Ex 1 chapter06-i-pv4-tony_chen

© 2006 Cisco Systems, Inc. All rights reserved. Cisco PublicITE 1 Chapter 6 1
Addressing The Network – IPv4
 Network Fundamentals – Chapter 6
 Modified by Tony Chen

Notes:
 If you see any mistake on my PowerPoint slides or if
you have any questions about the materials, please
feel free to email me at chento@cod.edu.
Thanks!
Tony Chen
College of DuPage
Cisco Networking Academy

Objectives
 In this chapter, you will learn to:
– Explain the structure IP addressing
and demonstrate the ability to convert
between 8-bit binary and decimal
numbers.
– Given an IPv4 address, classify by
type and describe how it is used in the
network.
– Explain how addresses are assigned to
networks by ISPs and within networks
by administrators.
– Determine the network portion of the
host address and explain the role of
the subnet mask in dividing networks.
– Given IPv4 addressing information and
design criteria, calculate the
appropriate addressing components.
– Use common testing utilities to verify
and test network connectivity and
operational status of the IP protocol
stack on a host.

The Anatomy of an IPv4 Address
 At the Network layer, the packets need to be identified
with the source and destination addresses of the two
end systems.
–Each device on a network must be uniquely defined.
–Each packet has a 32-bit source address and a 32-bit
destination address in the Layer 3 header.
–These addresses are used in network as binary patterns.
–For us in the human network, a string of 32 bits is difficult
to interpret and even more difficult to remember. Therefore,
we represent IPv4 addresses using dotted decimal format.
 Dotted Decimal; Binary; Octet
–Each byte of the binary pattern, called an octet.
•Each decimal number represents one byte or 8 bits, or
an octet.
–Binary address:
•10101100 00010000 00000100 00010100
–Dotted decimal address:
•172.16.4.20

The Anatomy of an IPv4 Address
 Network Portions
–For each IPv4 address, some portion of the high-order bits
represents the network address.
•At Layer 3, we define a network as a group of hosts that have
identical bit patterns in the network address portion of their
addresses.
 Host Portions
–The number of bits used in this host portion determines
the number of hosts that we can have within the network.
•For example, if we need to have at least 200 hosts in a
particular network, we would need to use enough bits in the
host portion to be able to represent at least 200 different bit
patterns.
•To assign a unique address to 200 hosts, we would use the
entire last octet. With 8 bits, a total of 256 different bit patterns
can be achieved. This would mean that the bits for the upper
three octets would represent the network portion.
 Note: Calculating the number of hosts and determining
which portion of the 32 bits refers to the network will be
covered later in this chapter.

Binary to Decimal Conversation
 To understand the operation of a device in a network,
we need to look at addresses and other data the way
the device does - in binary notation.
–This means that we need to have some skill in binary to
decimal conversion.
–Each octet as a decimal number in the range of 0 to 255.
 The base 10 number system
–245 represents:
•245 = (2 * 10^2) + (4 * 10^1) + (5 * 10^0)
•or
•245 = (2 * 100) + (4 * 10) + (5 * 1)
 Binary Numbering System
–In the binary numbering system, the radix is 2.
•The base 2 system only has two digits: 0 and 1.
•Therefore, each position represents increasing powers of 2. In
8-bit binary numbers, the positions represent these quantities:
2^7 2^6 2^5 2^4 2^3 2^2 2^1 2^0
128 64 32 16 8 4 2 1

 When we interpret a byte as a decimal numbe
2^7 2^6 2^5 2^4 2^3 2^2 2^1 2^0
128 64 32 16 8 4 2 1
1 1 1 1 1 1 1 1
–if the digit is a 1, we have the quantity that position represents
–if the digit is a 0, we do not have that quantity
 For example:
 A 1 in each position means that we add the value for that position to the
total.
2^7 2^6 2^5 2^4 2^3 2^2 2^1 2^0
128 64 32 16 8 4 2 1
1 1 1 1 1 1 1 1
128 + 64 + 32 + 16 + 8 + 4 + 2 + 1 = 255
 A 0 in each position indicates that the value for that position is not
added to the total.
2^7 2^6 2^5 2^4 2^3 2^2 2^1 2^0
128 64 32 16 8 4 2 1
0 0 0 0 0 0 0 0
0 + 0 + 0 + 0 + 0 + 0 + 0 + 0 = 0
Address Values
are Between 0
and 255

 See the figure for the steps to convert a
binary address to a decimal address.
 In the example, the binary number:
–10101100000100000000010000010100
 Is converted to:
–172.16.4.20
 Keep these steps in mind:
–Divide the 32 bits into 4 octets.
–Convert each octet to decimal.
–Add a "dot" between each decimal.

Practice: Page 6.1.3
 The activity in the figure
allows you to practice 8-bit
binary conversion as much
as necessary.
 We recommend that you
work with this tool until you
are able to do the conversion
without error.

Decimal to Binary Conversions
 Not only do we need to be able to convert binary
to decimal, we also need to be able to convert
decimal to binary.
–As an example, if a host with the 172.16.4.20 were
using 28 bits for the network address,
–we need to examine the binary in the last octet to
discover that this host is on network 172.16.4.16.
 To begin the conversion process, we start by
determining if the decimal number is equal to or
greater than our largest decimal value.
–In the highest position, if the value is equal to or
greater than 128, we place a 1 in the position. and
subtract 128 from the number being converted.
–If the value is smaller than 128, we place a 0 in the
128-bit position
–We then compare the remainder of this operation
to the next smaller value, 64.
–We continue this process for all the remaining bit
positions.
128 64 32 16 8 4 2 1
convert 172 to 10101100.

 Follow the conversion steps to see how
an IP address is converted to binary.

 The figure summarizes the entire conversion of
172.16.4.20 from dotted decimal notation to binary
notation.

Practice: Page 6.1.5
 The activity in the figure allows
you to practice decimal
conversion to 8-bit binary as
much as necessary.
 We recommend that you work
with this tool until you are able
to do the conversion without
error.

Types of Addresses in an IPv4 Network
 Within the IPv4 network, there are 3 types of
addresses:
–Network address - The address by which we
refer to the network
–Broadcast address - A special address used to
send data to all hosts in the network
–Host addresses - The addresses assigned to
the end devices in the network
 Network Address  10.0.0.0 /24
–For example, we could refer to the network
shown in the figure as "the 10.0.0.0 network."
•This is a convenient way to refer to the network
than using a term like "the first network."
•All hosts in the 10.0.0.0 / 24 network will have the
same network bits.
The lowest address is reserved for the
network address.
•This address has a 0 for each host bit in the host
portion of the address.

Types of Addresses in an IPv4 Network
 Broadcast Address
–The IPv4 broadcast address is a special
address that allows communication to all
the hosts in that network.
The broadcast address uses the highest
address in the network range.
•This is the address in which the bits in the
host portion are all 1s.
–For the network 10.0.0.0 /24 the
broadcast address would be 10.0.0.255.
•This address is also referred to as the
directed broadcast.
 Host Addresses
we assign the values between the
network address and the broadcast
address to the devices in that network.

IPv4 Network: Network Prefixes
 How do we know how many bits represent
the network portion and how many bits
represent the host portion?
–A prefix length.
 The prefix length is the number of bits in
the address in the network portion.
–For example, in 172.16.4.0 /24, the /24 is
the prefix length. This leaves the remaining
8 bits, the last octet, as the host portion.
–Networks are not always assigned a /24
prefix.
•Having a different prefix number changes the
host range and broadcast address for each
network.
•Notice that the network address could remain
the same, but the host range and the
broadcast address are different for the
different prefix lengths.

Calculating Network, Hosts, and Broadcast Address
 For example: 172.16.20.0 /25.  (32 – 25 = 7 bits)
 Network Address:
–With a 25 bit prefix, the last 7 bits are host bits.
–To represent the network address, all of these host bits are '0'.
–This makes the network address 172.16.20.0 /25.
 First Host Address:
–This is always one greater than the network address.
–In this case, the last of the 7 host bits becomes a '1'.
–This makes the lowest host address is 172.16.20.1.
 Broadcast Address
–All 7 host bits used in this network are all '1s'.
–This makes the broadcast address is 172.16.20.127.
 Last Host Address:
–The highest host address for a network is always one less than
the broadcast.
–It means the lowest host bit is a '0' and all other host bits as '1s'.
–This makes the highest host address 172.16.20.126.

 Practice Activity: In the
activity in the figure, you
will calculate the network
address, host addresses,
and broadcast address for
given networks.
 Practice as much as
necessary. We
recommend that you work
with this tool until you are
able to do the conversion
without error.
Page 6.2.2.2

Unicast, Broadcast, and Multicast
 In IPv4, the hosts can communicate 1 of 3 ways:
–Unicast - the process of sending a packet from one host to an individual host
–Broadcast - the process of sending a packet from one host to all hosts in the
network
–Multicast - the process of sending a packet from one host to a selected
group of hosts
•In all 3 cases, the originating host is placed in the packet header as the source
address.

Unicast Traffic
 Unicast is used for normal host-to-host
communication in both a client/server and a
peer-to-peer network.
 Unicast packets use the host address of the
destination device as the destination address
and can be routed through an internetwork.
–Broadcast and multicast, however, use special
addresses as the destination address.
–Broadcasts are generally restricted to the local network.
–Multicast traffic may be limited to the local network or
routed through an internetwork.

Broadcast Traffic
 Because broadcast traffic is used to send packets to all hosts
in the network, it uses a special broadcast address.
–When a host receives a packet with the broadcast address, it
processes the packet as it would to its unicast address.
 Broadcast transmission is used for locating special
services/devices for which the address is not known or when
a host needs to provide information to all the hosts on the
network.
–Mapping upper layer addresses to lower layer addresses (ARP)
–Requesting an address (DHCP)
–Exchanging routing information by routing protocols
 When a host needs information, the host sends a request,
called a query, to the broadcast address.
–All hosts in the network receive and process this query.
–One or more of the hosts with the requested information will
respond, typically using unicast.

Broadcast Traffic
 Broadcast packets usually restricted to the local network.
 There are two types of broadcasts:
–Directed Broadcast
•A directed broadcast is sent to all hosts on a specific network.
–This type of broadcast is useful for sending a broadcast to all hosts on a non-
local network.
–Routers do not forward directed broadcasts by default, they may be
configured to do so.
•For example, for a host outside of the network to communicate with the
hosts within the 172.16.4.0 /24 network, the destination address of the
packet would be 172.16.4.255.
–Limited Broadcast
•The limited broadcast is used for communication that is limited to the
hosts on the local network.
–Routers do not forward this broadcast.
–Routers form the boundary for a broadcast domain.
–For this reason, an IPv4 network is also referred to as a broadcast domain.
•These packets use a destination IP address 255.255.255.255.

Multicast Traffic
 Multicast transmission is designed to conserve the
bandwidth of the IPv4 network.
–To reach multiple destination hosts using unicast
communication, a source host would need to send an
individual packet addressed to each host.
–With multicast, the source host can send a single packet that
can reach thousands of destination hosts.
 Some examples of multicast transmission are:
–Video and audio distribution
–Routing information exchange by routing protocols
–Distribution of software
–News feeds
 Multicast clients and multicast group
–Hosts that wish to receive particular multicast data are called
multicast clients.
•The multicast clients use services initiated by a client program to
subscribe to the multicast group.
–Each multicast group is represented by a single IPv4
multicast destination address.
•When an IPv4 host subscribes to a multicast group, the host
processes packets addressed to this multicast address as well as
packets addressed to its uniquely allocated unicast address.
•IPv4 has set aside a special block of addresses from 224.0.0.0 to
239.255.255.255 for multicast groups addressing.

Reserved IPv4 Address Ranges
 The IPv4 address range is 0.0.0.0 to 255.255.255.255.
–Not all these addresses can be used as host addresses.
 Host Addresses
–an address range of 0.0.0.0 to 223.255.255.255
–However, within this range are many addresses that are
already reserved for special purposes.
 Multicast Addresses
–Multicast address range 224.0.0.0 to 239.255.255.255.
–Additionally, the multicast address is subdivided into:
•Reserved link local addresses: The multicast addresses
224.0.0.0 to 224.0.0.255.
•Globally scoped addresses: The globally scoped addresses
are 224.0.1.0 to 238.255.255.255.
•Limited scope addresses: The multicast addresses 239.0.0.0
to 239.255.255.255
 Experimental Addresses
–Experimental address range 240.0.0.0 to 255.255.255.254
–Currently, these addresses are listed as reserved

Public and Private Addresses
 Public Addresses
–The majority of the addresses are public addresses.
–These addresses are designed to be used in the hosts that are
publicly accessible from the Internet.
 Private addresses
–There are blocks of addresses that require no Internet access.
•10.0.0.0 to 10.255.255.255 (10.0.0.0 /8)
•172.16.0.0 to 172.31.255.255 (172.16.0.0 /12)
•192.168.0.0 to 192.168.255.255 (192.168.0.0 /16)
–Hosts in different networks may use the same private addresses.
–The hosts in the private networks use IP addresses that are
unique within their networking environment.
–The router or firewall device at the perimeter of these private
networks must block or translate these addresses.
 Network Address Translation (NAT)
–With services to translate private addresses to public addresses,
hosts on a privately addressed network can have access to
resources across the Internet.
–The NAT can be implemented at the edge of the private network.
–NAT allows the hosts in the network to "borrow" a public address
for communicating to outside networks.
–Note: NAT will be covered in detail in a subsequent course.
0.0.0.0 to 223.255.255.255

Public and Private Addresses
 Activities: page 6.2.5

Special IPv4 Addresses
 There are certain addresses that cannot be assigned to
hosts.
 There are special addresses that can be assigned to hosts
but with restrictions.
 Network and Broadcast Addresses
–Within each network the first (network) address and last
(broadcast) addresses cannot be assigned to hosts.
 Default Route
–The default route as 0.0.0.0.
–The default route is used when a specific route is not
available.
–This also cover all addresses in the 0.0.0.0 - 0.255.255.255.
 Loopback
–The loopback address 127.0.0.1.
–You can ping the loopback address to test the configuration of
TCP/IP on the local host.
–This also cover all addresses in 127.0.0.0 to
127.255.255.255.

 Link-Local Addresses
–The address block 169.254.0.0 to 169.254.255.255 (169.254.0.0 /
16) are designated as link-local addresses.
–These might be used in a small peer-to-peer network or for a host
that could not automatically obtain an address from a DHCP
server.
–A host must not send a packet with link-local destination address
to any router for forwarding.
 TEST-NET Addresses
–The address block 192.0.2.0 to 192.0.2.255 (192.0.2.0 /24) is set
aside for teaching and learning purposes.
–These addresses can be used in documentation and network
examples.
•network devices will accept these addresses in their configurations.
–You may often find these addresses used with the domain names
example.com or example.net in RFCs, vendor, and protocol
documentation.
–Addresses within this block should not appear on the Internet.

 For more special address see link listed below:
–Local-Link addresses
http://www.ietf.org/rfc/rfc3927.txt?number=3927
–Special-Use IPv4 Addresses
http://www.ietf.org/rfc/rfc3330.txt?number=3330
–Multicast allocation:
http://www.iana.org/assignments/multicast-addresses

Legacy IPv4 Addressing
 Historically, RFC1700 grouped the unicast ranges
into specific sizes called class A, class B, class C,
class D (multicast), and class E (experimental)
addresses.
 Class A Blocks
–A class A address block was designed to support
extremely large networks with more than 16 million
host addresses.
–Class A used a fixed /8 prefix with the first octet to
indicate the network address. The remaining three
octets were used for host addresses.
–All class A addresses required that the most
significant bit of the high-order octet be a zero.
–This meant that there were only 128 possible class
A networks, 0.0.0.0 /8 to 127.0.0.0 /8, before taking
out the reserved address blocks.
–Even though the class A addresses reserved one-
half of the address space, because of their limit of
128 networks, they could only be allocated to
approximately 120 companies or organizations.

 Class B Blocks
–It was designed to support the moderate to large size
networks with more than 65,000 hosts.
–It uses the two high-order octets for the network address.
–The other two octets specified host addresses.
–The most significant 2 bits of the high-order octet were 10.
–The address block for class B is 128.0.0.0 /16 to
191.255.0.0 /16.
–It equally divided 25% of the total IPv4 address among
approximately 16,000 networks.
 Class C Blocks
–This address space was intended to provide addresses for
small networks with a maximum of 254 hosts.
–Class C address blocks used a /24 prefix.
–It uses only the last octet as host addresses with the three
high-order octets used for the network address.
–It is using a fixed value of 110 for the three most significant
bits of the high-order octet.
–This restricted the address block for class C to 192.0.0.0 /
16 to 223.255.255.0 /16.
–It occupied only 12.5% of the total IPv4 address space, it
could provide addresses to 2 million networks.

 Limitations to the Class-based System
–Classful allocation of address space wasted
many addresses, which exhausted the availability
of IPv4 addresses.
•For example, a company that had a network with
260 hosts would need to be given a class B address
with more than 65,000 addresses.
–This classful system was all but abandoned in
the late 1990s
 Classless Addressing
–The system that we currently use is referred to
as classless addressing.
•With the classless system, address blocks
appropriate to the number of hosts are
assigned to companies or organizations
without regard to the unicast class.

Planning to Address the Network
 The allocation of these addresses inside the networks should
be planned and documented for the purpose of:
–Preventing duplication of addresses
•Each host in an internetwork must have a unique address.
–Providing and controlling access
•For example, if a server has a random address assigned, blocking
access to its address is difficult and clients may not be able to locate this
resource.
–Monitoring security and performance
•If we have proper planning and documentation of the network
addressing, we can identify the device on the network that has a
problematic address.
 Assigning Addresses within a Network
 Within a network, there are different types of hosts. Some
examples of different types of hosts are:
–End devices for users
–Servers and peripherals
–Hosts that are accessible from the Internet
–Intermediary devices
 Each of these different device types should be allocated to a
logical block of addresses within the address range of the
network.

Planning to Address the Network
 An important part of planning an IPv4
addressing scheme is deciding when
private addresses are to be used.
 Considerations include:
–Will there be more devices connected to
the network than public addresses
allocated by the network's ISP?
–Will the devices need to be accessed
from outside the local network?
•If there are more devices than available
public addresses, only those devices that
will directly access the Internet - such as
web servers - require a public address.
–If devices that may be assigned private
addresses require access to the Internet,
is the network capable of providing a
NAT service?
•A NAT service would allow those devices
with private addresses to effectively share
the remaining public addresses.

Static Address for End User Devices
 With a static assignment, the network administrator
must manually configure the network information for
a host (figure).
–At a minimum, this includes entering the host IP
address, subnet mask, and default gateway.
 Static addresses have some advantages over
dynamic addresses.
–For instance, they are useful for printers, servers, and
other networking devices that need to be accessible to
clients on the network.
•If hosts normally access a server at a particular IP
address, it would cause problems if that address changed.
–Additionally, static assignment of addressing
information can provide increased control of network
resources.
•However, it can be time-consuming to enter the
information on each host.
 When using static IP addressing, it is necessary to
maintain an accurate list of the IP address assigned
to each device.

Dynamic Address for End User Devices
 DHCP is generally the preferred method of
assigning IP addresses to hosts on large networks
because it reduces the burden on network support
staff and virtually eliminates entry errors.
–DHCP enables the automatic assignment of
addressing information such as IP address, subnet
mask, default gateway, and other configuration
information.
–The configuration of the DHCP server requires that a
block of address, called an address pool, be defined.
•Addresses assigned to this pool should be exclude any
addresses used for the other types of devices.
 Another benefit of DHCP is that an address is not
permanently assigned to a host but is only
"leased" for a period of time.
–If the host is powered down or taken off the network,
the address is returned to the pool for reuse.
–This feature is especially helpful for mobile users that
come and go on a network.

Addressing Address to other Devices (other than hosts)
 Addresses for Servers and Peripherals
–The addresses for these devices should be
static.
–The predictable addresses for these servers
are necessary.
 Addresses for Hosts that are Accessible
from Internet
–For the most part, these devices are usually
servers of some type.
–Each of these must have a public address.
–In many cases, these devices are on a network
that is numbered using private addresses.
•This means that the router or firewall at the
perimeter of the network must be configured to
translate the internal address of the server into a
public address.
•Because of this additional configuration in the
perimeter intermediary device, it is even more
important that these devices have a predictable
address.

Addressing Address to other Devices (continue)
 Addresses for Intermediary Devices
–Intermediary devices are a concentration point for
network traffic.
–Most intermediary devices are assigned Layer 3
addresses. Either for the device management or for
their operation.
•Hubs, switches, and wireless access points.
–Because we need to communicate with intermediary
devices, they should have predictable addresses.
–Their addresses are typically assigned manually.
 Routers and Firewalls
–Routers and firewall devices have an IPv4 address
assigned to each interface.
•Each interface is in a different network and serves as the
gateway for the hosts in that network.
•Typically, the router interface uses either the lowest or
highest address in the network.
–Router and firewall interfaces are used as the
gateway out of the network, many packets flow
through these interfaces.

Who Assigns the Different Address?
 A company that wishes to have network hosts accessible from
the Internet must have a block of public addresses assigned.
 Internet Assigned Numbers Authority (IANA)
(http://www.iana.net) is the master holder of the IP addresses.
–The IP multicast addresses and the IPv6 addresses are obtained
directly from IANA.
–Until the mid-1990s, all IPv4 address was managed by the IANA.
–At that time, the remaining IPv4 address was allocated to various
other registries to manage for regional areas.
 These registration companies are called Regional Internet
Registries (RIRs). There are 5 RIRs:
–AfriNIC (African Network Information Centre) - Africa Region
http://www.afrinic.net
–APNIC (Asia Pacific Network Information Centre) - Asia/Pacific
Region http://www.apnic.net
–ARIN (American Registry for Internet Numbers) - North America
Region http://www.arin.net
–LACNIC (Regional Latin-American and Caribbean IP Address
Registry) - Latin America and some Caribbean Islands
http://www.lacnic.net
–RIPE NCC (Reseaux IP Europeans) - Europe, the Middle East,
and Central Asia http://www.ripe.net

ISPs
 To get access to the Internet, we have to connect
our network to the Internet using an Internet
Service Provider (ISP).
–ISP generally provides to its customers DNS
services, e-mail services, and a website.
 Most companies or organizations obtain their
IPv4 address blocks from an ISP.
–The ISP loans or rents these addresses to the
organization.
–If we choose to move Internet connectivity to
another ISP, the new ISP will provide us new
addresses from their address blocks.
 [Tony]: the difference between getting IP address
from the ARIN and ISP is which IP address from
the ARIN are so called portable IP address
–The primary reason for acquiring portable IP addresses
is to ensure the flexibility to change providers without
having to give up former addresses.

ISPs
 ISPs are designated by a hierarchy based on their level of
connectivity to the Internet backbone.
 Tier 1
–At the top of the ISP hierarchy are Tier 1 ISPs.
–These are large ISPs that directly connected to Internet backbone.
–Customers of Tier 1 ISPs are either lower-tiered ISPs or large
companies.
–The primary advantages for of Tier 1 ISPs are reliability and speed.
–The drawback for Tier 1 ISP customers is its high cost.
 Tier 2
–Tier 2 ISPs acquire their Internet service from Tier 1 ISPs.
–Tier 2 ISPs generally focus on business customers.
–Tier 2 ISPs usually offer more services than the other two tiers.
–The primary disadvantage of is lower reliability than Tier 1 ISPs.
 Tier 3
–Tier 3 ISPs purchase their Internet service from Tier 2 ISPs.
–The focus of these ISPs is the retail and home markets.
–Their primary need is connectivity and support.
–Tier 3 ISPs often bundle Internet connectivity as a part of network
and computer service contracts for their customers.

Overview of IPv6
 In the early 1990s, the Internet Engineering Task Force
(IETF) concerned about the exhaustion of the IPv4
addresses. This led to the development of IPv6.
 To provide these features, IPv6 offers:
–128-bit hierarchical addressing - to expand addressing
capabilities
–Header format simplification - to improve packet handling
–Improved support for extensions and options - for increased
scalability/longevity and improved packet handling
–Flow labeling capability - as QoS mechanisms
–Authentication and privacy capabilities - to integrate security
 IPv6 is not merely a new Layer 3 protocol
–it is a new protocol suite.
–New messaging protocol (ICMPv6)
–New routing protocols.
 Transition to IPv6
–IPv6 has been designed with scalability internetwork growth.
–However, IPv6 is being implemented slowly.
–IPv6 may eventually replace IPv4 as the dominant Internet
protocol.

The Subnet Mask – Defining the network and Host Portions
 As we learned earlier, an IPv4 address has a
network portion and a host portion.
–To define the network and host portions, the
devices use a separate 32-bit pattern called a
subnet mask.
 We express the subnet mask in the same
dotted decimal format as the IPv4 address.
–The subnet mask is created by placing a binary
1 in each bit position that represents the
network portion
–Placing a binary 0 in each bit position that
represents the host portion.
 As shown in the figure, a /24 prefix is
expressed as subnet mask as 255.255.255.0
(11111111.11111111.11111111.00000000).
–The remaining bits (low order) of the subnet
mask are zeroes, indicating the host address
within the network.

The Subnet Mask – Defining the network and Host Portions
For example, let's look at the host 172.16.4.35/27:
 IP address
–172.16.20.35
–10101100.00010000.00010100.00100011
 subnet mask
–255.255.255.224
–11111111.11111111.11111111.11100000
 network address
–172.16.20.32
–10101100.00010000.00010100.00100000

ANDing – What is in our network?
 The IPv4 host address is logically ANDed with its subnet
mask to determine the network address to which the
host is associated.
–When this ANDing between the address and the subnet
mask is performed, the result yields the network address.
 The AND Operation
–1 AND 1 = 1 [Tony: true AND true = true]
–1 AND 0 = 0 [Tony: true AND lie = lie]
–0 AND 1 = 0 [Tony: lie AND true = lie]
–0 AND 0 = 0 [Tony: lie AND lie = lie]
 Because all the bits of the subnet mask that represent
host bits are 0s, the host portion of the resulting network
address becomes all 0s.
 All the bits of the subnet mask that indicate network
portion are 1s. When each of these 1s is ANDed with the
corresponding bit of the address, the resulting bits are
identical to the original address bits.

ANDing – What is in our network?
 Reasons to Use AND
–As a packet arrives at a router, the router performs
ANDing on the destination address. This yields a network
address that is compared to the route from the routing table
whose subnet mask was used.
–An originating host must determine if a packet should be
sent to a host in the local network or be to the gateway.
•If this network address matches the network address of
the local host, the packet is sent to the destination host.
•If the two network addresses do not match, the packet
is sent to the gateway.
 The Importance of AND
–In network verification/troubleshooting, we often need to
determine what IPv4 network a host is on or if two hosts are
on the same IP network.
–Also, a router may have many different routes that can
satisfy the forwarding of packet to a given destination. The
selection of the route is a complex operation.
Note: No calculators of any kind are permitted during
certification exams.

The ANDing Process
 The AND operation is applied to every bit in the binary
address.
 Play the animation in the figure to follow the AND steps for
one example.

Basic Subnetting (2 subnets)
 Subnetting allows for creating multiple
logical networks from a single address
block.
–We create the subnets by using one or
more of the host bits as network bits.
–This is done by extending the mask to
borrow some of the bits from the host portion
of the address to create additional network
bits.
–The more host bits used, the more subnets
that can be defined.
–For each bit borrowed, we double the
number of subnetworks available.
•For example, if we borrow 1 bit, we can define
2 subnets.
•If we borrow 2 bits, we can have 4 subnets.
–However, with each bit we borrow, fewer
host addresses are available per subnet.

Formula for calculating subnets
 2^n
–where n = the number of bits borrowed
 In this example, the calculation looks like this:
 2^1 = 2 subnets
The number of hosts
 2^n - 2
–where n = the number of bits left for hosts.
 Applying this formula, (2^7 - 2 = 126) shows that
each of these subnets can have 126 hosts.
 For each subnet, examine the last octet in
binary. The values in these octets for the two
networks are:
 Subnet 1: 00000000 = 0
 Subnet 2: 10000000 = 128

 RouterA in the figure has two interfaces to
interconnect two networks.
–Given an address block of 192.168.1.0 /24,
we will create two subnets.
– We borrow one bit from the host portion by
using a subnet mask of 255.255.255.128,
instead of the original 255.255.255.0 mask.
–The most significant bit in the last octet is
used to distinguish between the two subnets.
For one of the subnets, this bit is a "0" and
for the other subnet this bit is a "1".

 Next, an internetwork that requires 3 subnets.
 Again we start with the same 192.168.1.0 /24
address block.
–To provide 3 networks,
–we borrow two bits.
•This will provide four subnets.
–change the subnet mask to 255.255.255.192
 The number of subnets:
 2^2 = 4 subnets
–Subnet 0: 0 = 00000000
–Subnet 1: 64 = 01000000
–Subnet 2: 128 = 10000000
–Subnet 3: 192 = 11000000
 The number of hosts
 2^6 - 2 = 62 hosts per subnet

 5 LANs and a WAN for a total of 6 networks.
 To accommodate 6 networks, subnet
192.168.1.0 /24 into address blocks using the
formula:
 To get at least 6 subnets, borrow 3 host bits.
–2^3 = 8
•0 = 00000000
•32 = 00100000
•64 = 01000000
•96 = 01100000
•128 = 10000000
•160 = 10100000
•192 = 11000000
•224 = 11100000
 A subnet mask of 255.255.255.224 provides
the three additional network bits.
 The number of hosts
–2^5 - 2 = 30 hosts per subnet.

Subnetting – Dividing Networks into Right Sizes
 Network administrators need to devise the internetwork
addressing scheme to accommodate the maximum
number of hosts for each network.
–Some networks, such as point-to-point WAN links, only
require a maximum of two hosts.
–Other networks, such as a user LAN in a large building or
department, may need to accommodate hundreds of hosts.
 First, consider the total number of hosts required by the
entire corporate internetwork.
–A corporate needs to accommodate 800 hosts.
–To accommodate 800 hosts, we use binary arithmetic to
allocate a /22 block (2^10-2=1022).
 Next, consider the number of networks and the size of
each required based on common groupings of hosts.
–The company has 4 locations (4 LANs).
–Each WAN link is a network. We create subnets for the
WAN that interconnect different geographic locations.
 Next, we need to start allocating addresses
–We start with the locations that require the most hosts and
work down to the point-to-point links.
500
200

Subnetting – Dividing Networks into Right Sizes
 Another helpful tool in this planning
process is a spreadsheet.
 With the major blocks allocated, next we
subnet any of the locations that require
dividing.
 This further division of the addresses is
often called subnetting the subnets.
–The creation of new, smaller networks
from a given address block is done by
extending the length of the prefix; that is,
adding 1s to the subnet mask.
–For each bit we borrow, we double the
number of networks we have.
–With a single bit pattern, we can
produce two unique bit patterns, 1 and 0.
–If we borrow 2 bits, we can provide for 4
unique patterns to represent networks 00,
01, 10, and 11.

Subnetting – Subnetting a Subnet
 Subnetting a subnet, or using Variable Length
Subnet Mask (VLSM) was designed to maximize
addressing efficiency.
–If all the subnets have the same requirements for
the number hosts, these fixed size address blocks
would be efficient. However, most often that is not
the case.
 For example, the topology in Figure 1 shows a
subnet requirement of 7 subnets, one for each of
the 4 LANs and one for each of the 3 WANs. With
the given address of 192.168.20.0,
 we need to borrow 3 bits from the host bits in the
last octet to meet our requirement of 7 subnets.
–The last octet of the mask is then represented in
binary by 11100000, which is 224.
–The new mask of 255.255.255.224 is represented
with the /27 notation.
–In binary this subnet mask is represented as:
11111111.11111111.11111111.11100000
 After borrowing three of the host bits to use as
network bits, this leaves five host bits.
–These five bits will allow up to 30 hosts per subnet.
160
192

 Although we have accomplished the task of
dividing the network into an adequate number of
networks, it was done with a significant waste of
unused addresses.
–For example, only two addresses are needed in
each subnet for the WAN links.
–There are 28 unused addresses in each of the 3
WAN subnets that have been locked into these
address blocks.
 Getting More Subnet for Less Hosts
–To create these smaller subnets for the WAN links,
begin with 192.168.20.192.
–To provide address blocks for the WANS with two
addresses each, we will borrow three additional host
bits to be used as network bits.
–Address: 192.168.20.192 In Binary:
11000000.10101000.00010100.11000000
–Mask: 255.255.255.252 30 Bits in binary:
11111111.11111111.11111111.11111100
 With this addressing, we have subnets 4, 5, and 7
available for future networks, as well as several
other subnets available for WANs.
160
192

 In Figure 1, This scenario has the following requirements:
–AtlantaHQ 58 host addresses
–PerthHQ 26 host addresses
–SydneyHQ 10 host addresses
–CorpusHQ 10 host addresses
–WAN links 2 host addresses (each)
 It is clear from these requirements that using a standard
subnetting scheme would, indeed, be wasteful.
 When creating an appropriate addressing scheme, always begin
with the largest requirement.
 In this case, the AtlantaHQ, with 58 users.
–Starting with 192.168.15.0, we will need 6 host bits to accommodate
the requirement of 58 hosts, this allows 2 additional bits for the network
portion.
–The prefix for this network would be /26 and a subnet mask of
255.255.255.192.
•Address: 192.168.15.0
•In Binary: 11000000.10101000.00001111.00000000
•Mask: 255.255.255.192
•26 Bits in binary: 11111111.11111111.11111111.11000000

2
6

 VLSM Chart
 Address planning
can also be
accomplished
using a variety of
tools. One
method is to use
a VLSM chart to
identify which
blocks of
addresses are
available for use
and which ones
are already
assigned.

Determining the Network Address: 6.5.4
provides practice in
determining the network
addresses.
 You will be presented with
random masks and host
addresses.
 For each pair of masks
and host addresses, you
will be required to enter the
correct network address.
 You will then be shown if
your answer is correct.

Calculating the Number of Hosts: 6.5.5
determining the maximum
number of hosts for a
network.
addresses.
 For each pair of masks and
host addresses, you will be
required to enter the
maximum number of hosts for
the network described.
 You will then be shown if your
answer is correct.

Determining Valid Addresses for Hosts: 6.5.6
determining the hosts,
network, and broadcast
addresses for a network.
addresses.
 For each pair of masks
and host addresses, you
will be required to enter the
hosts, network, and
broadcast addresses.
 You will then be shown if
your answer is correct.

Ping 127.0.0.1- Testing the Local Stack
 Ping is a utility for testing IP connectivity between hosts.
–Ping uses a Layer 3 protocol that is a part on the TCP/IP suite
called Internet Control Message Protocol (ICMP).
–Ping uses an ICMP Echo Request datagram.
–If the host receives the Echo request, it responds with an
ICMP Echo Reply datagram.
–Ping measures the time required for the reply.
–If a response is not received within that timeout, ping gives up
and provides a message that a response was not received.
 Pinging the Local Loopback
–One case is for testing the internal configuration of IP on the
local host.
–To perform this test, we ping the special reserve address of
local loopback (127.0.0.1).
–A response from 127.0.0.1 indicates that IP is properly
installed on the host.
–This response is not, however, an indication that the
addresses, masks, or gateways are properly configured. Nor
does it indicate anything about the status of the lower layer of
the network stack.

Ping 127.0.0.1- Testing the Local Stack
 POP QUIZ:
–Ping 127.100.200.244
–Will it work?
–How are you pinging?

Ping Gateway – Testing Connectivity to the Local LAN
 You can also use ping to test the host ability to
communicate on the local network.
–This is generally done by pinging the IP address of the
gateway of the host.
–A ping to the gateway indicates that the host and the router's
interface serving as that gateway are both operational on the
local network.
 If the gateway address does not respond, you can try the IP
address of another host that you are confident is
operational in the local network. [Tony: you need to make
sure you turn off the firewall feature, otherwise you will not
get a response.]
–If either the gateway or another host responds, then the local
hosts can successfully communicate over the local network.
–If the gateway does not respond but another host does, this
could indicate a problem with the router's interface serving as
the gateway.
–One possibility is that we have the wrong address for the
gateway.
–Another possibility is that the router interface may be fully
operational but have security applied to it that prevents it from
processing or responding to ping requests.

sure you turn off the firewall feature]
OR

sure you turn off the firewall feature]
 How to verify the ping activity with the firewall feature
turned on
 DEMO:

Ping Remote Host – Testing Connectivity to Remote LAN
 You can also use ping to test the
ability of the local IP host to
communicate across an
internetwork.
–If this ping is successful, it means
that we have verified our host's
communication on the local
network, the operation of the router
serving as our gateway, and all
other routers that might be in the
path between our network and the
network of the remote host.
 Remember, many network
administrators limit or prohibit the
entry of ICMP datagrams into the
corporate network.
–Therefore, the lack of a ping
response could be due to security
restrictions and not because of non-
operational elements of the
networks.
Website is up, but
ping does not work.

Tracertout (tracert) – Testing the Path
 Ping is used to indicate the connectivity between
two hosts.
 Traceroute (tracert) is a utility that allows us to
observe the path between these hosts.
–The trace generates a list of hops that were
successfully reached along the path.
–This list can provide us with important verification
and troubleshooting information.
–If the data fails at some hop along the way, we
have the address of the last router that responded
to the trace. This is an indication of where the
problem or security restrictions are.

 Round Trip Time (RTT)
–RTT is the time a packet takes to reach the remote host and
for the response from the host to return.
–An asterisk (*) is used to indicate a lost packet.
–If we get high response times or data losses from a
particular hop, this is an indication that the resources of the
router or its connections may be stressed.
 Time to Live (TTL)
–Traceroute makes use of a function of the TTL field in the
Layer 3 header and ICMP Time Exceeded Message.
–When a packet enters a router, the TTL field is
decremented by 1. When the TTL reaches zero, a router will
not forward the packet and the packet is dropped.
–In addition to dropping the packet, the router normally sends
an ICMP Time Exceeded message addressed to the
originating host. This ICMP message will contain the IP
address of the router that responded.

 The first sequence of messages sent from
traceroute will have a TTL field of one. This
causes the TTL to time out the packet at
the first router. This router then responds
with an ICMP Message. Traceroute now
has the address of the first hop.
 Traceroute then progressively increments
the TTL field (2, 3, 4...) for each sequence
of messages.
–This provides the trace with the address of
each hop as the packets timeout further
down the path.
–The TTL field continues to be increased
until the destination is reached or it is
incremented to a predefined maximum.
 Once the final destination is reached, the
host responds with either an ICMP Port
Unreachable message or an ICMP Echo
Reply message instead of the ICMP Time
Exceeded message.

ICMPv4 – The Protocol Supporting Testing and Messaging
 Although IPv4 is not a reliable protocol, it does
provide for messages to be sent in the event of
certain errors.
–These messages are sent using services of the
Internet Control Messaging Protocol (ICMPv4).
–The purpose of these messages is to provide
feedback about issues related to the processing of
IP packets under certain conditions, not to make IP
reliable.
–ICMP messages are not required and are often
not allowed for security reasons.
 ICMP messages that may be sent include:
–Host confirmation
–Unreachable Destination or Service
–Time exceeded
–Route redirection
–Source quench

 Host Confirmation
–The local host sends an ICMP Echo Request to a host.
–The host receiving the message replies with the ICMP Echo Reply.
–This use of the ICMP Echo messages is the basis of the ping
utility.
 Unreachable Destination or Service
–When a host or gateway receives a packet that it cannot deliver, it
may send an ICMP Destination Unreachable to the sender.
–Among the Destination Unreachable codes are:
•0 = net unreachable
•1 = host unreachable
•2 = protocol unreachable
•3 = port unreachable
 Time Exceeded
–If a router receives a packet and decrements the TTL field in the
packet to zero, it discards the packet.
–The router may also send an ICMP Time Exceeded message to
the source host to inform the host of the reason the packet was
dropped.

 Route Redirection
–A router may use the ICMP Redirect Message to notify the hosts
on a network that a better route is available for a particular
destination.
 Source Quench
–If a router does not have enough buffer space to receive incoming
packets, a router will discard the packets.
–If the router has to do so, it may also send an ICMP Source
Quench message to source hosts for every message that it
discards.
–A destination host may also send a source quench message if
datagrams arrive too fast to be processed.
–When a host receives an ICMP Source Quench message, it
reports it to the Transport layer. The source host can then use the
TCP flow control mechanisms to adjust the transmission.

Summary

Ex 1 chapter06-i-pv4-tony_chen

More Related Content

What's hot (20)

Viewers also liked (20)

Similar to Ex 1 chapter06-i-pv4-tony_chen (20)

More from Đô GiẢn (8)

Recently uploaded (20)

Ex 1 chapter06-i-pv4-tony_chen

Editor's Notes