BRIEF CONTENTS. Online Modules

Transcription

1 BRIEF CONTENTS Basic Concepts and Principles Chapter 1 Welcome to the Cloud 1 Chapter 1a Hands-On: Windows Networking 43 Chapter 2 Network Standards 47 Chapter 2a Hands-On: Wireshark Packet Capture 85 Chapter 3 Network Security 91 Chapter 4 Network Management Chapter 4a Hands-On: Microsoft Office Visio Applying Concepts and Principles: Up through the Layers Chapter 5 Wired Ethernet LANs 175 Chapter 5a Hands-On: Cutting and UTP Chapter 5b Hands-On: Ethernet Switching 221 Chapter 6 Wireless LANs 223 Chapter 6a Using Xirrus Wi-Fi Inspector 261 Chapter 7 Wireless LANs II 269 Chapter 8 TCP/IP Internetworking 303 Chapter 9 TCP/IP Internetworking II 341 Chapter 10 Wide Area Networks 373 Chapter Networked Applications Glossary 453 Index 483 Online Modules (available at Module A Module B Module C Module D More on TCP More on Modulation More on Telecommunications Directory Servers VI Panko, Raymond R. Business data networks and security 2013 digitalisiert durch: IDS Basel Bern

2 CONTENTS Preface for Students xix About the Authors xxii Basic Concepts and Principles Chapter 1 WELCOME TO THE CLOUD 1 the Clouds 1 Jason Akana 1 Claire Lorek 4 John Lee 7 The Rogue Access Point 7 Networking and Security 7 Basic Network Terminology 8 Networks, Hosts, and Applications 8 Application Interactions Speed 13 Packet Switching and the ARPANET Larry Roberts Has a Burstiness Problem Packet Switching Presents a Possible Solution 16 Physical Links and Data Links 19 Larry Roberts Builds a Solution 20 The Network Working Group The Internet 23 Bob Kahn Has a Problem 23 Bob Kahn and Vint Cerf Find a Solution 23 A Second Layer of Networking 24 The Internet Evolves 29 Standards 29 The Internet 31 The Internet Goes Commercial 31 Supervisory Applications 32 A Small Home Network 35 Components 35 The Wireless Access Router 36

3 Services 37 Configuration 38 How This Book Is Organized 39 Conclusion 40 Synopsis 40 End-of-Chapter Questions 42 Chapter HANDS-ON: WINDOWS NETWORKING 43 Hands-On Networking Tools 43 Binary and Decimal Conversions Using the Microsoft Windows Calculator 43 Test Your Download Speed 44 Working with the Windows Command Line 44 Ping and Tracert 45 Nslookup 46 RFCs 46 Chapter 2 NETWORK STANDARDS 47 Introduction 47 Standard = Protocol 47 Network Standards 47 Recap of Chapter 1 Standards Concepts 48 Network Standard Characteristics 51 Examples of Message Ordering 53 Message Ordering in HTTP 53 Message Ordering and Reliability in TCP at the Transport Layer 53 Examples of Message Syntax 57 Syntax: General Message Organization 57 The Ethernet Frame Syntax 59 The Internet Protocol (IP) Packet Syntax 60 Transmission Control Protocol (TCP) Segment Syntax 61 User Datagram Protocol (UDP) Datagram Syntax 63 Port Numbers 63 HTTP Request and Response Message Syntax 65 Converting Application Messages into Bits 68 Encoding 68 Encoding Text as ASCII 68 Whole Binary Numbers 69 Encoding Alternatives 70 Encoding Voice 71

4 Vertical Communication on Hosts 72 Major Standards Architectures 74 Architectures 74 The OSI Network Standards Architecture 76 The TCP/IP Network Standards Architecture 78 The Application Layer 79 TCP/IP and OSI: The Hybrid Standards Architecture 80 Higher Layers in OSI 80 Conclusion 82 Synopsis 82 End-of-Chapter Questions 83 Chapter 2a HANDS-ON: WIRESHARK PACKET CAPTURE 85 Introduction 85 Getting Wireshark 85 Using Wireshark 85 Getting Started 85 Starting a Packet Capture 86 Getting Data 86 Stopping Data Collection 86 Looking at Individual Packets 88 Options 89 Exercises 90 Chapter 3 NETWORK SECURITY 91 Steuben Arc 91 Introduction 92 Types of Attacks 93 Malware Attacks 95 Attacks on Individuals 99 Human Break-Ins (Hacking) 101 (DoS) Attacks ng Bots Types of Attackers Traditional Attackers 106 Criminal Attackers 107 Cyberterrorists and National Governments 107 Planning Security a Management Issue 108 Planning Principles 108 Policy-Based Security Contents

5 Authentication Reusable Passwords Other Forms of Authentication Firewalls 122 Dropping and Logging Provable Attack Packets 122 Ingress and Egress Filtering 122 Static Packet Fi ng Firewall Filtering 124 Deep Inspection Firewalls 126 Protecting Dialogues Cryptography 128 Symmetric Key Encryption for Confidentiality 128 Electronic Signatures Responding 130 Stages 130 Major Incidents and CSIRTs Disasters and Business Continuity Rehearsals 132 Conclusion 133 Synopsis 133 End-of-Chapter Questions Chapter 4 NETWORK MANAGEMENT 139 Introduction 139 SDLC versus SLC 139 Cost 140 Strategic Network Planning 141 Network Quality of Service (QoS) 143 Transmission Speed 143 Rated Speed versus Throughput 146 Other Metrics Service Level Agreements (SLAs) 149 Design 150 Traffic Analysis Redundancy Topology 153 Leased Line Network Topologies Handling Momentary Peaks Reducing Capacity Needs Natural Designs 160

6 xi Evaluating Alternatives 161 Minimum Requirements 161 Product Selection with Multicriteria Decision Making 163 Cost 165 Operational Management Network Management Software 168 Conclusion Synopsis 169 End-of-Chapter Questions 170 Chapter 4a HANDS-ON: MICROSOFT OFFICE VISIO 171 Visio? 171 Using Visio 171 Exercise Applying Concepts and Principles: Up through the Layers Chapter 5 WIRED ETHERNET LANs 175 Introduction 175 WANs 175 Ethernet 177 Ethernet Standards Development 179 Physical and Data Link Layer Operation Ethernet Physical Layer Standards 181 Signaling Pair Unshielded Twisted Pair Copper Wiring 184 Optical Fiber 188 Carrier Fiber 192 Link Aggregation (Bonding) 192 Ethernet Physical Layer Standards and Network Design The Ethernet Frame The Ethernet Frame's Organization Preamble and Start of Frame Delimiter Fields 195 Source and Destination Address Fields 1% Tag Fields 196 Length Field

7 i Contents The Data Field 197 PAD Field 198 Frame Check Sequence Field Basic Ethernet Data Link Layer Switch Operation 199 Frame Forwarding 199 Hierarchical Switch Topology 200 Advanced Ethernet Switch Operation 202 The Rapid Spanning Tree Protocol (RSTP) 202 Virtual LANs and Ethernet Switches 204 Priority 206 Manageability 207 Power over Ethernet (POE) 208 Ethernet Security 209 Port-Based Access Control (802.1X) 210 Security Standards Come from the Working Group 802.3ba: 40 Gbps and 100 Gbps Ethernet 211 Conclusion 212 Synopsis 212 End-of-Chapter Questions 214 Chapter 5a HANDS-ON: CUTTING AND CONNECTORIZING UTP 215 Introduction 215 Solid and Stranded Wiring Solid-Wire UTP versus Stranded-Wire UTP Relative Advantages Adding Connectors 215 Cutting the Cord 215 Stripping the Cord Working with the Exposed Pairs 216 Pair Colors 216 Untwisting the Pairs 216 Ordering the Pairs 216 Cutting the Wires 217 Adding the Connector 218 Holding the Connector 218 Sliding in the Wires 218 Some Jacket Inside the Connector Crimping Pressing Down 219

8 xiii Making Electrical Contact 219 Strain Relief 219 Testing Testing with Continuity Testers 220 Testing for Signal Quality 220 Chapter 5b HANDS-ON: ETHERNET SWITCHING 221 The Exercise 221 Need 221 Creating the Network 221 Creating a Loop 222 Chapter 6 WIRELESS LANs 223 Christopher Lorek 223 Introduction 224 Basic Wireless LAN (WLAN) Operation 224 Radio Signal Propagation 225 Frequencies 226 Antennas 227 Wireless Propagation Problems 228 Radio Bands, Bandwidth, and Spread Spectrum Transmission 230 Radio Bands 230 Signal and Channel Bandwidth 231 The Golden Zone 234 Licensed and Unlicensed Radio Bands 234 The 2.4 GHz and 5 GHz Unlicensed Bands 235 Normal and Spread Spectrum Transmission 238 Why Spread Spectrum Transmission? 238 Spread Spectrum Transmission Methods 239 WLAN Operation 240 Extending the Wired LAN 241 Wireless Access Points 241 Basic Service Sets (BSSs) 242 Extended Service Sets (ESSS), Handoff, and Roaming 243 Sharing a Single Channel 244 Controlling Transmission 245 Transmission Standards 247 Characteristics of and 247 Spread Spectrum Method 249 Bands and Channel Bandwidth 250

9 xiv Contents MIMO 250 Beamforming and Multiuser MIMO 252 Speed, Throughput, and Distance 252 Backward Compatibility 254 On the Horizon 254 Advanced Operation 255 Wi-Fi Direct 255 Mesh Networking 256 Standards and Compatibility 257 Conclusion 257 Synopsis 257 End-of-Chapter Questions 260 Chapter 6a USING XIRRUS WI-FI INSPECTOR 261 Introduction 261 The Four Windows 261 The Radar Window (Read the Fine Print) 261 Connection Window 263 The Networks Window 264 Signal History 265 Other Groups on the Ribbon 266 Tests 266 Connection Test 266 Speed Test 267 Quality Test 267 Activities 267 Chapter 7 WIRELESS LANs II 269 Introduction 269 TJX 269 WLAN Security 272 WLAN Security Threats 272 Core Security Standards 273 Wired Equivalent Privacy (WEP) Security 273 WPA (Wireless Protected Access) Mode Operation with Added Client-Access Point Security 276 Pre-Shared Key (PSK) Mode 277 Evil Twin Access Points and Virtual Private Networks (VPNs) 278

10 xv Wi-Fi Protected Setup 280 Attacks Wireless LAN Management 281 Access Point Placement 282 Remote Management: Smart Access Points versus Wireless Switches 283 Expressing Power Ratios in Decibels 285 Other Local Wireless Technologies 289 Bluetooth 290 Near Field Communication (NFC) 296 Ultrawideband (UWB) 299 Security in Emerging Local Wireless Transmission Technologies 299 Conclusion 301 Synopsis 301 End-of-Chapter Question 302 Chapter 8 TCP/IP INTERNETWORKING 303 Introduction 303 TCP/IP Recap 303 The TCP/IP Architecture and the IETF 303 Simple at the Internet Layer 304 Reliable Heavyweight TCP at the Transport Layer 304 Unreliable Lightweight UDP at the Transport Layer 305 IP Routing 305 Hierarchical IP Addressing 305 Routers, Networks, and Subnets 307 Network and Subnet Masks 308 How Routers Process Packets Switching versus Routing 310 Routing Table 313 Rows Are Routes Step 1: Finding All Row Matches 314 Step 2: Selecting the Best-Match Row Step 3: Sending the Packet Back Out Cheating (Decision Caching) 317 Masking When Masks Do Not Break at 8-Bit Boundaries 318 The Address Resolution Protocol 318 The Internet Protocol Version 4 (IPv4) Fields 320 to Live Field 321 IP Protocol Field 321

11 xvi Contents Identification, Flags, and Fragment Offset Fields 321 IP Options IP Version 6 (IPv6) 322 Outgrowing IPv4 322 IPv6 323 Writing IPv6 Addresses 323 The IPv6 Header 325 Extension Headers 328 The Transmission Control Protocol (TCP) 330 Fields in TCP/IP Segments 330 Openings and Abrupt TCP Closes 332 The User Datagram Protocol (UDP) 333 Other TCP/IP Standards 334 Dynamic Routing Protocols 334 Internet Control Message Protocol at the Internet Layer 336 Conclusion 337 Synopsis 337 End-of-Chapter Questions 339 for Supervisory Messages Chapter 9 TCP/IP INTERNETWORKING II 341 Introduction 341 Core TCP/IP Management Tasks IP Subnet Planning 341 Network Address Translation (NAT) 343 The Domain Name System (DNS) 345 DHCP Servers 348 Simple Network Management Protocol (SNMP) 349 Multiprotocol Label Switching 353 Making Routing More 353 MPLS Operation 354 of Label Switching 355 MPLS Boundaries 355 Securing Internet Transmission 356 Virtual Private Networks 356 IPsec VPNs 357 IPsec Transport Mode 357

12 xvii IPsec Tunnel Mode 357 Remote-Access and Site-to-Site VPNs 358 IPsec Security Associations and Policy Servers Managing IP Version 6 (IPv6) 361 Internet Layer Protocol Stacks 361 IPv6 Subnetting 362 IPv6 Configuration 365 Other IPv6 Standards 369 Conclusion 370 Synopsis 370 End-of-Chapter Questions 372 Chapter 10 WIDE AREA NETWORKS 373 LANs and WANs (and MANs) 373 LANs versus MANs and WANs 373 Other Aspects of WANs 375 The Three Basic WAN Components 376 Wired Access Links 377 Public Switched Telephone Network (PSTN) Access Lines 377 Business Leased Lines 380 Leased Line Speeds 381 Business Digital Subscriber Line (DSL) Service 383 Residential DSL Service 385 Cable Modem Service 387 The Network Core 389 Leased Line Wide Area Networks 389 Public Switched Data Network (PSDN) 390 Virtual Circuit Operation 393 Using the Internet for Wide Area Networking 394 Attractions and Issues 395 Securing the Internet 395 Using a Single ISP 396 Cellular Data Service 397 Cellular Service 397 Cells 397 Why Cells? 398 Handoffs versus Roaming 400

13 xviii Contents Using Cellular Telephony for Data Transmission 400 Lies, Damned Lies, and Mobile Service Speeds 403 Convergence 405 Virtual Wide Area Networks WANs) 406 Conclusion 407 Synopsis 407 End-of-Chapter Questions Chapter 11 NETWORKED APPLICATIONS 411 Papa Murphy's Introduction 412 Networked Applications 412 The Evolution of Client Devices and Networking Application Security Electronic Mail ( ) 416 Importance 416 Standards 417 Simple Mail Transfer Protocol (SMTP) 418 Receiving Mail (POP and Web-Enabled 419 Malware Filtering in 419 Voice over IP (VOIP) 421 Basics 421 VoIP Signaling 422 VoIP Transport 423 The World Wide Web 424 HTTP and HTML Standards 424 Complex Webpages 425 HTTP Request and Response Messages 426 Cloud Computing 427 A Shared Project 427 Cloud Computing 429 Software as a Service (SaaS) 430 Cloud Utility Computing 431 Why Cloud Computing a Hot Topic Now? 433 Managing Cloud Computing 435 Service-Oriented Architectures 436 Traditional Software Architectures and Service-Oriented Architectures (SAAS) 436

14 xix Reuse and Language Independence 437 Web Services 438 Perspective 440 Peer-to-Peer (P2P) Application Architectures 440 Traditional Applications 441 P2P Applications 442 P2P File-Sharing Applications: BitTorrent 442 P2P Communication Applications: Skype 446 P2P Processing Applications: 449 Facilitating Servers and P2P Applications 450 Conclusion 450 Synopsis 450 End-of-Chapter Questions 452 Online Modules (available at Module A Module B Module C TCP More on TCP Numbering Octets Ordering TCP Segments upon Arrival The TCP Acknowledgment Process Flow Control: Window Size Review Questions MORE ON MODULATION Modulation Frequency Modulation Amplitude Modulation Phase Modulation Quadrature Amplitude Modulation (QAM) Review Questions MORE ON TELECOMMUNICATIONS Introduction The PSTN Transport Core and Signaling The Transport Core Time Division Multiplexing (TDM) Lines Leased Lines and Trunk Lines

15 Asynchronous Transfer Mode (ATM) Transport Signaling Communication Satellites Microwave Transmission Satellite Transmission Geosynchronous Earth Orbit (GEO) Satellites Low Earth Orbit (LEO) and Medium Earth Orbit (MEO) Satellites VSAT Satellites Wiring the First Bank of Paradise Headquarters Building Facilities Telephone Wiring Data Wiring Plenum Cabling PBX Services Carrier Services and Pricing Basic Voice Services Advanced Services Call Waiting Voice Mail Telephone Carriers and Regulation PTTs and Ministries of Telecommunications AT&T, the FCC, and PUCs Deregulation Voice over IP Module D DIRECTORY SERVERS Glossary 453 Index 483 Introduction Hierarchical Organization Lightweight Directory Access Protocol (LDAP) Servers and the Networking Staff Microsoft's Active Directory (AD) Active Directory Domains Domain Controllers Domains in an Active Directory Tree Complex Structures Authentication and Directory Servers