Ethernet Basics Physical Layer Ethernet Standards Data Link Layer Ethernet Standards Ethernet Security © 2013 Pearson 1 Characteristic Location Consequence of Location © 2013 Pearson Local Area Network (LAN) Located entirely on customer’s premises Owning company operates the LAN Wide Area Network (WAN) Must carry transmissions beyond customer’s premises User must contract with a carrier that has rights of way to carry wires between premises 2 Characteristic Technology and Service Consequence of Corporate versus Carrier Ownership © 2013 Pearson Local Area Network (LAN) Owner can use any technology and service options it wishes Wide Area Network (WAN) Customer is limited to technologies and service options offered by available carriers 3 Local Area Network (LAN) Labor Owner must do Consequences all operation and of Corporate maintenance versus Carrier work Ownership Characteristic © 2013 Pearson Wide Area Network (WAN) Operational and maintenance work is done by the carrier 4 Characteristic Economics © 2013 Pearson Local Area Network (LAN) Transmission distances are short, so the cost per bit carried is low Wide Area Network (WAN) Transmission distances are long, so the cost per bit carried is high 5 Characteristic Local Area Network (LAN) Wide Area Network (WAN) Speed Very high Consequences speeds are of Economics affordable Customers are content with lower speeds Design Optimization of Consequences transmission of Economics capacity is not pressing Optimization of transmission capacity is critical © 2013 Pearson 6 Workgroup Switches Connect Hosts to the Network © 2013 Pearson 7 Core Switches Connect Switches to Other Switches © 2013 Pearson 8 Hosts Normally Connect to Workgroup Switches Through UTP Copper Wiring © 2013 Pearson 9 Switches Often Connect to Other Switches Through Optical Fiber © 2013 Pearson 10 © 2013 Pearson 11 Characteristic Unshielded Twisted Pair Optical Fiber Medium Copper wire Glass Signal Electrical Light Maximum Usually 100 Distance in LANs meters Usually 200 to 500 meters Speed Similar Similar Cost Lower Higher © 2013 Pearson 12 © 2013 Pearson 13 © 2013 Pearson 14 Ethernet Basics Physical Layer Ethernet Standards Data Link Layer Ethernet Standards Ethernet Security © 2013 Pearson 15 © 2013 Pearson 16 © 2013 Pearson 17 © 2013 Pearson 18 © 2013 Pearson 19 © 2013 Pearson 20 © 2013 Pearson 21 NOT just 4 pairs! 22 © 2013 Pearson Propagation Effect(s) Impact Installation Discipline Attenuation Signal may become too low to be received properly. Limit cord distance to 100 m Noise Random electromagnet energy in the wire (noise) adds to the signal and may produce errors. Terminal crosstalk interference Interference by other wire pairs Limit untwisting of in the cord is crosstalk the wires to interference. 1.25 cm (0.5 in) Crosstalk interference at the two ends where the wires are untwisted is terminal crosstalk interference. Major problem © 2013 Pearson 23 Ethernet Signaling Standard Transmission Speed UTP Quality Category Maximum Cord Length 100BASE-TX 100 Mbps Category 5e, 6, or higher 100 meters 1000BASE-T 1 Gbps Category 5e, 6, or higher 100 meters 10GBASE-T 10 Gbps Category 6 55 meters 10GBASE-T 10 Gbps Category 6A 100 meters Category is a measure of UTP QUALITY © 2013 Pearson 24 © 2013 Pearson 25 © 2013 Pearson 26 When modes arrive at different times, this is called modal dispersion. If light rays from different clock cycles overlap, modal dispersion may make the signal unreadable. © 2013 Pearson 27 © 2013 Pearson 28 Wavelength Core Diameter 850 nm 62.5 microns 160 MHz-km 220 m 850 nm 62.5 microns 200 MHz-km 270 m 850 nm 50 microns © 2013 Pearson Modal Bandwidth Maximum Propagation Distance 500 MHz-km 500 m 29 UTP Optical Fiber UTP wire quality is indicated by a cord’s category number (5e, 6, etc.). © 2013 Pearson Multimode optical fiber quality is indicated by a cord’s modal bandwidth. 30 © 2013 Pearson 31 Wavelength is the physical distance between comparable points on adjacent cycles. Optical fiber transmission is described in terms of wavelength. Wavelengths for optical fiber are measured in nanometers (nm). For LANs, 850 nm light is used almost exclusively. © 2013 Pearson 32 Characteristic LAN Fiber Carrier WAN Fiber Required Distance Span 200 to 300 m 1 to 40 m Light Wavelength 850 nm 1,310 or 1,550 nm Type of Fiber Multimode (Thick Core) Single-Mode (Thin Core) Core Diameter 50 or 62.5 microns 8.3 microns © 2013 Pearson 33 Characteristic LAN Fiber Primary Distance Modal Limitation Dispersion Quality Metric © 2013 Pearson Carrier WAN Fiber Absorptive Attenuation Modal Bandwidth Not Applicable (MHz-km) 34 © 2013 Pearson 35 The first physical link is 100BASE-TX, so the maximum physical span is 100 meters. © 2013 Pearson 36 The switch regenerates the received signal. On a 1000BASE-SX link, the clean new signal can travel up to another 220 meters. © 2013 Pearson 37 The second switch also regenerates the signal. The clean regenerated signal goes on. © 2013 Pearson 38 © 2013 Pearson 39 Ethernet Basics Physical Layer Ethernet Standards Data Link Layer Ethernet Standards Ethernet Security © 2013 Pearson 40 © 2013 Pearson 41 © 2013 Pearson 42 4 Bits 0000 0001 0010 0011 0100 0101 0110 0111 Decimal (Base 10) 0 1 2 3 4 5 6 7 Hexadecimal (Base 16) 0 hex 1 hex 2 hex 3 hex 4 hex 5 hex 6 hex 7 hex What is 0101 in hex? What is 0000 in hex? © 2013 Pearson 43 4 Bits* 1000 1001 1010 1011 1100 1101 1110 1111 © 2013 Pearson Decimal (Base 10) 8 9 10 11 12 13 14 15 Hexadecimal (Base 16) 8 hex 9 hex A hex B hex C hex D hex E hex F hex What is 1001 in hex? What is 1111 in hex? 44 Converting a 48-bit MAC address to hex ◦ Write down the 48-bit address in 12 four-bit nibbles. ◦ Represent each nibble as a hex symbol. ◦ Pair the hex symbols and put a dash between the 6 pairs. ◦ Try these four nibbles: 0000111101011010 © 2013 Pearson 45 © 2013 Pearson 46 © 2013 Pearson 47 © 2013 Pearson 48 © 2013 Pearson 49 © 2013 Pearson 50 A packet from A1… to E5… must pass through Switches 1, 2, and 3. © 2013 Pearson 51 Switch 1 sees that it should send the frame to E5 out Port 5. © 2013 Pearson 52 Switch 2 sees that it should send the frame to E5 out Port 7. © 2013 Pearson 53 Switch 3 sees that it should send the frame to E5 out Port 6. © 2013 Pearson 54 © 2013 Pearson 55 © 2013 Pearson 56 Loops are not allowed in Ethernet. A strict hierarchy is required. © 2013 Pearson 57 © 2013 Pearson 58 © 2013 Pearson 59 Tag Control Information (TCI) Field ◦ There are 12 bits for VLAN addresses. ◦ There are 3 bits for frame priority. ◦ This permits 23 = 8 different priority values. © 2013 Pearson 60 © 2013 Pearson 61 Ethernet Basics Physical Layer Ethernet Standards Data Link Layer Ethernet Standards Ethernet Security © 2013 Pearson 62 Power over Ethernet (POE) ◦ Switches can supply power to devices via UTP. ◦ (Wired telephone systems and USB ports already do this.) ◦ Less expensive than supplying power separately. © 2013 Pearson 63 Latest POE Standard ◦ Provides up to 25 Watts to attached devices ◦ Sufficient for most wireless access points ◦ Sufficient for VoIP phones ◦ Sufficient for surveillance cameras ◦ Sufficient for tablets Not sufficient for desktop or notebook PCs © 2013 Pearson 64 The Future ◦ Nonstandard products now supply 60 Watts of power. ◦ May become a future standard. ◦ Still will not be enough for desktop or notebook PCs. POE switches ◦ New switches can be purchased with POE. ◦ Companies can also add POE equipment to an existing non-POE switch. © 2013 Pearson 65 The Problem ◦ Anyone can enter the building and plug their computer into a switch or into a wall RJ-45 port, which connects to a switch. This usually gives the attacker access to the network without going through a firewall. Solution: access control at switch ports. ◦ 802.1X Port Based Access Control can do this. ◦ Created by the 802.1 WG, not the 802.3 WG. ◦ 802.1 WG creates general standards, such as security standards. © 2013 Pearson 66 © 2013 Pearson 67 © 2013 Pearson 68 Advantages of a Central Authentication Server ◦ Consistency: Attacker cannot find a misconfigured switch. ◦ Rapid changes: When someone leaves, is hired, or needs credential changes. ◦ Switch cost: Authentication server does heavy work. ◦ Reduced management cost: Only one authentication database to maintain. © 2013 Pearson 69 Box 802.3ba governs Ethernet for both 40 Gbps and 100 Gbps Virtual Lane ◦ Entire 40 Gbps or 100 Gbps Media Lane ◦ Physical connection ◦ There may be several per virtual lane ◦ Essentially, built-in bonding © 2013 Pearson 70 Box Example: 100GBASE-SR10 ◦ ◦ ◦ ◦ 100 Gbps virtual lane S = 850 nm light R = How bits are processed 10 = 10 Gbps media lane Media Lanes ◦ 10 Mbps optical fiber pairs ◦ 2 extra pairs ◦ 24 optical fiber strands in total © 2013 Pearson 71