List network layer protocols that run directly on IP.
ICMP/1 (Internet control message protocol): Used for status messaging and connectivity testing.
IGMP/2 (internet group messaging protocol): Used with multicasting.
GRE/47 (Generic routing Encapsulation): Used to tunnel packets across an intermediate network. Used in some VPN implementations.
ESP/50 (encapsulating security payload): used with the encrypted form of IP (IPSec).
AH/51 (Authentication Header):used with the encrypted form of IP (IPSec).
EIGRP/88 (enhanced interior routing protocol):used by routers to exchange information about paths to remote networks.
OSPF/89 (Open Shortest Path First): used by routers to exchange information about paths to remote networks.
What is a IP header?
Fields in a datagram used to identify source and destination IP addresses, protocol type, and other layer 3 properties.
What does a IP header consist of?
Version field- indicates the IP version (IPV4 or 6)
Header length- not a fixed length.
Diffserve- quality of service information
Total length- the entire length
Identification, Flags, and Fragment Offset- If the packet is too big and needs to be broken up these break it up and label the order it is meant to be reassembled in.
TTL- amount of hops for data to travel
Protocol- Specifies the type of data encapsulated in the payload. Normally its either TCP (indicated by 6) or UDP (indicated by 17) traffic
Checksum- error checking
Source address
Destination address
Options- anything else that get added
Data- the data
How do nodes from different subnets communicate?
via the router
if they are in the same subnet they can talk to each other directly.
What is ARP and what does it do?
Access resolution protocol
resolves a IPv4 address into a hardware MAC address.
Used to make a network more efficient.
What are the 2 types of ARP entries and what is the difference?
Dynamic: A dynamic entry is created automatically when a device sends out a broadcast message out on the network. Not permanent, gets flushed out periodically
Static: When a IP to MAC address is manually entered on the CLI. Used to reduce any unnecessary ARP broadcast traffic on the network.
How does unicast work?
Used when a host wants to sent a packet to a single recipient.
A unicast packet is sent addressed to the IP address of the destination host.
How does broadcast work?
Used to address multiple hosts.
performed by sending a packet to the network or subnets broadcast address.
All hosts in the same broadcast address will receive the packet
How does multicast work?
Allows a host to send content to other hosts that have identifies themselves as interested in receiving the hosts contents.
The intent to receive multicast from a particular host is signaled by joining a multicast group, IGMP (Internet Group Management Protocol) is typically used to configure this.
Multicast addresses are in the range of 224.0.0.0 to 239.255.255.255.
How does anycast work?
A group of host is configured to the same IP address and when a router forwards a packet to a anycast group it uses a prioritization algorithm and metrics to select the host that is “closest” and will receive the packet quickest.
Used a lot with servers, allows for load balancing and failover between server hosts sharing the IP address.
Anycast forwarding is handled by routers, typically using a dynamic routing protocol, such as Border Gateway Protocol (BGP).
What is the maximum theoretical size of a IPv4 packet?
65535 bytes
The limit is set by the total length field in the IPv4 header, which specifies the total size of the packet including the header and the payload.
What is classless subnetting?
IP networks and subnet IDs that are defined by network masks.
AKA CIDR addressing.
What is classful subnetting?
Classful addressing allocates a network ID based on the first octet of the IP address.
Divides IP addresses into fixed classes.
Tell me about class A networks.
Supports only 126 networks
Supports 16,777,214 hosts
First octet range of 1-126
Tell me about Class B networks.
Supports 16,384 networks
Supports 65,534 host
First octet range of 128-191
Tell me about class C networks.
support 2,097,152 networks
supports 254 hosts
first octet range of 192-223
what does 127.0.0.0/8 ip address do?
used for loopback testing.
Its a special address typically used to check that TCP/IP is correctly installed on the local host
what does 0.0.0.0/8 IP address do?
Used when a specific address is unknown. This is typically used as a source address by a client seeking a DHCP lease.
What is a private IP address?
IP addresses designated for use on private networks only.
What is a public IP address?
An IP address that can establish a connection with other public IP networks and hosts over the Internet
What is class A, B and C private IP address ranges?
Class A: 10.0.0.0 to 10.255.255.255
Class B: 172.16.0.0 to 172.31.255.255
Class C: 192.168.0.0 to 192.168.255.255
What are the 2 ways internet access can be facilitated for hosts using a private IP?
Through a router configured with a single valid public IP address or a block of valid public IP addresses. The router uses NAT to translate between the public and private IPs
Through a proxy server that fulfills requests for internet resources on behalf of clients. The proxy must be configured with a public IP address on the external-facing interface.
Who is the private IP address pool defined by?
RFC 1918
What are Class D and Class E IP addresses used for and what is their range?
Class D addresses (224.0.0.0 through 239.255.255.255) are used for multicasting.
Class E addresses (240.0.0.0 through 255.255.255.255) are reserved for experimental use and testing.