What is Wifi technology? How does it work?

- Wifi has emerged as a very popular technology. 

- This technology has enabled the electronic devices to exchange information between them and to share the internet connection without using any cables or wires. 

- It is a wireless technology. 

- This technology works with the help of the radio waves. 

- The Wifi is defined as a WLAN (wireless local area network) product by the wifi alliance that is based on the standards defined by IEEE (802.11 standards). 

- Most of the WLANs are based upon these standards only and so this technology has been named as wifi which is the synonymous with the term WLAN. 

- The wifi-certified trademark might be used by only those wifi products which have the complete certification for the wifi alliance inter-operability. 

- A number of devices now use wifi such as the PCs, smart phones, video game consoles, digital cameras, digital audio players, tablet computers and so on. 

- All these devices can connect to the network and access internet by means of a wireless network access point. 

- Such an access point is more commonly known as a ‘hotspot’. 

- The range of an access point is up to 20 m. 

- But it has a much greater range outside.  

- An access point can be installed in a single room or in an area of many square miles. 

- This can be achieved by using a number of overlapping access points. 

- However, the security of the wifi is less compared to the wired connections for example Internet.

- This is so because a physical connection is not required by an intruder. 

- The web pages using SSL have security but the intruders can easily access the non-encrypted files on the internet. 

- It is because of this, that the various encryption technologies have been adopted by the wifi. 

- The earlier WEP encryption was weak and so was easy to break.

- Later, came the higher quality protocols such as the WPA2 and WPA. 

- The WPS or the wifi protected set up was an optional feature that was added in the year of 2007. 

- This option a very serious flaw which is that it allowed the recovery of the password of the router by an attacker.

- The certification and the test plan has been updated by the wifi alliance for ensuring that there is resistance against attacks in all the devices that have been newly certified.

- For connecting to a wifi LAN, a wireless network interface controller has to be incorporated in to the computer system.

- This combination of the interface controller and the computer is often called as the station. 

- The same radio frequency communication channel is shared by all the stations.

- Also, all the stations receive any transmission on this channel. 

- Also, the user is not informed of the fact that the data was delivered to the recipient and so is termed as the ‘best–effort delivery mechanism’. 

- For transmitting the data packets, a carrier wave is used. 

- These data packets are commonly known as the ‘Ethernet frames’. 

- Each station regularly tunes in to the radio frequency channel for picking up the transmissions that are available. 

- A device that is wifi enabled can connect to the network if it lies in the range of the wireless network. 

- One condition is that the network should have been configured for permitting such a connection. 

- For providing coverage in a large area multiple hotspots are required. 

- For example, wireless mesh networks in London. 

- Through wifi, services can be provided in independent businesses, private homes, public spaces, high street chains and so on. 

- These hotspots have been set up either commercially or free of charge. 

- Free hotspots are provided at hotels, restaurants and airports. 

How can firewalls secure a network?

Firewalls in computer systems are either software based or hardware based. But they have the same purpose of keeping a control over the incoming as well as the outgoing traffic. 

In this article we discuss about how the network is secured by the firewalls. 

- This control is maintained through the analyzation of the data packets. 

- After analyzation, the firewall’s work is to determine whether to allow these packets to pass or not. 

- This decision is taken based up on some set of rules.

- With this set of rules, a barrier is established by the firewall between the external network that is not considered as secure and trusted and the internal network which is secure and trusted. 

- Most of the personal computer’s operating systems come with a built-in software based firewall for providing protection against the threats from external networks. 

- Some firewall components might also be installed in the intermediate routers in the network. 

- Also some firewalls have been designed to perform routing as well.

There are different types of firewalls which function differently.This classification of the firewalls is based up on the place where the communication is taking place i.e., whether at the network layer or the application layer.

Packet filters or network layer: 

- Firewalls used at the network layer are often termed as the packet filters. 

- This firewall operates at low level of the protocol stack of the TCP/ IP and so does not allow the packets to pass through it unless they satisfy all the rules. 

- These rules might be defined by the administrator of the firewall. 

- These firewalls can also be classified in to two categories namely the stateless firewalls and the state-ful firewall. 

- The former kind use less memory and operates faster in the simple filters, thus taking less time for filtering. 

- These firewalls are used for filtering the stateless network protocols i.e., the protocols which do not follow the session concept. 

- These firewalls are not capable of making complex decisions based up on the state of the communication. 

- The latter kind maintains the context of the active sessions. 

- This state info is used by these firewalls for speeding up the packet processing. 

- A connection is described using any of the properties such as the UDP or TCP ports, IP addresses and so on. 

- If a match is found between an existing connection and the packet, it is allowed to pass. 

- Today firewalls have capabilities of filtering the packets based up on attributes like IP addresses of source and destination hosts, protocols, originator’s netblock, TTL values and so on.

Application layer Firewalls: 

- Firewalls of this type work on the TCP/ IP stack’s application level. 

- All the packets traveling in and out of the application are intercepted by this firewall. 

- This leads to blocking of the other packets also. 

- Firstly, all the packets are inspected for any malicious content for preventing the outspread of the Trojans and worms. 

- Some additional inspection criteria might be used for adding some extra latency to the packet forwarding. 

- This firewall determines whether a given connection should be accepted by a process. 

- This function is established by the firewalls by hooking themselves in to the socket calls for filtering the connections. 

- These application layer firewalls are then termed as the socket filters.

- There way of working is somewhat similar to the packet filters except that the rules are applied to every process rather than connections. 

- Also, the rules are defined using the prompts for those processes that have not been provided with a connection. 

- These firewalls are implemented in combination with the packet filters.

What is meant by Quality of Service provided by network layer?

- The QoS or the quality of service is such a parameter that refers to a number of aspects of computer networks, telephony etc. 

- This parameter allows transportation of traffic as per some specific requirements. 

- Technology has advanced so much now computer networks can also be doubled up as the telephone networks for doing audio conversations. 

- The technology even supports the applications which have strict service demands. 

- The ITU defines the quality of service in telephony. 

It covers all the requirements concerning all the connection’s aspects such as the following:

Ø  Service response time

Ø  Loss

Ø  Signal – to – noise ratio

Ø  Cross – talk

Ø  Echo

Ø  Interrupts

Ø  Frequency response

Ø  Loudness levels etc.  

- The GoS (grade of service) requirement is one subset of the QoS and consists of those aspects of the connection that relate to its coverage as well as capacity. 

- For example, outage probability, maximum blocking probability and so on. 

- In the case of the packet switched telecommunication networks and computer networking, the resource reservation mechanisms come under the concept of traffic engineering. 

- QoS can be defined as the ability by virtue of which the different applications, data flows and users can be provided with different priorities. 

- It is important to have QoS guarantees if the capacity of the network is quite insufficient. 

- For example, voice over IP, IP-TV and so on. 

- All these services are sensitive to delays, have fixed bit rates and have limited capacities.

- The protocol or network supporting the QoS might agree up on some traffic contract with the network node’s reserve capacity and the software. 

- However, the quality of service is not supported by the best effort services. 

-Providing high quality communication over such networks provides a alternative to the QoS control mechanisms that are complex. 

- This happens when the capacity is over-provisioned so much that it becomes sufficient for the peak traffic load that has been expected. 

- Now since the network congestion problems have been eliminated, the QoS mechanisms are also not required. 

- It might be sometimes be taken as the level of the service’s quality i.e., the GoS. 

- For example, low bit error probability, low latency, and high bit rate and so on. 

- QoS can also be defined as a metric that reflects up on the experienced quality of the service.

- It is the cumulative effect that can be accepted. 

Certain types of the network traffic require a defined QoS such as the following:

Ø  Streaming media such as IPTV (internet protocol television), audio over Ethernet, audio over IP etc.

Ø  Voice over IP

Ø  Video conferencing

Ø  Telepresence

Ø  iSCSI, FCoE tec. Storage applications

Ø  safety critical applications

Ø  circuit emulation service

Ø  network operations support systems

Ø  industrial control systems

Ø  online games

- All the above mentioned services are examples of the inelastic services and a certain level of latency and bandwidth is required for them to operate properly. - On the other hand, the opposite kind of services such as the elastic services can work with any level of bandwidth and latency. 

- An example of these type of services is the bulk file transfer application based up on TCP.

- A number of factors affect the quality of service in the packet switched networks. 

- These factors can be broadly classified in to two categories namely technical and the human factors. 

The following factors are counted as the human factors:

Ø  reliability

Ø  scalability

Ø  effectiveness

Ø  maintainability

Ø  grade of service and so on.

- ATM (asynchronous transfer mode) or GSM like voice transmissions in the circuit switched networks have QoS in their core protocol. 

Differentiate between transparent and nontransparent fragmentation?

A number of problems are encountered because of the size of the data packets. There is no ability in the data link layer by means of which it could handle these problems and so the bridges also don’t work here. 

The Ethernet also experiences a number of problems because of the following:

Ø  Different way in which the maximum packet size is defined.

Ø  Maximum packet size that can be handled by a router.

Ø  The maximum length slot that are used for transmission

Ø  Errors due to the packet length

Ø  Standards

The data packets can be fragmented in two ways namely:

1. Transparent and
2. Non – transparent

Both these ways can be followed based on a network by network basis. We can also say that no such end – to – end agreement exists based up on which it can be decided which process is to be used.

Transparent Fragmentation: 

- This type of fragmentation is followed when a packet is split in to smaller fragments by a router.

- These fragments are sent to the next router which does just the opposite i.e., it reassembles the fragments and combine them to form original packet. 

- Here, the next network does not come to know whether any fragmentation has taken place. 

- Transparency is maintained between the small packet networks when compared to the other subsequent networks.

- For example, transparent fragmentation is used by the ATM networks by means of some special hardware. 

- There are some issues with this type of fragmentation. 

- It puts some burden on the performance of the network since all the fragments have to be transmitted through the same gateway. 

- Also, sometimes the repeated fragmentation and reassembling has to be done for small packet network in series. 

- Whenever an over-sized packet reaches a router, it is broken up in to small fragments. 

- These fragments are transported to the next exit router. 

- The fragments are assembled by this exit router which then forwards them to the next router.

- Awareness regarding this fragmentation is not maintained for the subsequent networks. 

- For a single packet fragmentation is done many times before the destination is finally reached. 

- This of course consumes a lot of time because the repeated fragmentation and assembling has to be carried out. 

- Sometimes, it also presents the reason of corrupting the packet’s integrity.

Non-Transparent Fragmentation: 

- In this type, the packet is split in to fragments by one router. 

- But the difference is that these fragments are not reassembled until the fragments reach their destination. 

- They remain split till then. 

- Since in this type of fragmentation the fragments are assembled only at the destination host, the fragments can be routed independent of each other. 

- This type of fragmentation also experiences some problems such as header has to be carried by each of the fragments till they reach their destination. 

- Numbering has to be done for all the fragments so that no problem is experienced in reconstructing the data stream.

Whichever type of fragmentation we use, one thing has to be made sure which is that later we should be able to form the original packets using the fragments. This insists on having some type of labeling for the fragments. 

Segmentation is another name for the fragmentation. A packet is injected in to the data link layer by the IP layer but it is not responsible for reliable transmission of the packets. Some maximum value on the size of the packets is imposed by each layer for their reasons. For a large packet that travels through the network for which the MTU is small, fragmentation is very much needed. 

What is fragmentation?

- The fragmentation technique is implemented in the IP (internet protocol) for breaking down the datagrams into smaller pieces. 

- This is done so that it becomes easy for the data packets to be passed through the link with a datagram size smaller than that of the original MTU or the maximum transmission unit. 

- The procedure for the IP fragmentation along with the procedures for reassembling and transmitting the datagrams is given in the RFC 791. 

- For determining the optimal MTU path, the IPv6 hosts are needed so that the packets can be sent. 

- If in case the PDU i.e., the protocol data unit received by the router is larger than the MTU of the next hop, then there are two options are available if IPv4 transport is being used:

Ø Dropping the PDU and sending an ICMP (internet control message protocol) message indicating that the condition packet is quite big.

Ø  Fragmenting the IP packet and then transmitting it over the link whose MTU is smaller. Any IPv6 packet with a size less than or equal to 1280 bytes can be delivered without having the need for using the IPv6 fragmentation.

- If a fragmented IP packet is received by the recipient host, its job is to reassemble the datagram and then send it over to the protocols at the higher layers. 

- The purpose of reassembling is expected to take place at the recipient’s host side but for some practical reasons it might be done by some intermediate router. 

- For example, the fragments might be reassembled by the NAT (network address translation) for translating the data streams. 

- Excessive re-transmission can result as a consequence of the IP fragmentation whenever packet loss might be encountered by the fragments. 

- It is required for all the reliable protocols (example, TCP) for re-transmitting the fragments in their correct order for recovering from the single fragment loss. 

Thus, typically two approaches are used by the senders for determining datagrams of what size should be transmitted over the network:

1. First approach: The sender must transmit an IP datagram of size as same as that of the first hop’s MTU.
2. Second approach: Running the path MTU discovery algorithm.

- Fragmentation does leave an impact on the network forwarding. 

- When there are multiple parallel paths for the internet router the traffic is split by the technologies such as the CEF and LAG throughout the links via some hash algorithms. 

- The major goal of this algorithm is to make sure that all the packets with the same flow are transmitted out on the same path for the minimization of the not so required packet reordering. 

- If the TCP or UDP port numbers are used by the hash algorithm, the fragmented packets might be forwarded through different paths. 

- This is so because the layer 4 information is contained only in the first fragment of the packet. 

- As a result of this, usually the initial fragment arrives after the non-initial fragments. 

- This condition is often treated as an error by most of the security devices in the hosts.  

- Therefore, they drop these packets.

- The fragmentation mechanism differs in IPv4 and IPv6. 

- In the former, the fragmentation is performed by the router. 

- On the other hand, in IPv6 fragments that are larger than MTU are dropped by the routers.

- Also, in both the cases there is a variation in the header format. 

- Since fragmentation is carried out using analogous fields, therefore the algorithm can be used again and again for the purpose of fragmentation and reassembling. 

- A best effort should be made by the IPv4 hosts for reassembling the datagram fragments. 

What are the advantages and disadvantages of datagram approach?

- Today’s packet switching networks make use of a basic transfer unit commonly known as the datagram. 

- In such packet switched networks, the order of the data packets arrival, time of arrival and delivery comes with no guarantee. 

- The first packet switching network to use the datagrams was CYCLADES. 

- Datagrams are known by different names at different levels of the OSI model. 

- For example, at layer 1 we call it Chip, at layer 2 it is called Frame or cell, data packet at layer 3 and data segment at layer 4. 

- The major characteristic of a datagram is that it is independent i.e., it does not rely on any other thing for the information required for exchange.

- The duration of a connection between any two points is not fixed such as in telephone conversations. 

- Virtual circuits are just the opposite of the datagrams. 

- Thus, a datagram can be called as a self containing entity. 

- It consists of information sufficient for routing it from the source to the destination without depending up on the exchanges made earlier. 

- Often, a comparison is drawn between the mail delivery service and the datagram service. 

- The user’s work is to just provide the address of the destination. 

- But he/she is not guaranteed the delivery of the datagram and if the datagram is successfully delivered, no confirmation is sent to the user. 

- The data gram are routed to some destination without help of a predetermined path. 

- The order in which the data has to be sent or received is given no consideration. 

- It is because of this that the datagrams belonging to a single group might travel over different routes before they reach their common destination. 

Advantages of Datagram Approach

1. Datagrams can contain the full destination address rather than using some number.
2. There is no set up phase required for the datagram circuits. This means that no resources are consumed.
3. If it happens during a transmission that one router goes down, the datagrams that will suffer will include only those routers which would have been queued up in that specific router. The other datagrams will not suffer.
4. If any fault or loss occurs on a communication line, the datagrams circuits are capable of compensating for it.
5. Datagrams play an important role in the balancing of the traffic in the subnet. This is so because halfway the router can be changed.

Disadvantages of Datagram Approach

1. Since the datagrams consist of the full destination address, they generate more overhead and thus lead to wastage of the bandwidth. This in turn makes using datagram approach quite costly.
2. A complicated procedure has to be followed for datagram circuits for determining the destination of the packet.
3. In a subnet using the datagram approach, it is very difficult to keep congestion problems at bay.
4. The any-to-any communication is one of the key disadvantages of the datagram subnets. This means that if a system can communicate with any device, any of the devices can communicate with this system. This can lead to various security issues.
5. Datagram subnets are prone to losing or re - sequencing the data packets during the transition. This puts a great burden on the end systems for monitoring, recovering, and reordering the packets as they were originally.
6. Datagram subnets have less capability of dealing with congestion control as well as flow control. This happens because the direction of the incoming traffic is not specified. In the virtual circuit subnets, the flow of the packets is directed only along the virtual circuits thus making it comparatively easy for controlling it.
7. The unpredictable nature of the flow of the traffic makes it difficult to design the datagram networks. 

What are the differences between inter-network routing and intra-network routing?

- The individual networks when combined together form the inter-network. 

- Intermediate inter networking devices are used for making connections between them. 

- All these networking elements combine to work as single large unit. 

- The creation of the internetworking has been made possible because of the packet switching technology. 

- The router is the most common and important device used for performing inter-network routing and intranetwork routing.

- Routing across various networks in the inter network is termed as internetwork routing and routing within the same network is termed intranetwork routing. 

In this article we discuss about the differences between internetwork routing and intranetwork routing. 

- Just like inter-network, intranetwork also uses IP (internet protocol) technology for computing services and sharing information. 

- But what makes it different from internetworking is that it is limited to some organization whereas internetwork extends beyond all i.e., it is not limited.

- Or we can put it in other words: Internetwork is spread across organizations and Intranetwork lies within an organization. 

- In some cases, the term intranetwork might mean only the internal website of the organization, but in other cases it might be a larger part of the IT infrastructure of the organization. 

- Sometimes, it may span over a number of LANs (local area networks). 

- The intranetwork is driven by the goal of minimizing the time, effort and cost of the individual’s desktop in order to make it more competitive, cost efficient, timely as well as productive.

- An intranetwork is capable of hosting multiple websites that are private to organizations and may even constitute an important part of the collaboration and communication between the members of the organization. 

- Intranetwork also makes use of various well known protocols such as the FTP, SMTP and HTTP. 

- The intranets are often incorporated with the technologies for lending a modern interface to the systems that host the corporate data. 

- These systems are known as the legacy systems. 

- We can see intranetwork to be a private analog of the internetwork. 

- It means the internetwork has been simply extended to an organization for its private use. 

- Extranetworks are a modified version of the intranetworks.

- Here, the website might be accessed by the non-members i.e., the suppliers, customers or some other approved third parties and so on. 

- Intranetworks are well equipped with a special protocol called the AAA protocol. 

- The 3 As stand for authentication, authorization and accounting. 

- There are a number of organizations who are concerned about the security of their intranetworks. 

- They have deployed a firewall and a network gateway for controlling the access to their services. 

- The intermediate systems when connect together form the internetwork whereas they may bound together a part of the internetwork which might be an intranetwork. 

- The intranetwork routing involves routing between two routers which lie in the same network whereas in internetwork routing, routing is done between routers which reside across different networks. 

- Intranetwork routing is quite easy when compared to the internetwork routing. 

- Protocols used in both the types of routing are different.

- Interior gateway protocol is responsible for routing in the intranetworks whereas the exterior gateway protocol takes the responsibility of routing across the internetwork. 

- Most common example of interior gateway protocol is the OSPF or the open shortest path first protocol. 

- And most common example of exterior gateway protocol is the border gateway protocol or BGP. 

- Also, the routing graphs for both the types are different. 

- In the intranetwork’s graph, all the routers are simply linked to one another in the same network. 

- There is less mess.

- On the other hand, the inter network’s graph is quite tedious. 

- This is so because routers of different networks have to be inter-linked with one another. 

What is inter-network routing?

In this article we shall discuss about inter-network routing. Before moving to that there are certain terms with which you should be familiar:

Ø  End systems: The ISO (the international standards of organization) defines the end systems as the network elements that do not have the ability of forwarding the packets across the networks. Sometimes the term host is used to refer to the end systems.

Ø  Intermediate systems: These are the network elements that have the ability of forwarding the packets across the network. Most common examples are routers, switches, bridges and so on.

Ø  Network: It can be defined as a part of the inter-network infrastructure encompassing various elements including hubs, repeaters, bridges and so on. The networks are bounded by the intermediate systems.

Ø Router: This is one of the intermediate systems that is used for connecting various networks with each other. It might support one protocol (router) or many protocols (multi-protocol router). Its hardware part is optimized especially for performing routing. The software part is responsible for carrying out the routing and takes care of the routing tables.

Apart from these devices, there are 3 types of addresses involved in inter-network routing:

Ø  The inter-network address: The host address and the network address are combined together to form this address. This is used for unique identification of a host over the inter-network.

Ø The host address or host ID: This ID might be assigned by the administrator or might be simply the physical address of the host. It is used for the unique identification of the host on its network.

Ø  The network address or network ID: This is address of a network for identifying it in an inter-network.

All the data packets consist of a network layer header. This network layer header consists of the following when the packet is transmitted from one host to another:

ØThe address of the source inter-network: This address combines the address of the source host and the source network.

ØThe address of the destination inter-network: This address combines the address of the destination host and the destination network.

ØThe hop count: This usually begins at zero and is numerically incremented when the packet crosses a router. Or in the opposite case it might be assigned some maximum value which might be decremented on reaching a router. The purpose of using the hop count is to make sure that the packet does not keeps on circulating endlessly in the network.

- For inter-network routing, two things have to be known.

- Firstly, how do you reach other routers which lie in the same network and secondly, how do you reach other routers which lie in other networks? 

- The answer to the first question is easy as it is the common routing problem among two hosts residing over the same network. 

- This routing is handled by the interior gateway protocol and it is different for different networks since only local routing info is required. 

- In this case, the commonly used protocol is the open shortest path first or OSPF protocol. 

- The routing between two different networks is performed using the exterior gateway protocol. 

- This is actually the problem of inter-network routing. 

- Here, the commonly used protocol is the BGP or the border gateway protocol. 

- The graph for inter-network routing is quite different from the one that is used in the network routing. 

- This is so because the routers which lie in the same network can be thought of as being directly connected to one another for routing across inter-network. - All the networks in an inter-network function as though they are one large unit.