Tuesday, April 27, 2010

Routed Network






This lab went fast and furious as you can tell by Brad's "fingers of fury" configuring the routers to connect to the switches to create the subnets. we all then had to connect and check the connections by pinging other classmates. Using special Cisco cables we were able to connect the three routers and on the final router connect to the switch with an rj45 crossover cable. The subnets were as follows:

1) 140.20.0.0

2) 140.20.32.0

3) 140.20.64.0

4) 140.20.96.0

Had a few problems at first but with some tweaking to some encapsulation by the Cisco Guru, all went pingingly well.

Virtual Machine Lab


I set up PC VM 2007 on my laptop. Downloaded Damn Small Linux 4.4.10 in ISO format. Then went throught the process of creating a virtual machine. I did a VM a few years ago with DSL and it was really basic. It's improved a lot since. VM 2007 first created a configuration file, .vmc, then created virtual hard drive .vhd file. When I opened the vhd it told it to capture the DSL ISO file and hit enter. DSL started the boot process. I prefer to use ISO’s but you can run VM with an installation disk. Fortunately I’m running an old PIII 1GHZ laptop, so the newer version of DSL found (by found I mean had all the drivers) all the hardware just fine. It also found the old DLink wireless PCMCIA card I’m using for the internet. Surfed a bit on it. Sweet stuff.
For whatever reason my prnt scrn wouldn’t do so, so I had to use another program from a USB suite called ASuite which has a lot of utilities you can use from your usb drive. Cool too. I was able to use the DSL OS just as if it were installed on the hard drive. DSL also has a feature to install it to a USB or hard drive. If you decide to do more virtual machines, I do recommend as much ram and processing power as possible, as the VM will use part of what you have, although in the settings for the VM you can adjust the memory it uses.

Thursday, March 25, 2010

WAP Comparision

Small Business

D-Link AirPremier DWL-2210AP

Small; clustering support; powered over Ethernet; virtual LAN support

  • Form Factor External
  • Connectivity Technology Wireless
  • Data Transfer Rate 54 Mbps
  • Line Coding Format CCK , BPSK , QPSK , DBPSK , DQPSK , 16 QAM , 64 QAM
  • Data Link Protocol IEEE 802.11b , IEEE 802.11g
  • Spread Spectrum Method DSSS , OFDM
  • Remote Management Protocol HTTP , Telnet
  • Frequency Band 2.4 GHz
  • Max Range Indoors 300 ft
  • Max Range Open Space 1380 ft
  • Status Indicators Power , Port transmission speed
  • Features Manageable , VLAN support , Load balancing , Scalable clustering , Wireless Distribution System (WDS) support
  • Encryption Algorithm MD5 , TLS , WPA , PEAP , TTLS , 64-bit WEP , 128-bit WEP , 152-bit WEP
  • Authentication Method RADIUS
  • Compliant Standards IEEE 802.3 , IEEE 802.3u , IEEE 802.3x , IEEE 802.11b , IEEE 802.11g , IEEE 802.3af

Antenna

  • Antenna External detachable
  • Antenna Quantity 1
  • Directivity Omni-directional
  • Gain Level 5 dBi

Communications

  • Type None

Expansion / Connectivity

  • Expansion Bays Total (Free) None
  • Expansion Slots Total (Free) None
  • Interfaces 1 x Network - Ethernet 10Base-T/100Base-TX - RJ-45
  • Compatible Slots None

Miscellaneous

  • Compliant Standards UL , FCC Part 15

Power

  • Power Over Ethernet (PoE) Yes
  • Power Device Power adapter - External

Battery

  • Type None

Environmental Parameters

  • Min operating temperature 32 °F
  • Max operating temperature 104 °F
  • Operating humidity range 10 - 90%

Manufacturer Warranty

  • Service & Support 1 year warranty
  • Service & Support Details Limited warranty - 1 year

Except the fact that it is not 802.11n compatible, which surprises me about this one, it sounds like a good and configurable access point. Though it is a good one, it is a little expensive. $279.99

Cisco Aironet 1142

General

  • Device Type Wireless access point
  • Width 8.7 in
  • Depth 8.7 in
  • Height 1.9 in
  • Weight 2.3 lbs

Processor Memory / Storage

  • RAM Installed ( Max ) 128 MB
  • Flash Memory Installed (Max) 32 MB
  • Floppy Drive None
  • Optical Storage None
  • Storage Removable None

Networking

  • Form Factor External
  • Connectivity Technology Wireless
  • Wireless Capability This product uses the draft version of the upcoming 802.11n standard. Its compatibility with other and future products is not guaranteed, and it may interfere with current 802.11b and g products.
  • Data Transfer Rate 300 Mbps
  • Data Link Protocol IEEE 802.11a , IEEE 802.11b , IEEE 802.11g , IEEE 802.11n (draft 2.0)
  • Status Indicators Error , Active , Status
  • Features Power over Ethernet (PoE) , Wi-Fi Multimedia (WMM) support , Lightweight Access Point Protocol (LWAPP) support
  • Encryption Algorithm AES , TLS , WPA , PEAP , TKIP , TTLS , WPA2
  • Authentication Method EAP-FAST , MS-CHAP v.2
  • Compliant Standards IEEE 802.1x , IEEE 802.11a , IEEE 802.11b , IEEE 802.11d , IEEE 802.11g , IEEE 802.11h , IEEE 802.11i , IEEE 802.3af , IEEE 802.11n (draft 2.0)

This one seems more up to date, but you’ll pay for it, up to $927. While it has great features like internal memory, support for 802.11n and major encryption for security. I’ve always bought the AP’s that were on sale or used ones that we sold from the store. I wouldn’t need one of these but it’s nice to know they are out there. This is another that would be good for business environment.

SMC Barricade 150Mbps 802.11n Wireless N Router

  • SMC Barricade Wireless N Broadband Router
  • 4-Port 10/100 LAN Switch with Auto MDI-MDIX
  • Built-in Wireless-N 150Mbps Access Point
  • Supports Wireless 802.11n/g/b Standards and Wired IEEE 802.3, IEEE 802.3u
  • WEP 64-/128-bit , WPA-/WPA2-PSK (Pre-shared Key, TKIP, AES), WPA/WPA2 Enterprise mode (802.1x) Encryption
  • Wi-Fi Protected Setup (WPS) - Push-Button Security
  • Web-Based Management Interface
  • NAT Firewall with Stateful Packet Inspection
  • 1-Year Manufacturer's Warranty
While I don’t recommend SMC products, I’ve seen too many fail, this one seems pretty good for the home user. It has a good fast transfer rate at 150Mbps and good encryption. $29

Network Tour






We started the tour on the 3rd floor, which has 2 equipment closets, major wiring there. You definately want a drop ceiling when running network cable. Cables come from the nodes to the patch panels in the equipment room. Labeling is important in the equipment room. The switches actually get you onto the network. The switches are smart switches which are Vlanned off logically. Some switches in the room were cisco 3548 and 3750 (PoE Power over Ethernet) which are 10/100 switches. There were also some FO switches connecting to multi-mode fiber cables running at a Gb instead of Mb.
Video, voip and wireless access points are running thru this room as well as PoE for the same. The switches have to be PoE capable. PoE uses the wires that are not used for transmit/receive. Access layer switches are in this room and distribution layer switches are in the mix. Core switches 4006 are in use and 3510 is in the wings waiting to be installed. 3524PoE's are also used on the network. As well as switches and routers you also have battery backups to keep things running in case of an emergency. We also toured the grounds while walking over to Ken's office and saw where the cables were coming in from the road.
Unfortunately, in the IT department itself it was impossible to tape the tour because of the noise so I didn't get any notes from that section of the tour and it was almost impossible to hear Ken. But here are some pictures from the 1st and 3rd floor Wayne West building and the IT Maintenance department. one of the photos is of the layout of the new vlan Ken was going to implement. Helps to work it out on paper or dry erase board.

Wireless Network


We used a Dlink 615n wireless router and a Dlink wirless usb adapter to setup a wireless network. We cleared the settings on the router in order to get a fresh start with it. We installed the router software on one machine and the Dlink WUA 1340 usb adapter on another.I used the cd to install the adapter, but it caused a problem with Vista Ultimate, so it's a good idea to download the latest drivers from the website of your hardware. Once the router and adapter were installed we setup WPA encryption and connected to the internet. No sweat.
First we setup the router IP then setup the IP pool. Then made sure the the other computer could connect with the router assigning it an IP address thru DHCP. Then, setup the PC with the wireless adapter a static IP address. This has to be outside of the DHCP pool or else you'll run into conflicts with the DHCP pool.

Switched Network



We first connected to the cisco switch, then worked on the subnets. Setup static ip addresses on the 4th subnet from the 160.20.o.0 network with a subnet mask of 255.255.240 which turned out to be160.20.48.0. Then we setup the network configuration on our systems using the local area connections properties. Setup static IP addresses and checked the connection to the switch and pinged one another as well as students thru the other switch.

Monday, March 8, 2010

Cisco comparision

Cisco ASR 9000 Series Aggregation Services Routers

Cisco IOS XR IP Unicast Routing Core Bundle

comp-asr9k-mini.pie-3.9.0

Contains the required core packages, including OS, Admin, Base, Forwarding, Forwarding Processor Card 40G, Routing, SNMP Agent, Diagnostic Utilities, and Alarm Correlation.

Cisco IOS XR IP Unicast Routing Core Bundle

comp-asr9k-mini.vm-3.9.0

Contains the required core packages including OS, Admin, Base, Forwarding, Forwarding Processor Card 40G, Routing, SNMP Agent, Diagnostic Utilities, and Alarm Correlation.

Optional Individual Packages1

Cisco IOS XR Manageability Package

asr9k-mgbl.pie-3.9.0

CORBA2 agent, XML3 Parser, and HTTP server packages. This PIE also contains some SNMP MIB infrastructure. Certain MIBs won't work if this PIE is not installed.

Cisco IOS XR MPLS Package

asr9k-mpls.pie-3.9.0

MPLS-TE,4 LDP,5 MPLS Forwarding, MPLS OAM,6 LMP,7 OUNI,8 RSVP,9 and Layer-3 VPN.

Cisco IOS XR Multicast Package

asr9k-mcast.pie-3.9.0

Multicast Routing Protocols (PIM, MSDP,10 IGMP,11 Auto-RP), Tools (SAP, MTrace), and Infrastructure (MRIB,12 MURIB13 , MFWD14 ), and BIDIR-PIM.15

Cisco IOS XR Security Package

asr9k-k9sec.pie-3.9.0

Support for Encryption, Decryption, IPSec,16 SSH,17 SSL,18 and PKI19 (Software based IPSec support—maximum of 500 tunnels)

Cisco IOS XR FPD Package

asr9k-fpd.pie-3.9.0

Firmware for RSP and all line card types, SIP20 and SPA21 modules as well as ROMMON22 images for Cisco ASR 9000 Series Router chassis.

Cisco IOS XR Advanced Video Package

asr9k-adv-video-p.pie-3.9.0

Firmware for the advanced video feature for Cisco ASR 9000 Series Router chassis.


The Cisco SR520W Wireless Secure Router combines Internet access, advanced security, virtual private network (VPN) access, and optional wireless networking, all in a single easy-to-use device. A component of the Cisco Smart Business Communications System complete set of advanced voice, data, security, and wireless networking products designed specifically for small and medium-sized businesses the Cisco SR520W Wireless Secure Router brings together multiple technologies to help you lower costs, improve network security, and simplify network management.

$514.74



Cisco SD2008 8-port 10/100/1000 Gigabit Switch

  • Flexibility: Cisco Unmanaged Switches operate all along the speed spectrum, offering 10, 100, and 1,000 megabit-per-second connections, depending on the model.
  • Reliability: Consistent uptime doesn't require additional management or hardware tweaking. Just attach your network devices and enjoy the peace of mind that comes with having a reliable switch.
  • Affordability: A Cisco Small Business Unmanaged Switch is designed with your unique business needs in mind. You don't have to commit extra resources or trained staff to get your switch up and running, and you don't have to exceed your budget to get a premium networking solution.

Integrated features like advanced store-and-forward packet switching and auto partitioning help ensure that the quality of the data passing through the switch is consistent and optimized. The SD2008 supports 10/100/1000 Mbps connections in either half- or full-duplex mode.

Additional features of the SD2008 Desktop Switch include:

  • Eight 10/100/1000 Mbps ports with automatic MDI/MDI-X crossover detection
  • Signal regeneration to help ensure data transfer integrity
  • Increased transmission reliability via address learning and aging, as well as data flow control
$65.23 Nice price for a small business



Wireshark Lab


Wireshark Lab

Note: You will be blogging about your Wireshark lab. Take screen shots of the Wireshark output to include with your blog. Also you will need to research the Internet extensively to complete the assignment. Make use of the site http://www.ietf.org/rfc.html to find specific information about TCP, UDP, IP, Ethernet and ARP.

Start wireshark and view the packets that are being picked up by your computer.

1. Look at several packets and then complete the following :

a. Look at a packet that is using TCP and then answer the following:

i. What is the source port? Infowave 2082

Why is this source port used?

Infowave Mobility Server

ii. What is the destination port? 80

Why is this destination port used?

Common port for web browser TCP connection

iii. What is the flag?

0x10 & 0x02

Why is this flag used?

What is the source and destination IP address?

Src: 192.168.1.128 (192.168.1.128), Dst: 129.68.65.66 (129.68.65.66)

Is this packet coming or going from your computer?

No, it is coming from my computer to 129.68.65.66.

iv. What is the Time To Live for this packet?

128

What does TTL mean?

Time to Live: maximum time that a datagram can remain on the network before it is discarded. Represents the number of times a datagram has been forwarded by a router also known as hops.

v. What is the Differentiated Services field?

Indicator to the router the level of precedence they should apply when processing the incoming packet.

List the current value.

0x00 (DSCP 0X00: Default; ECN:0x00)

What does this mean?

List 4 other possible values.

1. Default PHB—which is typically best-effort traffic

2. Expedited Forwarding (EF) PHB—dedicated to low-loss, low-latency traffic

3. Assured Forwarding (AF) PHB— which gives assurance of delivery under conditions

4.Class Selector PHBs—which are defined to maintain backward compatibility with the IP Precedence field.

vi. What is the protocol field set to?

TCP (0x06)

What does this mean?

The TCP protocol is the intended receiver of this datagram.

vii. What else did you see that was interesting about the IP packet?

Honestly, nothing.

viii. What is the framing type used?

The only “type” category I see is under Ethernet II and it is set to IP (0x800)

ix. What is the source and destination MAC addresses?

Source: 00:80:c8:15:8c:ec Destination: 00:18:39:b5:72:e5

Is this frame coming or going from your computer?

Coming to my computer

x. What else did you see that was interesting about the Frame?

Nothing.

UDP Info

b. Look at a packet that is using UDP and then answer the following:

i. What is the source port? 2369

Why is this source port used?

BMC Software CONTROL-M/Server-Configuration Agent

ii. What is the destination port? 1900

Why is this destination port used?

Simple Service Discovery Protocol

iii. What is the flag? 0x00

Why is this flag used? Reserved bit not set, don’t fragment, more fragments not set

iv. What is the source and destination IP address?

Src 192.168.1.104,

Is this packet coming or going from your computer? Yes

v. What is the Time To Live for this packet? 247

What does TTL mean? The packet can only be online for 247 hops

vi. What else did you see that was interesting about the IP packet?

It listed IPv6 as well as the IPv4 addresses.

vii. What is the framing type used? query

viii. What is the source and destination MAC addresses?

00:18:39:b5:72:e5, 01:00:5e:7f:ff:fa

Is this frame coming or going from your computer? from

ix. What else did you see that was interesting about the Frame

Nothing

TCP Packets

c. Intercept several TCP packets until you can view the three way handshake (read about this on pg 118 and 119).

What are the sequence and acknowledgement numbers on all 3 segments?

Packet 1: sequence 0, Ack 0, Packet 2 Seq. 0, Ack 1, Packet 3 Seq 1, Ack 1

d. Intercept an ARP frame. List the following:

i. What is the destination MAC address? ff:ff:ff:ff:ff:ff

Why is this address used? Broadcast finding out what pc are connected.

ii. What is the source MAC address? 00:0e:08:e6:9f:fe

Why is this address used? It’s the MAC on my pc

iii. What is the destination IP address? 192.168.1.1

Why is this address used? It’s the address of the router.

iv. What is the source IP address? 192.168.1.104

Why is this address used? It’s my ip address.

v. Write a paragraph about anything else your learned from capturing an ARP frame.

ARP requests went out 17 times in the 30 minutes I started this capture. I thought it was odd that it had to be updated so frequently or so it seems. 192.168.1.1 is the router, but where is 192.186.1.100 coming from? I think the .100 is the start of the ip-pool. ARP is a short burst of information.

Wireshark can be handy to detect spyware and viruses, to track heavy network traffic to the source i.e. a worker using the work pc to look for movies while at work. It can expose a lot of information for diagnostics when you have a bad connection or some type of network interference such as EMI, or crosstalk when network cables have been improperly installed in a dropdown ceiling.

Following a packet is a nice feature along with following a connection thru the filtering. Wireshark can simplify troubleshooting by capturing all this information.

DHCP & Host


Host File

Create a host file mapping Blackboard to the IP address 10.10.1.81
Host files are a way of resolving domain names to IP addresses. In most OSes, the hosts file overrides and information that would be retrieved from a DNS server. You can use hosts file to you’re your network by setting up a test machine.

Because the computer no longer would have to ask the DNS server for the IP address, setting up your host file with frequently visited websites could potentially speed up your web surfing.

You can also check the hosts to see if spyware is infecting your system.


Lab - DHCP
Setup a DHCP pool on the Dlink routers.
Write a page about the lab in your blog. Include at least one screen shot of the Dlink web interface.

We set up a DLINK Router DHCP pool one day in class, but I think it was the day the port closed the bridge so I don’t remember doing this . Here are the steps to setup a the pool anyway.

  1. Get into the router configuration. (unless you’ve changed the default password, you can use that)
  2. You’ll want to go to, depending on the router, to the section that has DHCP settings
  3. Change the starting IP address and type in the maximum # of users (on this router) on some you can tell the configuration what IP address is the last address you want to use.
  4. Save the settings to the router.
  5. Release and Renew your IP address and you should see the changes to you IP address take effect.
  6. NOTE: Sometimes the routers require rebooting them, most of the time not.



TCp/IP Lab







TCP/IP Utilities Lab
1. Issue a Ipconfig command at the command prompt. Try some of the popular switches such as /all and /?.

With ipconfig you can check your ip address to ensure you are being assigned one from a DHCP server or that your static ip address is correct. You can also use /flushdns to remove all entries from the DNS name cache if you think it has been corrupted. /displaydns displays the contents of the DNS resolver cache. If you have multiple adapters connected you specify which adapter to release and renew.

  1. Issue a Netstat command at the command prompt. Try some of the popular switches such as - p and -a. Capture a screen shot and write a paragraph about how you would use the command to troubleshoot a problem. Put this information in your blog.


Using netstat you can see which protocol might be eating up your bandwidth if your connection is slow. You can flush phantom connections that no longer need to be connected. Using the –b switch you can see what programs are associated with which connections.

  1. Issue a Nbtstat command at the command prompt. Nbtstat is designed to help troubleshoot NetBIOS name resolution problems.

Displays NetBIOS over TCP/IP (NetBT) protocol statistics, NetBIOS name tables for both the local computer and remote computers, and the NetBIOS name cache. I do not have NetBios enabled on my network so the only things that show up are

  1. Issue a Hostname command. You can change the computers host name thru this command.


  1. Use the Nslookup command to view the IP address of at least three domain names.


  1. Issue a Tracert command at home.


If you are running a web server, tracert can reveal lags in the routing if you try to access your site from another pc. Useful for troubleshooting internal networks by identifying where the problem occurs, i.e. a router, switch.

Followers