DevOps / Sys Admin Q & A #2B : Networks

bogotobogo.com site search:

Internet protocol suite

Source - https://en.wikipedia.org/wiki/Internet_protocol_suite

VLANs - Switch protocols

A Local Area Network (LAN) was originally defined as a network of computers located within the same area. In other words, Local Area Networks are defined as a single broadcast domain, which means that if a user broadcasts information on a LAN, the broadcast will be received by every other user on the LAN. Broadcasts are prevented from leaving a LAN by using a router. The disadvantage of this method is routers usually take more time to process incoming data compared to a bridge or a switch. More importantly, the formation of broadcast domains depends on the physical connection of the devices in the network. Virtual Local Area Networks (VLAN's) were developed as an alternative solution to using routers to contain broadcast traffic.

In short, a virtual LAN (VLAN) is any broadcast domain that is partitioned and isolated in a computer network at the data link layer (OSI layer 2).

We can mark frames through VLAN tagging, so that a single interconnect (trunk) may be used to transport data for multiple VLANs.

VLANs allow network administrators to group hosts together even if the hosts are not on the same network switch. This can greatly simplify network design and deployment, because VLAN membership can be configured through software. Without VLANs, grouping hosts according to their resource needs necessitates the labor of relocating nodes or rewiring data links.

Why VLAN? - advantages:

Performance - In networks where traffic consists of a high percentage of broadcasts and multicasts, VLAN's can reduce the need to send such traffic to unnecessary destinations.
Formation of Virtual Workgroups.
Security - Periodically, sensitive data may be broadcast on a network. In such cases, placing only those users who can have access to that data on a VLAN can reduce the chances of an outsider gaining access to the data. VLAN's can also be used to control broadcast domains, set up firewalls, restrict access, and inform the network manager of an intrusion.

DHCP - Dynamic Host Configuration Protocol

Credit : What is DHCP Server ?

When the client computer (or device) boots up or is connected to a network, a DHCPDISCOVER message is sent from the client to the server.
When the DHCP server receives the DHCPDISCOVER request message then it replies with a DHCPOFFER message.
The client forms a DHCPREQUEST message in reply to DHCPOFFER message and sends it to the server indicating it wants to accept the network configuration sent in the DHCPOFFER message.
Once the server receives DHCPREQUEST from the client, it sends the DHCPACK message indicating that now the client is allowed to use the IP address assigned to it. The client enters the bound state during this step.

Dynamic Host Configuration Protocol (DHCP) is a client/server protocol that automatically provides an Internet Protocol (IP) host with its IP address.

Every device on a TCP/IP-based network must have a unique unicast IP address to access the network and its resources. Without DHCP, IP addresses for new computers or computers that are moved from one subnet to another must be configured manually; IP addresses for computers that are removed from the network must be manually reclaimed. With DHCP, this entire process is automated and managed centrally. The DHCP server maintains a pool of IP addresses and leases an address to any DHCP-enabled client when it starts up on the network. Because the IP addresses are dynamic (leased) rather than static (permanently assigned), addresses no longer in use are automatically returned to the pool for reallocation.

Unicast vs broadcast

Credit : http://veraview.com/news/

Unicast : just one sender, and one receiver.
Broadcast : one sender, but the information is sent to all connected receivers.
Multicast : information is sent from one or more points to a set of other points.

What's ARP

ARP stands for Address Resolution Protocol. When we try to ping an IP address on our local network, say 192.168.1.2, our system has to turn the IP address 192.168.1.2 into a MAC address. This involves using ARP to resolve the address, hence its name.

Please checkout this : Address Resolution Protocol (ARP) Explained

SSL Handshake

Visit SSH & SSL.