SlideShare a Scribd company logo
Objectives:
Chapter 5
Network Configuration Basics
 IPv4 vs IPv6 Addressing
Firewall configuration
Network Interface Configuration
Linux Network Troubleshooting
commands
Ambo University
2
Internet Architecture
• Two computers, anywhere in
the world, following certain
hardware, software, protocol
specifications, can
communicate, reliably even
when not directly connected.
• LANs are no longer scalable
beyond a certain number of
stations or geographic
separation.
Ambo University
3
IP Address as a 32-Bit Binary Number
Internet Addresses
Ambo University
4
IP Address Classes
Ambo University
5
IP Address Classes
Ambo University
6
Hosts for Classes of
IP Addresses
Class A (24 bits for hosts) 224 - 2* = 16,777,214 maximum hosts
Class B (16 bits for hosts) 216 - 2* = 65,534 maximum hosts
Class C (8 bits for hosts) 28 - 2* = 254 maximum hosts
* Subtracting the network and broadcast reserved address
Ambo University
7
IPv4 Address Classes
Class D Addresses
• A Class D address begins with binary 1110 in the first octet.
• First octet range 224 to 239.
• Class D address can be used to represent a group of hosts called a
host group, or multicast group.
Class E Addresses
• First octet of an IP address begins with 1111
• First octet range 240 to 255.
• Class E addresses are reserved for experimental purposes and should
not be used for addressing hosts or multicast groups.
Ambo University
8
IP Addresses as Decimal Numbers
Ambo University
9
An IP address such as 176.10.255.255 that has all binary 1s
in the host bit positions is reserved for the broadcast
address.
An IP address such as 176.10.0.0 that has all binary 0s in
the host bit positions is reserved for the network address.
Network IDs and Broadcast Addresses
Ambo University
Private Addresses
• These addresses are called non-routable addresses.
10
Ambo University
11
Reserved Address Space
• Network ID
• Broadcast address
• Hosts for classes of IP addresses
• For Example: For the IP Address 192.168.0.1 with
Subnet mask 255.255.255.0
– Network ID: 192.168.0.0
– Broadcast Address: 192.168.0.255
– Addresses for Hosts: 192.168.0.1 –
192.168.0.254
Ambo University
12
Subnetworks
To create a subnet address, a network administrator
borrows bits from the original host portion and
designates them as the subnet field.
Ambo University
13
Subnetworks
Ambo University
14
Subnet Mask
• Determines which part of an IP address is the network field and which
part is the host field
• Follow these steps to determine the subnet mask:
– 1. Express the subnetwork IP address in binary form.
– 2. Replace the network and subnet portion of the address with all
1s.
– 3. Replace the host portion of the address with all 0s.
– 4. Convert the binary expression back to dotted-decimal notation.
• These days classless Inter Domain Routing (CIDR) is used because
subnetting with ordinary Class A, B, C is not adequate.
Ambo University
15
Subnet mask in decimal = 255.255.240.0
Subnet Mask
Ambo University
16
Range of Bits Needed to Create Subnets
Ambo University
17
Subnet Addresses
Ambo University
18
Class B address with 8 bits borrowed for the subnet
130.5.2.144 (8 bits borrowed for subnetting) routes to subnet
130.5.2.0 rather than just to network 130.5.0.0.
Determining Subnet Mask Size
Ambo University
19
The address 197.15.22.131 would be on the
subnet 197.15.22.128.
11000101 00001111 00010110 100 00011
Network Field SN Host Field
Class C address 197.15.22.131 with a subnet
mask of 255.255.255.224 (3 bits borrowed)
Determining Subnet Mask Size
Ambo University
20
Subnetting Example with AND Operation
Ambo University
21
The router connects subnetworks and networks.
IP Configuration on a Network Diagram
Ambo University
22
Using /24
subnet...
190.52.1.2
190.52.2.2
190.52.3.2
Network Network Subnet Host
But internal routers think all
these addresses are on different
networks, called subnetworks
Internet routers still “see” this net as 190.52.0.0
Class B Network Network Host Host
Given the Class B address 190.52.0.0
Subnet Example
Ambo University
23
Using the 3rd octet, 190.52.0.0 was divided into:
190.52.1.0 190.52.2.0 190.52.3.0 190.52.4.0
190.52.5.0 190.52.6.0 190.52.7.0 190.52.8.0
190.52.9.0 190.52.10.0 190.52.11.0 190.52.12.0
190.52.13.0 190.52.14.0 190.52.15.0 190.52.16.0
190.52.17.0 190.52.18.0 190.52.19.0 and so on ...
Network Network Subnet Host
Subnet Example
Ambo University
24
Subnet Example
Network Network Subnet Host
Network address 190.52.0.0 with /16 network mask
190 52 0 Host
190 52 1 Host
190 52 2 Host
Using Subnets: subnet mask 255.255.255.0 or /24
190 52 3 Host
190 52 Etc. Host
190 52 254 Host
190 52 255 Host
255
Subnets
28 - 1
Cannot use last
subnet as it
contains broadcast
address
Subnets
Ambo University
25
Subnet Example
Network Network Subnet Host
Subnet 0 (all 0’s subnet) issue: The address of the subnet,
190.52.0.0/24 is the same address as the major network,
190.52.0.0/16.
190 52 0 Host
190 52 1 Host
190 52 Etc. Host
190 52 254 Host
190 52 255 Host
255
Subnets
28 - 1
Subnets
Last subnet (all 1’s subnet) issue: The broadcast address for
the subnet, 190.52.255.255 is the same as the broadcast
address as the major network, 190.52.255.255.
Ambo University
26
The number of lost IP addresses with a Class C network
depends on the number of bits borrowed for subnetting.
Host Subnet Schemes
Ambo University
27
IP addressing crisis
• Address Depletion
• Internet Routing Table Explosion
Ambo University
28
IPv4 Addressing
Subnet Mask
• One solution to the IP address shortage was thought to be the
subnet mask.
• Formalized in 1985 (RFC 950), the subnet mask breaks a single
class A, B or C network in to smaller pieces.
Ambo University
29
Short Term Solutions: IPv4 Enhancements
• CIDR (Classless Inter-Domain Routing) – RFCs 1517,
1518, 1519, 1520
• VLSM (Variable Length Subnet Mask) – RFC 1009
• Private Addressing - RFC 1918
• NAT/PAT (Network Address Translation / Port Address
Translation) – RFC
Ambo University
30
IPv4 versus IPv6
• IP version 6 (IPv6) has been defined and developed.
• IPv6 uses 128 bits rather than the 32 bits currently used in IPv4.
• IPv6 uses hexadecimal numbers to represent the 128 bits.
IPv4
Ambo University
31
Long Term Solution: IPv6 (coming)
• IPv6, or IPng (IP – the Next Generation) uses a 128-bit address
space, yielding
340,282,366,920,938,463,463,374,607,431,768,211,456
possible addresses.
• IPv6 has been slow to arrive
• IPv4 revitalized by new features, making IPv6 a luxury, and not
a desperately needed fix
• IPv6 requires new software; IT staffs must be retrained
• IPv6 will most likely coexist with IPv4 for years to come.
• Some experts believe IPv4 will remain for more than 10 years.
Ambo University
Firewall and Its configuration (Linux)
• A firewall helps screen out malicious users, viruses, and
worms that try to access your network from the Internet.
• Firewalls can be hardware or software, and they help
prevent unauthorized access to your local area network
(LAN) from the Internet by blocking incoming network
traffic that is attempting to use a port that is not open.
• A firewall hides information on your LAN from the Internet,
such as computer names, network topology, and network
device types.
• A firewall can also log traffic to and from the LAN.
32
Ambo University
Firewall configuration….
• Firewall can be provided in three forms:
– Hardware firewall
– Server Software Firewall
– Client Software Firewall
• The Linux kernel includes the Netfilter subsystem, which is
used to manipulate or decide the fate of network traffic
headed into or through your server.
• Uncomplicated Firewall (ufw)
– The default firewall configuration tool for Ubuntu is ufw.
– ufw by default is initially disabled.
33
Ambo University
Firewall configuration…
• The following are some examples of how to use ufw:
– First, ufw needs to be enabled. From a terminal prompt
enter:
• sudo ufw enable
– To open a port (ssh in this example):
• sudo ufw allow 22
– Rules can also be added using a numbered format:
• sudo ufw insert 1 allow 80
– Similarly, to close an opened port:
• sudo ufw deny 22
– To remove a rule, use delete followed by the rule:
• sudo ufw delete deny 22
34
Ambo University
Firewall configuration…
• It is also possible to allow access from specific hosts or
networks to a port.
– The following example allows ssh access from host
192.168.0.2 to any ip address on this host:
• sudo ufw allow proto tcp from 192.168.0.2 to any port
22
– Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh
access from the entire subnet.
– ufw can be disabled by:
• sudo ufw disable
– To see the firewall status, enter:
• sudo ufw status
35
Ambo University
Firewall configuration….
– And for more verbose status information use:
• sudo ufw status verbose
– To view the numbered format:
• sudo ufw status numbered
36
Ambo University
Network Interface Configuration (Linux)
• A linux box should have its NIC configured to
communicated on the network.
• This can be supplied by the DHCP Server dynamically or
supplied statically by the administrator
• For providing the static address the file
/etc/network/interfaces needs to edited:
– auto eth0
– iface eth0 inet static
– address 192.168.0.10
– netmask 255.255.255.0
– gateway 192.168.0.1
– network 192.168.0.0
– broadcast 192.168.0.255
37
Ambo University
NIC Configuration….
• The name resolution information needs to be provided on
the /etc/resolv.conf file
– nameserver 192.168.0.5
– nameserver 192.168.0.6
• Finally, the network service has to be started using one of
the following commands:
– service networking restart
– /etc/init.d/networking restart
– ifdown eth0 && ifup eth0
38
Ambo University
Network troubleshooting commands(Linux)
• ifconfig
– ifconfig (interface configurator) command is use to
initialize an interface, assign IP Address to interface
and enable or disable interface on demand.
– With this command you can view IP
Address and Hardware / MAC address assign to
interface and also MTU (Maximum transmission unit)
size.
– Example: ifconfig eth0
• ifconfig with interface (eth0) command only shows
specific interface details like IP Address, MAC
Address etc
39
Ambo University
Network troubleshooting…..
• Enable or Disable Specific Interface
– To enable or disable specific interfaces we use the
following commands respectively.
• ifup eth0 – enables eth0 interface
• ifdown eth0 – disables eth0 interface
• PING Command
– PING (Packet INternet Groper) command is the best
way to test connectivity between two nodes.
– Whether it is Local Area Network (LAN) or Wide Area
Network (WAN).
– Ping use ICMP (Internet Control Message Protocol) to
communicate to other devices.
40
Ambo University
Network troubleshooting…..
– You can ping host name of ip address using below
command.
• ping 192.168.0.1 – tests connectivity of the current
machine to machine 192.168.0.1
• traceroute command
– traceroute is a network troubleshooting utility which
shows number of hops taken to reach destination also
determine packets traveling path.
– Below we are tracing route to global DNS server IP
Address and able to reach destination also shows path
of that packet is traveling
41
Ambo University
Network troubleshooting…..
42
Ambo University
Network troubleshooting…..
• netstat command
– Netstat (Network Statistic) command display connection
info, routing table information etc.
– To displays routing table information use option as -r.
43
Ambo University
Network troubleshooting…
• dig command
– Dig (domain information groper) query DNS related
information like A Record, CNAME, MX Record etc.
– This command mainly use to troubleshoot DNS related
query.
• nslookup command
– nslookup command also use to find out DNS related
query. The following examples shows A Record (IP
Address) of tecmint.com.
44
Ambo University
Network troubleshooting…..
• host command
– host command helps to find name to IP or IP to name
in IPv4 or IPv6 and also query DNS records.
• hostname command
– hostname is to identify in a network.
– Execute hostname command to see the hostname of
your box.
– One can configure hostname on /etc/hostname file.
45

More Related Content

What's hot (20)

PPT
Subnetting
Gichelle Amon
 
PPTX
Computer Networking
kieshore
 
PPTX
Personal Area Network
Faizan Rasool
 
PPTX
Wireless network
Devyani Vaidya
 
PPT
Packet tracer
Imdad Ullah
 
PPTX
Computer Networking.
mvenkat2016
 
PPTX
Routers.ppt
kirbadh
 
PPT
basic networking
Anmol Bagga
 
PPT
Cisco Packet Tracer Overview
Ali Usman
 
PPTX
CCNA PPT
AIRTEL
 
PPSX
Subnetting
selvakumar_b1985
 
PPT
Network Interface Card
sourabh4u07
 
PDF
Advanced computer network lab manual (practicals in Cisco Packet tracer)
VrundaBhavsar
 
PPTX
What is a static ip address
Hexa Howe
 
PPT
networking
Pooja Dhiman
 
PDF
Computer Network
Coky Fauzi Alfi
 
PPT
Networking concepts
ritajindal2
 
PPTX
Peer to-peer networks
Nkosinathi Lungu
 
PPT
Circuit and packet_switching
hoanv
 
PPTX
CCNA Course Training Presentation
Rohit Singh
 
Subnetting
Gichelle Amon
 
Computer Networking
kieshore
 
Personal Area Network
Faizan Rasool
 
Wireless network
Devyani Vaidya
 
Packet tracer
Imdad Ullah
 
Computer Networking.
mvenkat2016
 
Routers.ppt
kirbadh
 
basic networking
Anmol Bagga
 
Cisco Packet Tracer Overview
Ali Usman
 
CCNA PPT
AIRTEL
 
Subnetting
selvakumar_b1985
 
Network Interface Card
sourabh4u07
 
Advanced computer network lab manual (practicals in Cisco Packet tracer)
VrundaBhavsar
 
What is a static ip address
Hexa Howe
 
networking
Pooja Dhiman
 
Computer Network
Coky Fauzi Alfi
 
Networking concepts
ritajindal2
 
Peer to-peer networks
Nkosinathi Lungu
 
Circuit and packet_switching
hoanv
 
CCNA Course Training Presentation
Rohit Singh
 

Similar to Chapter 5 Network Configuration Basics.ppt (20)

PPT
Ip Addressing Basics
tmavroidis
 
PDF
The Network Ip Address Scheme
Erin Rivera
 
PPT
CCNA IP Addressing
Dsunte Wilson
 
PPT
Ip address and subnetting
IGZ Software house
 
PDF
Chapter 8 - IP Subnetting, Troubleshooting and Introduction to NAT 9e
adpeer
 
PDF
Course 102: Lecture 20: Networking In Linux (Basic Concepts)
Ahmed El-Arabawy
 
PDF
Basics of IP address ,IP-address classes, Subnet mask
SrElsin
 
PPT
Unit05
Nurul Nadirah
 
PDF
[Ccna] subnetting & vlsm
1 2d
 
PPT
Computer Networking: Subnetting and IP Addressing
Bisrat Girma
 
PPT
Mod6
Alam Garcia
 
PPTX
Lecture 4-Internetworking-Concepts (view-only).pptx
ShaimasafaaldinBahaa1
 
PPTX
03 coms 525 tcpip - ip address
Palanivel Kuppusamy
 
PPTX
Ip address and subnet masking final
NeerajBhardwaj57
 
PPT
Dasar komputer chapter8
teknik komputer ui
 
PPTX
Week 2 - Computer networks lab - ACU.pptx
NourhanTarek23
 
PDF
Class note.2.....nazmun nahar 1834902176
Nazmun Nahar
 
PPTX
IP Subneting and Bassic network fundamental.pptx
jaxahi2226
 
PDF
13788 3
arahman2894
 
PPTX
Networking Basics with Linux
Henry Osborne
 
Ip Addressing Basics
tmavroidis
 
The Network Ip Address Scheme
Erin Rivera
 
CCNA IP Addressing
Dsunte Wilson
 
Ip address and subnetting
IGZ Software house
 
Chapter 8 - IP Subnetting, Troubleshooting and Introduction to NAT 9e
adpeer
 
Course 102: Lecture 20: Networking In Linux (Basic Concepts)
Ahmed El-Arabawy
 
Basics of IP address ,IP-address classes, Subnet mask
SrElsin
 
[Ccna] subnetting & vlsm
1 2d
 
Computer Networking: Subnetting and IP Addressing
Bisrat Girma
 
Lecture 4-Internetworking-Concepts (view-only).pptx
ShaimasafaaldinBahaa1
 
03 coms 525 tcpip - ip address
Palanivel Kuppusamy
 
Ip address and subnet masking final
NeerajBhardwaj57
 
Dasar komputer chapter8
teknik komputer ui
 
Week 2 - Computer networks lab - ACU.pptx
NourhanTarek23
 
Class note.2.....nazmun nahar 1834902176
Nazmun Nahar
 
IP Subneting and Bassic network fundamental.pptx
jaxahi2226
 
13788 3
arahman2894
 
Networking Basics with Linux
Henry Osborne
 
Ad

More from anwarkade1 (16)

PPTX
Chapter-twoChapter-three automata and complexity theory .pptx
anwarkade1
 
PPT
Chapter-three automata and complexity theory.ppt
anwarkade1
 
PDF
Construction of a predictive parsing table.pdf
anwarkade1
 
PPTX
Deterministic Finite Automata (DFA).pptx
anwarkade1
 
PPTX
INSTAL AND OPTIMIZE OPERATING SYSTEM WINDOWS
anwarkade1
 
PPTX
tvet management system for analysis in school or college
anwarkade1
 
PPTX
Computer Hardware Technology PowerPoint Templates.pptx
anwarkade1
 
PPTX
BUSINESS PLAN PRERARATION GUIDE FINAL PPT.pptx
anwarkade1
 
PPTX
introduction of enter pruner lecture note
anwarkade1
 
PPTX
group 3 bussiness plan FOR MANAUFACTURIN
anwarkade1
 
PPTX
window server 2008 mail configuration
anwarkade1
 
PPT
Information Technology.ppt
anwarkade1
 
PPT
informatics1.ppt
anwarkade1
 
PPT
chapter one Introduction to HCI.ppt
anwarkade1
 
PPT
Chapter 9 TCP IP Reference Model.ppt
anwarkade1
 
PPT
chapter 3 linux-lecture.ppt
anwarkade1
 
Chapter-twoChapter-three automata and complexity theory .pptx
anwarkade1
 
Chapter-three automata and complexity theory.ppt
anwarkade1
 
Construction of a predictive parsing table.pdf
anwarkade1
 
Deterministic Finite Automata (DFA).pptx
anwarkade1
 
INSTAL AND OPTIMIZE OPERATING SYSTEM WINDOWS
anwarkade1
 
tvet management system for analysis in school or college
anwarkade1
 
Computer Hardware Technology PowerPoint Templates.pptx
anwarkade1
 
BUSINESS PLAN PRERARATION GUIDE FINAL PPT.pptx
anwarkade1
 
introduction of enter pruner lecture note
anwarkade1
 
group 3 bussiness plan FOR MANAUFACTURIN
anwarkade1
 
window server 2008 mail configuration
anwarkade1
 
Information Technology.ppt
anwarkade1
 
informatics1.ppt
anwarkade1
 
chapter one Introduction to HCI.ppt
anwarkade1
 
Chapter 9 TCP IP Reference Model.ppt
anwarkade1
 
chapter 3 linux-lecture.ppt
anwarkade1
 
Ad

Recently uploaded (20)

PDF
Apache CloudStack 201: Let's Design & Build an IaaS Cloud
ShapeBlue
 
PDF
Persuasive AI: risks and opportunities in the age of digital debate
Speck&Tech
 
PPTX
Building a Production-Ready Barts Health Secure Data Environment Tooling, Acc...
Barts Health
 
PDF
Empowering Cloud Providers with Apache CloudStack and Stackbill
ShapeBlue
 
PDF
Windsurf Meetup Ottawa 2025-07-12 - Planning Mode at Reliza.pdf
Pavel Shukhman
 
PDF
Wojciech Ciemski for Top Cyber News MAGAZINE. June 2025
Dr. Ludmila Morozova-Buss
 
PDF
CIFDAQ Token Spotlight for 9th July 2025
CIFDAQ
 
PPTX
Top Managed Service Providers in Los Angeles
Captain IT
 
PDF
LLMs.txt: Easily Control How AI Crawls Your Site
Keploy
 
PDF
HCIP-Data Center Facility Deployment V2.0 Training Material (Without Remarks ...
mcastillo49
 
PDF
SWEBOK Guide and Software Services Engineering Education
Hironori Washizaki
 
PDF
Predicting the unpredictable: re-engineering recommendation algorithms for fr...
Speck&Tech
 
PDF
DevBcn - Building 10x Organizations Using Modern Productivity Metrics
Justin Reock
 
PPTX
Building Search Using OpenSearch: Limitations and Workarounds
Sease
 
PDF
Why Orbit Edge Tech is a Top Next JS Development Company in 2025
mahendraalaska08
 
PDF
CloudStack GPU Integration - Rohit Yadav
ShapeBlue
 
PDF
Women in Automation Presents: Reinventing Yourself — Bold Career Pivots That ...
DianaGray10
 
PPTX
Building and Operating a Private Cloud with CloudStack and LINBIT CloudStack ...
ShapeBlue
 
PDF
July Patch Tuesday
Ivanti
 
PDF
Building Resilience with Digital Twins : Lessons from Korea
SANGHEE SHIN
 
Apache CloudStack 201: Let's Design & Build an IaaS Cloud
ShapeBlue
 
Persuasive AI: risks and opportunities in the age of digital debate
Speck&Tech
 
Building a Production-Ready Barts Health Secure Data Environment Tooling, Acc...
Barts Health
 
Empowering Cloud Providers with Apache CloudStack and Stackbill
ShapeBlue
 
Windsurf Meetup Ottawa 2025-07-12 - Planning Mode at Reliza.pdf
Pavel Shukhman
 
Wojciech Ciemski for Top Cyber News MAGAZINE. June 2025
Dr. Ludmila Morozova-Buss
 
CIFDAQ Token Spotlight for 9th July 2025
CIFDAQ
 
Top Managed Service Providers in Los Angeles
Captain IT
 
LLMs.txt: Easily Control How AI Crawls Your Site
Keploy
 
HCIP-Data Center Facility Deployment V2.0 Training Material (Without Remarks ...
mcastillo49
 
SWEBOK Guide and Software Services Engineering Education
Hironori Washizaki
 
Predicting the unpredictable: re-engineering recommendation algorithms for fr...
Speck&Tech
 
DevBcn - Building 10x Organizations Using Modern Productivity Metrics
Justin Reock
 
Building Search Using OpenSearch: Limitations and Workarounds
Sease
 
Why Orbit Edge Tech is a Top Next JS Development Company in 2025
mahendraalaska08
 
CloudStack GPU Integration - Rohit Yadav
ShapeBlue
 
Women in Automation Presents: Reinventing Yourself — Bold Career Pivots That ...
DianaGray10
 
Building and Operating a Private Cloud with CloudStack and LINBIT CloudStack ...
ShapeBlue
 
July Patch Tuesday
Ivanti
 
Building Resilience with Digital Twins : Lessons from Korea
SANGHEE SHIN
 

Chapter 5 Network Configuration Basics.ppt

  • 1. Objectives: Chapter 5 Network Configuration Basics  IPv4 vs IPv6 Addressing Firewall configuration Network Interface Configuration Linux Network Troubleshooting commands
  • 2. Ambo University 2 Internet Architecture • Two computers, anywhere in the world, following certain hardware, software, protocol specifications, can communicate, reliably even when not directly connected. • LANs are no longer scalable beyond a certain number of stations or geographic separation.
  • 3. Ambo University 3 IP Address as a 32-Bit Binary Number Internet Addresses
  • 6. Ambo University 6 Hosts for Classes of IP Addresses Class A (24 bits for hosts) 224 - 2* = 16,777,214 maximum hosts Class B (16 bits for hosts) 216 - 2* = 65,534 maximum hosts Class C (8 bits for hosts) 28 - 2* = 254 maximum hosts * Subtracting the network and broadcast reserved address
  • 7. Ambo University 7 IPv4 Address Classes Class D Addresses • A Class D address begins with binary 1110 in the first octet. • First octet range 224 to 239. • Class D address can be used to represent a group of hosts called a host group, or multicast group. Class E Addresses • First octet of an IP address begins with 1111 • First octet range 240 to 255. • Class E addresses are reserved for experimental purposes and should not be used for addressing hosts or multicast groups.
  • 8. Ambo University 8 IP Addresses as Decimal Numbers
  • 9. Ambo University 9 An IP address such as 176.10.255.255 that has all binary 1s in the host bit positions is reserved for the broadcast address. An IP address such as 176.10.0.0 that has all binary 0s in the host bit positions is reserved for the network address. Network IDs and Broadcast Addresses
  • 10. Ambo University Private Addresses • These addresses are called non-routable addresses. 10
  • 11. Ambo University 11 Reserved Address Space • Network ID • Broadcast address • Hosts for classes of IP addresses • For Example: For the IP Address 192.168.0.1 with Subnet mask 255.255.255.0 – Network ID: 192.168.0.0 – Broadcast Address: 192.168.0.255 – Addresses for Hosts: 192.168.0.1 – 192.168.0.254
  • 12. Ambo University 12 Subnetworks To create a subnet address, a network administrator borrows bits from the original host portion and designates them as the subnet field.
  • 14. Ambo University 14 Subnet Mask • Determines which part of an IP address is the network field and which part is the host field • Follow these steps to determine the subnet mask: – 1. Express the subnetwork IP address in binary form. – 2. Replace the network and subnet portion of the address with all 1s. – 3. Replace the host portion of the address with all 0s. – 4. Convert the binary expression back to dotted-decimal notation. • These days classless Inter Domain Routing (CIDR) is used because subnetting with ordinary Class A, B, C is not adequate.
  • 15. Ambo University 15 Subnet mask in decimal = 255.255.240.0 Subnet Mask
  • 16. Ambo University 16 Range of Bits Needed to Create Subnets
  • 18. Ambo University 18 Class B address with 8 bits borrowed for the subnet 130.5.2.144 (8 bits borrowed for subnetting) routes to subnet 130.5.2.0 rather than just to network 130.5.0.0. Determining Subnet Mask Size
  • 19. Ambo University 19 The address 197.15.22.131 would be on the subnet 197.15.22.128. 11000101 00001111 00010110 100 00011 Network Field SN Host Field Class C address 197.15.22.131 with a subnet mask of 255.255.255.224 (3 bits borrowed) Determining Subnet Mask Size
  • 21. Ambo University 21 The router connects subnetworks and networks. IP Configuration on a Network Diagram
  • 22. Ambo University 22 Using /24 subnet... 190.52.1.2 190.52.2.2 190.52.3.2 Network Network Subnet Host But internal routers think all these addresses are on different networks, called subnetworks Internet routers still “see” this net as 190.52.0.0 Class B Network Network Host Host Given the Class B address 190.52.0.0 Subnet Example
  • 23. Ambo University 23 Using the 3rd octet, 190.52.0.0 was divided into: 190.52.1.0 190.52.2.0 190.52.3.0 190.52.4.0 190.52.5.0 190.52.6.0 190.52.7.0 190.52.8.0 190.52.9.0 190.52.10.0 190.52.11.0 190.52.12.0 190.52.13.0 190.52.14.0 190.52.15.0 190.52.16.0 190.52.17.0 190.52.18.0 190.52.19.0 and so on ... Network Network Subnet Host Subnet Example
  • 24. Ambo University 24 Subnet Example Network Network Subnet Host Network address 190.52.0.0 with /16 network mask 190 52 0 Host 190 52 1 Host 190 52 2 Host Using Subnets: subnet mask 255.255.255.0 or /24 190 52 3 Host 190 52 Etc. Host 190 52 254 Host 190 52 255 Host 255 Subnets 28 - 1 Cannot use last subnet as it contains broadcast address Subnets
  • 25. Ambo University 25 Subnet Example Network Network Subnet Host Subnet 0 (all 0’s subnet) issue: The address of the subnet, 190.52.0.0/24 is the same address as the major network, 190.52.0.0/16. 190 52 0 Host 190 52 1 Host 190 52 Etc. Host 190 52 254 Host 190 52 255 Host 255 Subnets 28 - 1 Subnets Last subnet (all 1’s subnet) issue: The broadcast address for the subnet, 190.52.255.255 is the same as the broadcast address as the major network, 190.52.255.255.
  • 26. Ambo University 26 The number of lost IP addresses with a Class C network depends on the number of bits borrowed for subnetting. Host Subnet Schemes
  • 27. Ambo University 27 IP addressing crisis • Address Depletion • Internet Routing Table Explosion
  • 28. Ambo University 28 IPv4 Addressing Subnet Mask • One solution to the IP address shortage was thought to be the subnet mask. • Formalized in 1985 (RFC 950), the subnet mask breaks a single class A, B or C network in to smaller pieces.
  • 29. Ambo University 29 Short Term Solutions: IPv4 Enhancements • CIDR (Classless Inter-Domain Routing) – RFCs 1517, 1518, 1519, 1520 • VLSM (Variable Length Subnet Mask) – RFC 1009 • Private Addressing - RFC 1918 • NAT/PAT (Network Address Translation / Port Address Translation) – RFC
  • 30. Ambo University 30 IPv4 versus IPv6 • IP version 6 (IPv6) has been defined and developed. • IPv6 uses 128 bits rather than the 32 bits currently used in IPv4. • IPv6 uses hexadecimal numbers to represent the 128 bits. IPv4
  • 31. Ambo University 31 Long Term Solution: IPv6 (coming) • IPv6, or IPng (IP – the Next Generation) uses a 128-bit address space, yielding 340,282,366,920,938,463,463,374,607,431,768,211,456 possible addresses. • IPv6 has been slow to arrive • IPv4 revitalized by new features, making IPv6 a luxury, and not a desperately needed fix • IPv6 requires new software; IT staffs must be retrained • IPv6 will most likely coexist with IPv4 for years to come. • Some experts believe IPv4 will remain for more than 10 years.
  • 32. Ambo University Firewall and Its configuration (Linux) • A firewall helps screen out malicious users, viruses, and worms that try to access your network from the Internet. • Firewalls can be hardware or software, and they help prevent unauthorized access to your local area network (LAN) from the Internet by blocking incoming network traffic that is attempting to use a port that is not open. • A firewall hides information on your LAN from the Internet, such as computer names, network topology, and network device types. • A firewall can also log traffic to and from the LAN. 32
  • 33. Ambo University Firewall configuration…. • Firewall can be provided in three forms: – Hardware firewall – Server Software Firewall – Client Software Firewall • The Linux kernel includes the Netfilter subsystem, which is used to manipulate or decide the fate of network traffic headed into or through your server. • Uncomplicated Firewall (ufw) – The default firewall configuration tool for Ubuntu is ufw. – ufw by default is initially disabled. 33
  • 34. Ambo University Firewall configuration… • The following are some examples of how to use ufw: – First, ufw needs to be enabled. From a terminal prompt enter: • sudo ufw enable – To open a port (ssh in this example): • sudo ufw allow 22 – Rules can also be added using a numbered format: • sudo ufw insert 1 allow 80 – Similarly, to close an opened port: • sudo ufw deny 22 – To remove a rule, use delete followed by the rule: • sudo ufw delete deny 22 34
  • 35. Ambo University Firewall configuration… • It is also possible to allow access from specific hosts or networks to a port. – The following example allows ssh access from host 192.168.0.2 to any ip address on this host: • sudo ufw allow proto tcp from 192.168.0.2 to any port 22 – Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh access from the entire subnet. – ufw can be disabled by: • sudo ufw disable – To see the firewall status, enter: • sudo ufw status 35
  • 36. Ambo University Firewall configuration…. – And for more verbose status information use: • sudo ufw status verbose – To view the numbered format: • sudo ufw status numbered 36
  • 37. Ambo University Network Interface Configuration (Linux) • A linux box should have its NIC configured to communicated on the network. • This can be supplied by the DHCP Server dynamically or supplied statically by the administrator • For providing the static address the file /etc/network/interfaces needs to edited: – auto eth0 – iface eth0 inet static – address 192.168.0.10 – netmask 255.255.255.0 – gateway 192.168.0.1 – network 192.168.0.0 – broadcast 192.168.0.255 37
  • 38. Ambo University NIC Configuration…. • The name resolution information needs to be provided on the /etc/resolv.conf file – nameserver 192.168.0.5 – nameserver 192.168.0.6 • Finally, the network service has to be started using one of the following commands: – service networking restart – /etc/init.d/networking restart – ifdown eth0 && ifup eth0 38
  • 39. Ambo University Network troubleshooting commands(Linux) • ifconfig – ifconfig (interface configurator) command is use to initialize an interface, assign IP Address to interface and enable or disable interface on demand. – With this command you can view IP Address and Hardware / MAC address assign to interface and also MTU (Maximum transmission unit) size. – Example: ifconfig eth0 • ifconfig with interface (eth0) command only shows specific interface details like IP Address, MAC Address etc 39
  • 40. Ambo University Network troubleshooting….. • Enable or Disable Specific Interface – To enable or disable specific interfaces we use the following commands respectively. • ifup eth0 – enables eth0 interface • ifdown eth0 – disables eth0 interface • PING Command – PING (Packet INternet Groper) command is the best way to test connectivity between two nodes. – Whether it is Local Area Network (LAN) or Wide Area Network (WAN). – Ping use ICMP (Internet Control Message Protocol) to communicate to other devices. 40
  • 41. Ambo University Network troubleshooting….. – You can ping host name of ip address using below command. • ping 192.168.0.1 – tests connectivity of the current machine to machine 192.168.0.1 • traceroute command – traceroute is a network troubleshooting utility which shows number of hops taken to reach destination also determine packets traveling path. – Below we are tracing route to global DNS server IP Address and able to reach destination also shows path of that packet is traveling 41
  • 43. Ambo University Network troubleshooting….. • netstat command – Netstat (Network Statistic) command display connection info, routing table information etc. – To displays routing table information use option as -r. 43
  • 44. Ambo University Network troubleshooting… • dig command – Dig (domain information groper) query DNS related information like A Record, CNAME, MX Record etc. – This command mainly use to troubleshoot DNS related query. • nslookup command – nslookup command also use to find out DNS related query. The following examples shows A Record (IP Address) of tecmint.com. 44
  • 45. Ambo University Network troubleshooting….. • host command – host command helps to find name to IP or IP to name in IPv4 or IPv6 and also query DNS records. • hostname command – hostname is to identify in a network. – Execute hostname command to see the hostname of your box. – One can configure hostname on /etc/hostname file. 45