Networking Exam1 Review

Subnetting Overview

• Subnet Mask: A 32-bit number that serves as a critical tool in dividing an IP address into two main portions: the network portion, which identifies the specific network, and the host portion, which identifies individual devices within that network. The subnet mask is typically represented in dotted-decimal format, such as 255.255.255.0, and is essential for routing traffic efficiently across the internet and within local networks.

• Functions:

  • Identifies the network and host segments of an IP address, allowing routers and switches to determine where to send data packets.

  • Helps in efficient IP address management by minimizing wasted IP addresses and optimizing the allocation of addresses to different subnets based on their size and requirements.

Key Components

• Address Ranges: The range of IP addresses available within a subnet is determined by the subnet mask. This range dictates how many devices can be connected within that subnet and is essential for planning network architecture.

• Network Address: The first address in a subnet, which is used to identify the subnet itself. This address is not assignable to any device within the subnet, as it serves a specific purpose in routing.

• Broadcast Address: The last address in a subnet, used to send data to all hosts in that subnet simultaneously. This address allows for efficient communication when a message needs to reach all devices without sending individual packets.

• Number of Hosts: This is calculated using the formula (2^{(32 - \text{subnet bits})} - 2), where the subtraction of 2 accounts for the reserved network and broadcast addresses. This calculation helps network administrators understand the maximum number of devices that can be supported within a subnet.

• Block Size: The number of IP addresses in a subnet, determined by the subnet mask. The block size is crucial for network design, as it defines how many addresses are available for devices and influences the overall scalability of the network.

Example

For a subnet mask of 255.255.255.0:

• Network Address: 192.168.1.0, which identifies the entire subnet and is not assignable to any device.

• Broadcast Address: 192.168.1.255, used for sending messages to all devices in the subnet.

• Number of Hosts: 254, which indicates that up to 254 devices can be assigned unique IP

TCP vs. UDP

Similarities:

• Both are transport layer protocols in the Internet Protocol Suite.

• Both use port numbers to identify applications.

Differences:

• TCP (Transmission Control Protocol):

  • Connection-oriented.

  • Reliable, ensures data delivery and order.

  • Example: Web browsing (HTTP/HTTPS).

• UDP (User Datagram Protocol):

  • Connectionless.

  • Unreliable, no guarantee of delivery or order.

  • Example: Streaming video or online gaming.

When to Use:

• Use TCP for applications requiring reliability (e.g., file transfers).

• Use UDP for applications needing speed and can tolerate loss (e.g., live broadcasts).

Definition of Noise or EMI

Noise refers to unwanted electrical signals that interfere with the desired signal in a communication system. Electromagnetic Interference (EMI) is a specific type of noise caused by electromagnetic radiation emitted from external sources, which disrupts the operation of electronic devices.

Causes of Noise or EMI

1. Natural Sources: Lightning, solar flares, and cosmic radiation.

2. Man-made Sources: Motors, generators, radio transmitters, and electronic devices.

3. Poor Shielding: Inadequate insulation or grounding in cables and devices.

4. Signal Reflection: Multipath propagation in wireless communications.

TTL vs Hop Limit

• TTL (Time to Live):

  • A field in the IP packet header that specifies the maximum time a packet can exist in the network before being discarded.

  • Decreases by one each time the packet is forwarded by a router.

• Hop Limit:

  • Similar to TTL but used in IPv6.

  • Indicates the maximum number of hops (routers) a packet can pass through before being discarded.

Key Difference:

• TTL is used in IPv4, while Hop Limit is specific to IPv6.

OSI Model Overview

1. Layer 1: Physical

   • PDU: Bits

   • Protocols: Ethernet, USB

   • Function: Transmits raw bitstreams over a physical medium.

2. Layer 2: Data Link

   • PDU: Frames

   • Protocols: Ethernet, PPP

   • Function: Provides node-to-node data transfer and error detection.

3. Layer 3: Network

   • PDU: Packets

   • Protocols: IP, ICMP

   • Function: Routes packets across networks.

4. Layer 4: Transport

   • PDU: Segments

   • Protocols: TCP, UDP

   • Function: Ensures reliable or unreliable delivery.

5. Layer 5: Session

   • PDU: Data

   • Protocols: NetBIOS, RPC

   • Function: Manages sessions between applications.

6. Layer 6: Presentation

   • PDU: Data

   • Protocols: SSL, TLS

   • Function: Translates data formats and encrypts.

7. Layer 7: Application

   • PDU: Data

   • Protocols: HTTP, FTP, SMTP

   • Function: Interfaces with end-user applications.

Communication Process

• Data is encapsulated at each layer, starting from the application layer down to the physical layer, and then decapsulated at the receiving end, moving from the physical layer up to the application layer.

OSI Model Overview

1. Layer 1: Physical

   • PDU: Bits

   • Protocols: Ethernet, USB

2. Layer 2: Data Link

   • PDU: Frames

   • Protocols: ARP, PPP

3. Layer 3: Network

   • PDU: Packets

   • Protocols: IP, ICMP

4. Layer 4: Transport

   • PDU: Segments

   • Protocols: TCP, UDP

5. Layer 5: Session

   • PDU: Data

   • Protocols: NetBIOS, RPC

6. Layer 6: Presentation

   • PDU: Data

   • Protocols: SSL, TLS

7. Layer 7: Application

   • PDU: Data

   • Protocols: HTTP, FTP

Communication Process

• Data encapsulation occurs from Layer 7 to Layer 1, and decapsulation occurs from Layer 1 to Layer 7 during transmission between hosts.

Address Resolution Protocol (ARP)

Definition: ARP is a network protocol used to map an IP address to a physical machine address (MAC address) in a local area network (LAN).

Explanation:

• Function: When a device wants to communicate with another device on the same network, it needs to know the MAC address associated with the target's IP address.

• Process: ARP broadcasts a request packet to all devices on the network asking, "Who has this IP address?" The device with the matching IP responds with its MAC address.

• Usage: Essential for IPv4 networks to facilitate communication between devices.

ICMP (Internet Control Message Protocol)

Definition: ICMP is a network layer protocol used for error messages and operational information exchange in IP networks.

Functions:

• Error Reporting: Notifies hosts about issues in communication (e.g., unreachable hosts).

• Diagnostics: Used for tools like ping and traceroute.

Examples:

1. Echo Request/Reply: Used by the ping command to check connectivity.

2. Destination Unreachable: Sent when a packet cannot reach its destination.

ICMP is essential for network management and troubleshooting.

Differences Between Routers and Switches

Functionality:

• Router: Connects different networks, routes data between them, and manages traffic. It assigns IP addresses and can provide firewall protection.

• Switch: Connects devices within the same network, forwarding data based on MAC addresses. It operates at the data link layer (Layer 2).

Differences:

• Layer of Operation: Routers operate at Layer 3 (Network), while switches operate at Layer 2 (Data Link).

• Traffic Management: Routers manage traffic between networks; switches manage traffic within a single network.

• Addressing: Routers use IP addresses; switches use MAC addresses.

Representation on Paper:

• Router: Often depicted as a cloud or a box with multiple interfaces.

• Switch: Represented as a box with multiple ports.

How They Work:

• Router: Analyzes incoming data packets, determines the best path for them, and forwards them to the appropriate network.

• Switch: Receives data frames, reads the MAC address, and forwards the frame to the correct port leading to the destination device.

Similarities:

• Both are used for identifying devices on a network.

• Both are essential for Internet communication.

MAC Addresses: OUI vs Device ID

• MAC Address: A unique identifier assigned to network interfaces for communications on the physical network segment.

• OUI (Organizationally Unique Identifier): The first 24 bits (3 bytes) of a MAC address, identifying the manufacturer or organization that produced the device.

• Device ID: The remaining 24 bits of the MAC address, which are unique to the specific device produced by the manufacturer.

Where to Find MAC Addresses:

• On Windows: Use ipconfig /all in Command Prompt.

• On macOS: Go to System Preferences > Network > Advanced > Hardware.

• On Linux: Use ifconfig or ip addr in the terminal.

• On Routers: Check the device list in the router's web interface.

Demarcation (Demarc) Point

A Demarcation Point (Demarc) is a physical point in a telecommunications network where the responsibility for the network transitions from one entity to another. It typically marks the boundary between the service provider's equipment and the customer's equipment. This point is crucial for maintenance, troubleshooting, and determining liability for service issues.

Port Numbers

Port numbers are numerical identifiers in networking used to distinguish different services or applications on a device. They range from 0 to 65535 and are categorized as follows:

• Well-Known Ports (0-1023): Used by system or widely-used protocols (e.g., HTTP - 80, HTTPS - 443).

• Registered Ports (1024-49151): Assigned for specific applications by the Internet Assigned Numbers Authority (IANA).

• Dynamic/Private Ports (49152-65535): Used for ephemeral or temporary connections.

Each port number helps direct network traffic to the appropriate service.

Sockets and Their Functions

Definition: Sockets are endpoints for sending and receiving data across a network. They enable communication between different processes, either on the same machine or over a network.

Functions:

1. Communication: Facilitate data exchange between client and server applications.

2. Data Transmission: Support various protocols (e.g., TCP, UDP) for reliable or fast data transfer.

3. Connection Management: Establish, maintain, and terminate connections.

4. Addressing: Use IP addresses and port numbers to identify endpoints.

5. Multiplexing: Allow multiple connections to be handled simultaneously.

Sockets are essential for network programming and enable various applications, such as web browsers and email clients.

Ping is a network utility used to test the reachability of a host on an Internet Protocol (IP) network. It works by sending Internet Control Message Protocol (ICMP) Echo Request messages to the target host and waiting for Echo Reply messages. The primary purposes of ping are:

• Check Connectivity: Determine if a device is reachable.

• Measure Round-Trip Time: Assess the time it takes for packets to travel to the target and back.

• Diagnose Network Issues: Identify packet loss or latency problems.

Trace Route (tracert)

• Definition: A network diagnostic tool used to track the path that packets take from one computer to another.

• Function: It identifies each hop along the route and measures the time taken for each hop.

• Usage: Commonly used to troubleshoot network issues and determine the route taken by data packets.

• Command: In Windows, use tracert [destination]. In Unix/Linux, use traceroute [destination].

• Output: Displays the IP addresses of each hop and the round-trip time for packets.

Other Forms: Variants include traceroute in Unix/Linux systems and similar tools in various network management software.

Ping is a network utility used to test the reachability of a host on an Internet Protocol (IP) network. It sends Internet Control Message Protocol (ICMP) Echo Request messages to the target host and waits for Echo Reply messages. Ping measures the round-trip time for messages sent from the originating host to a destination computer and back, helping diagnose network connectivity issues.

Internet Protocol (IP)

• Definition: A set of rules governing the format of data sent over the Internet or local network.

• Function: Responsible for addressing and routing packets of data so they can travel across networks.

• Versions:

  • IPv4: Uses 32-bit addresses, allowing for about 4.3 billion unique addresses.

  • IPv6: Uses 128-bit addresses, significantly increasing the number of available addresses.

• Key Features:

  • Packet switching

  • Connectionless communication

  • Error handling and diagnostics (e.g., ICMP)

In networking, collisions occur when two or more devices attempt to send data over the same communication channel simultaneously. This results in a conflict, causing the data packets to interfere with each other. Collisions are common in shared network environments, particularly in Ethernet networks using a Carrier Sense Multiple Access with Collision Detection (CSMA/CD) protocol. When a collision is detected, devices stop transmitting, wait for a random time, and then attempt to resend their data, helping to manage network traffic and reduce further collisions.

Encapsulation in Programming

Definition:Encapsulation is a fundamental concept in object-oriented programming (OOP) that restricts direct access to some of an object's components.

Process:

1. Top-Down Approach:

   • Define the overall system.

   • Break it down into smaller, manageable components (classes).

   • Each class encapsulates its data and methods.

2. Bottom-Up Approach:

   • Start with individual components.

   • Build and test each class.

   • Integrate classes to form the complete system.

Benefits:

• Improved modularity.

• Enhanced data protection.

• Easier maintenance and debugging.

A checksum is a value used to verify the integrity of data. It is calculated by performing a mathematical operation on a set of data, producing a fixed-size string or number. When data is transmitted or stored, the checksum is also sent or saved. Upon retrieval, the checksum is recalculated and compared to the original. If they match, the data is considered intact; if not, it indicates potential corruption or error. Common algorithms for checksums include CRC (Cyclic Redundancy Check) and MD5.

Power over Ethernet (PoE) in Networking:

• Definition: PoE allows network cables to carry electrical power along with data to devices like IP cameras, phones, and wireless access points.

• Benefits:

  • Simplifies installation by reducing the need for separate power supplies.

  • Enhances flexibility in device placement.

  • Supports remote power management.

• Standards:

  • IEEE 802.3af: Provides up to 15.4 watts per port.

  • IEEE 802.3at (PoE+): Provides up to 30 watts per port.

  • IEEE 802.3bt (PoE++): Provides up to 60-100 watts per port.

MAC Address Spoofing is a technique used to change the factory-assigned Media Access Control (MAC) address of a network interface on a device. This can be done for various reasons, including:

1. Privacy: To hide the true identity of a device on a network.

2. Bypassing Filters: To evade network access controls that restrict devices based on their MAC addresses.

3. Testing: For network security assessments and penetration testing.

While it can be used for legitimate purposes, it can also be exploited for malicious activities.

Jitter refers to the variability in time delay in packet delivery over a network. It is a measure of the inconsistency in latency, which can affect the quality of real-time communications, such as VoIP or video conferencing. High jitter can lead to choppy audio or video, while low jitter indicates a more stable connection. It is typically measured in milliseconds (ms).

Attenuation

Attenuation refers to the reduction in strength of a signal as it travels through a medium. It is commonly measured in decibels (dB) and can occur in various contexts, such as:

• Electrical Signals: Loss of signal strength in cables.

• Optical Signals: Loss of light intensity in fiber optics.

• Acoustic Signals: Decrease in sound intensity over distance.

Factors affecting attenuation include distance, frequency, and the properties of the medium. It is crucial in telecommunications and audio engineering to ensure signal integrity.

Fragmentation in networking refers to the process of breaking down large packets of data into smaller packets to accommodate the maximum transmission unit (MTU) of a network. This is necessary because different networks may have varying MTU sizes.

Key points:

• Purpose: To ensure data can be transmitted across networks with smaller MTUs.

• Process: The original packet is divided into smaller fragments, each with its own header.

• Reassembly: At the destination, fragments are reassembled into the original packet.

Fragmentation can lead to increased overhead and potential delays in data transmission.

Differences between Routers and Switches

Functionality:

• Router: Connects different networks, routes data between them, and assigns IP addresses.

• Switch: Connects devices within the same network, forwarding data based on MAC addresses.

Differences:

• Layer: Routers operate at Layer 3 (Network), while switches operate at Layer 2 (Data Link).

• Traffic Management: Routers manage traffic between networks; switches manage traffic within a network.

Representation:

• Router: Often depicted as a cloud or box with multiple interfaces.

• Switch: Represented as a box with multiple ports.

UTP/STP Cables and RJ-45 Termination

• UTP (Unshielded Twisted Pair): Commonly used for networking; consists of pairs of wires twisted together to reduce interference.

• STP (Shielded Twisted Pair): Similar to UTP but includes shielding to protect against electromagnetic interference.

Termination with RJ-45:

1. Strip the cable jacket.

2. Untwist pairs and arrange them according to the T568A or T568B standard.

3. Insert wires into the RJ-45 connector.

4. Crimp the connector to secure the wires.

Static and Dynamic Routing

• Static Routing:

  • Manually configured by a network administrator.

  • Routes do not change unless manually updated.

  • Suitable for small networks with stable routes.

  • Less overhead, as no routing protocols are used.

• Dynamic Routing:

  • Automatically adjusts routes based on network changes.

  • Uses routing protocols (e.g., RIP, OSPF, BGP).

  • Suitable for larger, more complex networks.

  • More overhead due to protocol communication and updates.

Key Differences

• Configuration: Manual vs. automatic.

• Adaptability: Fixed vs. responsive to changes.

• Complexity: Simpler vs. more complex management.

Link State vs. Distance Vector Routing Protocols

Link State Protocols:

• Definition: Each router maintains a complete map of the network topology.

• Examples: OSPF, IS-IS.

• Mechanism: Routers share information about their directly connected neighbors and the state of their links.

• Advantages: Faster convergence, more efficient routing, and better scalability.

Distance Vector Protocols:

• Definition: Routers share information about the distance to reach various destinations.

• Examples: RIP, IGRP.

• Mechanism: Routers periodically send their routing tables to neighbors.

• Advantages: Simplicity and ease of implementation.

Key Differences:

• Topology Knowledge: Link state has complete knowledge; distance vector has partial.

• Convergence Speed: Link state converges faster than distance vector.

• Scalability: Link state is more scalable for larger networks.