Download as pptx, pdf, or txt
Download as pptx, pdf, or txt
You are on page 1of 164

22: /

2016-17
www.lucent.com/security

OSI TCP/IP



CSMA/CD

ISO (International Standards Organization) OSI (Open


Systems Interconnection).

To (modular),
.

(modular):
(interfaces).

..

: ,
.
/
(Black box)

(peer)

.
/

-service (
).
-functions ( ).
-interfaces (
).

..

:

.
..
T


.

/
ISO/OSI

/ /

/
TCP/IP

5
4
3
2
1

/



(UTP)

() A
/ . (a) .
() (b) .
.



.

OSI TCP/IP



CSMA/CD

datagrams

(links):
.., Ethernet , 802.11
,




-
-


:
Ethernet (802.3)
Wireless LAN (e.g., 802.11)

(nodes)
hosts () & routers ()
(links):
/

:
datagram frame
,
frame
:
frame,
datagram

(simplex):

(half-duplex):


(full duplex):

(Point-to-Point)
( )
sender receiver
(broadcast)
receiving
frame

(multicast)
broadcast


adapter
Ethernet, PCMCI, IEEE802.11

datagram frame
bits , , .

, , .
datagram,

/
(1)
, (framing, link
access):
datagram
frame, (header), (trailer)

MAC frames


P!


/
(2)
(flow control):

&



(error detection):

:

frame

undetected errors &

/
(3)

(error correction):

bit

(half-duplex)
(full-duplex)
,
,

/



(multiple access)





(access control):



/




:


(multiple
access protocol)

, ..,


!

/
MAC

(
, , code)


: TDMA, FDMA

,


,


/


long-run








Extra control

(protocol overhead)

/

TDM, FDM:
Ethernet: Carrier Sense Multiple
Access/Collision Detect (CSMA/CD)
,



ALOHA: Ethernet

/
TDMA



( =
)


: 6- LAN, 1,3,4
, 2,5,6

/
FDMA






: 6- LAN, 1,3,4
frequency bands

pkt, 2,5,6

/






MAC :

(..,
)
MAC
:
slotted ALOHA
ALOHA
CSMA/CD, CSMA/CA

/
ALOHA (Slotted
ALOHA)

frames

frame,
,
frame ,

frames frame

,
2
, frame
p

/
ALOHA (Slotted
ALOHA)

frames

frame,
,
frame ,

frames frame

,
2
, frame
p

/
ALOHA
M slotted ALOHA.

m ( ) G m, m = 1, . . .,M,

Gm ( ) m.

Sm m.

= throughput ( )

M {Sm}
.
/
ALOHA
, Sm = S/M Gm =
G/M.


G(n) =
e 1 0.368

, n
(

qr)
( )

:

/
(unslotted) ALOHA (pure
ALOHA)
,
frame :

( ):


:
 frame p ,
frame
 , frame
p ,
frame
/
slotted
unslotted ALOHA

/
ALOHA Protocols

/
Carrier Sense
(Carrier sensing) (
)

:
(backs off)

,

(Collision detection) (
, )


:

/
Ethernet
-


ACKs NACKs
datagrams
TCP
,

Manchester
bit

/
Ethernet (1)

adapter IP datagram
Ethernet
6bytes 46-1500bytes
8bytes 6byte 4bytes
s

Preamble:
7 bytes 10101010 byte 10101011


adapter
Ethernet adapters

/
Ethernet (2)
Addresses: 6 bytes
adapter
, (broadcast) ( ARP ),

, adapter
Type: (
IP Novell IPX
AppleTalk)
CRC: , ,

: 1500 bytes

:
10Mbps Ethernet 64 Bytes!
;

!


Error Control

/
Carrier Sense Multiple Access:



:




,



adapter

:

/
(1)
A
;
:




, ( ,
propagation delay)
2
( )
IEEE 802.3
51.2 s

/
(2)



Ethernet (2500m)
,
jamming

jamming : 48 bit

>=2*
/
CSMA/CD
adapter &
(frame)
adapter ,

,
&
adapter
,
adapter !
adapter ,
&
, adapter backoff: m-
, K {0,1, 2,, 2m-1}
K * 512(time interval) bit-
2.
/
CSMA/CD

tprop = 2
LAN
ttrans =
1 1

1 5t prop / ttrans 1 5
long-run


D(km)=
C DC
t prop / ttrans t prop , C(bits/sec) =
L Lv
L (bits) = ()
/ v(km/sec)=
CSMA/CD
1 (Ethernet)
= 10Mbps. = 1000 bits
=1 km. tprop = 5x10-6 sec, =0.05, e=0.8
=C/L
2 (GEO ) C=
= sec (bits/sec)
= 2500, e 0 L= (bits)


CSMA/CD

Ethernet 100 Mbps?
Ethernet o 1 Gbps?

/
Ethernets CSMA/CD

(Jam Signal): Backoff:


:

, 48 bits
Bit (Bit time): .1 microsec 10 :
Mbps Ethernet,
K=1023, : K {0,1},
50 msec K 512 bit

: K
{0,1,2,3}
, K
{0,1,2,3,4,,1023}

/
Ethernet
H (peak utilization)
Ethernet ( Aloha)
peak utilization





,


/
Ethernet

LAN ,

Ethernet
:
!!!

( )

(Scalability)

/
Ethernet-

LAN :
LAN
, token LANs ATM
: 10 Mbps 10 Gbps
,

CSMA/CD
& Ethernet LAN

Metcalfes Ethernet
sketch

/

IC (Network Interconnection Card)
(expansion card)
PC, server workstation LAN
H NIC (interface)
(bus) /
O NICs
,

.. NICs Ethernet Token Ring
H NIC
(packet formats) LAN

/
LAN

(allocation) MAC
IEEE

MAC (
)
:
MAC :
IP :
MAC flat
LAN LAN
MAC
IP
IP (subnet)

/
MAC (1)

LAN Ethernet
interface
interface ( )
48-bit MAC
MAC
ROM adapter
32-bit IP :

IP

/
MAC (2)

MAC
(H/W manufacturers)
: CISCO: 00:00:0C:::, 3COM: 02:60:8C:::
MAC address

:
MAC


FF:FF:FF:FF:FF:FF = broadcast

/
switched LAN
Ethernet
bus,
. CSMA/CD.

Hub Ethernet
hub,
.
100 Mbps. CSMA/CD.

.

/
Switched Ethernet

CSMA/CD
(
, , Gbit
Ethernet, 10G Ethernet, )
.
switch
.
switch 20-40 ports
O
full rate (1/10/40/100 Gbps).

/
Ethernet
Ethernet:
10Base5 Thick Ethernet: 10 Mbps
10Base2 Thin Ethernet: 10 Mbps
10Base-T 10 Mbps
Fast Ethernet
100Base-TX 100 Mbps Cat. 5 (2 )
100Base-FX 100 Mbps
Gigabit Ethernet
1000Base-T 1 Gbps Cat. 5 (4 )
1000Base-SX 1 Gbps ( )
10GE 10GbE 10GigE
10GBase-LR 10 Gbps ( )
10GBase-T 10 Gbps Cat6

/
10Base2 Ethernet




Bus

Terminator

Tee connector (coaxial cable)

tee connector:


terminator

adapter
/
10 BaseT 100 BaseT
10/100 Mbps
100BaseT fast ethernet ( ,
)
T Twisted Pair
: ; 100m
hub

twisted pair

hub

/
Fast Ethernet


(UTP Cat. 3, 5),



CSMA/CD
bit 0.1 sec 10 nsec
10Base-

( )

/
Gigabit Ethernet

(full-duplex)
(half-duplex)

CSMA/CD
( )
hub CSMA/CD
Ethernet
Carrier extension: 512 byte


Frame bursting:

/

1000Base-SX
, , = 770-860 nm
220~550 m (FD)
1000Base-LX
, , = 1270-1335 nm
5000 m (FD)
1000Base-CX
,
25m (HD FD)
1000Base-T IEEE 802.3ab
4 , UTP Cat.5,

/
10 Gigabit Ethernet

(full-
duplex)
(half-duplex) , hub
CSMA/CD
Ethernet

/
Ethernet

/
LAN


LAN
LAN
H

(Repeaters)
Hubs

(Switches)
(Bridges)
LANs (VLANs)
/

(Bus topology)
90s
(Star
topology)
: hub switch

hub or
switch

/
Repeaters












,




/
Hubs (1)

--

hub
hub
hub
hub

/
Hubs (2)
Hubs :
repeaters:
bit , hub



bits
bits

buffering
CSMA/CD hub ( bits
)

/
Hub (1)

LAN
,
hub.
LAN
hub(backbone
hub)( hub )



(collision domains)

/
Hub (2)

Multi-tier design
backbone hub
one tier
LAN segment

hub
hub hub

/
Hub (3)

LAN ( hub)
, backbone hub &
hub LAN.
hubs backbone hub


LAN (segment)
LAN
( segments) backbone hub
LAN segment
& hubs
backbone hub

/
Switched Ethernet

/
(1)

switch interfaces
switch
Full duplex
&
network interface
=>Switching: A--A
B--B

network interfaces bridges
(.., 12 vs. 2-4) !!!! (
bridges!)
/
(2)

store-and-forward policy:
frame
downstream & upstream connections
direct point-to-point
collision detection &
carrier sensing!!!!

/
(3)


: Full Duplex!
Switching: A-to-D and B-to-E

Cut-through switching: frame forwarded
from input to output
port without storing!
10/100/1000 Mbps interfaces!

/
Switch
D C
Switch D
D interface 2
C , switch
interface 1
C
switch address interface
A 1
B 1
hub hub hub E 2
A
G 3
C 1
F I
B C D G H
E

/
Traffic Isolation

LAN




(collision
detection)

/
-Bridge (1)
Layer-2 (MAC )
MAC ,



(isolated
collision domains)
LAN ,
10Mbps, 100Mbps Ethernet
LAN ,
bridges
LAN

/
-Bridge (2)

E CSMA/CD
transmission
exponential backoff

Filtering:
interface

Forwarding: interface(s)


interface
/
-Bridge (3)

bridges
A local forwarding table(filtering database)
Stations auto-learning(backward learning)
Loop detection(spanning tree algorithm)

.

.
.

2.5Km.


.

(promiscuous
/ mode)
Bridge (1)
address interface
A 1
bridge B 1
1 C 2
2 3 D 3

hub
10BaseT hub hub

A
B
C D

/
Bridge (2)

/
Bridge (3)

/


LANs
(spanning
tree),
loops
:


.
,
:

,


.



,

.

/
Spanning Tree (1)

/
Spanning Tree (2)

/
LAN (1)

/
LAN (2)

/
Repeaters Bridges OSI

/
LAN

Repeaters

Hubs

Bridges

Switches

Routers

Gateways

/
VLANs (1)



LAN

,

/
VLANs (2)

N = +

/
VLANs

VLANs VLANs

/
VLANs


MAC
IEEE 802.11q
4 bytes
VLAN-id

/
802.11q

/
VLAN: Links

Access
untagged


Trunk
tagged

/
VLAN: Forwarding Database

/
Port-based VLAN

/
TCP/IP

/
(1)

Internet

DARPA (Defense Advanced
Research Projects Agency)

.
ARPANET
Internet
interconnected
network.
/
(2)
Internet

Backbones:
(.. WANs)
/
,


backbone
(.. LANs,
)

/
(1)
Internet Society (ISOC)
,


Internet Corporation for Assigned Names and
Numbers (ICANN)
DNS domains
Internet Architecture Board:
15 .

Internet standards

/
(2)

IETF: H Internet Engineering Task Force



standards
Internet
(.. ,
, ).
IRFT: Internet Research Task Force

FTP HTTP NV TFTP

TCP UDP

IP

NET NET NET


1 2 n




Internet Protocol (IP)



buffer


/
-IP (1)





(network)

/
,
host

IP host:

.. PC, router, gateway, Ethernet switch
hosts


Internet
-

/
-IP

/
-

(switch):

(.. Ethernet LAN, MAN DQDB, ATM)


(router):


=>

(.. Ethernet FDDI)

/

Connectionless:


IP (Datagrams)
Best Effort
,

(IP forwarding)



ICMP

/
IP -Datagrams (1)
IP Datagram:
Internet
header

(. TCP, UDP)
T (encapsulated)

(.. Ethernet, ATM, Frame Relay)


.. Ethernet 1500 bytes
fragmentation reassembly


/
IP -Datagrams (2)

TCP Header TCP Data

IP Header IP Data

Network Header Data

/
IP Datagram Format
IP protocol version
32 bits total datagram
number
length (bytes)
header length head. type of
(bytes) ver length
len service
for
type of data fragment fragmentation/
16-bit identifier flgs
offset reassembly
max number time to upper header
remaining hops live layer checksum
(decremented at
each router) 32 bit source IP address

32 bit destination IP address


upper layer protocol
to deliver payload to Options (if any) E.g. timestamp,
how much record route
overhead with data taken, specify
list of routers
TCP? (variable length, to visit.
20 bytes of TCP typically a TCP
20 bytes of IP or UDP segment)
= 40 bytes +
/
app layer

(1)
routing algorithm

local forwarding table


header value output link
0100 3
0101 2
0111 2
1001 1

value in arriving
packets header
0111
1

3 2

/

(2)
forwarding:
router
(interface)
routing:


:

/
Border/Gateway versus Internal
Router (1)
Border/Gateway router:

/
Border/Gateway versus Internal
Router (2)
Internal Router:

/
(1)

/
(2)

/
(3)

/
IP Protocol Numbers

Decimal Keyword Protocol


0 Reserved
1 ICMP Internet Control Message Protocol
2 IGMP Internet Group Management Protocol
4 SCTP Stream Control Transport Protocol
5 TCP Transmission Control Protocol
8 EGP Exterior Gateway Protocol
9 IGP Interior Gateway Protocol
17 UDP User Datagram Protocol

/

(Maximum Transmission Unit-MTU)



To

Ethernet: 1518 bytes
FDDI: 4500 bytes
MTU= IP Datagram (data+header)

/
Fragmentation (1)




(Maximum Transmission Unit)
Fragmentation:


fragmentation: 68 bytes 8192 bytes

/
Fragmentation (2)

fragmentation

DF flag
fragmentation
MTU, IP

/
Fragmentation (3)


8 bytes

fragment offset field


. 8-byte units.


.
CRC

/

Fragmentation
Identification (16 bits):
fragmented
datagram
Fragment Offset (13 bits):

fragmented
datagram
Flags (3 bits):

IP datagram
/

Fragmentation

,
fragmentation
Do Not Fragment Bit
ICMP

MTU
ICMP

MTU
/
(1)

Internet


standard IETF RFC 1166
Multihoming:


(multihoming)

/
(2)


address=<network number><host number>
To network number
Internet Network
Information Center
host number host
32 bit
4 groups 8 bits

( 0...255).

.. 128.2.7.10

/
(1)



classful

/
(2)

0 1 8 16 24 31
Class A0 network address host number

1 0 network address host number


Class B
1 1 0 network address host number

Class C
1 1 1 0 multicast address

Class D1 1 1 1 reserved

/
(3)


7 bits network number=>126
2 24 2 16777214
24 bits host number=> hosts

Network mask 255.0.0.0
1.0.0.0 126.0.0.0
H
14 bits network number=>16382
16 bits host number=>65534 hosts
Network mask 255.255.0.0
128.0.0.0 191.255.0.0

/
(4)

H C
21 bits network number=>2,097,150
Network mask 255.255.255.0
192.0.0.0 223.255.255.0

D multicasting


hosts.

hosts
(
hosts 254)



/
Network-id Host-id

/
IP Host


(public).

(Internet Assigned
Numbers Authority)






/
H



Class A B.
254 hosts
, 65534 hosts



Class A B
subnet masks
hosts segment

bits

(network number address)
network address
AND
mask
bits
host number

24 bits 24 bits network
address=>8 bits host number
16 bits 16 bits network
address=>16 bits host number

/
Subnets (1)

,


..: /

LAN
LAN ()

, subnet
host number network number
host number.
subneting

/
LAN
Subnets (2)

host number
network number local
part
H IP : <network
number> < subnet number> <host number>
O subnet number host
number local address

/
Subnets (3)

subnet number host number


Bits 0
bits host number
Bits 1
bits subnet number
bits network
number 1,

/
Subnets (4)

/

(1)
bits 0
this host this network.

/

(2)
bits 1

, 127.3.255.255

127.3

broadcasting
127.xx.xx.xx
loopack mode
host

/
ARP: Address Resolution Protocol
IP (Host, Router)
: LAN ARP
MAC B
P ? ARP :
P/MAC
LAN
237.196.7.78
1A-2F-BB-76-09-AD
< IP , MAC ,TTL>
237.196.7.23 237.196.7.14
TTL (Time To Live):
LAN

71-65-F7-2B-08-53
58-23-D7-FA-20-B0
( 20 )
0C-C4-11-6F-E3-98
237.196.7.88

/
LAN ARP
LAN LAN
=
1A-2F-BB-76-09-AD

Broadcast = FF-FF-FF-FF-FF-FF

LAN
(
)
71-65-F7-2B-08-53
58-23-D7-FA-20-B0

ARP: address resolution protocol


ARP IP
0C-C4-11-6F-E3-98 LAN

LAN
/
ARP : LAN ()

A A (caches)
B, & IP--MAC ARP
ARP
(times out)
A soft state:
(query) ARP, IP
()
B

LAN ARP plug-and-play:


ARP packet ARP

O B ARP
A MAC

MAC
(unicast)
/
ARP Packet Format
Ethernet II header

Destination Source Type


address address 0x8060
ARP Request or ARP Reply Padding CRC

6 6 2 28 10 4

/
158
ARP (1)

/
ARP (2)

/
ARP (3)
ARP Request from Argon:
Source hardware address: 00:a0:24:71:e4:44
Source protocol address: 128.143.137.144
Target hardware address: 00:00:00:00:00:00
Target protocol address: 128.143.137.1
ARP Reply from Router137:
Sender hardware address: 00:e0:f9:23:a8:20
Sender protocol address: 128.143.137.1
Target hardware address: 00:a0:24:71:e4:44
Target protocol address: 128.143.137.144

/
Proxy ARP

Host router ARP Request



host

/
Proxy ARP

Argon Neon
Router137
128.143.137.1/16 128.143.171.21/24
128.143.137.144/16 128.143.71.1/24
00:e0:f9:23:a8:20 00:20:af:03:98:28

128.143.0.0/16 128.143.71.0/24
Subnet Subnet

ARP Request:
What is the MAC address
of 128.143.71.21?

ARP Reply:
The MAC address of
128.143.71.21 is
00:e0:f9:23:a8:20

/
Reverse ARP (RARP)

(MAC Address)
hosts (.. )

(.. booting).
,
ARP


Reverse ARP
To RARP broadcast server


RARP ,
RARP
broadcast
/

You might also like