OSI Model

7 – Application Layer
- HTTP and SMTP protocols reside at this layer, in addition to FTP
- Think PC’s, Phones, Servers
6 – Presentation Layer
- Character encoding, data compression, and encryption/decryption occurs at this
layer
5 – Session Layer
- Establishes connections, maintenance of sessions, and authentication for security
o Manages connections between applications
4 – Transport Layer
- Data at this level is now referred to as Segments, not packets
- Responsible for reliable end to end delivery of the entire message, and provides
acknowledgement of successful data transmission
- Think Gateways and Firewalls
3 – Network Layer
- Transmission of packets from one host to another (on another network) via packet
routing (choosing the shortest route) using both the senders and receivers IP
addresses
- Has a Access Control List (ACL), which is used to enforce security policies by filtering
network traffic by permitting or blocking packets based on IP addresses and other
criteria
- Where the IP protocol resides
- Think Routers
2 – Data Link Layer
- Divided into 2 sub layers
o Logical Link Control (LLC)
o Media Access Control (MAC)
 Creates frames and then adds physical addresses (aka the MAC)
- Node to Node data delivery over the physical layer
- Flow control to make sure the data being sent is constant
- Has Access Control when communication channels are shared by multiple devices
- Think of Switches, Bridges, VLAN and Network Interface Card
1 – Physical Layer
- Actual physical connections between devices
- Bit Rate Control (the transmission rate per second)
- Physical Topologies – how different nodes are arranged (bus, star, mesh)
- Transmission Mode – defines the data flow between 2 connected devices
- Think Hubs, Cables, Modems, and Repeaters

Multipathing – when a network node has more than one physical link to another node. It’s a
feature of routers that can select an alternative pathway if one is down.
SAN – Storage Area Network – provisions access to storage device. A SAN is isolated from the
main network and can only be accessed by servers not by the clients PCs and laptops.

Reverse-Proxy – proxy that listens for client requests from the internet and creates the
appropriate request to the internal server. Its specific for inbound traffic.

Forwarding Proxy – specific for outbound traffic.

TTL – an output field in the ping command that shows the value of the counter when the packet
reaches its destination.

Interior Gateway Protocol (IGP) – Identifies the routes within a system.

Routing Information Protocol (RIP) – only looks for the next hop router in a given network or
subnet.

Elasticity refers to a system's ability to handle changes on-demand in real-time. A system with
high elasticity will not experience loss of service or performance if demand increases.

Network Function Virtualization (NFV) – is a way to replace physical hardware with software
that runs on regular servers. Its able to be run on normal computers so it makes it cheaper so
there is no need to buy special equipment. Its divided into 3 domains
- Virtualized Network Functions
o Software based versions of traditional network functions like firewalls,
routers, and load balancers.
- NFV Infrastructure
o It’s the actual physical hardware required to support NFV’s.
- NFV Management and Orchestration

Infrastructure as a Service (IaaS) - is a means of provisioning IT resources such as servers, load

Software as a Service (SaaS) - is a computing method that uses the cloud to provide application
services to users. An example is Microsoft Office 365, Gmail, Netflix.
- Think using a fully built software where everything is managed for you

Platform as a Service (PaaS) - provides resources between SaaS and IaaS. It may include servers
and storage network infrastructure but with a multi-tier web application/database platform on
top. An example is Microsoft Azure SQL Database, Google, Heroky.
- Think renting a platform to work on that has all the tools available, and you can
focus on building your app
Well Known Ports
21 – FTP (File Transfer Protocol) – transferring files over the network
- Is subdivided into TFTP and SFTP
o Trivial FTP (TFTP) – runs over UDP on port 69 and allows reading and writing
files but not directory browsing or file deletion.
o Securer FTP (SFTP) – uses TCP on port 22 and address the privacy and
integrity issues of FTP, by encrypting the data transfer and authentication.
22 – SSH (Secure Shell) – provides secure remote access to systems and secure file transfers
23 – Telnet -
25 – SMTP (Simple Mail Transfer Protocol) – handles outgoing email
53 – DNS (Domain Name System) – resolves domain names to IP addresses
67 – DHCP (Dynamic Host Configuration Protocol) – assigns IP addresses to network hosts
68 – (same as 67)
80 – HTTP (Hypertext Transfer Protocol) – is used for unencrypted web traffic
443 – HTTPS (Hypertext Transfer Protocol Secure) – provides secure encrypted web traffic
between client and server and has a digital certificate issued by a Certificate Authority.
110 – POP3 (Post Office Protocol v3) – retrieves emails from the mail server
- POP3S is 995
139 – SMB (Server Message Block) – allows machines to share their files and printers
143 – IMAP (Internet Message Access Protocol) – allows access to email on a remote server
- IMAP over SSL is 993
445 – (same as 139)
3389 – RDP (Remote Desktop Protocol) – enable remote desktop connections
- Requires the client to authenticate before full remote sessions starts.

Connectionless – a data transmission delivery method that uses UDP and doesn’t establish a
connection with devices so data delivery may be out of order
- UDP is Connectionless
- TCP is Connection-Oriented

mGRE – Multipoint Generic Routing Encapsulation – is a version of GRE that supports point to
multipoint links
- GRE (Generic Routing Encapsulation) – is a tunneling protocol that creates virtual
links between 2 devices, making them look connected even if they are far apart. It
encapsulates (or wraps) various types of data together into GRE packets to send
over the network. (think connecting branch offices)

Point to Point Protocol (PPP) – is a encapsulation protocol to send data directly between 2
devices over a link. Ex. Between you and your internet provider. Its used in older connections
like dial-up and some DSL connections. Works in the 2nd layer of the OSI model (Data Link Layer)
Multiprotocol Label Switching (MPLS) – operates as an overlay network to configure point to
point or point to multipoint links between nodes regardless of underlying physical and data-link
topology.

Internet Protocol Security (IPSec) – used to secure IP4/IP6 communications on local networks
and as remote access protocols. Each host that uses IPSec must be assigned a policy. It encrypts
packets (to protect them) passing over any network. It works in the 3 rd layer of the OSI model
(Network Layer). Its commonly used in VPN’s between remote users or networks over the
internet.

Small Form-Factor Pluggable (SFP) – uses local connectors and replaced the Gigabit Interface
Converter (GBIC) because it was too big and bulky.
- Quad Small Form-Factor Pluggable (QSFP) is a transceiver that support 4 1 Gbps
links.
- Enhanced Small Form-Factor Pluggable (EQSFP+) supports up to 40 Gbps

Dense Wavelength Division Multiplexing – a technology to send multiple data streams over an
optical fiber using different wavelengths of light.
- Dense has tight spacing between waves, allowing it to carry more data over a single
fiber
- Supports a larger number of channels, 40, 80, or more for high capacity data
transmission
- Is used for longer distances because it supports amplification.
- Is more expensive because it uses a more precise laser.

Coarse Wavelength Division Multiplexing – a technology to send multiple data streams over an
optical fiber using different wavelengths of light.
- Coarse has wider spacing between waves
- Supports fewer channels, 8-18
- Is used for shorter distances, up to 80km because it doesn’t support amplification
- Is a more affordable option because it uses a less precise laser.

Types of Cables
- Plenum – used in plenum space (a void in the building), and is designed to carry
heating, ventilation, and air conditioning systems (HVAC)
- Non-Plenum (General Purpose) – uses PVC jackets and is insulation, making it more
flexible than plenum cables
- Riser Cabling – cabling that passes between 2 floors

EAST-WEST – term to describe traffic that travels from server to server in a data center.

NORTH-SOUTH – term to describe traffic that travels to and from a data center. Think uploads
and downloads.