Ch-6- building block process and the "Design for Performance
● Building Block Approach: Needs → Tech → Cost, iterate until optimal.
● Needs Analysis: Identify requirements, prioritize.
● Logical Design: Map applications, users, traffic flows.
● Physical Design: Select devices, cabling, data rates.
● Baselining: Measure current performance for comparison.
● RFP: Document design, solicit vendor proposals.
h-7- Local Area Networks (LANs);802.3 (Wired Ethernet)and802.11
C
(Wireless/Wi-Fi)
- CSMA/CD for wired, CSMA/CA for wireless
- LAN- switches and access points used
● LAN TOPOLOGIES-Hub: logical bus, collisions.Switch: logical star- MOST
USED
● 1000BaseT is common for access layer
● WPA2 is widely used for security.
● 802.11n/ac/ax- wifi-4,5,6
● Unshielded Twisted Pair (UTP)for desktops,Fiber Opticfor backbones, and
Radio Wavesfor WLANs.
● Network Interface Cards (NICs): The hardware that connects a device to the
network medium.
● Routers: Operate at Layer 3 (Network Layer)
● Modern ethernet- star topology
● Layer 2- to correct address
● Router- between buildings; switch- inside buildings
Ch-8 Backbone Networks (BNs)
- A ccess Layer: Where users connect to the network (LANsand WLANs).
- Distribution Layer: The BN that connects access layerswithin a single
building.
+1
- Core Layer: The BN that connects distribution layersacross different
buildings and to the outside world (WAN/Internet).
- Distribution layer,-Twisted Pair (TP)
- Core layer- Fiber Optic cable
- Layer 2 switch- transparent
- Router-not
- Layer 3 switches- virtual lans, combines layer 2 and routers
- Hierarchy: Access (User) Distribution (Building) Core (Campus/Internet)
-
H-9Wide Area Networks (WANs)andMetropolitan Area Networks (MANs),
C
● s ervice types:Dedicated-Circuits,Packet-Switched, andVirtual Private
Networks (VPNs),
● Dedicated-Circuit Networks:Private, permanent "point-to-point" links between
two locations
- Routerand aCSU/DSU(Channel Service Unit/Data Service Unit
- North America (T1 = 1.5 Mbps; T3 = 45 Mbps)
- Fiber optic- OC-1 to OC-192
- Ring (robust), Star (easy management), or Mesh (short routes but
expensive).
-
● Packet-Switched Networks:Shared networks where data is broken into packets.
Organizations lease a connection to the carrier'sPoint-of-Presence (POP).
- MPLS(high speed, 10 Gbps) andEthernet WAN(easiest to use
because no frame translation is needed).
- Committed Information Rate (CIR): The data rate the carrierguarantees
you.
- SVC vpn (Switched): Disconnects when not in use.
● VPN :Secure "tunnels" created over the public Internet.
● WAN- routers use
- Move data closer to users- distributed DB
● T unneling: The process of wrapping a private packet inside a public packet for
secure transport
● UseVPNfor low cost;MPLS/Ethernetfor high performance;SONETfor
extreme security/speed.
● fiber optics in North America-SONET
● translates digital signals for a T1 line- CSU/DSU
● SD-WAN :balance traffic across multiple types of circuits
LEARN
H
● ierarchy of Speed: T1 (1.5 Mbps) < T3 (45 Mbps) < SONET (Up to 10 Gbps).
● Dedicated (T1/T3/SONET): Like a private road. Youpay for it 24/7 even if you
don't use it.
● Packet-Switched (MPLS/Ethernet): Like a toll highway.You share it with
others but pay a guaranteed rate (CIR).
Ch-11 Network Security CIA
● Confidentiality: Protection of data from unauthorizeddisclosure.
● Integrity: Assurance that data has not been alteredor lost its accuracy.
● Availability (Business Continuity): Ensuring systemsand data are accessible
to authorized users despite disruptions or disasters
( Risk Score = Likelihood × Impact).
●
● Redundancy: Using fault-tolerant servers, RAID storage, and UPS
(Uninterruptible Power Supplies) to survive hardware or power failures.
● Firewalls: Components (like routers) that useAccess Control Lists (ACLs)to
filter packets based on IP address or application content.
● Symmetric: One key for both encrypting and decrypting.Fast but hard to
distribute keys.
● Asymmetric (Public Key): Uses a public key (to encrypt)and a private key (to
decrypt). Solves key distribution (e.g., RSA)
● IPS (Intrusion Protection Systems): Monitors network for misuse (known
signatures) or anomalies (deviations from normal behavior)
● Integrity ensures the data hasn't been changed.
● Daily Backup: Corrective (it helps recover after a loss).
● Packet-Level Firewall" check :It checks IP addresses and port numbers
against an Access Control List (ACL).
● IP:To detect an intrusion in progress and take immediate action to stop it
● protects against power surges and short-term outages:uninterrutable power
supply (UPS)
● Continuity: Antivirus (malware), UPS (power), RAID (disks), DRP (disasters).
Ch-12 Firefighting" (reacting to problems) to proactive management
● SNMP (Simple Network Management Protocol):The industry standard for
communication between the Network Management Software (NMS) and the
Agents (software) living on managed devices.
● MIB (Management Information Base):The database on a device that stores
its status statistics (error rates, traffic levels).
● Documenting the Network:Maintaining up-to-date network diagrams,
hardware serial numbers, and software license info.
● Key Statistics: MonitoringAvailability(uptime),MTBF(Mean Time Between
Failures), andMTTR(Mean Time To Repair)
● Formula (TCO): $TCO = {Total Cost} / Number of Clients}
● NMS DEVICE: SNMP (Simple Network Management Protocol).
● Managed Networks: Use NMS + Managed Devices + SNMP to stop
"firefighting
● SNMP Trio:NMS(The screen),Agent(The reporter),MIB(The data)
● Traffic Management:Load Balancing(share the load)andTraffic Shaping
(prioritize the important stuff).
● Support Tiers: Level 1 (Help Desk) Level 2 (Specialists) Level 3 (Vendors).
● Cost: Stop looking at hardware price; look atPersonnelandLost time.
LEARN:
.network operating system (NOS)?
1
a) Manages tasks at the data link, network, and
application layers AND Enables communication
between different types of devices