HomeChapter 1: Exploring the Network 1.3.1.2 Planning for the Future The convergence of the different types of communications networks onto one platform represents the first phase in building the intelligent information network. We are currently in this phase of network evolution. The next phase will be to consolidate not only the different types of messages onto a single network, but to also consolidate the applications that generate, transmit, and secure the messages onto integrated network devices. Not only will voice and video be transmitted over the same network, the devices that perform the telephone switching and video broadcasting will be the same devices that route the messages through the network. The resulting communications platform will provide high quality application functionality at a reduced cost. The pace at which the development of exciting new converged network applications is occurring can be attributed to the rapid growth and expansion of the Internet. With only about 10 billion of the 1.5 trillion things currently connected globally, there is vast potential to connect the unconnected via the IoE. This expansion has created a wider audience for whatever message, product, or service can be delivered. The underlying mechanics and processes that drive this explosive growth have resulted in a network architecture that is both capable of supporting changes and able to grow. As the supporting technology platform for living, learning, working, and playing in the human network, the network architecture of the Internet must adapt to constantly changing requirements for a high quality of service and security. HomeChapter 1: Exploring the Network 1.3.1.3 Lab - Mapping the Internet In this lab, you will complete the following objectives: • Part 1: Test Network Connectivity Using Ping • Part 2: Trace a Route to a Remote Server Using Windows Tracert • Part 3: Trace a Route to a Remote Server Using Web-Based and Software Tools • Part 4: Compare Traceroute Results Lab - Mapping the Internet HomeChapter 1: Exploring the Network 1.3.2.1 The Supporting Network Architecture Networks must support a wide range of applications and services, as well as operate over many different types of cables and devices, which make up the physical infrastructure. The term network architecture, in this context, refers to the technologies that support the infrastructure and the programmed services and rules, or protocols, that move messages across the network. As networks evolve, we are discovering that there are four basic characteristics that the underlying architectures need to address in order to meet user expectations: • Fault Tolerance (Figure 1) • Scalability (Figure 2) • Quality of Service (QoS) (Figure 3) • Security (Figure 4) HomeChapter 1: Exploring the Network 1.3.2.2 Fault Tolerance in Circuit Switched Networks Fault Tolerance The expectation is that the Internet is always available to the millions of users who rely on it. This requires a network architecture that is built to be fault tolerant. A fault tolerant network is one that limits the impact of a failure, so that the fewest number of devices are affected by it. It is also built in a way that allows quick recovery when such a failure occurs. These networks depend on multiple paths between the source and destination of a message. If one path fails, the messages can be instantly sent over a different link. Having multiple paths to a destination is known as redundancy. Circuit-Switched Connection-Oriented Networks To understand the need for redundancy, we can look at how early telephone systems worked. When a person made a call using a traditional telephone set, the call first went through a setup process. This process identified the telephone switching locations between the person making the call (the source) and the phone set receiving the call (the destination). A temporary path, or circuit, was created for the duration of the telephone call. If any link or device in the circuit failed, the call was dropped. To reconnect, a new call had to be made, with a new circuit. This connection process is referred to as a circuit-switched process and is illustrated in the figure. Many circuit-switched networks give priority to existing circuit connections at the expense of new circuit requests. After a circuit is established, even if no communication is occurring between the persons on either end of the call, the circuit remains connected and resources used until one of the parties disconnects the call. Because there are only so many circuits that can be created, it is possible to get a message that all circuits are busy and a call cannot be placed. The cost to create many alternate paths with enough capacity to support a large number of simultaneous circuits, and the technologies necessary to dynamically recreate dropped circuits in the event of a failure, is why circuit switched technology was not optimal for the Internet. HomeChapter 1: Exploring the Network 1.3.2.3 Fault Tolerance in Packet-Switched Networks Packet-Switched Networks In the search for a network that was more fault tolerant, the early Internet designers researched packet switched networks. The premise for this type of network is that a single message can be broken into multiple message blocks, with each message block containing addressing information to indicate the origination point and final destination. Using this embedded information, these message blocks, called packets, can be sent through the network along various paths, and can be reassembled into the original message when reaching their destination, as illustrated in the figure. The devices within the network itself are typically unaware of the content of the individual packets. Only visible are the addresses of both the source and the final destination. These addresses are often referred to as IP addresses, represented in a dotted decimal format such as 10.10.10.10. Each packet is sent independently from one location to another. At each location, a routing decision is made as to which path to use to forward the packet towards its final destination. This would be like writing a long message to a friend using ten postcards. Each postcard has the destination address of the recipient. As the postcards are forwarded through the postal system, the destination address is used to determine the next path that postcard should take. Eventually, they will be delivered to the address on the postcards. If a previously used path is no longer available, the routing function can dynamically choose the next best available path. Because the messages are sent in pieces, rather than as a single complete message, the few packets that may be lost can be retransmitted to the destination along a different path. In many cases, the destination device is unaware that any failure or rerouting occurred. Using our postcard analogy, if one of the postcards is lost along the way, only that postcard needs to be mailed again. The need for a single, reserved circuit from end-to-end does not exist in a packet switched network. Any piece of a message can be sent through the network using any available path. Additionally, packets containing pieces of messages from different sources can travel the network at the same time. By providing a method to dynamically use redundant paths, without intervention by the user, the Internet has become a fault tolerant method of communication. In our mail analogy, as our postcard travels through the postal system they will share transportation with other postcards, letters and packages. For example, one of the postcards may be placed on an airplane, along with lots of other packages and letters that are being transported toward their final destination. Although packet-switched connectionless networks are the primary infrastructure for todays Internet, there are some benefits to a connection-oriented system like the circuit-switched telephone system. Because resources at the various switching locations are dedicated to providing a finite number of circuits, the quality and consistency of messages transmitted across a connection-oriented network can be guaranteed. Another benefit is that the provider of the service can charge the users of the network for the period of time that the connection is active. The ability to charge users for active connections through the network is a fundamental premise of the telecommunication service industry. HomeChapter 1: Exploring the Network 1.3.2.4 Scalable Networks Scalability Thousands of new users and service providers connect to the Internet each week. In order for the Internet to support this rapid amount of growth, it must be scalable. A scalable network can expand quickly to support new users and applications without impacting the performance of the service being delivered to existing users. The figures show the structure of the Internet. The fact that the Internet is able to expand at the rate that it is, without seriously impacting the performance experienced by individual users, is a function of the design of the protocols and underlying technologies on which it is built. The Internet has a hierarchical layered structure for addressing, for naming, and for connectivity services. As a result, network traffic that is destined for local or regional services does not need to traverse to a central point for distribution. Common services can be duplicated in different regions, thereby keeping traffic off the higher level backbone networks. Scalability also refers to the ability to accept new products and applications. Although there is no single organization that regulates the Internet, the many individual networks that provide Internet connectivity cooperate to follow accepted standards and protocols. The adherence to standards enables the manufacturers of hardware and software to concentrate on product development and improvements in the areas of performance and capacity, knowing that the new products can integrate with and enhance the existing infrastructure. The current Internet architecture, while highly scalable, may not always be able to keep up with the pace of user demand. New protocols and addressing structures are under development to meet the increasing rate at which Internet applications and services are being added. HomeChapter 1: Exploring the Network 1.3.2.5 Providing QoS Quality of Service Quality of Service (QoS) is also an ever increasing requirement of networks today. New applications available to users over internetworks, such as voice and live video transmissions, as shown in Figure 1, create higher expectations for the quality of the delivered services. Have you ever tried to watch a video with constant breaks and pauses? Networks must provide predictable, measurable, and at times, guaranteed services. The packet-switched network architecture does not guarantee that all packets that comprise a particular message will arrive on time, in their correct order, or even that they will arrive at all. Networks also need mechanisms to manage congested network traffic. Network bandwidth is the measure of the data carrying capacity of the network. In other words, how much information can be transmitted within a specific amount of time? Network bandwidth is measured in the number of bits that can be transmitted in a single second, or bits per second (bps). When simultaneous communications are attempted across the network, the demand for network bandwidth can exceed its availability, creating network congestion. The network simply has more bits to transmit than what the bandwidth of the communication channel can deliver. In most cases, when the volume of packets is greater than what can be transported across the network, devices queue, or hold, the packets in memory until resources become available to transmit them, as shown in Figure 2. Queuing packets causes delay because new packets cannot be transmitted until previous packets have been processed. If the number of packets to be queued continues to increase, the memory queues fill up and packets are dropped. Achieving the required QoS by managing the delay and packet loss parameters on a network becomes the secret to a successful end-to-end application quality solution. One way this can be accomplished is through classification. To create QoS classifications of data, we use a combination of communication characteristics and the relative importance assigned to the application, as shown in Figure 3. We then treat all data within the same classification according to the same rules. For example, communication that is time-sensitive, such as voice transmissions, would be classified differently from communication that can tolerate delay, such as file transfers. Examples of priority decisions for an organization might include: • Time-sensitive communication - increase priority for services like telephony or video distribution • Non time-sensitive communication - decrease priority for web page retrieval or email • High importance to organization - increase priority for production control or business transaction data • Undesirable communication - decrease priority or block unwanted activity, like peer-to-peer file sharing or live entertainment HomeChapter 1: Exploring the Network 1.3.2.6 Providing Network Security Security The Internet has evolved from a tightly controlled internetwork of educational and government organizations to a widely accessible means for transmission of business and personal communications. As a result, the security requirements of the network have changed. The network infrastructure, services, and the data contained on network attached devices are crucial personal and business assets. Compromising the integrity of these assets could have serious consequences, such as: • Network outages that prevent communications and transactions from occurring, with consequent loss of business • Intellectual property (research ideas, patents, or designs) that is stolen and used by a competitor • Personal or private information that is compromised or made public without the users consent • Misdirection and loss of personal or business funds • Loss of important data that takes a significant labor to replace, or is irreplaceable There are two types of network security concerns that must be addressed: network infrastructure security and information security. Securing a network infrastructure includes the physical securing of devices that provide network connectivity, and preventing unauthorized access to the management software that resides on them. Information security refers to protecting the information contained within the packets being transmitted over the network and the information stored on network attached devices. Security measures taken in a network should: • Prevent unauthorized disclosure • Prevent theft of information (Figure 1) • Prevent unauthorized modification of information • Prevent Denial of Service (DoS) In order to achieve the goals of network security, there are three primary requirements, as shown in Figure 2: • Ensuring confidentiality - Data confidentiality means that only the intended and authorized recipients - individuals, processes, or devices – can access and read data. This is accomplished by having a strong system for user authentication, enforcing passwords that are difficult to guess, and requiring users to change them frequently. Encrypting data, so that only the intended recipient can read it, is also part of confidentiality. • Maintaining communication integrity - Data integrity means having the assurance that the information has not been altered in transmission, from origin to destination. Data integrity can be compromised when information has been corrupted - willfully or accidentally. Data integrity is made possible by requiring validation of the sender as well as using mechanisms to validate that the packet has not changed during transmission. • Ensuring availability - Availability means having the assurance of timely and reliable access to data services for authorized users. Network firewall devices, along with desktop and server antivirus software can ensure system reliability and the robustness to detect, repel, and cope with such attacks. Building fully redundant network infrastructures, with few single points of failure, can reduce the impact of these threats. HomeChapter 1: Exploring the Network 1.3.2.7 Activity - Reliable Networks HomeChapter 1: Exploring the Network 1.4.1.1 New Trends When you look at how the Internet has changed so many of the things people do daily, it is hard to believe that it has only been around for most people for about 20 years. It has truly transformed the way individuals and organizations communicate. For example, before the Internet became so widely available, organizations and small businesses largely relied on print marketing to make consumers aware of their products. It was difficult for businesses to determine which households were potential customers, so businesses relied on mass print marketing programs. These programs were expensive and varied in effectiveness. Compare that to how consumers are reached today. Most businesses have an Internet presence where consumers can learn about their products, read reviews from other customers, and order products directly from the web site. Social networking sites partner with businesses to promote products and services. Bloggers partner with businesses to highlight and endorse products and services. Most of this product placement is targeted to the potential consumer, rather than to the masses. Figure 1 shows several predictions for the Internet in the near future. As new technologies and end user devices come to market, businesses and consumers must continue to adjust to this ever-changing environment. The role of the network is transforming to enable the connections of people, devices, and information. There are several new networking trends that will effect organizations and consumers. Some of the top trends include: • Any device, to any content, any way • Online collaboration • Video • Cloud computing These trends are interconnected and will continue to build off of one another in the coming years. The next couple of topics will cover these trends in more detail. But keep in mind, new trends are being dreamed up and engineered every day. How do you think the Internet will change in the next 10 years? 20 years? Figure 2 is a video that shows some of Cisco’s thoughts on future developments. HomeChapter 1: Exploring the Network 1.4.1.2 BYOD Bring Your Own Device (BYOD) The concept of any device, to any content, in anyway is a major global trend that requires significant changes to the way devices are used. This trend is known as Bring Your Own Device (BYOD). BYOD is about end users having the freedom to use personal tools to access information and communicate across a business or campus network. With the growth of consumer devices, and the related drop in cost, employees and students can be expected to have some of the most advanced computing and networking tools for personal use. These personal tools include laptops, netbooks, tablets, smartphones, and e-readers. These can be devices purchased by the company or school, purchased by the individual, or both. BYOD means any device, with any ownership, used anywhere. For example, in the past, a student who needed to access the campus network or the Internet had to use one of the school’s computers. These devices were typically limited and seen as tools only for work done in the classroom or in the library. Extended connectivity through mobile and remote access to the campus network gives students tremendous flexibility and more learning opportunities for the student. BYOD is an influential trend that has or will touch every IT organization. HomeChapter 1: Exploring the Network 1.4.1.3 Online Collaboration Online Collaboration Individuals want to connect to the network, not only for access to data applications, but also to collaborate with one another. Collaboration is defined as “the act of working with another or others on a joint project.” For businesses, collaboration is a critical and strategic priority. To remain competitive, organizations must answer three primary collaboration questions: • How can they get everyone on the same page? • With decreased budgets and personnel, how can they balance resources to be in more places at once? • How can they maintain face-to-face relationships with a growing network of colleagues, customers, partners, and peers in an environment that is more dependent on 24-hour connectivity? Collaboration is also a priority in education. Students need to collaborate to assist each other in learning, to develop team skills used in the work force, and to work together on team-based projects. One way to answer these questions and meet these demands in today’s environment is through online collaboration tools. In traditional workspaces, and with BYOD environments alike, individuals are taking advantage of voice, video, and conferencing services in collaboration efforts. The ability to collaborate online is changing business processes. New and expanding collaboration tools allow individuals to quickly and easily collaborate, regardless of physical location. Organizations have much more flexibility in the way they are organized. Individuals are no longer restricted to physical locations. Expert knowledge is easier to access than ever before. Expansions in collaboration allow organizations to improve their information gathering, innovation, and productivity. The figure lists some of the benefits of online collaboration. Collaboration tools give employees, students, teachers, customers, and partners a way to instantly connect, interact, and conduct business, through whatever communications channels they prefer, and achieve their objectives. HomeChapter 1: Exploring the Network 1.4.1.4 Video Communication Video Communication Another trend in networking that is critical in the communication and collaboration effort is video. Video is being used for communications, collaboration, and entertainment. Video calls are becoming more popular, facilitating communications as part of the human network. Video calls can be made to and from anywhere with an Internet connection, including from home or at work. Video calls and video conferencing is proving particularly powerful for sales processes and for doing business. Video is a useful tool for conducting business at a distance, both locally and globally. Today, businesses are using video to transform the way they do business. Video helps businesses create a competitive advantage, lower costs and reduce the impact on the environment by reducing the need travel. Figure 1 shows the trend of video in communication. Both consumers and businesses are driving this change. Video is becoming a key requirement for effective collaboration as organizations extend across geographic and cultural boundaries. Video users now demand the ability to view any content, on any device, anywhere. Businesses are also recognizing the role of video to enhance the human network. The growth of media, and the new uses to which it is being put, is driving the need to integrate audio and video into many forms of communication. The audio conference will coexist with the video conference. Collaboration tools designed to link distributed employees will integrate desktop video to bring teams closer together. There are many drivers and benefits for including a strategy for using video. Each organization is unique. The exact mix, and nature of the drivers for adopting video, will vary from organization to organization, and by business function. Marketing, for example, may focus on globalization, and fast-changing consumer tastes; while the Chief Information Officer’s (CIO) focus may be on cost savings by reducing travel costs of employees needing to meet face-to-face. Figure 2 lists some of the drivers for organizations to develop and implement a video solution strategy. Figure 3 is a video that gives a closer look at how TelePresence using video can be incorporated into everyday life and business. Another trend in video is video-on-demand and streaming live video. Delivering video over the network lets us see movies and television programs when we want and where we want. HomeChapter 1: Exploring the Network 1.4.1.5 Cloud Computing Cloud computing is the use of computing resources (hardware and software) that are delivered as a service over a network. A company uses the hardware and software in the cloud and a service fee is charged. Local computers no longer have to do all the “heavy lifting” when it comes to running network applications. The network of computers that make up the cloud handles them instead. The hardware and software requirements of the user are decreased. The user’s computer must interface with the cloud using software, which may be a web browser, and the clouds network takes care of the rest. Cloud computing is another global trend changing the way we access and store data. Cloud computing encompasses any subscription-based or pay-per-use service, in real time over the Internet. Cloud computing allows us to store personal files, even backup our entire hard disk drive on servers over the Internet. Applications such as word processing and photo editing can be accessed using the cloud. For businesses, cloud computing extends ITs capabilities without requiring investment in new infrastructure, training new personnel, or licensing new software. These services are available on demand and delivered economically to any device anywhere in the world without compromising security or function. The term “cloud computing” really refers to web-based computing. Online banking, online retail stores, and online music downloading are all examples of cloud computing. Cloud applications are usually delivered to the user through a web browser. Users do not need to have any software installed on their end device. This allows many different kinds of devices to connect to the cloud. Cloud computing offers the following potential benefits: • Organizational flexibility - Users can access the information anytime and anyplace using a web browser. • Agility and rapid deployment - IT department can focus on delivering the tools to mine, analyze, and share the information and knowledge from databases, files, and people. • Reduced cost of infrastructure - Technology is moved from on-site to a cloud provider, eliminating the cost of hardware and applications. • Refocus of IT resources - Cost savings of hardware and applications can be applied elsewhere. • Creation of new business models - Applications and resources are easily accessible, so companies can react quickly to customer needs. This helps them set strategies to promote innovation while potentially entering new markets. HomeChapter 1: Exploring the Network 1.4.1.6 Data Centers Cloud computing is possible because of data centers. A data center is a facility used to house computer systems and associated components including: • Redundant data communications connections • High-speed virtual servers (sometimes referred to as server farms or server clusters) • Redundant storage systems (typically uses SAN technology) • Redundant or backup power supplies • Environmental controls (e.g., air conditioning, fire suppression) • Security devices A data center can occupy one room of a building, one or more floors, or an entire building. Modern data centers make use of cloud computing and virtualization to efficiently handle large data transactions. Virtualization is the creation of a virtual version of something, such as a hardware platform, operating system (OS), storage device, or network resources. While a physical computer is an actual discrete device, a virtual machine consists of a set of files and programs running on an actual physical system. Unlike multitasking, which involves running several programs on the same OS; virtualization runs several different OSs in parallel on a single CPU. This drastically reduces administrative and cost overheads. Data centers are typically very expensive to build and maintain. For this reason only large organizations use privately built data centers to house their data and provide services to users. For example, a large hospital may own a separate data center where patient records are maintained electronically. Smaller organizations, that cannot afford to maintain their own private data center, can reduce the overall cost of ownership by leasing server and storage services from a larger data center organization in the cloud. The figure is a video about the growing use of cloud computing and data center services. HomeChapter 1: Exploring the Network 1.4.2.1 Technology Trends in the Home Networking trends are not only affecting the way we communicate at work and at school, they are also changing just about every aspect of the home. The newest home trends include ‘smart home technology’. Smart home technology is technology that is integrated into every-day appliances allowing them to interconnect with other devices, making them more ‘smart’ or automated. For example, imagine being able to prepare a dish and place it in the oven for cooking prior to leaving the house for the day. Imagine if the oven was ‘aware’ of the dish it was cooking and was connected to your ‘calendar of events’ so that it could determine what time you should be available to eat, and adjust start times and length of cooking accordingly. It could even adjust cooking times and temperatures based on changes in schedule. Additionally, a smartphone or tablet connection allows the user the ability to connect to the oven directly, to make any desired adjustments. When the dish is “available”, the oven sends an alert message to a specified end user device that the dish is done and warming. This scenario is not long off. In fact, smart home technology is currently being developed for all rooms within a house. Smart home technology will become more of a reality as home networking and high-speed Internet technology becomes more widespread in homes. New home networking technologies are being developed daily to meet these types of growing technology needs. HomeChapter 1: Exploring the Network 1.4.2.2 Powerline Networking Powerline networking is an emerging trend for home networking that uses existing electrical wiring to connect devices, as shown in the figure. The concept of “no new wires” means the ability to connect a device to the network wherever there is an electrical outlet. This saves the cost of installing data cables and without any additional cost to the electrical bill. Using the same wiring that delivers electricity, powerline networking sends information by sending data on certain frequencies similar to the same technology used for DSL. Using a HomePlug standard powerline adapter, devices can connect to the LAN wherever there is an electrical outlet. Powerline networking is especially useful when wireless access points cannot be used or cannot reach all the devices in the home. Powerline networking is not designed to be a substitute for dedicated cabling for data networks. However, it is an alternative when data network cables or wireless communications are not a viable option. HomeChapter 1: Exploring the Network 1.4.2.3 Wireless Broadband Connecting to the Internet is vital in smart home technology. DSL and cable are common technologies used to connect homes and small businesses to the Internet. However, wireless may be another option in many areas. Wireless Internet Service Provider (WISP) Wireless Internet Service Provider (WISP) is an ISP that connects subscribers to a designated access point or hot spot using similar wireless technologies found in home wireless local area networks (WLANs). WISPs are more commonly found in rural environments where DSL or cable services are not available. Although a separate transmission tower may be installed for the antenna, it is common that the antenna is attached to an existing elevated structure such as a water tower or a radio tower. A small dish or antenna is installed on the subscriber’s roof in range of the WISP transmitter. The subscriber’s access unit is connected to the wired network inside the home. From the perspective of the home user the setup isn’t much different than DSL or cable service. The main difference is the connection from the home to the ISP is wireless instead of a physical cable. Wireless Broadband Service Another wireless solution for the home and small businesses is wireless broadband. This uses the same cellular technology used to access the Internet with a smart phone or tablet. An antenna is installed outside the house providing either wireless or wired connectivity for devices in the home. In many areas, home wireless broadband is competing directly with DSL and cable services. HomeChapter 1: Exploring the Network 1.4.3.1 Security threats Network security is an integral part of computer networking, regardless of whether the network is limited to a home environment with a single connection to the Internet, or as large as a corporation with thousands of users. The network security implemented must take into account the environment, as well as the tools and requirements of the network. It must be able to secure data, while still allowing for the quality of service that is expected of the network. Securing a network involves protocols, technologies, devices, tools, and techniques to secure data and mitigate threats. Many external network security threats today are spread over the Internet. The most common external threats to networks include: • Viruses, worms, and Trojan horses - malicious software and arbitrary code running on a user device • Spyware and adware - software installed on a user device that secretly collects information about the user • Zero-day attacks, also called zero-hour attacks - an attack that occurs on the first day that a vulnerability becomes known • Hacker attacks - an attack by a knowledgeable person to user devices or network resources • Denial of service attacks - attacks designed to slow or crash applications and processes on a network device • Data interception and theft - an attack to capture private information from an organization’s network • Identity theft - an attack to steal the login credentials of a user in order to access private data It is equally important to consider internal threats. There have been many studies that show that the most common data breaches happen because of internal users of the network. This can be attributed to lost or stolen devices, accidental misuse by employees, and in the business environment, even malicious employees. With the evolving BYOD strategies, corporate data is much more vulnerable. Therefore, when developing a security policy, it is important to address both external and internal security threats. HomeChapter 1: Exploring the Network 1.4.3.2 Security Solutions No single solution can protect the network from the variety of threats that exist. For this reason, security should be implemented in multiple layers, using more than one security solution. If one security component fails to identify and protect the network, others still stand. A home network security implementation is usually rather basic. It is generally implemented on the connecting host devices, as well as at the point of connection to the Internet, and can even rely on contracted services from the ISP. In contrast the network security implementation for a corporate network usually consists of many components built into the network to monitor and filter traffic. Ideally, all components work together, which minimizes maintenance and improves security. Network security components for a home or small office network should include, at a minimum: • Antivirus and antispyware - to protect user devices from malicious software • Firewall filtering - to block unauthorized access to the network. This may include a host-based firewall system that is implemented to prevent unauthorized access to the host device, or a basic filtering service on the home router to prevent unauthorized access from the outside world into the network. In addition to the above, larger networks and corporate networks often have other security requirements: • Dedicated firewall systems - to provide more advanced firewall capability that can filter large amounts of traffic with more granularity • Access control lists (ACL) - to further filter access and traffic forwarding • Intrusion prevention systems (IPS) - to identify fast-spreading threats, such as zero-day or zero-hour attacks • Virtual private networks (VPN) - to provide secure access to remote workers Network security requirements must take into account the network environment, as well as the various applications, and computing requirements. Both home environments and businesses must be able to secure their data, while still allowing for the quality of service that is expected of each technology. Additionally, the security solution implemented must be adaptable to the growing and changing trends of the network. The study of network security threats and mitigation techniques starts with a clear understanding of the underlying switching and routing infrastructure used to organize network services. HomeChapter 1: Exploring the Network 1.4.3.3 Activity - Network Security Terminology HomeChapter 1: Exploring the Network 1.4.4.1 Cisco Network Architectures The role of the network has changed from a data-only network, to a system that enables the connections of people, devices, and information in a media rich, converged network environment. In order for networks to function efficiently and grow in this type of environment, the network must be built upon a standard network architecture. The network architecture refers to the devices, connections, and products that are integrated to support the necessary technologies and applications. A well-planned network technology architecture helps ensure the connection of any device across any combination of networks. While ensuring connectivity, it also increases cost efficiency by integrating network security and management, and improves business processes. At the foundation of all network architectures, and in fact, at the foundation of the Internet itself, are routers and switches. Routers and switches transport data, voice, and video communications, as well as allow for wireless access, and provide for security. Building networks that support our needs of today and the needs and trends of the future starts with a clear understanding of the underlying switching and routing infrastructure. After a basic routing and switching network infrastructure is built, individuals, small businesses, and organizations can grow their network over time, adding features and functionality in an integrated solution. HomeChapter 1: Exploring the Network 1.4.4.2 CCNA As the use of these integrated, expanding networks increase, so does the need for training for individuals who implement and manage network solutions. This training must begin with the routing and switching foundation. Achieving Cisco Certified Network Associate (CCNA) certification is the first step in helping an individual prepare for a career in networking. CCNA certification validates an individual’s ability to install, configure, operate, and troubleshoot medium-size route and switched networks, including implementation and verification of connections to remote sites in a WAN. CCNA curriculum also includes basic mitigation of security threats, introduction to wireless networking concepts and terminology, and performance-based skills. This CCNA curriculum includes the use of various protocols, such as: IP, Open Shortest Path First (OSPF), Serial Line Interface Protocol, Frame Relay, VLANs, Ethernet, access control lists (ACLs) and others. This course helps set the stage for networking concepts and basic routing and switching configurations and is a start on your path for CCNA certification. HomeChapter 1: Exploring the Network 1.4.4.3 Lab - Researching IT and Networking Job Opportunities In this lab, you will complete the following objectives: • Part 1: Research Job Opportunities • Part 2: Reflect on Research Lab - Researching IT and Networking Job Opportunities HomeChapter 1: Exploring the Network 1.5.1.1 Class Activity - Draw Your Concept of the Internet Now Draw Your Concept of the Internet Now In this activity, you will use the knowledge you have acquired throughout Chapter 1, and the modeling activity document that you prepared at the beginning of this chapter. You may also refer to the other activities completed in this chapter, including Packet Tracer activities. Draw a map of the Internet as you see it now. Use the icons presented in the chapter for media, end devices, and intermediary devices. In your revised drawing, you may wish to include some of the following: • WANs • LANs • Cloud computing • Internet Service Providers (tiers) Save your drawing in hard-copy format. If it is an electronic document, save it to a server location provided by your instructor. Be prepared to share and explain your revised work in class. Class Activity - Draw Your Concept of the Internet Now Instructions HomeChapter 1: Exploring the Network 1.5.1.2 Summary Networks and the Internet have changed the way we communicate, learn, work, and even play. Networks come in all sizes. They can range from simple networks consisting of two computers, to networks connecting millions of devices. The Internet is the largest network in existence. In fact, the term Internet means a ‘network of networks’. The Internet provides the services that enable us to connect and communicate with our families, friends, work, and interests. The network infrastructure is the platform that supports the network. It provides the stable and reliable channel over which communication can occur. It is made up of network components including end devices, intermediate device, and network media. Networks must be reliable. This means the network must be fault tolerant, scalable, provide quality of service, and ensure security of the information and resources on the network. Network security is an integral part of computer networking, regardless of whether the network is limited to a home environment with a single connection to the Internet, or as large as a corporation with thousands of users. No single solution can protect the network from the variety of threats that exist. For this reason, security should be implemented in multiple layers, using more than one security solution. The network infrastructure can vary greatly in terms of size, number of users, and number and types of services that are supported on it. The network infrastructure must grow and adjust to support the way the network is used. The routing and switching platform is the foundation of any network infrastructure. This chapter focused on networking as a primary platform for supporting communication. The next chapter will introduce you to the Cisco Internetwork Operating System (IOS) used to enable routing and switching in a Cisco network environment. HomeChapter 1: Exploring the Network 1.5.1.1 Class Activity - Draw Your Concept of the Internet Now Draw Your Concept of the Internet Now In this activity, you will use the knowledge you have acquired throughout Chapter 1, and the modeling activity document that you prepared at the beginning of this chapter. You may also refer to the other activities completed in this chapter, including Packet Tracer activities. Draw a map of the Internet as you see it now. Use the icons presented in the chapter for media, end devices, and intermediary devices. In your revised drawing, you may wish to include some of the following: • WANs • LANs • Cloud computing • Internet Service Providers (tiers) Save your drawing in hard-copy format. If it is an electronic document, save it to a server location provided by your instructor. Be prepared to share and explain your revised work in class. Class Activity - Draw Your Concept of the Internet Now Instructions HomeChapter 1: Exploring the Network 1.5.1.2 Summary Networks and the Internet have changed the way we communicate, learn, work, and even play. Networks come in all sizes. They can range from simple networks consisting of two computers, to networks connecting millions of devices. The Internet is the largest network in existence. In fact, the term Internet means a ‘network of networks’. The Internet provides the services that enable us to connect and communicate with our families, friends, work, and interests. The network infrastructure is the platform that supports the network. It provides the stable and reliable channel over which communication can occur. It is made up of network components including end devices, intermediate device, and network media. Networks must be reliable. This means the network must be fault tolerant, scalable, provide quality of service, and ensure security of the information and resources on the network. Network security is an integral part of computer networking, regardless of whether the network is limited to a home environment with a single connection to the Internet, or as large as a corporation with thousands of users. No single solution can protect the network from the variety of threats that exist. For this reason, security should be implemented in multiple layers, using more than one security solution. The network infrastructure can vary greatly in terms of size, number of users, and number and types of services that are supported on it. The network infrastructure must grow and adjust to support the way the network is used. The routing and switching platform is the foundation of any network infrastructure. This chapter focused on networking as a primary platform for supporting communication. The next chapter will introduce you to the Cisco Internetwork Operating System (IOS) used to enable routing and switching in a Cisco network environment.
Posted on: Sun, 05 Oct 2014 07:29:29 +0000