Transport Layer Ports and Connections
Mod 6.1 Transport and Application Layer Protocols
Objectives 1.4 | 5.5
Layer 4 - delivery of multiplexed application data
Transmission Control Protocol (TCP)
Mod 6.1 Transport and Application Layer Protocols
Objectives 1.4 | 5.5
TCP Handshake and Teardown
Mod 6.1 Transport and Application Layer Protocols
Objectives 1.4 | 5.5
User Datagram Protocol
Mod 6.1 Transport and Application Layer Protocols
Objectives 1.4 | 5.5
Netstat command Windows
Mod 6.1 Transport and Application Layer Protocols
Objectives 1.4 | 5.5
netstat - allows you to check the state of ports on the local host
- service misconfigurations
- identify suspicious remote connections on local host or remote IP address
Common TCP and UDP Ports
Mod 6.1 Transport and Application Layer Protocols
Objectives 1.4 | 5.5
Look at book 6.1.6
Netstat command LINUX
Mod 6.1 Transport and Application Layer Protocols
Objectives 1.4 | 5.5
netstat:
- (-t) TCP
- (-u) UDP
- (-w) raw connections
- (-x) UNIX sockets/local server ports
- (-a) ports in the listening state in the output
- (-l(L)) only ports in the listening state, omitting established connections
- (-n) displays ports and addresses in numerical format
- (-4, -6) IPv4, IPv6
- (-I(i)) Ethernet statistics
- (-r) displays the routing table
DHCP
Mod 6.2 Dynamic Host Configuration Protocol
Objectives 1.4 | 3.4
4 Step
- Discover
- Offer
- Request
- Ack
DHCP Server Configuration
Mod 6.2 Dynamic Host Configuration Protocol
Objectives 1.4 | 3.4
DHCP Options
Mod 6.2 Dynamic Host Configuration Protocol
Objectives 1.4 | 3.4
Lease Time
- T1 Timer: renew the lease when at least half the lease’s period
- T2 Timer: DHCP server does not respond, client attempts to rebind the same lease configuration with any available DHCP server
DHCP Options: DHCP configuration that assigns additional parameters, such as DNS server addresses. In DHCPv4, an option is used to identify the default gateway address
- default gateway
- ip address(es)
- DNS suffix domain name
- synchronization (NTP), file transfer (TFTP), VoIP proxy
DHCP Reservations & Exclusions
Mod 6.2 Dynamic Host Configuration Protocol
Objectives 1.4 | 3.4
Static assignments: uses IP address outside of DHCP scope
- lose the advantages of centralized configuration management
Reservations: mapping of a MAC address or interface ID to a specific IP address within the DHCP server’s address pool (static/fixed)
- automatically allocated reservation: refers to address leased permanently
Automatic Private IP Addressing
Mod 6.3 APIPA and SLAAC
Objectives 1.7 | 3.4
Automatic Private IP Addressing (APIPA) 169.254: cannot contact a DHCP server to revert to using an address from the range 169.254.x.y local link address
IPv6 Interface Autoconfiguration and Testing
Mod 6.3 APIPA and SLAAC
Objectives 1.7 | 3.4
Neighbor Discovery (ND) Protocol: performs some of the functions on an IPv6 network that ARP and ICMP perform under IPv4
- Address autoconfiguration
IPv6 Interface Autoconfiguration and Testing
Mod 6.3 APIPA and SLAAC
Objectives 1.7 | 3.4
Stateless Address Autoconfiguration: used by IPv6, IPv4 uses link local addressing
- Mechanism used in IPv6 for hosts to assign addresses to interfaces without requiring manual intervention
- Host generates a link local address and uses Neighbor Discovery (ND) messages to test that it is unique
- host listens for a router advertisement (RA) or transmits a router solicitation (RS) using ND protocol messaging
- router can either provide a network prefix
- direct the host to a DHCPv6 server to perform stateful autoconfiguration
- perform some combination of stateless and stateful configuration
IPv6 Interface Autoconfiguration and Testing
Mod 6.3 APIPA and SLAAC
Objectives 1.7 | 3.4
ICMPv6
Error messaging: ICMPv6 supports the same sort of destination unreachable and time exceeded messaging as ICMPv4, Packet Too Big class of error, routers are no longer responsible for packet fragmentation and reassembly
Informational messaging: supports ICMPv4 functions, such as echo and redirect, plus a whole new class of messages designed to support ND(Neighbor Discovery) and MLD(Multicast Listener Discovery)
DHCPv6 Server Configuration
Mod 6.3 APIPA and SLAAC
Objectives 1.7 | 3.4
DHCPv6 Server Configuration: DHCPv6 is often just used to provide additional option settings, rather than leases for host IP addresses
IPv6 does not support broadcast, clients use the multicast address ff02::1:2
Port 546 (clients)
Port 547 (servers)
DHCPv6 Server Configuration
Mod 6.3 APIPA and SLAAC
Objectives 1.7 | 3.4
Stateless Mode Steps:
(1) NDP Router Solicitation
(2) NDP Router Advertisement
(3) DCHPv6 Solicit Message
(4) DHCPv6 Advertise Message
(5) DHCPv6 Information Request message
(6) DHCPv6 Reply Message
Stateful Mode Steps:
(1) NDP Router Solicitation
(2) NDP Router Advertisement
(3) DHCPv6 Solicit Message
(4) DHCPv6 Advertise Message
(5) DHCPv6 Information Request Message
(6) DHCPv6 Reply Message
DHCP Relay and IP Helper
Mod 6.4 DHCP Relay and Troubleshooting
Objective 3.4 | 5.3
DHCP relay: configured to provide forwarding of DHCP traffic between subnets, RFC 1542 compliant
IP Helper: configured on routers to allow set types of broadcast traffic (including DHCP) to be forwarded to an interface
DHCP Issues
Mod 6.4 DHCP Relay and Troubleshooting
Objective 3.4 | 5.3