3/24/11 Networking Technology for Broadcast Engineers Part 2 March 24, 2011 Wayne M. Pecena, CPBE, 8‐VSB, AMD, DRB, CBNT Texas A&M University Networking Technology for Broadcast Engineers Advertised Presentation Scope: This presentation will provide a Broadcast Focus in major Networking Topics and knowledge of Fundamentals and Principals to equip the Broadcast Engineer with a better knowledge of Fundamentals and Principals to equip the Broadcast Engineer with a better understanding of TCP/IP addresses, Subnetting basics and Subnet Calculation tools, Gateways and the ISO Structure. It will also cover Switching & Routing protocols and fundamentals, MAC Addresses and VLAN fundamentals to provide a base knowledge upon which to build. And, an introduction to IPv6 will present this eminent major change to the whole IP addressing scheme. Goals & Deliverables: What Can You Expect in 2 Hours? ‐ Awareness of Major Networking Topics (broadcast focused) ‐ Basic Understanding of Topic Fundamentals & Principals ‐ Where to Obtain Further Knowledge 2 Networking Technology for Broadcast Engineers – Part 2 1 3/24/11 Agenda – Part 2 Review Key Part 1 Takeaways Subnetting Review IPv6 Fundamentals a. Wh IP 6 Why IPv6 b. Addressing Concepts c. IPv4 to IPv6 Migration Strategies Switching & Routing Fundamentals a. Switching Fundamentals b. MAC Addresses c. VLANS d. Routing Fundamentals & Routing Metrics e. Routing Protocols Routing Protocols f. Which Routing Protocol Do I Use? QoS Basics a. Why is Quality of Service Needed? b. QoS Types c. Implementing QoS Controlling Network Traffic & Security Concerns 3 OSI Model A Layer Only Interacts With the Layer Below It A Layer Only Provides Capability for the Layer Above to Interact With It “All People Seem To Need Data Processing” 4 Networking Technology for Broadcast Engineers – Part 2 2 3/24/11 Encapsulation 5 Ethernet Review IEEE 802.3 6 Networking Technology for Broadcast Engineers – Part 2 3 3/24/11 TCP Handshake & Windowing 7 TCP / UDP TCP ‐ RFC 793 UDP ‐ RFC 768 • Referred to as a “Connection – f d “ Oriented” Protocol • Guaranteed Or Reliable Data Delivery • A “Simple” Protocol or “ l ” l “Lightweight” • Low Overhead = Fast • “Best Effort” – Non‐Guaranteed Data Delivery • Why Use? – Required for Real‐Time q Applications ‐ VoIP or Video Transmission” – Latency More Detrimental Than Data Loss – Acknowledgment of Packet Receipt – Retransmission Occurs if Packet Not Received or Error Occurs • High High Overhead thus Slow Overhead thus Slow • A TCP Conversation Requires Establishment of a 2‐Way “Session” Between Hosts 8 Networking Technology for Broadcast Engineers – Part 2 4 3/24/11 NAT & PAT NAT • Translates IP Addresses – Limited IP Address Space – Security • Static NAT PAT • Always Used with NAT • Allows 65,536 “Inside” Hosts To Be Identified by a Socket Address – 1 to 1 Translation – Hides Real Host IP Address • Dynamic NAT (PAT) – 1 to Many Translation 9 IP Address Classes Public & Private • Class A – 126 Networks / 16,777,214 Hosts – 1.0.0.0 to 126.0.0.0 – PRIVATE ‐ 10.0.0.0 to 10.255.255.255 • Class B – 16,384 Networks / 65,534 Hosts – 128.0.0.0 to 191.255.0.0 – PRIVATE ‐ 172.16.0.0 to 172.31.255.255 • Class C – 2,097,152 Networks / 254 Hosts – 192.0.0.0 to 192.255.255.0 – PRIVATE ‐ 192.168.0.0 to 192.168.255.255 10 Networking Technology for Broadcast Engineers – Part 2 5 3/24/11 Private vs Public IP Addresses • RFC 1918 Established “Private” Address Space – Class A: 10.0.0.0 to 10.255.255.255 Class A: 10.0.0.0 to 10.255.255.255 – Class B: 172.16.0.0 to 172.31.255.255 – Class C: 192.168.0.0 to 192.168.255.255 • Key Points: – Private IP Addresses Are NOT Routable Outside the Local Network – Widely Used in Home & Industry Networks – May Be Translated With NAT At An Edge Router • Map Private Address Space to Public Address Space 11 Subnetting • What is a Subnet? – Logical Subdivision of a Larger Network Logical Subdivision of a Larger Network • Why Do We Subnet? • Efficient Use of IP Address Space Efficient Use of IP Address Space • Enhance Routing Efficiency – Reduce Routing Table Size • Network Management Policy and Segmentation • Job Security for Network Engineers! 12 Networking Technology for Broadcast Engineers – Part 2 6 3/24/11 Subnetting Basics • Identifies the Boundary Between Network and Hosts • “Subnetting” Subnetting Simply Moves the Boundary! Simply Moves the Boundary! – Moves Boundary to the Right – IP Address Subnetting Applies to All Classes – Boundary Position Determined by the Subnet “Netmask” • Expressed in Several Forms: – Doted Decimal Notation (same as IP address) – Slash Notation (also known as CIDR notation) IP Address 165.95.240.100 with Netmask of 255.255.255.0 OR 165.95.240.100 /24 13 VLSM & CIDR VLSM ‐ RFC 1009 • Variable Length Subnet Masking (VLSM) V i bl L hS b M ki (VLSM) – Host Addressing & Routing Inside a Routing Domain – Allowed “Classless” Subnetting • Mask Information is Explicit – Allows More Efficient Use of Address Space – Allows You to Subnet a Subnet CIDR ‐ RFC 1517, 1518, 1519, 1520 • Classless Interdomain Cl l I d i Routing (CIDR) R i (CIDR) – Class System No Longer Applies – Routing Between Routing Domains – Class A & B IP Address Exhaustion Pressured Class C Address Space – Allows “Routing Tables” To Be Reduced by Grouping Contiguous Class C Addresses into One Network – Allows Allows “Supernets” Supernets To Be Created To Be Created • Combining a Group of Class C Addresses Into a Single Block – CIDR Notation (slanted notation): 172.16.1.1 /16 14 Networking Technology for Broadcast Engineers – Part 2 7 3/24/11 What Must Be Known About a Subnet IP Address and Mask Provides: First Network Address First Network Address Assignable to a Host Last Network Address Assignable to a Host Broadcast Address 192.0.0.0 /24 Provides: Network Address First Network Address Assignable to a Host Last Network Address Assignable to a Host Broadcast Address 192.0.0.0 192.0.0.1 192.0.0.254 192.0.0.255 “254 Assignable Addresses” 15 Subnetting Example Subnet 1 38.9.211.0 /26 38.9.211.2 38.9.211.3 38.9.211.4 Default Gateway: 39.9.211.1 Mask: 255.255.255.192 Subnet 2 Public Internet 38.9.211.64 /26 38.9.211.66 38.9.211.67 38.9.211.68 Default Gateway: 39.9.211.65 Mask: 255.255.255.192 38.9.211.0 /24 Subnet 3 38.9.211.128 /26 38.9.211.130 38.9.211.131 38.9.211.132 Default Gateway: 39.9.211.129 Mask: 255.255.255.192 16 Networking Technology for Broadcast Engineers – Part 2 8 3/24/11 Special Use Address RFC 5735 • • • • • • • 0.0.0.0/8 10.0.0.0/8 127.0.0.0/8 172.16.0.0/16 192.168.0.0/16 224.0.0.0/4 255.255.255.255/32 Network Address Private IP Address Space (RFC 1918) Loopback Address Private IP Address Space (RFC 1918) Private IP Address Space (RFC 1918) Multicast Address Space Broadcast Address And many more special use cases……….. 17 Ports & Sockets Ports ‐ RFC 1700 • • • Allows Datagram Multiplexing ll li l i Between Applications Port Numbers Can Be Between 0 ‐ 65535 – 0–1023 Are Considered Reserved – 1024–49151 Can Be Registered – 49152–65535 Are Considered Dynamic or Private Dynamic or Private TCP and UDP Port Numbers Are Independent Sockets • • • A “Socket” Is a Combination of an IP “ k ” bi i f Address & A Port Number Used for Client‐Server Application Interaction IP Address + Port Number = Socket Socket: 10.10.10.10:80 18 Networking Technology for Broadcast Engineers – Part 2 9 3/24/11 IPv6 Fundamentals RFC 2460 IPv6 Provides Expanded IP Address Space 2128 = 340,282,366,920,938,463,463,374,607,431,768,211,456 (h (three hundred forty UNDECILLION h f addresses)) • 128 Bit Hexadecimal Notation 2001:0DB8:0234:AB00:0123:4567:8901:ABCD • But, IPv6 is More Than Expanded Address Space: – Re‐Engineered IPv4 • • • • • Improved Support for Multicasting, Security, & Mobile Aps Host Auto‐Configuration Security Incorporated Traffic Engineering Provisions Multicast Incorporated – IPv6 Does Not Replace IPv4 19 IPv4 and IPv6 Comparison Summary IP version IP version IPv4 IPv4 IPv6 Deployed 1981 1999 Address Size 32‐bit number 128‐bit number Address Format Dotted Decimal Notation: Hexadecimal Notation: 192.0.2.76 2001:0DB8:0234:AB00:0123:4567:8901:ABCD Number of Addresses , , , 232 = 4,294,967,296 Networking Technology for Broadcast Engineers – Part 2 2128 = 340,282,366,920,938,463,463,374,607,431,768,211,456 , , , , , , , , , , , , 10 3/24/11 IPv4 Depletion Situation Report • Each RIR Received Final /8 in February 2011 • IANA Free Pool of IPv4 = 0%. IANA F P l f IP 4 0% • Each RIR Currently has IPv4 Addresses to Allocate, But Not Forever! Each /8 (Class C) block contains 16,777,216 addresses https://www.arin.net/resources/request/ipv4_depletion.html 21 IPv6 – Is This Adequate Address Space? • Current Global Demand: – ~24 Million IP Addresses per Month • IPv6 Address Space: – Counting /64 subnets it would take ~ 768 Billion years to deplete – Counting /48 subnets it would take ~ 11.7 Million years to deplete Networking Technology for Broadcast Engineers – Part 2 11 3/24/11 IPv4 and IPv6 Comparison • Internet Protocol version 4 (IPv4, or just “IP”) – First developed for the original Internet (ARPANET) in spring 1978 – Deployed globally with growth of the Internet – Total of 4 billion IP addresses available – Well entrenched and used by every ISP and hosting company to connect customers to the Internet – Allocated based on documented need • Internet Protocol version 6 (IPv6) – Design started in 1993 when IETF forecasts showed IPv4 depletion between 2010 and 2017 – Completed, tested, and available for production since 1999 l l bl f – Total of 340,282,366,920,938,463,463,374,607,431,768,211,456 IP addresses available – Used and managed similar to IPv4 23 IPv6 Address Format & Notation 128-Bit Address Format Represented as a 32 Hexadecimal Digits Subdivided Into Eight Groups of Four Hexadecimal Digits (further summarization may be possible) 2001:0000:0000:0000:0DB8:8000:200C:417A or 2001:0:0:0:0DB8:8000:200C:417A or 2001::0DB8:8:200C:417A The Shortest Ipv6 Address: ::1 “The Loopback Address” 24 Networking Technology for Broadcast Engineers – Part 2 12 3/24/11 IPv6 Address Trivia What Happened to Version 5 of the Internet Protocol? “IPv5 Simply Does Not Exist! Version 5 was intentionally skipped to avoid confusion, or at least to rectify it. The problem with version 5 relates to an experimental TCP/IP protocol called the Internet Stream Protocol, Version 2, originally defined in RFC 1190. This protocol was originally seen by some as being a peer of IP at the Internet Layer in the TCP/IP architecture and these packets were assigned IP version 5 to differentiate them from “normal” IPv4 packets. This protocol never went anywhere, but to be absolutely sure that there would be no confusion, version 5 was skipped over in favor of version 6.” 25 The Environment Today • • • • • • • The Industry is Predominantly IPv4 Based Today IPv4 Demand Continues….. IPv4 Availability Pool Rapidly Decreasing IPv4 NAT Use Increasing IPv6 Must Be Adopted for Continued Growth IPv6 is NOT Backward Compatible With IPv4 IPv4 and IPv6 Must BOTH Be Maintained for Many Years to Come – “Dual‐ Stack Approach” My IPv4 Address: 128.194.247.55 My IPv6 Address: 2002:80c2:f737::80c2:f737 My MAC Address: 80:C2:F7:37 26 Networking Technology for Broadcast Engineers – Part 2 13 3/24/11 An Approach • Call to Action – Enterprise Networks – IPv6 Enable Web, Mail, and Public‐Facing Application Servers – Open Dialog With Your ISP Regarding IPv6 Connectivity Availability & Options • Call to Action – Content Providers – You Must Be Reachable By New Internet Customers – Provide IPv4 and IPv6 Connectivity Today – If Only IPv4 Content is Provided – You Reachability is Determined by Access Provider Transition Solutions IPv6 Implementation • Technology Areas of Focus: – Obtain IPv6 Address Space p – Obtain IPv6 Connectivity • Native • Tunneled – Upgrade / Configure Operating Systems – Upgrade / Configure Routers, Firewalls, DNS 28 Networking Technology for Broadcast Engineers – Part 2 14 3/24/11 IPv6 Connectivity 29 World IPv6 Day June 8, 2011 http://isoc.org/wp/worldipv6day/ 30 Networking Technology for Broadcast Engineers – Part 2 15 3/24/11 Takeaways • IPv6 Awareness – More Than Expanded Address Space More Than Expanded Address Space • IPv6 Address Format & Notation – 128 Bit Number Hexadecimal Number – Nomenclature ‐ Eight Groups of Four Hexadecimal Digits • Develop Plans for IPv4 / IPv6 Especially if a Content Provider – Upstream Provider IPv6 Availability? • Native Native • Tunneled • IPv4 and IPv6 Will Co‐Exist in The Foreseeable Future 31 Switching Fundamentals • Legacy Ethernet Used Hubs – An “Ethernet DA” of sorts – All Bits Go to All Ports – High Collision Level Due to Shared Media (40‐50% of Bandwidth Consumed by Collision Recovery) – High Collision Level Yields High Latency • Switches Allow Segmentation of Network – – – – Allows Dedicated Bandwidth and Point‐Point Communications Increased Throughput Due to Zero or Minimal Collisions Allows Full‐Duplex Operation Increased Security Capability Increased Security Capability • Switches Selectively Forward Individual “Frames” from a Receiving Port to a Destination Port 32 Networking Technology for Broadcast Engineers – Part 2 16 3/24/11 MAC Addresses • • Media Access Control “MAC” Address Unique Hardware Encoded Address – Burned In Address – Physical Address – “Spoofing” • • • Hexadecimal Format: 12:3A:4D:66:3A:1C or FF‐FF‐FF‐FF‐FF‐FF Switches “Learn” a Table of MAC Addresses – MAC Table – Maps Destination MAC Addresses to a Port 5 Basic Functions of an Ethernet Switch: – – – – – L Learning MAC Addresses i MAC Add Aging – How Long is a MAC Address Maintained? Flooding Selective Forwarding Filtering 33 Switching Types “Forwarding Method” • Store – and – Forward – Receives the Entire Frame Then Makes Decision – Drops Any Errored Frame Based Upon CRC – SLOW! (but insures no frame errors) • Cut – Through – Look Only @ Destination Address in Header of the Frame – FAST! (but no error checking) • Fragment Free (modified Cut‐Through) – Known as “Runt Free” Switching 34 Networking Technology for Broadcast Engineers – Part 2 17 3/24/11 A Simple MAC Table Example 35 VLANS IEEE 802.1Q • Virtual Local Area Network – VLAN • Allows Separation of Network Devices Across a Common Physical Media p y • Why Separate? – Control Broadcast Domains – Architecture Flexibility – Security by Isolating Users • Static Port Based VLAN(s) Most Common – Manual Assignment • Dynamic VLANS: – MAC‐Based VLAN(s) • Assignment Based Upon MAC Address – Protocol‐Based VLAN(s) • Assignment Based Upon Protocol 36 Networking Technology for Broadcast Engineers – Part 2 18 3/24/11 VLAN Trunking • Allows VLAN(s) to be Shared Across Multiple Devices 37 VLAN Example Switch Port Type Configuration: Access Link – Member of One VLAN Only Connects to a Host Trunk Link – Carries Traffic From Multiple VLANS Between Switches 38 Networking Technology for Broadcast Engineers – Part 2 19 3/24/11 Routing Fundamentals • Routing is Simply Moving Data From One Network to Another Network All Routers Are Aware of All Networks 39 Routing Protocols • Routing is Simply the Moving of Data Across Networks OSI Model Layer 3 Process Routing Involves Two Processes: – Determining the Best Path The Hard Part – Actually Sending of the Data The Easy Part Static Routing • Dynamic Routing • Interior Gateway Protocols (RIP IGRP EIGRP OSPF) Interior Gateway Protocols (RIP, IGRP, EIGRP, OSPF) • • • – – – – • Stub Routing (used when only one path exists) Path is Automatically Determined Distance‐Vector Link‐State Exterior Gateway Protocols (BGP) – Hides Internal Topology of the Network 40 Networking Technology for Broadcast Engineers – Part 2 20 3/24/11 Distance‐Vector Routing Protocols • • “Routing by Rumor” – The Overall Network is Unknown, Only Directly Connected Neighbors Are Known by Each Router Routing Decision Based Upon a “Distance” or Metric and “Direction” or Vector to Describe the “Next‐Hop the Next‐Hop” 41 Link‐State Routing Protocols • • Network Topology Information is Flooded Throughout the Network Each Router Determines its Own “Best Path” 42 Networking Technology for Broadcast Engineers – Part 2 21 3/24/11 Routing Protocols • Interior Gateway Protocols – Used Within the Same Autonomous System (AS) RIP RIPv2 IGRP EIGRP OSPF VLSM Support No Yes No Yes Yes Convergence Slow Slow Medium Fast Fast Configuration Easy Easy Medium Medium Hard Scalability Poor Poor Good Good Good Yes Yes No No Yes Interoperability • Exterior Exterior Gateway Protocols Gateway Protocols – Used Between Autonomous Systems • BGP 43 A Routing Example 44 Networking Technology for Broadcast Engineers – Part 2 22 3/24/11 What Is A “Layer 3” Switch? • • • • One Box Solution: – Layer 2 Bridging • Traditionally Performed in Hardware – Layer 3 Routing • Traditionally Performed in Software Layer 3 Switch Performs Layer 3 Routing in Hardware Eliminates Use of VLAN(s) – Each Port Can Be Assigned to a Subnet Not for All Environments – – – Typically Found in Workgroup Environment Limited to Ethernet d h Limited to OSPF and RIP Protocols Information Technology for Broadcast Engineers 45 Switching vs Routing Broadcast Domain Collision Domain Collision Domain Router Collision Domain Collision Domain Broadcast Domain 46 Networking Technology for Broadcast Engineers – Part 2 23 3/24/11 Takeaways • • Switching is a Layer 2 Process Why Switch? • • • • • MAC Addresses VLAN Basics & Applications VLAN Trunking Use Routing is a Layer 3 Process Why Route? • • • Recognize Routing Protocols Recognize Routing Protocols Interior Gateway vs Exterior Gateway Routing Protocols Layer 3 Switching Provides A One‐Box‐Solution – – Breaks the Collision Domain Breaks the Broadcast Domain 47 Quality of Service – “QoS” • Why QoS? – Allows Network Traffic to Be Prioritized Based Upon Application p pp • • • • Streaming Media IP Telephony Real‐Time Control (automation) Mission Critical Applications – Network Factors Impacting Quality: • Throughput • Dropped Packets • Errors • Latency • Jitter • Packet Delivery Out‐of‐Order 48 Networking Technology for Broadcast Engineers – Part 2 24 3/24/11 QoS continued….. • Implementing QoS – VLAN Implementation p – Bandwidth Over Provisioning – Traffic Shaping – DiffServ Implementation • Mark Packets According to Type of Service • Assigned to Multiple Queues – Queue Scheduling Algorithms: • Techniques Raise or Lower Queue Priority – WFQ ‐ Weighted Fair Queuing – Class Based Weighted Fair Queuing – WRR – Weighted Round Robin – HFSC – Hierarchical Fair Service Curve 49 QoS continued….. • QoS Implementation Architecture – Packet Identification & Marking – Network Element Provisioning – End‐End Policy Management 50 Networking Technology for Broadcast Engineers – Part 2 25 3/24/11 Controlling Network Traffic • • • • Traffic Shaping (packet shaping) is Generally Achieved by Delaying Packets Used to Optimize or Guarantee Performance p Control Volume of Traffic Placed on A Network Segment (ingress) Traffic Classification: – Sensitive – Best‐Effort – Undesired Traffic – File Sharing (P2P Traffic) 51 Network Security Concerns • • Focused on Protecting the Network Infrastructure Common Threats: – – – – • Packet Sniffers / Port Scanning IP Spoofing Denial of Service Attacks Application Layer Attacks Implementation Considerations: – – – – – – Know Your Enemy Cost Human Factors Human Factors Understand Your Network Limit Scope of Access Don’t Overlook Physical Security 52 Networking Technology for Broadcast Engineers – Part 2 26 3/24/11 Network Security Tools • • Firewall – Used to Create a “Trusted” Network Segment by Permitting or Denying Network Packets – Types of Firewalls: f ll • Packet Filtering – Stateless – Statefull • Application Layer • Proxies • NAT Detection Tools – Intrusion Detection Systems (IDS) • Signature Based • Anomaly Based – Intrusion Prevention Systems (IPS) • Combine Firewall & IDS Functions 53 Takeaways • • • • • • • • QoS Basics Network Quality Factors y QoS Implementation Techniques Traffic Shaping Basics Awareness of Network Security Threats Awareness of Network Security Implementation Considerations Firewall Types IDS/ IPS Use 54 Networking Technology for Broadcast Engineers – Part 2 27 3/24/11 Visualizing The “Internet” Current “IPv4” Internet Routing Table: 353,698 BGP Routes (Monday 3-21-11) 55 Routing Trivia • • • • • First “Router” as We Know is Was the “Interface Message Processor – IMP” Developed in the Late‐60’s for ARPANET First Message “lo” Was Sent on October 29, 1969 from UCLA to the Stanford Research Institute After Recovery From a System Crash, the Word Was Successfully Transmitted Life Has Never Been the Same Since! “login” 56 Networking Technology for Broadcast Engineers – Part 2 28 3/24/11 Reference Sources: • • • My Favorite Reference Texts: – Ethernet: The Definitive Guide – Charles Spurgeon – Cisco CCNA Simplified – 3rd Edition – Paul Browning – Cisco IOS in a Nutshell – 2nd edition – James Boney – Network Maintenance & Troubleshooting Network Maintenance & Troubleshooting – 2nd Edition Edition – Neal Allen Neal Allen – Network Warrior – Gary Donahue – The Illustrated Network – Walter Goralski – Wireshark Network Analysis – Laura Chappell Subnet Calculation Tools: – www.subnet‐calculator.com – www.bitcricket.com/ip‐subnet‐calculator.html (Ipv4 and IPv6 capable) – www.solarwinds.com/products/freetools/free_subnet_calculator.aspx – IpHONE Aps (iTunes Store): IP Calc • IP Calc • IP Calculator RFC Documents: – www.rfc‐editor.org 57 Reference Sources: • RFC Documents: – • IPv6 References: – – – – – – • www.arin.net i www.getipv6.info www.GoGo6.com http://test‐ipv6.com/ http://testmyipv6.com/ http://www.ipv6forum.com/ Internet Routing Metrics: – – • www.rfc‐editor.org http://bgp.potaroo.net/ http://www.internettrafficreport.com/ World IPv6 Day – http://isoc.org/wp/worldipv6day/ 58 Networking Technology for Broadcast Engineers – Part 2 29 3/24/11 Wrap – Up ? Questions ? Thank You for Attending! Wayne M. Pecena, CPBE, 8-VSB, AMD, DRB, CBNT Texas A&M University w-pecena@tamu.edu 59 Networking Technology for Broadcast Engineers – Part 2 30