UNSOLICITED RA MESSAGES
ROUTER CAN ALSO SEND THEIR OWN ADVERTISEMENTS OUT WITHOUT BEING QUERIED
FROM MULTICAST DESTINATION OF ff02::1