* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project
Download TCP/IP Networking
IEEE 802.1aq wikipedia , lookup
Deep packet inspection wikipedia , lookup
Computer network wikipedia , lookup
Internet protocol suite wikipedia , lookup
Distributed firewall wikipedia , lookup
Point-to-Point Protocol over Ethernet wikipedia , lookup
Wake-on-LAN wikipedia , lookup
Dynamic Host Configuration Protocol wikipedia , lookup
Routing in delay-tolerant networking wikipedia , lookup
Recursive InterNetwork Architecture (RINA) wikipedia , lookup
TCP/IP Networking Yue Cui 06/13/02 1 Presentation Outline Introduction Packets and Encapsulation IP Addresses, Routing ARP, DHCP and PPP Security Issue Addition of Machines 2 Introduction TCP/IP and the Internet A brief history Internet Management ARPARNET(1969 by DARPA) ICANN IETF ISOC Standards and Documentation RFCs, FYIs, STDs and BCPs 3 Introduction TCP/IP protocol suite IP – routes data packets from one machine to another ICMP – provides lower-level support for IP, including error messages, routing assistance and debugging help ARP UDP and TCP – translates IP address to hardware address (a.k.a. MAC address) – deliver data to specific applications on the destination machine 4 Introduction TCP/IP family 5 Presentation Outline Introduction Packets and Encapsulation IP Addresses, Routing ARP, DHCP and PPP Security Issue Addition of Machines 6 Packets and Encapsulation Packet Header—tells where the packet came from and where it’s going Payload—actual data to be transferred 7 Encapsulation Layer M 5 M 4 H4 M H4 M 3 H3 H4 M H3 H4 M 2 H2 H3 H4 M H2 H3 H4 M 1 source machine destination machine 8 Presentation Outline Introduction Packets and Encapsulation IP Addresses, Routing ARP, DHCP and PPP Security Issue Addition of Machines 9 IP Addresses Historical Internet address classes Subnet masks IP addresses were grouped into “classes” Class A,B and C denote regular IP addresses. Class D and E are used for multicasting and research purpose. Part of the host portion of an address is “borrowed” to extend the network portion. Use ifconfig command to configure IP address and subnet masks 10 IP Addresses IP address crisis We were going to run out of class B addresses by mid-1995 The routing tables of Internet backbone sites were growing so large that they would not fit in the memory of available routers IP addresses were being allocated with no locality of reference 11 IP Addresses Solution to the IP address crisis CIDR (Classless Inter-Domain Routing) A short-term solution Manage the existing 4-byte address space that uses the available addresses more efficiently and allows routing tables to be simplified by taking numerical adjacencies into account IPv6 A long-term solution A revision of the IP protocol that expands the address space to 16 bytes 12 Routing Meaning Looking up a network address in the routing table to forward a packet toward its destination Building the routing table in the first place Configure netstat route get (on BSD-based system) 13 Presentation Outline Introduction Packets and Encapsulation IP Addresses, Routing ARP, DHCP and PPP Security Issue Addition of Machines 14 ARP, DHCP and PPP ARP: Address Resolution Protocol Discovers the hardware address(MAC address) associated with a IP address Usage: Redhat% /sbin/arp –a xor.com(192.108.21.1) at 08:00:20:77:5E:A0[ether] on eth0 earth.xor.com(192.108.21.180) at 00:50:DA:12:4E:E5[ether] on eth0 15 ARP, DHCP and PPP DHCP: Dynamic Host Configuration Protocol Dynamically assigns network parameters to hosts Leasable parameters include: IP addresses and netmasks Gateways(default routes) DNS name servers Syslog hosts WINS servers, proxy servers TFTP servers(for loading a boot image) 16 ARP, DHCP and PPP PPP: Point-to-Point Protocol Serial line encapsulation protocol that specifies how IP packets must be encoded for transmission on a slow serial line Sometimes used with home technologies such as Dial-up, DSL and cable modem 17 ARP, DHCP and PPP System Red Hat Commands /usr/sbin/pppd /usr/sbin/chat Free BSD /usr/sbin/pppd /usr/sbin/chat Config files /etc/ppp/options /etc/ppp/ppp.conf /etc/ppp/allow /etc/ppp/options /etc/ppp/options.ttyserver /etc/ppp/chat.ttyserver PPP-related commands and configuration files example 18 Presentation Outline Introduction Packets and Encapsulation IP Addresses, Routing ARP, DHCP and PPP Security Issue Addition of Machines 19 Security Issues IP forwarding ICMP redirects Source routing Broadcast pings and other forms of directed broadcast UNIX-based firewalls Virtual private networks(VPN) IPSEC: secure IP (Refer to Chapter 21 for details) 20 Presentation Outline Introduction Packets and Encapsulation IP Addresses, Routing ARP, DHCP and PPP Security Issue Addition of Machines 21 Addition of machines Basic steps Assign an IP address and hostname Set up the new host to configure its network interfaces at boot time Set up a default route Point to a DNS name server, to allow access to the rest of the Internet 22 Assign an IP address and hostname /etc/hosts file Example from text book 127.0.0.1 localhost 192.108.21.48 lollipop.xor.com lollipop loghost 192.108.21.254 chimchim-gw.xor.com chimchim-gw 192.168.21.1 ns.xor.com ns 192.225.33.5 licenses.xor.com license-server hostname command Assigns a hostname to a machine Typically runs at boot time 23 Configure network interface ifconfig command Common form: ifconfig interface address options… up/down For example: Ifconfig en0 128.138.240.1 netmask 255.255.255.0 up Options Netmask Sets the subnet mask for the interface Broadcast Specifies the IP broadcast address for the interface 24 Configure static routes route command Format: route [-f] op [type] destination gateway [hop-count] Options Add, delete, (get, change, flush, monitor) Default routes route add default gateway-IP-address 25 Configure DNS /etc/resolv.conf file All systems require to modify it Sample: Search cs.colorado.edu colorado.edu Nameserver 128.138.242.1 Nameserver 128.138.243.151 Nameserver 192.108.21.1 26 Configure DNS “service switch” file Some systems do not use DNS by default, these systems use “service switch” file to resolve hostname-to IP- address mapping Service switch files by system System Switch files Solaris /etc/nsswitch.conf nis [NOTFOUND=return] files HP-UX /etc/nsswitch.conf dns [NOTFOUND=return] nis [NOTFOUND=return] files Red Hat /etc/nsswitch.conf db files nisplus dns /etc/host.conf hosts, bind FreeBSD /etc/host.conf Default for hostname lookups host,bind 27 Thank you! Questions? 28