Comprehensive Networking Notes
Introduction to Network Administration
Network administration is the process of managing and maintaining both the hardware and
software resources of a computer network.
It ensures that the network infrastructure is reliable, secure, and performs optimally.
Administrators configure routers, switches, firewalls, and servers; assign IP addresses;
manage user accounts; and ensure connectivity between systems.
Key responsibilities include:
- Availability: Ensuring network uptime with minimal downtime.
- Performance: Delivering fast and reliable services.
- Security: Protecting the network from internal and external threats.
Example: In a hotel, the administrator ensures the booking system, staff computers, guest
Wi-Fi, and surveillance systems work smoothly without interfering with one another.
Network Design and Setup
Network design is the blueprint of how devices connect and communicate, which
determines scalability, security, and efficiency.
LAN Design (Layered Architecture):
- Access Layer: Connects end devices (PCs, printers, IP phones). Switches here provide
Power over Ethernet (PoE), VLAN support, and port security.
- Distribution Layer: Aggregates data from access switches, enforces security policies
(ACLs), and handles inter-VLAN routing.
- Core Layer: High-speed backbone that connects distribution switches to external networks
(e.g., ISP).
Key considerations in design:
- Redundancy: Backup paths to avoid downtime.
- Segmentation (VLANs): Separating staff, guest, and management traffic improves
performance and security.
- Port Speed & Aggregation: Provides high bandwidth for critical applications like video
conferencing.
Example: In a university, VLANs separate student labs, administrative offices, and guest Wi-
Fi to prevent interference.
Network Maintenance
Network maintenance ensures continuous and efficient operation of the network.
Types of maintenance:
- Preventive: Updating software, applying patches, replacing aging hardware, cleaning
equipment.
- Corrective: Fixing issues like failed switches, corrupted configurations, or malware
infections.
- Proactive: Performing regular health checks, bandwidth audits, and traffic analysis to
prevent outages.
Example: A company schedules weekly router configuration backups and monthly firmware
updates to minimize risks.
Network Monitoring
Monitoring ensures visibility into network performance and security.
Tools: SNMP, Wireshark, SolarWinds, Nagios.
Functions:
- Performance Monitoring: Track uptime, latency, and packet loss.
- Bandwidth Utilization: Ensure fair use and detect anomalies.
- Log Management: Record system events for audits.
- Alerts & Reporting: Notify admins of failures or suspicious activity.
Example: Monitoring bandwidth spikes can reveal whether caused by video conferencing or
a DDoS attack.
Network Security
Security protects the CIA triad:
- Confidentiality: Only authorized access (e.g., encryption, authentication).
- Integrity: Prevent unauthorized data modification (e.g., hashing, digital signatures).
- Availability: Ensuring services are accessible when needed (e.g., redundancy, anti-DoS).
Best practices:
- Multi-factor authentication.
- Firewalls and IDS/IPS systems.
- Encryption of sensitive data.
- Regular backups for disaster recovery.
Network Vulnerabilities
Vulnerabilities are weaknesses attackers exploit.
Types:
- Technological: Outdated software, unpatched OS, weak encryption.
- Configuration: Default passwords, unsecured ports, unencrypted storage.
- Policy-related: Weak or missing ICT policies.
- Implementation: Lack of funds, unskilled staff, poor infrastructure.
Example: A company using 'admin123' as Wi-Fi password risks being hacked easily.
Threats
Threats exploit vulnerabilities.
Types:
- Physical: Theft, vandalism, fire, floods.
- Electrical: Power surges, outages, poor grounding.
- Environmental: Dust, humidity, overheating.
- Maintenance: Unauthorized technicians making changes.
Example: A power outage without UPS may corrupt server data.
Attacks
Attacks are deliberate attempts to gain unauthorized access or disrupt services.
Types include:
- Man-in-the-Middle: Intercepting communications.
- Malware: Viruses, worms, Trojans disrupting operations.
- Phishing: Tricking users into revealing sensitive information.
- Password Attacks: Brute force or dictionary attacks.
- DNS Spoofing: Redirecting users to fake websites.
- DoS/DDoS: Flooding a server with requests to crash it.
Example: Hackers redirect bank customers to a fake site to steal credentials.
Types of Security
Network security can be classified as:
- Firewall Security: Controls incoming/outgoing traffic.
- Antimalware: Detects and removes malicious programs.
- SIEM: Combines logs and events for threat analysis.
- Access Security: Restricts access to sensitive resources.
- Application Security: Protects apps from exploits (patching, penetration testing).
- Physical Security: Protects against theft, disasters, and unauthorized entry.
Network Administration Aspects
Key aspects include:
1. Infrastructure Setup: LAN design, VLANs, switches, routers.
2. Provision of Services: Servers (DHCP, DNS, email, virtualization).
3. Monitoring & Security: IDS/IPS, logging, ACLs, and port security.
4. Maintenance: Updates, backups, and hardware replacements.