Table of Contents Course Introduction i Table of Contents.......................................................................................... iii About This Course ........................................................................................ ix About CompTIA Certifications..................................................................... xiii Module 1 / Local Area Networks 1 Module 1 / Unit 1 Topologies and the OSI Model 3 Key Features of Networks..............................................................................4 Network Topologies .......................................................................................6 The OSI Model.............................................................................................11 Physical Layer .............................................................................................14 Data Link Layer............................................................................................14 Network Layer..............................................................................................17 Transport Layer ...........................................................................................18 Upper Layers ...............................................................................................19 OSI Model Summary....................................................................................21 Module 1 / Unit 2 Ethernet 23 Transmission Media.....................................................................................24 Media Access Control ..................................................................................27 Broadcast Domains......................................................................................28 Ethernet Frames ..........................................................................................30 Ethernet Deployment Standards ..................................................................32 MAC Addressing..........................................................................................35 Address Resolution Protocol (ARP) .............................................................37 Packet Sniffers.............................................................................................40 Module 1 / Unit 3 Hubs, Bridges, and Switches 43 Hubs and Bridges ........................................................................................44 Switches ......................................................................................................47 Switch Interface Configuration .....................................................................50 Spanning Tree Protocol (STP) .....................................................................52 Power over Ethernet (PoE) ..........................................................................55 Module 1 / Unit 4 Infrastructure and Design 59 Network Infrastructure Implementations.......................................................60 Planning an Enterprise Campus Network.....................................................61 Network Hierarchy and Distributed Switching...............................................64 Software Defined Networking.......................................................................66 Planning a SOHO Network ..........................................................................67 TCP/IP Protocol Suite ..................................................................................69 Module 1 / Unit 5 Policies and Best Practices 74 Procedures and Standards ..........................................................................75 Safety Procedures .......................................................................................75 Incident Response Policies..........................................................................78 Security and Data Policies...........................................................................79 Password Policy ..........................................................................................84 Employee Policies .......................................................................................85 Module 1 / Summary Local Area Networks 91 Module 2 / IP Addressing 93 Module 2 / Unit 1 Internet Protocol 95 IPv4 .............................................................................................................96 IPv4 Address Structure................................................................................98 Subnet Masks............................................................................................100 IP Routing Basics ......................................................................................101 ipconfig / ifconfig........................................................................................103 ICMP and ping...........................................................................................105 Module 2 / Unit 2 IPv4 Addressing 110 Broadcast, Multicast, and Unicast..............................................................111 Classful Addressing...................................................................................112 Public versus Private Addressing ..............................................................113 Subnetting and Classless Addressing........................................................115 Planning an IPv4 Addressing Scheme.......................................................117 Public Internet Addressing.........................................................................119 Variable Length Subnet Masks (VLSM) .....................................................121 Module 2 / Unit 3 IPv6 Addressing 126 IPv6 Address Format .................................................................................127 IPv6 Addressing Schemes.........................................................................130 IPv6 Address Autoconfiguration................................................................. 134 Migrating to IPv6........................................................................................135 Module 2 / Unit 4 DHCP and APIPA 138 IPv4 Address Autoconfiguration................................................................. 139 Configuring DHCP.....................................................................................142 DHCPv6 ....................................................................................................145 Module 2 / Summary IP Addressing 149 Module 3 / Internetworking 151 Module 3 / Unit 1 Routing 153 Routing Basics...........................................................................................154 Routing Algorithms and Metrics ................................................................. 158 Dynamic Routing Protocols........................................................................160 Administrative Distance and Route Redistribution......................................164 IPv4 and IPv6 Internet Routing ..................................................................165 High Availability Routing ............................................................................166 Installing and Configuring Routers .............................................................167 Routing Troubleshooting Tools ..................................................................169 Module 3 / Unit 2 TCP and UDP 177 Transmission Control Protocol (TCP).........................................................178 User Datagram Protocol (UDP)..................................................................181 TCP and UDP Ports...................................................................................181 Port Scanners ............................................................................................183 Protocol Analyzers .....................................................................................188 Module 3 / Unit 3 Name Resolution and IPAM 191 Host Names and FQDNs ...........................................................................192 Domain Name System...............................................................................194 Configuring DNS Servers...........................................................................196 Resource Records .....................................................................................198 Name Resolution Tools..............................................................................203 IP Address Management (IPAM)................................................................206 Module 3 / Unit 4 Monitoring and Scanning 208 Performance Monitoring.............................................................................209 Network Monitoring Utilities........................................................................210 Logs and Event Management ....................................................................213 Simple Network Management Protocol ......................................................217 Analyzing Performance Metrics..................................................................220 Patch Management....................................................................................222 Vulnerability Scanning ...............................................................................224 Module 3 / Unit 5 Network Troubleshooting 228 Troubleshooting Procedures ......................................................................229 Identifying the Problem ..............................................................................230 Establishing a Probable Cause ..................................................................232 Establishing a Plan of Action......................................................................235 Troubleshooting Hardware Failure Issues..................................................237 Troubleshooting Addressing Issues ...........................................................240 Troubleshooting DHCP Issues...................................................................244 Troubleshooting Name Resolution .............................................................245 Troubleshooting Services...........................................................................247 Module 3 / Summary Internetworking 249 Module 4 / Applications and Security 251 Module 4 / Unit 1 Applications and Services 253 TCP/IP Services ........................................................................................254 HTTP and Web Servers.............................................................................255 SSL / TLS and HTTPS...............................................................................256 Email (SMTP / POP / IMAP) ......................................................................260 Voice Services (VoIP and VTC)................................................................. 262 Real-time Services Protocols.....................................................................264 Quality of Service ......................................................................................267 Traffic Shaping ..........................................................................................269 Bottlenecks and Load Balancing................................................................270 Multilayer Switches ....................................................................................272 Module 4 / Unit 2 Virtualization, SAN, and Cloud Services 275 Virtualization Technologies........................................................................276 Network Storage Types .............................................................................280 Fibre Channel and InfiniBand ....................................................................282 iSCSI .........................................................................................................284 Cloud Computing.......................................................................................285 Configuring Cloud Connectivity..................................................................288 Module 4 / Unit 3 Network Security Design 293 Security Basics..........................................................................................294 Common Networking Attacks.....................................................................296 Network Segmentation and DMZ...............................................................300 Virtual LANs (VLAN)..................................................................................303 VLAN Trunks .............................................................................................305 Network Address Translation (NAT) ..........................................................309 Device and Service Hardening ..................................................................313 Honeypots and Penetration Tests..............................................................316 Module 4 / Unit 4 Network Security Appliances 319 Basic Firewalls...........................................................................................320 Stateful Firewalls .......................................................................................321 Deploying a Firewall ..................................................................................323 Configuring a Firewall ................................................................................326 Deploying a Proxy .....................................................................................328 Intrusion Detection Systems (IDS) .............................................................331 Denial of Service .......................................................................................336 Module 4 / Unit 5 Authentication and Endpoint Security 340 Authentication and Access Controls ..........................................................341 Social Engineering.....................................................................................343 Authentication Technologies......................................................................346 PKI and Digital Certificates ........................................................................351 Local Authentication ..................................................................................353 RADIUS and TACACS+.............................................................................355 Directory Services .....................................................................................356 Endpoint Security.......................................................................................359 Network Access Control.............................................................................360 Module 4 / Summary Applications and Security 365 Module 5 / Operations and Infrastructure 367 Module 5 / Unit 1 Network Site Management 371 Network Cabling Solutions .........................................................................372 Distribution Frames....................................................................................374 Change and Configuration Management....................................................376 Network Documentation and Diagrams......................................................378 Labeling .....................................................................................................381 Physical Security Devices ..........................................................................382 Business Continuity and Disaster Recovery...............................................386 Network Link Management ........................................................................389 Power Management...................................................................................391 Backup Management .................................................................................394 Module 5 / Unit 2 Installing Cabled Networks 397 Twisted Pair Cable (UTP / STP / ScTP) .....................................................398 Twisted Pair Connectors............................................................................401 Wiring Tools and Techniques.....................................................................403 Cable Testing Tools ...................................................................................404 Troubleshooting Wired Connectivity...........................................................407 Other Copper Cable Types ........................................................................409 Fiber Optic Cable and Connectors .............................................................412 Transceivers and Media Converters...........................................................416 Module 5 / Unit 3 Installing Wireless Networks 419 Wireless Standards (IEEE 802.11).............................................................420 Wireless Network Topologies.....................................................................423 Wireless Site Design..................................................................................424 Troubleshooting Wireless Connectivity ......................................................428 Wireless Security .......................................................................................433 Wi-Fi Authentication...................................................................................435 Extensible Authentication Protocol.............................................................437 Troubleshooting Wireless Security.............................................................440 Wireless Controllers...................................................................................442 Module 5 / Unit 4 Installing WAN Links 445 Wide Area Networks (WAN).......................................................................446 Telecommunications Networks ..................................................................448 Modern Telecommunications Networks .....................................................451 Local Loop Services...................................................................................453 Installing WAN Links ..................................................................................458 Wireless WAN Services .............................................................................462 Internet of Things.......................................................................................464 Module 5 / Unit 5 Configuring Remote Access 468 Remote Access Services (RAS) ................................................................469 MPLS and PPP..........................................................................................472 SIP Trunks................................................................................................. 474 Virtual Private Networks (VPN)..................................................................475 SSL / TLS / DTLS VPNs ............................................................................477 IPsec .........................................................................................................478 Internet Key Exchange / ISAKMP ..............................................................482 Remote Access Servers ............................................................................483 Remote Administration Tools.....................................................................485 Managing Network Appliances ..................................................................489 Remote File Access...................................................................................491 Module 5 / Summary Operations and Infrastructure 495 Taking the Exam 497 Answers for Review Questions 508 Glossary 527 Index 547