Professional Documents
Culture Documents
PLH22 OSS5 2017 Slides
PLH22 OSS5 2017 Slides
2016-17
www.lucent.com/security
OSI TCP/IP
CSMA/CD
To (modular),
.
(modular):
(interfaces).
..
: ,
.
/
(Black box)
(peer)
.
/
-service (
).
-functions ( ).
-interfaces (
).
..
:
.
..
T
.
/
ISO/OSI
/ /
/
TCP/IP
5
4
3
2
1
/
(UTP)
() A
/ . (a) .
() (b) .
.
.
OSI TCP/IP
CSMA/CD
datagrams
(links):
.., Ethernet , 802.11
,
-
-
:
Ethernet (802.3)
Wireless LAN (e.g., 802.11)
(nodes)
hosts () & routers ()
(links):
/
:
datagram frame
,
frame
:
frame,
datagram
(simplex):
(half-duplex):
(full duplex):
(Point-to-Point)
( )
sender receiver
(broadcast)
receiving
frame
(multicast)
broadcast
adapter
Ethernet, PCMCI, IEEE802.11
datagram frame
bits , , .
, , .
datagram,
/
(1)
, (framing, link
access):
datagram
frame, (header), (trailer)
MAC frames
P!
/
(2)
(flow control):
&
(error detection):
:
frame
undetected errors &
/
(3)
(error correction):
bit
(half-duplex)
(full-duplex)
,
,
/
(multiple access)
(access control):
/
:
(multiple
access protocol)
, ..,
!
/
MAC
(
, , code)
: TDMA, FDMA
,
,
/
long-run
Extra control
(protocol overhead)
/
TDM, FDM:
Ethernet: Carrier Sense Multiple
Access/Collision Detect (CSMA/CD)
,
ALOHA: Ethernet
/
TDMA
( =
)
: 6- LAN, 1,3,4
, 2,5,6
/
FDMA
: 6- LAN, 1,3,4
frequency bands
pkt, 2,5,6
/
MAC :
(..,
)
MAC
:
slotted ALOHA
ALOHA
CSMA/CD, CSMA/CA
/
ALOHA (Slotted
ALOHA)
frames
frame,
,
frame ,
frames frame
,
2
, frame
p
/
ALOHA (Slotted
ALOHA)
frames
frame,
,
frame ,
frames frame
,
2
, frame
p
/
ALOHA
M slotted ALOHA.
m ( ) G m, m = 1, . . .,M,
Gm ( ) m.
Sm m.
= throughput ( )
M {Sm}
.
/
ALOHA
, Sm = S/M Gm =
G/M.
G(n) =
e 1 0.368
, n
(
qr)
( )
:
/
(unslotted) ALOHA (pure
ALOHA)
,
frame :
( ):
:
frame p ,
frame
, frame
p ,
frame
/
slotted
unslotted ALOHA
/
ALOHA Protocols
/
Carrier Sense
(Carrier sensing) (
)
:
(backs off)
,
(Collision detection) (
, )
:
/
Ethernet
-
ACKs NACKs
datagrams
TCP
,
Manchester
bit
/
Ethernet (1)
adapter IP datagram
Ethernet
6bytes 46-1500bytes
8bytes 6byte 4bytes
s
Preamble:
7 bytes 10101010 byte 10101011
adapter
Ethernet adapters
/
Ethernet (2)
Addresses: 6 bytes
adapter
, (broadcast) ( ARP ),
, adapter
Type: (
IP Novell IPX
AppleTalk)
CRC: , ,
: 1500 bytes
:
10Mbps Ethernet 64 Bytes!
;
!
Error Control
/
Carrier Sense Multiple Access:
:
,
adapter
:
/
(1)
A
;
:
, ( ,
propagation delay)
2
( )
IEEE 802.3
51.2 s
/
(2)
Ethernet (2500m)
,
jamming
jamming : 48 bit
>=2*
/
CSMA/CD
adapter &
(frame)
adapter ,
,
&
adapter
,
adapter !
adapter ,
&
, adapter backoff: m-
, K {0,1, 2,, 2m-1}
K * 512(time interval) bit-
2.
/
CSMA/CD
tprop = 2
LAN
ttrans =
1 1
1 5t prop / ttrans 1 5
long-run
D(km)=
C DC
t prop / ttrans t prop , C(bits/sec) =
L Lv
L (bits) = ()
/ v(km/sec)=
CSMA/CD
1 (Ethernet)
= 10Mbps. = 1000 bits
=1 km. tprop = 5x10-6 sec, =0.05, e=0.8
=C/L
2 (GEO ) C=
= sec (bits/sec)
= 2500, e 0 L= (bits)
CSMA/CD
Ethernet 100 Mbps?
Ethernet o 1 Gbps?
/
Ethernets CSMA/CD
/
Ethernet
H (peak utilization)
Ethernet ( Aloha)
peak utilization
,
/
Ethernet
LAN ,
Ethernet
:
!!!
( )
(Scalability)
/
Ethernet-
LAN :
LAN
, token LANs ATM
: 10 Mbps 10 Gbps
,
CSMA/CD
& Ethernet LAN
Metcalfes Ethernet
sketch
/
IC (Network Interconnection Card)
(expansion card)
PC, server workstation LAN
H NIC (interface)
(bus) /
O NICs
,
.. NICs Ethernet Token Ring
H NIC
(packet formats) LAN
/
LAN
(allocation) MAC
IEEE
MAC (
)
:
MAC :
IP :
MAC flat
LAN LAN
MAC
IP
IP (subnet)
/
MAC (1)
LAN Ethernet
interface
interface ( )
48-bit MAC
MAC
ROM adapter
32-bit IP :
IP
/
MAC (2)
MAC
(H/W manufacturers)
: CISCO: 00:00:0C:::, 3COM: 02:60:8C:::
MAC address
:
MAC
FF:FF:FF:FF:FF:FF = broadcast
/
switched LAN
Ethernet
bus,
. CSMA/CD.
Hub Ethernet
hub,
.
100 Mbps. CSMA/CD.
.
/
Switched Ethernet
CSMA/CD
(
, , Gbit
Ethernet, 10G Ethernet, )
.
switch
.
switch 20-40 ports
O
full rate (1/10/40/100 Gbps).
/
Ethernet
Ethernet:
10Base5 Thick Ethernet: 10 Mbps
10Base2 Thin Ethernet: 10 Mbps
10Base-T 10 Mbps
Fast Ethernet
100Base-TX 100 Mbps Cat. 5 (2 )
100Base-FX 100 Mbps
Gigabit Ethernet
1000Base-T 1 Gbps Cat. 5 (4 )
1000Base-SX 1 Gbps ( )
10GE 10GbE 10GigE
10GBase-LR 10 Gbps ( )
10GBase-T 10 Gbps Cat6
/
10Base2 Ethernet
Bus
Terminator
tee connector:
terminator
adapter
/
10 BaseT 100 BaseT
10/100 Mbps
100BaseT fast ethernet ( ,
)
T Twisted Pair
: ; 100m
hub
twisted pair
hub
/
Fast Ethernet
(UTP Cat. 3, 5),
CSMA/CD
bit 0.1 sec 10 nsec
10Base-
( )
/
Gigabit Ethernet
(full-duplex)
(half-duplex)
CSMA/CD
( )
hub CSMA/CD
Ethernet
Carrier extension: 512 byte
Frame bursting:
/
1000Base-SX
, , = 770-860 nm
220~550 m (FD)
1000Base-LX
, , = 1270-1335 nm
5000 m (FD)
1000Base-CX
,
25m (HD FD)
1000Base-T IEEE 802.3ab
4 , UTP Cat.5,
/
10 Gigabit Ethernet
(full-
duplex)
(half-duplex) , hub
CSMA/CD
Ethernet
/
Ethernet
/
LAN
LAN
LAN
H
(Repeaters)
Hubs
(Switches)
(Bridges)
LANs (VLANs)
/
(Bus topology)
90s
(Star
topology)
: hub switch
hub or
switch
/
Repeaters
,
/
Hubs (1)
--
hub
hub
hub
hub
/
Hubs (2)
Hubs :
repeaters:
bit , hub
bits
bits
buffering
CSMA/CD hub ( bits
)
/
Hub (1)
LAN
,
hub.
LAN
hub(backbone
hub)( hub )
(collision domains)
/
Hub (2)
Multi-tier design
backbone hub
one tier
LAN segment
hub
hub hub
/
Hub (3)
LAN ( hub)
, backbone hub &
hub LAN.
hubs backbone hub
LAN (segment)
LAN
( segments) backbone hub
LAN segment
& hubs
backbone hub
/
Switched Ethernet
/
(1)
switch interfaces
switch
Full duplex
&
network interface
=>Switching: A--A
B--B
network interfaces bridges
(.., 12 vs. 2-4) !!!! (
bridges!)
/
(2)
store-and-forward policy:
frame
downstream & upstream connections
direct point-to-point
collision detection &
carrier sensing!!!!
/
(3)
: Full Duplex!
Switching: A-to-D and B-to-E
Cut-through switching: frame forwarded
from input to output
port without storing!
10/100/1000 Mbps interfaces!
/
Switch
D C
Switch D
D interface 2
C , switch
interface 1
C
switch address interface
A 1
B 1
hub hub hub E 2
A
G 3
C 1
F I
B C D G H
E
/
Traffic Isolation
LAN
(collision
detection)
/
-Bridge (1)
Layer-2 (MAC )
MAC ,
(isolated
collision domains)
LAN ,
10Mbps, 100Mbps Ethernet
LAN ,
bridges
LAN
/
-Bridge (2)
E CSMA/CD
transmission
exponential backoff
Filtering:
interface
Forwarding: interface(s)
interface
/
-Bridge (3)
bridges
A local forwarding table(filtering database)
Stations auto-learning(backward learning)
Loop detection(spanning tree algorithm)
.
.
.
2.5Km.
.
(promiscuous
/ mode)
Bridge (1)
address interface
A 1
bridge B 1
1 C 2
2 3 D 3
hub
10BaseT hub hub
A
B
C D
/
Bridge (2)
/
Bridge (3)
/
LANs
(spanning
tree),
loops
:
.
,
:
,
.
,
.
/
Spanning Tree (1)
/
Spanning Tree (2)
/
LAN (1)
/
LAN (2)
/
Repeaters Bridges OSI
/
LAN
Repeaters
Hubs
Bridges
Switches
Routers
Gateways
/
VLANs (1)
LAN
,
/
VLANs (2)
N = +
/
VLANs
VLANs VLANs
/
VLANs
MAC
IEEE 802.11q
4 bytes
VLAN-id
/
802.11q
/
VLAN: Links
Access
untagged
Trunk
tagged
/
VLAN: Forwarding Database
/
Port-based VLAN
/
TCP/IP
/
(1)
Internet
DARPA (Defense Advanced
Research Projects Agency)
.
ARPANET
Internet
interconnected
network.
/
(2)
Internet
Backbones:
(.. WANs)
/
,
backbone
(.. LANs,
)
/
(1)
Internet Society (ISOC)
,
Internet Corporation for Assigned Names and
Numbers (ICANN)
DNS domains
Internet Architecture Board:
15 .
Internet standards
/
(2)
TCP UDP
IP
1 2 n
Internet Protocol (IP)
buffer
/
-IP (1)
(network)
/
,
host
IP host:
.. PC, router, gateway, Ethernet switch
hosts
Internet
-
/
-IP
/
-
(switch):
(.. Ethernet LAN, MAN DQDB, ATM)
(router):
=>
(.. Ethernet FDDI)
/
Connectionless:
IP (Datagrams)
Best Effort
,
(IP forwarding)
ICMP
/
IP -Datagrams (1)
IP Datagram:
Internet
header
(. TCP, UDP)
T (encapsulated)
(.. Ethernet, ATM, Frame Relay)
.. Ethernet 1500 bytes
fragmentation reassembly
/
IP -Datagrams (2)
IP Header IP Data
/
IP Datagram Format
IP protocol version
32 bits total datagram
number
length (bytes)
header length head. type of
(bytes) ver length
len service
for
type of data fragment fragmentation/
16-bit identifier flgs
offset reassembly
max number time to upper header
remaining hops live layer checksum
(decremented at
each router) 32 bit source IP address
value in arriving
packets header
0111
1
3 2
/
(2)
forwarding:
router
(interface)
routing:
:
/
Border/Gateway versus Internal
Router (1)
Border/Gateway router:
/
Border/Gateway versus Internal
Router (2)
Internal Router:
/
(1)
/
(2)
/
(3)
/
IP Protocol Numbers
/
(Maximum Transmission Unit-MTU)
To
Ethernet: 1518 bytes
FDDI: 4500 bytes
MTU= IP Datagram (data+header)
/
Fragmentation (1)
(Maximum Transmission Unit)
Fragmentation:
fragmentation: 68 bytes 8192 bytes
/
Fragmentation (2)
fragmentation
DF flag
fragmentation
MTU, IP
/
Fragmentation (3)
8 bytes
fragment offset field
. 8-byte units.
.
CRC
/
Fragmentation
Identification (16 bits):
fragmented
datagram
Fragment Offset (13 bits):
fragmented
datagram
Flags (3 bits):
IP datagram
/
Fragmentation
,
fragmentation
Do Not Fragment Bit
ICMP
MTU
ICMP
MTU
/
(1)
Internet
standard IETF RFC 1166
Multihoming:
(multihoming)
/
(2)
address=<network number><host number>
To network number
Internet Network
Information Center
host number host
32 bit
4 groups 8 bits
( 0...255).
.. 128.2.7.10
/
(1)
classful
/
(2)
0 1 8 16 24 31
Class A0 network address host number
Class C
1 1 1 0 multicast address
Class D1 1 1 1 reserved
/
(3)
7 bits network number=>126
2 24 2 16777214
24 bits host number=> hosts
Network mask 255.0.0.0
1.0.0.0 126.0.0.0
H
14 bits network number=>16382
16 bits host number=>65534 hosts
Network mask 255.255.0.0
128.0.0.0 191.255.0.0
/
(4)
H C
21 bits network number=>2,097,150
Network mask 255.255.255.0
192.0.0.0 223.255.255.0
D multicasting
hosts.
hosts
(
hosts 254)
/
Network-id Host-id
/
IP Host
(public).
(Internet Assigned
Numbers Authority)
/
H
Class A B.
254 hosts
, 65534 hosts
Class A B
subnet masks
hosts segment
bits
(network number address)
network address
AND
mask
bits
host number
24 bits 24 bits network
address=>8 bits host number
16 bits 16 bits network
address=>16 bits host number
/
Subnets (1)
,
..: /
LAN
LAN ()
, subnet
host number network number
host number.
subneting
/
LAN
Subnets (2)
host number
network number local
part
H IP : <network
number> < subnet number> <host number>
O subnet number host
number local address
/
Subnets (3)
subnet number host number
Bits 0
bits host number
Bits 1
bits subnet number
bits network
number 1,
/
Subnets (4)
/
(1)
bits 0
this host this network.
/
(2)
bits 1
, 127.3.255.255
127.3
broadcasting
127.xx.xx.xx
loopack mode
host
/
ARP: Address Resolution Protocol
IP (Host, Router)
: LAN ARP
MAC B
P ? ARP :
P/MAC
LAN
237.196.7.78
1A-2F-BB-76-09-AD
< IP , MAC ,TTL>
237.196.7.23 237.196.7.14
TTL (Time To Live):
LAN
71-65-F7-2B-08-53
58-23-D7-FA-20-B0
( 20 )
0C-C4-11-6F-E3-98
237.196.7.88
/
LAN ARP
LAN LAN
=
1A-2F-BB-76-09-AD
Broadcast = FF-FF-FF-FF-FF-FF
LAN
(
)
71-65-F7-2B-08-53
58-23-D7-FA-20-B0
A A (caches)
B, & IP--MAC ARP
ARP
(times out)
A soft state:
(query) ARP, IP
()
B
6 6 2 28 10 4
/
158
ARP (1)
/
ARP (2)
/
ARP (3)
ARP Request from Argon:
Source hardware address: 00:a0:24:71:e4:44
Source protocol address: 128.143.137.144
Target hardware address: 00:00:00:00:00:00
Target protocol address: 128.143.137.1
ARP Reply from Router137:
Sender hardware address: 00:e0:f9:23:a8:20
Sender protocol address: 128.143.137.1
Target hardware address: 00:a0:24:71:e4:44
Target protocol address: 128.143.137.144
/
Proxy ARP
/
Proxy ARP
Argon Neon
Router137
128.143.137.1/16 128.143.171.21/24
128.143.137.144/16 128.143.71.1/24
00:e0:f9:23:a8:20 00:20:af:03:98:28
128.143.0.0/16 128.143.71.0/24
Subnet Subnet
ARP Request:
What is the MAC address
of 128.143.71.21?
ARP Reply:
The MAC address of
128.143.71.21 is
00:e0:f9:23:a8:20
/
Reverse ARP (RARP)
(MAC Address)
hosts (.. )
(.. booting).
,
ARP
Reverse ARP
To RARP broadcast server
RARP ,
RARP
broadcast
/