Advanced Networking

More documents

Recommendations

Info

NAT Impact Facts on Addresses ◮ NAT first consequence The application does not know its public name. second consequence It is difficult to contact a NATed equipment from outside Security feeling Solutions for NAT traversal exist third consequence There is no standardized behavior for NAT yet Slide 13 Laurent Toutain Filière 2
Conic NAT Facts on Addresses ◮ NAT 128.1.2.3 10.0.0.1 192.1.1.1 NAT 7890 : 10.0.0.1 & 1234 200.9.9.9 200.9.9.9 -> 192.1.1.1: 123-> 7890 Slide 14 Laurent Toutain Filière 2
Page 1 and 2: Advanced Networking Laurent Toutain
Page 3 and 4: Concepts Datagram
Page 5 and 6: Destination Address Processing Conc
Page 11 and 12: Historical facts Facts on Addresses
Page 13 and 14: Emergency Measures: Better Addresse
Page 15 and 16: Emergency Measures: Private Address
Page 17 and 18: How NAT with Port Translation Works
Page 19 and 20: How NAT with Port Translation Works
Page 21: How NAT with Port Translation Works
Page 25 and 26: Restricted NAT Facts on Addresses
Page 27 and 28: NAT Traversal and Peer To Peer Fact
Page 43 and 44: Core Network Routing Table Facts on
Page 49 and 50: Access Provider Change: Difficult F
Page 51 and 52: Access Provider Change: Difficult F
Page 53 and 54: Multi-homing: Difficult Facts on Ad
Page 55 and 56: Prefix usage in Feb. 2010 Facts on
Page 57 and 58: Prefix Facts on Addresses ◮ IPv4
Page 59 and 60: What Has Changed Facts on Addresses
Page 65 and 66: CIDR Administrative Point of View F
Page 67 and 68: Prefixes delegation Facts on Addres
Page 69 and 70: Prefixes delegation Facts on Addres
Page 71 and 72: Prefix usage in May. 2010 Facts on
Page 73 and 74:
HD-Ratio Facts on Addresses ◮ Pre
Page 75 and 76:
IPv6 addresses Addresses ◮ Notati
Page 77 and 78:
Notation Addresses ◮ Notation B
Page 79 and 80:
Page 81 and 82:
Page 83 and 84:
Is it enough for the future Addres
Page 85 and 86:
Addresses Addressing scheme
Page 87 and 88:
Addresses Address Format
Page 89 and 90:
Addressing Space Utilization Addres
Page 91 and 92:
Page 93 and 94:
Page 95 and 96:
SID Values Addresses ◮ Address Fo
Page 97 and 98:
Interface Identifier Addresses ◮
Page 99 and 100:
Interface Identifier Addresses ◮
Page 101 and 102:
How to Construct an IID from MAC Ad
Page 103 and 104:
How to Construct an IID from MAC Ad
Page 105 and 106:
Windows 7 Addresses ◮ Address For
Page 107 and 108:
Windows 7 Addresses ◮ Address For
Page 109 and 110:
Addresses Kind of addresses
Page 111 and 112:
Other kind of addresses : ULA (RFC
Page 113 and 114:
Some Well Known Multicast Addresses
Page 115 and 116:
Solicited Multicast Addresses Addre
Page 117 and 118:
Page 119 and 120:
Page 121 and 122:
Example Addresses ◮ Kind of addre
Page 123 and 124:
Example Addresses ◮ Kind of addre
Page 125 and 126:
Anycast Addresses ◮ Kind of addre
Page 127 and 128:
Anycast on prefix : Example from Ha
Page 129 and 130:
OnLink Anycast: Example Addresses
Page 131 and 132:
OnLink Anycast: Example Addresses
Page 133 and 134:
Anycast on prefix : Example from Ha
Page 135 and 136:
IPv6 Packet : Simpler Protocol ◮
Page 137 and 138:
IPv4 Header Protocol ◮ IPv6 Heade
Page 139 and 140:
Page 141 and 142:
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Extensions Protocol ◮ IPv6 Extens
Page 151 and 152:
Extensions in packets Protocol ◮
Page 153 and 154:
Extension Superiority Protocol ◮
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Extension Order is Important Protoc
Page 165 and 166:
Hop by Hop (NH=0) Protocol ◮ IPv6
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
Routing (NH=43) Protocol ◮ IPv6 E
Page 173 and 174:
Protocol ICMPv6
Page 175 and 176:
ICMPv6 : Two Functions Protocol ◮
Page 177 and 178:
Path MTU discovery Protocol ◮ Pat
Page 179 and 180:
Page 181 and 182:
Page 183 and 184:
Neighbor Discovery RFC 4861 Mechani
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
Stateless Auto-configuration: Basic
Page 191 and 192:
Page 193 and 194:
Page 195 and 196:
Page 197 and 198:
Optimistic DAD RFC 4429 Mechanisms
Page 199 and 200:
Router Configuration Example Mechan
Page 201 and 202:
Router Configuration Example Mechan
Page 203 and 204:
Stateless DHCPv6 : with static para
Page 205 and 206:
Page 207 and 208:
Page 209 and 210:
Security issues with Neighbor Disco
Page 211 and 212:
Examples of attacks using ND Mechan
Page 213 and 214:
Examples of attacks using ND Mechan
Page 215 and 216:
Example: Interface during an IETF m
Page 217 and 218:
DHCPv6 : Stateful Auto-Configuratio
Page 219 and 220:
DHCPv6 : Prefix Delegation Mechanis
Page 221 and 222:
DHCPv6 Full Features Mechanisms ◮
Page 223 and 224:
DHCPv6 Scenarii Mechanisms ◮ DHCP
Page 225 and 226:
Page 227 and 228:
Page 229 and 230:
DHCPv6 Identifiers Mechanisms ◮ D
Page 231 and 232:
Mechanisms Stateless vs Statefull
Page 233 and 234:
Forwarding Tables F.I.B
Page 235 and 236:
Example : Cisco router Forwarding T
Page 237 and 238:
Example : Unix Forwarding Tables
Page 239 and 240:
Static route Forwarding Tables ◮
Page 241 and 242:
Page 243 and 244:
Page 245 and 246:
Page 247 and 248:
Example : Cisco router Forwarding T
Page 249 and 250:
Routing Protocol Forwarding Tables
Page 251 and 252:
outer’s behavior Forwarding Table
Page 253 and 254:
Page 255 and 256:
Page 257 and 258:
Page 259 and 260:
Distant Vector Distant Vector Examp
Page 261 and 262:
Page 263 and 264:
Page 265 and 266:
Page 267 and 268:
Distant Vector Distance Vecto
Page 269 and 270:
Page 271 and 272:
Page 273 and 274:
Page 275 and 276:
Page 277 and 278:
Page 279 and 280:
Page 281 and 282:
Distant Vector Conter Measures 3 w
Page 283 and 284:
Page 285 and 286:
Distant Vector RIP
Page 287 and 288:
RIPng Distant Vector ◮ RIP 0.....
Page 289 and 290:
Securing Routing Protocols Distant
Page 291 and 292:
Securing Routing Protocol Distant V
Page 293 and 294:
Link States Algorithms
Page 295 and 296:
Example: Database initialization Li
Page 297 and 298:
Example: Database initialization Li
Page 299 and 300:
Example: Database state after synch
Page 301 and 302:
Example: Shortest Path First Algori
Page 303 and 304:
Page 305 and 306:
Page 307 and 308:
Page 309 and 310:
Page 311 and 312:
Page 313 and 314:
Example: FIB entries Link States
Page 315 and 316:
Warning: SPT is not forwarding path
Page 317 and 318:
Page 319 and 320:
Page 321 and 322:
educing SPF computation Link States
Page 323 and 324:
Division into Areas Link States ◮
Page 325 and 326:
Page 327 and 328:
Page 329 and 330:
Page 331 and 332:
Page 333 and 334:
Page 335 and 336:
Page 337 and 338:
Example: Flooding Link States ◮ A
Page 339 and 340:
Page 341 and 342:
Page 343 and 344:
Page 345 and 346:
Page 347 and 348:
Page 349 and 350:
Page 351 and 352:
Page 353 and 354:
Link State Announcement Format Link
Page 355 and 356:
Example Link States ◮ Areas Slid
Page 357 and 358:
Example Link States ◮ Areas 10.1.
Page 359 and 360:
Page 361 and 362:
Page 363 and 364:
Page 365 and 366:
Example Link States ◮ Areas { S 8
Page 367 and 368:
Example Link States ◮ Areas { S 8
Page 369 and 370:
Case study: RIP to OSPF Link States
Page 371 and 372:
Link States IS-IS
Page 373 and 374:
Areas versus Levels Link States ◮
Page 375 and 376:
Page 377 and 378:
Page 379 and 380:
Page 381 and 382:
ISO addresses Link States ◮ IS-IS
Page 383 and 384:
ISO addresses Link States ◮ IS-IS
Page 385 and 386:
Packet types Link States ◮ IS-IS
Page 387 and 388:
Example Link States ◮ IS-IS Provi
Page 389 and 390:
Example: Only IGP Link States ◮ I
Page 391 and 392:
Example: Only IGP Link States ◮ I
Page 393 and 394:
Example: Layer 2 network (eg: ATM)
Page 395 and 396:
Example: Layer 2 network (eg: ATM)
Page 397 and 398:
L2 switching Link States ◮ IS-IS
Page 399 and 400:
Simplified architecture of a LSR Li
Page 401 and 402:
Page 403 and 404:
Page 405 and 406:
Page 407 and 408:
Page 409 and 410:
MPLS: ...Label... Link States ◮ I
Page 411 and 412:
Page 413 and 414:
Page 415 and 416:
MPLS: ...Switching Link States ◮
Page 417 and 418:
MPLS: ...Switching Link States ◮
Page 419 and 420:
MPLS: ...Switching VC merging Link
Page 421 and 422:
Principle: Overview Link States ◮
Page 423 and 424:
Label distribution example: Discove
Page 425 and 426:
Label distribution example: Sending
Page 427 and 428:
Label distribution example: Receivi
Page 429 and 430:
Label distribution example: Rerouti
Page 431 and 432:
Label distribution example Link Sta
Page 433 and 434:
BGP External Gateway Protocol
Page 435 and 436:
Routing policies BGP ◮ External G
Page 437 and 438:
Page 439 and 440:
Page 441 and 442:
Page 443 and 444:
Page 445 and 446:
Page 447 and 448:
Page 449 and 450:
Page 451 and 452:
Autonomous System BGP ◮ AS Peerin
Page 453 and 454:
Example: whois -h whois.ripe.net AS
Page 455 and 456:
Example: whois -h whois.ripe.net AS
Page 457 and 458:
Network topology from AS2200 BGP
Page 459 and 460:
Page 461 and 462:
Page 463 and 464:
Page 465 and 466:
Traceroute BGP ◮ AS Peering # tra
Page 467 and 468:
Page 469 and 470:
Page 471 and 472:
Page 473 and 474:
MP-BGP BGP ◮ Border Gateway Proto
Page 475 and 476:
Principles BGP ◮ Border Gateway P
Page 477 and 478:
Page 479 and 480:
Page 481 and 482:
Page 483 and 484:
Page 485 and 486:
BGP configuration example BGP ◮ B
Page 487 and 488:
BGP configuration example BGP ◮ B
Page 489 and 490:
Loopback address BGP ◮ Border Gat
Page 491 and 492:
Loopback address BGP ◮ Border Gat
Page 493 and 494:
BGP BGP Attributes
Page 495 and 496:
BGP attributes BGP ◮ BGP Attribut
Page 497 and 498:
BGPv4 versus MP-BGP BGP ◮ BGP Att
Page 499 and 500:
MP-BGP capabilities BGP ◮ BGP Att
Page 501 and 502:
Page 503 and 504:
Page 505 and 506:
AS PATH and ORIGIN BGP ◮ BGP Attr
Page 507 and 508:
AS PATH BGP ◮ BGP Attributes AS
Page 509 and 510:
AS PATH BGP ◮ BGP Attributes α :
Page 511 and 512:
Example from Canada (edited) BGP
Page 513 and 514:
Example from Canada (edited) BGP
Page 515 and 516:
BGP attributes BGP ◮ BGP Attribut
Page 517 and 518:
MULTI EXIT DISC BGP ◮ BGP Attribu
Page 519 and 520:
Page 521 and 522:
Page 523 and 524:
LOCAL PREF BGP ◮ BGP Attributes
Page 525 and 526:
LOCAL PREF BGP ◮ BGP Attributes
Page 527 and 528:
AS PATH BGP ◮ BGP Attributes AS A
Page 529 and 530:
AS PATH BGP ◮ BGP Attributes AS A
Page 531 and 532:
Community BGP ◮ BGP Attributes
Page 533 and 534:
Example from Level3 BGP ◮ BGP Att
Page 535 and 536:
Example: Community Attribute BGP
Page 537 and 538:
Example: Community Attribute BGP
Page 539 and 540:
TELECOM Bretagne’s prefixes BGP
Page 541 and 542:
TELECOM Bretagne’s prefixes BGP
Page 543 and 544:
Next Hop Attribute BGP ◮ BGP Attr
Page 545 and 546:
Next Hop different behaviors BGP
Page 547 and 548:
Page 549 and 550:
Page 551 and 552:
Synchronization BGP ◮ BGP Attribu
Page 553 and 554:
Page 555 and 556:
Page 557 and 558:
Page 559 and 560:
Page 561 and 562:
Route Selection BGP ◮ BGP Attribu
Page 563 and 564:
Confederation and Route Reflectors
Page 565 and 566:
Confederation BGP ◮ BGP for Large
Page 567 and 568:
Page 569 and 570:
Page 571 and 572:
Page 573 and 574:
Route Reflector RFC 4456 BGP ◮ BG
Page 575 and 576:
Route Reflectors BGP ◮ BGP for La
Page 577 and 578:
Route Reflectors BGP ◮ BGP for La
Page 579 and 580:
BGP Network Architecture
Page 581 and 582:
Global Inter eXchange BGP ◮ Netwo
Page 583 and 584:
Page 585 and 586:
Page 587 and 588:
Page 589 and 590:
BGP Limits: Flapping BGP ◮ Networ
Page 591 and 592:
BGP Limits: Flapping BGP ◮ Networ
Page 593 and 594:
BGP Limits: Security BGP ◮ Networ
Page 595 and 596:
BGP ◮ VPN VPN BGP can isolate
Page 597 and 598:
BGP ◮ VPN 6PE α 6 ⇒ NH = R1 α
Page 599 and 600:
Page 601 and 602:
Page 603 and 604:
BGP ◮ VPN Softwires Mesh α 4 ⇒
Page 605 and 606:
BGP ◮ VPN References BGP Tutoria
Page 607 and 608:
IPv6 Integration: Why IPv6 Integrat
Page 609 and 610:
Communications Model IPv6 Integrati
Page 611 and 612:
Rough Classification of Transition/
Page 613 and 614:
Generic Approach for ”Tunneling
Page 615 and 616:
Generic Approach for ALGs (”proxy
Page 617 and 618:
Where to act, what to do exactly (2
Page 619 and 620:
Overview IPv6 Migration Approaches
Page 621 and 622:
Transition/Integration scenarios (v
Page 623 and 624:
Page 625 and 626:
IPv6 Integration Core Network
Page 627 and 628:
Routing Protocols for IPv6 IPv6 Int
Page 629 and 630:
6BONE IPv6 Integration ◮ Core Net
Page 631 and 632:
6PE : Provider Edge IPv6 Integratio
Page 633 and 634:
Page 635 and 636:
Page 637 and 638:
Page 639 and 640:
Page 641 and 642:
Transit / Peering IPv6 Integration
Page 643 and 644:
IPv6 Integration ISP’s Access Net
Page 645 and 646:
Softwires IPv6 Integration ◮ ISP
Page 647 and 648:
Softwires: H&S Architecture IPv6 In
Page 649 and 650:
Page 651 and 652:
Page 653 and 654:
IPv6 Integration Administrated Netw
Page 655 and 656:
Agenda for IPv6 integration in admi
Page 657 and 658:
Page 659 and 660:
Page 661 and 662:
Page 663 and 664:
Page 665 and 666:
6to4 Architecture between 2 sites I
Page 667 and 668:
6to4 to connect with native IPv6 IP
Page 669 and 670:
6to4 relays IPv6 Integration ◮ Ad
Page 671 and 672:
Tunnel Broker IPv6 Integration ◮
Page 673 and 674:
Tunnel Broker Architecture IPv6 Int
Page 675 and 676:
ISATAP scenario IPv6 Integration
Page 677 and 678:
ISATAP scenario IPv6 Integration
Page 679 and 680:
Address Plan IPv6 Integration ◮ A
Page 681 and 682:
Deploy IPv6 on access network IPv6
Page 683 and 684:
Access control to network IPv6 Inte
Page 685 and 686:
IPv6 in DNS IPv6 Integration ◮ Ad
Page 687 and 688:
Set up IPv6 filtering IPv6 Integrat
Page 689 and 690:
IPv6 support on Operating Systems I
Page 691 and 692:
Migrate Application to IPv6 support
Page 693 and 694:
Application Level Gateway IPv6 Inte
Page 695 and 696:
SSL Tunnel IPv6 Integration ◮ Adm
Page 697 and 698:
SSL Tunnel IPv6 Integration ◮ Adm
show all

Advanced Networking

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?