Machine Translated by Google

Lebanese University Date: Friday 2/24/2023

EU Code: utc505
Course title: Introduction to the cyberstructure of the Internet: This topic contains: 3 pages
networks and security

Type of exam: final

Authorized documents : X All ÿ None ÿ Other (Specify: ………………………………………..)

Exercise I (IP, DNS, TCP, VLAN 10 points):

Consider the following network:

IPs, ISPs

Student LAN
R2
(10.10.1.0/24)

LAN private servers R1 LAN public servers

(10.10.2.0/24) (195.125.1.0/28)

LAN teachers
(10.10.3.0/24)

In the private servers LAN we have the FTP server (my-ftp: 10.10.2.21) and MX (my-mx:
10.10.2.25). In the LAN of the public servers we have the web server (my-web: 195.125.1.3) and
DNS (my-dns: 195.125.1.4).

Router R1 has the last address for each network. (The MAC on the side of each network 10.10.i.0 is
"ii-ii-ii-ii-ii-ii" Router R2 has the addresses 195.125.1.1/28 and 195.125.1.17/30 with DG=195.125.1.18 /
30 on the ISP side.

1. Give the addresses of the routers.

3. Which router should do Natting? give the Natting line that matches the customer
“10.10.1.5” and to the teacher “10.10.3.5”.

4. Give the DNS configuration to define the domain "final2023.net.lb" which allows access to private servers from
inside and public servers from outside with aliases on all the necessary services.

5. A client 10.10.1.5” with MAC address “aa-aa-aa-aa-aa-aa” wants to download an FTP file. It must send a request
to the FTP server. Give the first 6 messages sent and received on the 10.10.1.0/24 network if we assume that
the ARP and DNS caches are empty by filling in the following table:

MAC-source MAC-dest Protocol IPs IPs Protocol Port Port pennants

6. To make redundancy we make a direct interconnection between R1 and R2 by a serial link of 2Mb/s speed. R1's rating
address is 10.10.4.1/30 and R2's is 10.10.4.2/30. OSPF dynamic routing protocol is used. What is the routing table

generated in the normal case and in the event of a break in the link between R1 and LAN server. It is assumed that all

other interfaces are fastethernet and the metric in OSPF is calculated by m=108 /speed.

7. If we want to put the students and the professors on the same switch and
connecting to a single router interface. Explain how to separate these two subnets on the same switch. How the
two subnets interconnect between
them ?

Exercise II (physical layer, WLAN and security 10 points):

Consider an access point AP connected to a switch S then to a router R which interconnects it to the IP as in the figure:

IPs

PA S R

1. In the PA we have 5 laptops. MACs are denoted MAC-1, MAC-2,….MAC-5 and MAC-R.
give the switching table in S.

2. The AP uses a 20MHz band. The signal to noise ratio is S/N = 20dB. Calculate the maximum capacity in this cell.

3. Let PC1 in the cell send a request to a remote HTTPS server. Give
the layered architecture of PC1, AP and router R.

4. Give in the frame from PC1 to AP the MAC addresses and the fields used.
Machine Translated by Google

5. PC1 must first authenticate with AP. we will use the random number method with an asymmetric
encryption algorithm. Give the authentication messages and specify the keys used in this
exchange.
6. The public key of PC1 is KPC1=(7,39). Calculate its private key.
7. If the random number used in part “5” is RAND=11. Calculate encryption
made by PC1.
8. To verify the AP's encryption of PC1, the AP requests the public key of PC1.
How is this key sent in an authentic way? give the verifications that are carried out by the AP.

9. If the AES algorithm is used with a 256-bit key. How AP can send this
key to PC1 in a confidential way?
10. Assuming that the encryption time of an AES block is 1ns. Calculate the flow of
encryption if 8 AES circuits are used in parallel.
11. A PC2 was connected to a Switch port and activated a sniffer in promiscuous mode.
PC2 has picked up the frame sent from PC1. We give the first part of this frame captured
by WireShark. What request is sent by PC1? deduce the IP address of
PC1.

c403164c0000c40215e400010800-450000549f6900003e0157ecc0a81102c0a80301-0800b66b699f000108090a0b…..