WAN PROTOCOLS

PPP:POINT TO POINT PROTOCOL HDLC:HIGH LEVEL DATA LINK CONTROL PROTOCOL FRAME-RELAY: HDLC: IS A PROTOCOL THAT IS USED FOR DATA ENCAPSULATION OVER THE SYNCHRONOUS SERIAL LINKS EXAMPLES:LEASED LINE CONNECTIONS ON ROUTERS. HDLC HAVE 2 TYPES: 1)STANDARD HDLC 2)CISCO HDLC STANDARD HDLC IS USED BY ANY ROUTER (OPEN STANDARD PROTOCOL FOR ENCAPSULATION) CISCO HDLC IS USED BY DEFAULT ON CISCO ROUTERS ON SERIAL LINKS. HDLC IS NOT A SECURE PROTOCOL ,BECAUSE IT NOT REQUIRED ANY AUTHENTICATION. BECAUSE LEASE LINES ARE DIRECT LINKS AND CONNECTED DIRECTLY,SO AUTHENTICATION IS NOT REQUIRED. CISCO HDLC IS MULTI-PROTOCOL SUPPORTED ,SO CAN ENCAPSULATE MULTIPLE PROTOCOL SIMULTANIOUSLY. WHILE STANDARD HDLC PROVIDES SINGLE ENCAPSULATIONS.. PPP(POINT TO POINT PROTOCOL): IS A ANOTHER METHOD FOR ENCAPSULATIONS OF DATA OVER EITHER DIAL-UP OR ISDN LINES. PPP IS A SECURE METHOD ,BECAUSE IT REQUIRED A AUTHENTICATION FOR CONNECTION . PPP IS USED 2 TYPES OF PROTOCOL 1:NCP(NETWORK CONTROL PROGRAM) 2:LCP(LINK CONTROL PROTOCOL) LCP IS CREATE THE LINK AND PROVIDES COMPRESSIONS FOR DATA AND NCP IS LOAD BALANCING THE LINE AND CONTROL THE FLOW OF DATA. PPP ALSO USED 2 TYPES OF AUTHENTICATION METHOD 1:PAP (PASSWORD AUTHENTICATION PROTOCOL) 2:CHAP (CHALLANGING HANDSHAKE AUTHENTICATION PROTOCOL) PAP: IS LESS SECURE PROTOCOL ,BECAUSE THE PASSWORDS ARE SENTS IN CLEAR TEXT FORMAT,WHILE CHAP: IS MORE SECURE THAN PAP , BECUASE PASSWORDS ARE ENCRYPTED AND THEN TRANSMIT. CHAP IS PRIODICALLY CHECKUPS PASSWORDS AND SEE WHO IS CONNECTED, SENDS A CHALLENGING STREAM TO CLIENTS WHO IS CONNECTED CALLED MD5(HASH VALUE) AND MATCH IT ,IF THE VALUE IS NOT MATCHED THE CONNECTION IS IMMEDIATLY TERMINATED.

WAN TYPES

1:DEDICATED
EXAMPLE:LEASED LINES
ONE TO ONE CONNECTION ,NO BANDWIDTH DIVIDATIONS
ONE TIME PAYMENT/YEARLY/QUATERLY
EXPENSIVE LINE
HIGH SPEEDS :NORMALLY 54Mbps
24HRS/365 DAYS CONNECTED
NO NEED TO STOP,IF NOT USED
DEDICATED BANDWIDTH IS PROVIDED BY ISP .


2:CIRCUIT SWITCHED
EXAMPLE:TELEPHONE LINES,ISDN,DIAL-UPS
INEXPENSIVE LINES
HANG-UP WHEN FINISHED DATA TRANSMITTED.
LOW BANDWIDTH :NORMALLY 64Kbps-128Kbps
CONNECT-----USE-------DISCONNECT
USED ONLY WHEN LEASED LINE ARE DOWN(BACKUP LINE)
NO DEDICATED BANDWIDTH IS PROVIDED BY ISP .

3: PACKET SWITCHED
EXAMPLE:FRAME-RELAY

MODERATE EXPENSES
WORKS LIKE LEASED LINE
NO DEDICATED,LOOKS DEDICATED (365 DAYS/24 HRS CONNECTIVITY)
BANDWIDTH IS SHARABLE, NOT DEDICATED,SO IF NOT A PEAK HRS ,ENJOY THE FULL BADWIDTH OF ALL USERS LIKE LEASED LINE.
MOST POPULAR METHOD YET

IP ACCESS-LIST

ACCESS LIST IS WORKS LIKE A FIREWALL,ACCESS-LIST IS USED TO PROTECT YOUR NETWORK FROM UNAUTHORISED CONNECTIONS.

USING ACCESS LIST YOU CAN RESTRICT/ALLOW A PARTICULAR NETWORK OR HOST,

ACCESS-LIST TYPES:

1:STANDARD ACL (1-99)
ONLY DEFINE THE SOURCE ADDRESS

2:EXTENDED ACL (100-199)
DEFINE SOURCE AND DESTINATION AND PORT NO OR PROTOCOL


DENY = NOT ALLOW (RESTRICTION)
PERMIT= ALLOWED

(CONFIG)#ACCESS-LIST 10 DENY HOST 10.0.0.2
(CONFIG)#ACCESS-LIST 10 PERMIT HOST 10.0.0.3

DENY =99%
PERMIT=1%

PERMIT =INVITATION
IMPLICIT DENY


HOW TO APPLY

STEP 1: CREATE A ACCESS-LIST(CREATE RULES)
STEP2: APPLY ON A INTERFACE(APPLY RULES)


(CONFIG)#ACCESS-LIST 3 DENY 192.168.1.0 0.0.0.255
(CONFIG)#ACCESS-LIST 3 DENY 0.0.0.0 0.0.0.0
(CONFIG)#ACCESS-LIST 3 DENY ANY
(CONFIG)#ACCESS-LIST 3 PERMIT ANY

(config)#int f0/0
(config)#ip access-group 10 out

in=inbound recieve the call
out=outbound make a call

out=the packet must pass a routing process
in=the packet not pass a routing process

0=MUST MATCH
255=DON'T CARE

Color Coding of UTP

STRAIGHT CABLE: BOTH END SAME
CROSS CABLE : 1236    AND 3612
ROLLED CABLE:ALL PAIRS ARE DIFFRENT
1236
6321

1 ORANGE-WHITE (TX+)
2 ORANGE (TX-)
3 GREEN-WHITE (RX+)
4 BLUE
5 BLUE-WHITE
6 GREEN (RX-)
7 BROWN-WHITE
8 BROWN


Only 4 Wires is used to make data Transfer , Remaining wires send Dummy signals.

DHCP

DYNAMIC HOST CONFIGURATION PROTOCOL

DHCP IS A PROTOCOL USED TO ASSIGN IP ADDRESS DYNAMICALLY.


DHCP IS USES A LEASE AND POOL OF IP ADDRESS

DHCP USES 4 TYPES OF PACKETS

1 DHCP DISCOVER PACKET:

2 DHCP OFFER:

3 DHCP REQUEST PACKET :

4 DHCP ACK:


CLIENT SERVER

NO IP ADDRESS POOL OF IP (RANGE OF IP ADD)
MAC ADDRESS
1:SEND THE DISCOVER PACKET TO SEARCH THE DHCP SERVER .
2:IF HAVE A VALID DHCP SERVER LOCATED , DHCP SERVER SEND A OFFER PACKET TO THE CLIENT.
(IP ADDRESS/SUBNET MASK+DNS SERVER ADDRESS+DEFAULT GATEWAY+DOMAIN NAME+LEASE)
3:IF DHCP IS NOT FOUND , CLIENT REQUEST FOR APIPA (AUTOMATIC PRIVATE IP ADDRESS) TO OBTAIN AN IP ADDRESS AUTOMATICALLY.
(169.254.0.1-------169.254.255.255)CLASS B
4:CLIENT USESE DHCP REQUEST PACKET TO DHCP IF THE LEASE IS ABOUT TO EXPIRED.
5:DHCP SERVER PROVIDE THE ACKNOWLEDGEMENT PACKET TO CLIENT WITH A NEW LEASE +IP+DNS+DG+DOMAIN.

NOTE: DHCP USES THE PORT NO 67/68 OF UDP

WAN TERMS

WAN PROTOCOLS

CPE=CUSTOMER PRIMISES EQUIPMENT
IS A DEVICE THAT IS INSTALLED BY ISP TO THE CUSTOMER SITE

CO=CENTRAL OFFICE
IS A CENTRAL POINT ,WHERE ALL CONNECTIONS ARE CREATED AND MANAGE CONNECTIONS CENTRALLY.

DP=DEMACATION POINT
IS THE POINT WHERE ISP'S RESPOSIBILTIES ENDS

TOLL-NETWORK: IS THE DISTANCE THAT CONNECTS ALL CENTRAL OFFICE TOGETHER.

LOCAL LOOP: IS THE DISTANCE BETWEEN DEMARCATION POINT AND THE NEAREST CENTRAL OFFICE OR SWITCHING STATIONS.

DNS (DOMAIN NAME SYSTEM)

DNS COMPONENTS

DNS CLIENT( IS A SERVICE THAT IS USED FOR RESOLVING)CONTAINS RESOLVER CACHE,
LOCATED ON CLIENT AND SERVER BOTH

DNS SERVER:LOCATED ON SERVER ONLY


DNS CLIENT SERVICE : XP,2000,2003,2008
DNS SERVER : WINDOWS SEVER 2000,2003,2008


DNS IS INSTALLED IF WE INSTALLED ACTIVE DIRECTORY , AD WIZARD ASK YOU FOR INSTALLING DNS ,BECAUSE ACTIVE-DIRECTORY IS TIGHTLY COUPLED WITH DNS.

DNS : 2 METHODS

1:WITH AD
2:WITHOUT AD

AD REQUIRED DNS(MUST)
DNS NOT REQUIRED AD

MCTS PAPERS

70-620 : windows vista configuring

70-640 : windows server 2008 active directory configuring

70-642: windows server 2008 network infrastructure configuring

70-643 : windows server 2008 applications infrastructure

70-236: configuring exchange server 2007

DNS RECORDS TYPES

HOST(A):REPRESENT A HOST OR COMPUTER ON THE NETWORK.

PTR(POINTER):ALWAYS LOCATED ON REVERSE LOOKUP ZONE,USED FOR IP TO HOST RESOLVING.

SOA(START OF AUTHORITY):IS THE FIRST RECORD IN ANY DNS SERVER,TO AUTHORISE DNS FOR THAT ZONE.

NS(NAME SERVER):IS USED TO IDENTIFY A DNS SERVER ON YOUR NETWORK.

MX(MAIL EXCHANGE):IS REPRESENT AN SMTP MAIL SERVER ON YOUR NETWORK.

SRV(SERVICE LOCATION RECORD):IS LOCATED ON AD INTEGRATED ZONE,TO LOCATE A DOMAIN CONTROLLER ON THE NETWORK AND LOCATE A SERVICE FOR THE DOMAIN CONTROLLER.

CNAME(ALIAS): USED TO REPRESENT A HOST TO ANOTHER HOST

EXAMPLE: IF YOU TYPE GOOGLE.COM
YOU ARE REDIRECTED TO GOOGLE.CO.IN

DNS QUERIES:2 TYPES

RECURSIVE QUERY:
FIND THE RECORDS TO OHTER DNS SERVERS. IF RECORDS IS NOT FOUND TO ITS FORWARD AND REVERSE LOKUP ZONES.

ITERATIVE QUERY:is a query that is dns client ask the dns server to provide the best answer . dns server check its forward lookup zone and reverse lookup zone to search the answer for the query ,if host is not found ,it uses the forwarder to search the result. it lookup its parent domain or even root hits to search the query.