Network Layer - Universidad Carlos III de Madrid
Download
Report
Transcript Network Layer - Universidad Carlos III de Madrid
RSC
Part II: Network Layer
3. IP addressing
Redes y Servicios de Comunicaciones
Universidad Carlos III de Madrid
These slides are, mainly, part of the companion slides to the book “Computer
Networking: A Top Down Approach” generously made available by their
authors (see copyright below). The slides have been adapted, where
required, to the teaching needs of the subject above.
All material copyright 1996-2009
J.F Kurose and K.W. Ross, All Rights Reserved
Computer Networking:
A Top Down Approach
5th edition.
Jim Kurose, Keith Ross
Addison-Wesley, April
2009.
RSC Part II: Network Layer
II. 1 Basic Network
layer concepts
II.2 Introduction to
IP
Datagram format
ICMP
II.3 IP addressing
II.4 IP in operation
ARP
II.5 Network routing
Link state
Distance Vector
Hierarchical routing
II.6 Routing in the
Internet
RIP
OSPF
BGP
Broadcast and multicast
Network Layer II-2
IP Addressing: introduction
223.1.1.1
223.1.2.1
223.1.1.2
223.1.1.4
223.1.1.3
223.1.2.9
223.1.3.27
223.1.2.2
223.1.3.2
223.1.3.1
223.1.1.1 = 11011111 00000001 00000001 00000001
223
1
1
1
Network Layer II-3
Hierarchical addressing: route aggregation
Hierarchical addressing allows efficient advertisement of routing
information:
000100000
000100010
000100100
Organization 0
…
200.23.16.0/23
000111110
Organization 1
200.23.18.0/23
Organization 2
200.23.20.0/23
Organization 7
.
.
.
.
.
.
Fly-By-Night-ISP
“Send me anything
with addresses
beginning
200.23.16.0/20”
Internet
200.23.30.0/23
ISPs-R-Us
“Send me anything
with addresses
beginning
199.31.0.0/16”
Network Layer II-4
Hierarchical addressing: more specific
routes
ISPs-R-Us has a more specific route to Organization 1
Organization 0
200.23.16.0/23
Organization 2
200.23.20.0/23
Organization 7
.
.
.
.
.
.
Fly-By-Night-ISP
“Send me anything
with addresses
beginning
200.23.16.0/20”
Internet
200.23.30.0/23
ISPs-R-Us
Organization 1
200.23.18.0/23
“Send me anything
with addresses
beginning 199.31.0.0/16
or 200.23.18.0/23”
Network Layer II-5
IP addressing: CIDR
CIDR: Classless InterDomain Routing
network portion of address of arbitrary length
address format: a.b.c.d/x, where x is number of
bits in the network portion of the address
Network part
(network prefix)
host
part
11001000 00010111 00010000 00000000
200.23.16.0/23
Network Layer II-6
IP addresses: how to get one?
Q: How does organization get prefix part of IP
addr?
A: gets allocated portion of its provider ISP’s
address space
ISP's block
11001000 00010111 00010000 00000000
200.23.16.0/20
Organization 0
Organization 1
Organization 2
...
11001000 00010111 00010000 00000000
11001000 00010111 00010010 00000000
11001000 00010111 00010100 00000000
…..
….
200.23.16.0/23
200.23.18.0/23
200.23.20.0/23
….
Organization 7
11001000 00010111 00011110 00000000
200.23.30.0/23
Network Layer II-7
223.1.1.0/24
Subnetting
network
subnet
223.1.2.0/24
host
11011111 00000001 000000 XX XXXXXXXX
22 bits
2 bits
8 bits
Subnet mask: 255.255.255.0 or /24 -> 254 interfaces
223.1.3.0/24
A little bit more complex, Variable length subnet mask:
network
subnet
host
223.1.3.0/25
11011111 00000001 000000 XX XXXXXXXX
223.1.1.0/24
22 bits
2 bits
223.1.2.0/24
8 bits
Subnet mask: 255.255.255.0 or /24:
223.1.0.0/24, 223.1.1.0/24 y 223.1.2.0/24
network
11011111 00000001 000000
subnet
host
11X XXXXXXX
223.1.3.128/25
22 bits
3 bits
7 bits
Subnet mask: 255.255.255.128 or /25 -> 126 interfaces
Forwarding
Network
Mask
223.1.1.0
223.1.9.0
223.1.7.0
223.1.2.0
0.0.0.0
255.255.255.0
255.255.255.0
255.255.255.0
255.255.255.0
0.0.0.0
Gateway
Interface
223.1.9.1
223.1.7.1
223.1.1.3
223.1.9.2
223.1.7.2
223.1.9.2
223.1.7.2
223.1.1.2
223.1.1.1
223.1.1.4
223.1.1.3
223.1.9.2
223.1.9.1
223.1.2.6
223.1.7.2
223.1.8.0
223.1.7.1
223.1.8.1
Internet
223.1.3.1 223.1.3.27
223.1.2.1
223.1.2.2
223.1.3.2
Network Layer II-9
Subnetting
Special values:
All 0’s in host part
• Subnet
All 1’s in host part
• Broadcast address
subnet
host
network
XXXXXXXXXXXXXXXX XXXXX XXX 00000000
s bits
h bits
subnet
network
XXXXXXXXXXXXXXXX XXXXX XXX
host
s bits
11111111
h bits
(2h-2) possible interfaces in a subnet
0.0.0.0
• Default
127.0.0.0/8, 127.0.0.1/32
• Loopback
224.0.0.0/4
• Multicast
Network Layer II-10
Addresses and names
For humans, it is convenient to manage names
instead of numbers
We can associate a name to an address:
• Eg. 163.117.144.202
- it002.lab.it.uc3m.es
A distributed application: Domain Name System (DNS),
resolves names into addresses
• DNS names are hierarchical to distribute their management
Nodes connected to the network need the address of a
DNS server to resolve names
• Manual configuration or DHCP
This is the idea, DNS is a complex application that
will be studied in future courses
Network Layer II-11
IP addresses: how to get one?
Q: How does network get subnet part of IP
addr?
A: gets allocated portion of its provider ISP’s
address space
ISP's block
11001000 00010111 00010000 00000000
200.23.16.0/20
Organization 0
Organization 1
Organization 2
...
11001000 00010111 00010000 00000000
11001000 00010111 00010010 00000000
11001000 00010111 00010100 00000000
…..
….
200.23.16.0/23
200.23.18.0/23
200.23.20.0/23
….
Organization 7
11001000 00010111 00011110 00000000
200.23.30.0/23
Network Layer II-12
IP addressing: the last word...
Q: How does an ISP get block of addresses?
A: ICANN: Internet Corporation for Assigned
Names and Numbers
Allocates and registers addresses
manages DNS
assigns domain names, resolves disputes
The Internet Assigned Numbers Authority (IANA), operated by
the ICANN (Internet Corporation for Assigned Names and
Numbers)
Manages IP address allocation (and parameters of Internet protocols)
Delegates address assignment to RIRs (Regional Internet Registry):
ISPs get IP address blocks from RIRs or Local Internet Registry (LIR)
• American Registry for Internet Numbers (ARIN) for North America and
parts of the Caribbean
• RIPE Network Coordination Centre (RIPE NCC) for Europe, the Middle
East and Central Asia
• Asia-Pacific Network Information Centre (APNIC) for Asia and the Pacific
region
• Latin American and Caribbean Internet Addresses Registry (LACNIC) for
Latin America and parts of the Caribbean region
• African Network Information Centre (AfriNIC) for Africa
Network Layer II-13
IP addresses: how to get one?
Q: How does a host get IP address?
hard-coded by system admin in a file
Windows: control-panel->network->configuration>tcp/ip->properties
UNIX: /etc/rc.config
DHCP: Dynamic Host Configuration Protocol:
dynamically get address from as server
“plug-and-play”
Network Layer II-14
DHCP: Dynamic Host Configuration Protocol
Goal: allow host to dynamically obtain its IP address
from network server when it joins network
Can renew its lease on address in use
Allows reuse of addresses (only hold address while connected
an “on”)
Support for mobile users who want to join network (more
shortly)
DHCP overview:
host broadcasts “DHCP discover” msg
DHCP server responds with “DHCP offer” msg
host requests IP address: “DHCP request” msg
DHCP server sends address: “DHCP ack” msg
Network Layer II-15
DHCP client-server scenario
A
B
223.1.2.1
DHCP
server
223.1.1.1
223.1.1.2
223.1.1.4
223.1.2.9
223.1.2.2
223.1.1.3
223.1.3.1
223.1.3.27
223.1.3.2
E
arriving DHCP
client needs
address in this
network
Network Layer II-16
DHCP client-server scenario
DHCP server: 223.1.2.5
DHCP discover
arriving
client
src : 0.0.0.0, 68
dest.: 255.255.255.255,67
yiaddr: 0.0.0.0
transaction ID: 654
DHCP offer
src: 223.1.2.5, 67
dest: 255.255.255.255, 68
yiaddrr: 223.1.2.4
transaction ID: 654
Lifetime: 3600 secs
DHCP request
time
src: 0.0.0.0, 68
dest:: 255.255.255.255, 67
yiaddrr: 223.1.2.4
transaction ID: 655
Lifetime: 3600 secs
DHCP ACK
src: 223.1.2.5, 67
dest: 255.255.255.255, 68
yiaddrr: 223.1.2.4
transaction ID: 655
Lifetime: 3600 secs
Network Layer II-17
NAT: Network Address Translation
rest of
Internet
local network
(e.g., home network)
10.0.0/24
10.0.0.4
10.0.0.1
10.0.0.2
138.76.29.7
10.0.0.3
All datagrams leaving local
network have same single source
NAT IP address: 138.76.29.7,
different source port numbers
Datagrams with source or
destination in this network
have 10.0.0/24 address for
source, destination (as usual)
Network Layer II-18
NAT: Network Address Translation
Motivation: local network uses just one IP address as far as outside
world is concerned:
range of addresses not needed from ISP: just one IP address
for all devices
can change addresses of devices in local network without
notifying outside world
can change ISP without changing addresses of devices in local
network
devices inside local net not explicitly addressable, visible by
outside world (a security plus).
Private address space:
10.0.0.0
- 10.255.255.255 (10/8 prefix)
172.16.0.0
- 172.31.255.255 (172.16/12 prefix)
192.168.0.0
- 192.168.255.255 (192.168/16 prefix)
Network Layer II-19
NAT: Network Address Translation
Implementation: NAT router must:
outgoing datagrams: replace (source IP address, port
#) of every outgoing datagram to (NAT IP address,
new port #)
. . . remote clients/servers will respond using (NAT
IP address, new port #) as destination addr.
remember (in NAT translation table) every (source
IP address, port #) to (NAT IP address, new port #)
translation pair
incoming datagrams: replace (NAT IP address, new
port #) in dest fields of every incoming datagram
with corresponding (source IP address, port #)
stored in NAT table
Network Layer II-20
NAT: Network Address Translation
2: NAT router
changes datagram
source addr from
10.0.0.1, 3345 to
138.76.29.7, 5001,
updates table
2
NAT translation table
WAN side addr
LAN side addr
1: host 10.0.0.1
sends datagram to
128.119.40.186, 80
138.76.29.7, 5001 10.0.0.1, 3345
……
……
S: 10.0.0.1, 3345
D: 128.119.40.186, 80
S: 138.76.29.7, 5001
D: 128.119.40.186, 80
138.76.29.7
S: 128.119.40.186, 80
D: 138.76.29.7, 5001
3: Reply arrives
dest. address:
138.76.29.7, 5001
3
1
10.0.0.4
S: 128.119.40.186, 80
D: 10.0.0.1, 3345
10.0.0.1
10.0.0.2
4
10.0.0.3
4: NAT router
changes datagram
dest addr from
138.76.29.7, 5001 to 10.0.0.1, 3345
Network Layer II-21
NAT: Network Address Translation
16-bit port-number field:
60,000 simultaneous connections with a single
LAN-side address!
NAT is controversial:
routers
should only process up to layer 3
violates end-to-end argument
• NAT possibility must be taken into account by app
designers, eg, P2P applications
address
IPv6
shortage should instead be solved by
Network Layer II-22
NAT traversal problem
client wants to connect to
server with address 10.0.0.1
server address 10.0.0.1 local
Client
to LAN (client can’t use it as
destination addr)
only one externally visible
NATted address: 138.76.29.7
solution 1: statically
configure NAT to forward
incoming connection
requests at given port to
server
10.0.0.1
?
138.76.29.7
10.0.0.4
NAT
router
e.g., (123.76.29.7, port 2500)
always forwarded to 10.0.0.1
port 25000
Network Layer II-23
NAT traversal problem
solution 2: Universal Plug and
Play (UPnP) Internet Gateway
Device (IGD) Protocol. Allows
NATted host to:
learn public IP address
(138.76.29.7)
add/remove port mappings
(with lease times)
10.0.0.1
IGD
10.0.0.4
138.76.29.7
NAT
router
i.e., automate static NAT port
map configuration
Network Layer II-24
NAT traversal problem
solution 3: relaying (used in Skype)
NATed client establishes connection to relay
External client connects to relay
relay bridges packets between to connections
2. connection to
relay initiated
by client
Client
3. relaying
established
1. connection to
relay initiated
by NATted host
138.76.29.7
10.0.0.1
NAT
router
Network Layer II-25