Wednesday, September 17, 2014

NAT

-NAT is the process of mapping one IP to another IP
-NAT is used to save public IP
-It provides security by hiding the internal IP

Types of NAT

-Static NAT (one to one)
  • One private IP is mapped to one public IP
  • Generally used for hosting public servers
-Dynamic NAT (many to many)
  • Many private IPs are mapped to many public IPs
  • Can only be configured for outbound trafiic
-PAT (many to one)
  • Many private IPs are mapped to one public IP
  • All users can access internet at the same time
  • Can only be configured for outbound traffic

-Practically what we do is dynamic source or destination NAT which depends on the purpose
-In case of accessing a public hosted web server, we are using a dynamic destination NAT rule, where all the requests coming to the public IP of that web server will be mapped to a internal private IP
-A group of internal users accessing internet can be done using a dynamic source NAT rule, where all the internal requests are mapped to a external public IP




Basic command line and run utilities

cmd utilities :

ipconfig - network configuration details
nslookup - dns details
ping - checks connectivity
wuauclt /detectnow - checks Windows updates from WSUS server
ipconfig /flushdns - flush dns entries
ipconfig /registerdns - register dns entries
gpupdate /force - updates group policies

run utilities :

mstsc - RDP
windowsupdate.log - log file for Windows updates
services.msc - services
gpmc.msc - group policy management
dsa.msc -AD users and computers
inetcpl.cpl - Internet properties
diskmgmt.msc - disk management
compmgmt.msc - computer management
devmgmt.msc - device manager
eventvwr.msc - event viewer
msconfig - system configuration
regedit - registry editor


Router

-Router is a Layer -3 device (i.e, works in network layer)
-Main function of a router is routing/ internetworking
-It can be a dedicated hardware router or a software router
-In a production environment we use dedicated hardware routing devices (eg: CISCO, JUNIPER etc.)
-A router does packet switching, i.e, from one interface to another interface of the same router
-It also does packet forwarding
-It performs best path selection
-Considering the CISCO hierarchical model we have different types of routers

  • Access layer routers
  • Distribution layer routers
  • Core layer routers
-A hardware router can be of two types

  • Modular router (up-gradable) 
  • Fixed router ( not up-gradable)




VLAN

-VLAN stands for Virtual LAN
-VLAN provides L2 security
-Divides a single broadcast domain into multiple broadcast domains
-By default all ports of a the switch are in VLAN 1
-VLAN 1 is known as administrative VLAN or management VLAN
-VLAN can be created from 2 - 1001

Static VLAN

-Static VLANs are port based and hence they are also called as port based VLANs
-Ports have to be manually assigned to a VLAN
-A port can be a member of a single VLAN

Dynamic VLAN

-Dynamic VLANs are based on the MAC address of a device
-Switch automatically assigns the port to a VLAN
-Each port can be a member of multiple VLANs
-For dynamic VLAN configuration, a software called VMPS (VLAN Management Policy Server) is needed

OSI layers

OSI stands for Open Systems Interconnect is a conceptual model that standardize the communication between networked systems. The 7 layers of OSI model is as follows :

-Physical layer
-Data link layer
-Network layer
-Transport layer
-Session layer
-Presentation layer
-Application layer

IP address

IPV4 - 32 bit address
IPV6 - 128 bit address

Public addresses

Format : x.x.x.x (where each 'x' is a 8 bit value)
IPV4 is divided into the following 5 classes, which is based on the decimal value of the first octet

Class A :     0 - 126.x.x.x (first octet forms network ID-NID and last three octets forms host ID-HID)
Class B : 128 - 191.x.x.x (first 2 octets forms NID and last 2 octets forms HID)
Class C : 192 - 223.x.x.x (first 3 octets forms NID and last octet forms HID)
Class D : 224 - 239.x.x.x (used for multicast)
Class E : 240 - 255.x.x.x (used for research purpose)

Private addresses

Class A
Range : 10.0.0.0 - 10.255.255.255
Total number of networks : 1

Class B
Range : 172.16.0.0 - 172.31.255.255
Total number of networks : 16

Class C
Range : 192.168.0.0 - 192.168.255.255
Total number of networks : 256



RAID

RAID stands for Redundant Array of Inexpensive/ Independent Disks. There are different RAID levels and the level you choose for your system depends on the amount of storage you require and the way you access your data and several other factors like cost, redundancy etc. Common RAID levels are 0, 1 and 5.

RAID 0
-Data stripping
-Improved performance
-No redundancy

RAID 1
-Mirroring
-Redundant

RAID 5
-Data stripping + evenly distributed parity
-Redundancy + improved performance
-Minimum 3 hard disks required

RAID is mostly used in a production setup or where redundancy and performance is a major concern. It is configured by using RAID controllers. For example, in the case of Dell PowerEdge R710 servers, RAID is configured using PERC (PowerEdge Raid Controller). Press Ctrl+R to access the PERC BIOS Configuration Utility after starting or restarting the PowerEdge server.

Port numbers

Common port numbers :

7 Echo
20 FTP Data
21 FTP Control
22 SSH
23 Telnet
25 SMTP
53 DNS
67 DHCP
69 TFTP
80 HTTP
88 Kerberos
102 MS Exchange
110 POP3
123 NTP
143 IMAP4
161 SNMP
389 LDAP
443 HTTPS

Protocol numbers :

ICMP
IGMP
4 IP-within-IP
TCP
EGP
IGP
17 UDP

Looking for a job in IT IMS sector ?

If you are looking for a job in IT IMS sector, there are few things you should look into.

-You can either choose networking or systems/ server side.

-If you are good in routing, switching, vlan's, vpn's, network security, firewalls, communication links, Cisco/ Juniper devices etc. you can go with the network administration.

-If you are more interested in DNS, DHCP, mail servers, ftp servers, domain controllers etc. and  good in Windows/ Linux servers, you can proceed with server administration.

-If you are skilled in operating and maintaining hypervisors like ESXI, Hyper-V etc. you can work as a virtualization expert.

-If you are good in installation and operation of storage devices/ servers like Netapp, EMC etc. with networking knowledge, then you can work as a storage administrator.

-If you are into AWS and Azure, then you can be a cloud engineer. 

What is IT IMS ?

IT IMS refers to IT Infrastructure Management Services (IMS). Information Technology is critical in every business now-a days; right from entertainment, media, banking, automobile, education and so on. The use of computing devices and networked systems are growing rapidly. It is vital for a business, to keep its hardware resources, networks and applications fully functional, available and running in 24/7 mode. The discipline of managing and maintaining the hardware devices, networks and applications for continuous service availabiltity with no down time is referred as IT IMS.

It mainly covers the following areas :

-End user computing
-Desktop administration
-OS administration
-Desktop troubleshooting and maintenance
-Server administration
-Server monitoring
-Networking (routing and switching)
-Network security
-Network monitoring
-Service desk operations
-Virtualization of resources and its management
-Data center operations and maintenance
-Management of on-premise as well as cloud IT infrastructure etc.

IT IMS includes multiple operations and it can be broadly classified into three, based on the process models and operational levels.

1.Service desk operations
2.Network administration
3.Server administration