05 - CCNA 01 - Chapitre 01 - Réseaux fiables

Introduction to Reliable Networks

Understanding Reliable Networks

• The session begins with a focus on the concept of reliable networks, emphasizing their importance in organizational settings.

• Establishing a network requires careful consideration of elements that reassure management and users about its reliability.

Importance of Network Reliability

• Daily work activities such as calls, emails, video conferences, and file sharing depend heavily on a reliable network for effective data exchange.

• A reliable network must meet critical criteria including availability, fault tolerance, security, and quality of service.

Key Criteria for Network Reliability

Four Essential Criteria

• The four main criteria for assessing network reliability are:

• Fault tolerance

• Scalability (evolutivity)

• Security

• Quality of service

Fault Tolerance Explained

• Fault tolerance is crucial; it ensures that equipment failures do not significantly impact overall network functionality.

• Any failure in routers or switches should be managed so that it does not disrupt the entire network's operation.

Single Point of Failure (SPOF)

Identifying SPOFs in Network Design

• The term "Single Point of Failure" (SPOF) refers to any single component whose failure would cause the entire system to fail.

• Examples include switches or internet boxes; if either fails, all connected users lose access to the internet.

Implications for Business Networks

• A network with multiple SPOFs is inadequate for larger organizations where continuous connectivity is essential.

• Important traffic points must be redundant; this includes having multiple internet connections and switches to ensure reliability.

Designing Redundant Systems

Strategies for Redundancy

• In larger enterprises, critical components like servers must have redundancy built into their design.

• For instance, if two servers are used for production data access, they should not rely on the same switch to avoid simultaneous failure risks.

Electrical Supply Considerations

Redundancy and Scalability in Network Infrastructure

Importance of Redundant Power Sources

• It is crucial to have two different power sources for servers to prevent total loss during a power outage. This emphasizes the need for complete redundancy in network architecture.

• Systems should not rely on a single power source; instead, equipment must be configured to utilize separate sources effectively, ensuring continuous operation even if one fails.

Designing for Total Redundancy

• A well-designed network architecture with total redundancy enhances availability and reliability of both the infrastructure and equipment.

• The focus should be on creating an infrastructure that can withstand failures without significant downtime or data loss.

Scalability Considerations

• When establishing a network, especially for startups, it’s essential to consider future growth. Initial investments can be substantial, often amounting to thousands of euros.

• Avoid overbuilding the network initially; however, ensure it has the capacity to adapt as business needs evolve over time.

Anticipating Future Needs

• Businesses must assess potential changes in workforce size when designing their networks. For instance, if a company grows from 50 to 250 employees within a few years, the infrastructure must accommodate this growth without frequent replacements.

• Management should evaluate trends in company expansion and plan accordingly so that infrastructure does not require constant upgrades with each new hire.

Cost Implications of Inflexible Infrastructure

• If existing routers do not support additional interfaces needed for expansion, replacing them becomes necessary. This could lead to higher costs than anticipated due to repeated purchases.

• Investing in scalable solutions upfront can save money long-term by avoiding costly upgrades later when more capacity is required.

Financial Impact of Poor Planning

• Failing to plan adequately may result in spending significantly more on new equipment than originally budgeted. For example, needing two new routers at €1500 each versus minor upgrades costing only €1100 overall illustrates this point clearly.

Understanding Network Scalability and Quality of Service

Importance of Scalability in Infrastructure

• The discussion emphasizes the significance of considering scalability when setting up network infrastructure, as it allows the network to grow alongside the business.

• Failing to plan for scalability from the outset can lead to challenges as the company evolves, highlighting its critical role in long-term success.

Defining Quality of Service (QoS)

• Quality of Service is introduced as a technical term related to managing and prioritizing network traffic effectively.

• An analogy is made with traffic lights: just like cars must stop at red lights, certain data packets may need to be prioritized over others based on urgency.

Traffic Management Examples

• The speaker illustrates how different types of traffic should be managed differently; for instance, emergency vehicles are given priority on roads.

• This principle applies similarly in networks where certain data types require immediate transmission while others can afford delays.

Prioritization in Network Traffic

• Voice over IP (VoIP) is highlighted as a real-time application that necessitates high priority due to its time-sensitive nature compared to less urgent data transfers like emails.

• The importance of ensuring timely delivery for voice communications is stressed, contrasting it with email which can tolerate delays.

Classifying Data Traffic by Importance

• Different categories of data traffic are discussed: VoIP takes precedence, followed by video streaming and then general data transfers.

• Specific examples illustrate how businesses might prioritize calls from management or VIP users over regular employee communications.

Allocating Bandwidth Effectively

• The concept of bandwidth allocation is introduced; specific percentages may be assigned to different types of traffic based on their importance.

• For example, 50% could be allocated for voice traffic, 30% for video, and 20% for other data needs within an organization.

Quality of Service and Security in Networking

Quality of Service (QoS) Mechanisms

• The speaker discusses bandwidth allocation, stating that 70% can be dedicated to specific traffic types while 30% is reserved for internet traffic. This allows for prioritization and blocking of certain traffic types.

• When streaming videos on platforms like YouTube, users may experience slowdowns due to QoS mechanisms that prioritize production server access over less critical traffic.

• Configuration of QoS can be done through command lines or specialized software, emphasizing the importance of understanding these tools even if not the main focus of the discussion.

Importance of Security

• The speaker highlights a consensus on the significance of security against both internal and external threats, including intentional and unintentional attacks.

• The "security triangle" is introduced as a framework for understanding why security measures are implemented within organizations.

Core Principles of Security

Confidentiality

• Confidentiality ensures that only authorized individuals can access specific data. For example, sending an email securely so only the intended recipient can read it illustrates this principle.

• Mechanisms such as passwords, encryption, and policies like two-factor authentication are essential for maintaining confidentiality but represent just one pillar of overall security.

Integrity

• Integrity refers to ensuring that data remains unchanged during transactions. An example given involves a financial transaction where unauthorized alterations could lead to significant losses.

• Hashing is mentioned as a primary mechanism used to verify data integrity by ensuring sent data matches received data without alteration.

Availability

• Availability guarantees quick and reliable access to data for authorized users. High availability and fault tolerance are crucial concepts discussed in relation to network reliability.

• Physical security is emphasized as often neglected yet vital for protecting data integrity; poor physical conditions can undermine all other security efforts.

Common Pitfalls in Security Management

Security Threats and Mitigation Strategies

Importance of Physical Security

• The lack of reliable security measures can lead to vulnerabilities, such as allowing subcontractors unsupervised access to sensitive areas like server rooms.

• Physical security is a critical pillar for data availability, encompassing redundancy and disaster recovery mechanisms.

Data Center Redundancy

• Implementing redundant data centers in different locations is essential for ensuring data integrity and availability during disasters.

• Security threats are not limited to external hackers; they also include various forms of malware and zero-day attacks that exploit newly discovered vulnerabilities.

External vs. Internal Threats

• Companies are increasingly prepared for external attacks (e.g., DDoS attacks, identity theft), but internal threats often go overlooked.

• Internal threats can arise from unintentional actions by employees, such as leaving sessions open or sharing sensitive information inadvertently.

Social Engineering Risks

• Employees may unintentionally expose the organization to risks through social engineering tactics, where attackers manipulate individuals into divulging confidential information.

• Malicious insider actions, such as abusing administrative privileges, pose significant risks that organizations must address alongside external threats.

Comprehensive Security Strategies

• Organizations often focus on external security measures while neglecting the potential for internal breaches from their own staff.

• Firewalls serve as a primary defense against outside attacks; however, they do not protect against threats originating from within the organization itself.

Layers of Security: Analogy with Border Control

• The concept of layered security can be likened to border control processes involving both immigration checks (firewalls) and customs inspections (Intrusion Prevention Systems).

Security Measures in Data Management

Understanding Data Inspection and Security Techniques

• The concept of data inspection involves analyzing data to identify potential threats such as viruses, malware, or techniques that could compromise an organization.

• Various security mechanisms are employed, including antivirus software, anti-malware tools, and access control lists (ACLs), which dictate user permissions for accessing different resources within the system.

• Virtual Private Networks (VPNs) are highlighted as a method to ensure secure connections from external sources to internal networks, protecting data from eavesdropping during transmission.