Configuring Networking

Glenn Weadock
MDAA, MCAAA, MCT, MCSE, MCSA, MCITP, A+, SECURITY+

[email protected] www.i-sw.com
Topics in This Network settings in Windows
Module IPv4 and IPv6
Name resolution
Routing and NAT
Network card properties
Network troubleshooting
Network Settings in Windows
Networking utilities:
Network and Sharing Center
Network & Internet settings tile
Other control panels
Network and Sharing Center (W10/11)
Demo

Network and Sharing Center

Control Panel Networking Tasks

Change advanced sharing options

Change network adapter options
Set media streaming options
Configuration wizard
Getting to the Settings Applet

Right-click Start > “Network Connections”

Start > Settings > “Network & Internet”
Notification area > “Network” tile >
“Network & Internet settings” link (W10)
Network icon on taskbar > “Network &
Internet settings” link
Search field
- “Network,” “Ethernet,” “VPN”
“Network & Internet” Page (W10)
Network & Internet Page (W11)
Demo

Network and Internet tile

Settings Applet Networking Tasks

Set a network connection as “metered”

View data usage per connection
Impose a data limit on a connection
- Monthly, one-time, unlimited

Perform a “network reset”

SystemPropertiesRemote.exe
Sync Center
Internet Options
IPv4 and IPv6
?
So what happened to IPv5??

Skipped because it was not a

big enough improvement
Protocol
An agreed-upon set of rules that control
how communication occurs between
different devices or software modules.
Some industry organizations responsible
for defining network protocols include
the IEEE, ISO, IETF, and W3C.
Sending and Receiving with TCP/IP

Sender Receiver

Application Application

Transport Transport

Internet Internet

Network Interface Network Interface

 What the Layers Mean

Defines form of interaction as seen

Application
by applications and users

Manages frame sequencing,

Transport
acknowledgments, error checking

Internet Manage addressing and routing

Network Interface Interface with physical network

 Common Protocols at Each Layer

HTTP, FTP, SMTP, DNS, DHCP,

Application
SNMP, SMB

Transport TCP, UDP

Internet IPv4, IPv6, ARP, NAT, ICMP, routing

Network Interface Ethernet, fiber; MAC addresses

 Starting at the Bottom: MAC Addresses

Every computer with a network interface

Application has a MAC address (Media Access Control)
Six two-digit hexadecimal numbers (for
Transport example, 03-42-1C-CE-E3-51)
Globally unique & unchangeable
Internet
Set by hardware manufacturer
Network Interface Local address (not accessible worldwide)
 One Layer up: IP Addresses

Any computer with a network interface

Application
may have an IP (Internet Protocol) address
Four eight-bit numbers (for example,
Transport 10.10.1.99)
Changeable and potentially reusable on
Internet different networks
Set by software services or by users
Network Interface
Can be global (accessible worldwide)
IP is part of TCP/IP, the standard for
Internet communications
IP handles addressing and routing
IP addresses provide numeric
“mailboxes” to networked devices
Can be set manually or automatically
(by DHCP server)
Other settings can be made along with
the IP address:
- Subnet mask
- Default gateway
- Preferred DNS server
How do we Relate IP and MAC Addresses?
The Address Resolution Protocol (ARP)
keeps track of which IP addresses map to
which MAC addresses
Internet
This is how a message sent to a specific IP
address reaches the intended computer
An Ethernet “frame” uses MAC addresses,
but the IP packet it contains uses IP
Network Interface addresses
- A computer must know both when
building the frame!
IPv4 Addressing Fundamentals
Unique address with 4 8-bit “octets”
- IPv4 addresses have 32 bits (4 X 8)
- An octet can have a value from 0 to 255
in decimal form
Address contains two pieces of data:
- Network ID
- Host ID (“host” is just a network device)

Dividing line between them is defined

by the “subnet mask”
- Also 4 8-bit values
 Subnet Mask = ID Delimiter

198.168.1.50 = 11000110.10101000.00000001.00110010
255.255.0.0 = 11111111.11111111.00000000.00000000
--------------------------------------------------
Network ID = 11000110.10101000
Host ID = 00000001.00110010
IPv4 Addressing Evolution
Old “classful” addresses
- Class A: network ID is 8 bits
- Class B: network ID is 16 bits
- Class C: network ID is 24 bits

Classless Inter-Domain Routing (CIDR)

- RFC 1519 in 1993
- Subnet mask need not be on 8-bit
boundaries
- Notation: 192.168.1.50/16
(= 192.168.1.50 with 16-bit mask,
that is, 255.255.0.0)
 The art of designing an address space
with just the right number of host IDs and
network IDs is called subnetting.

The more bits you allow for the network

ID, the fewer are available for the host ID.

more networks = fewer hosts

more hosts = fewer networks
 Cross-subnet Communications

Subnet #1 Subnet #2
Need to chat with a
computer on a different Router
subnet?
“Default gateway” GM-DC1
GM-WS1
settings points to an
52.0.0.1 172.20.1.1
interface on a local
router 52.0.0.99
172.20.1.50
 Why Do we Even Need Subnets?

Better performance:
broadcast messages Subnet #1 Subnet #2
stay within subnet Router
Better tailoring of
networks to expected GM-DC1
growth GM-WS1
52.0.0.1 172.20.1.1
Better security (one
52.0.0.99
compromised system 172.20.1.50
doesn’t put whole
network at risk)
Where Do IP Addresses Come From?
Static configuration
DHCP
- IP address “lease”
- Subnet mask
- Default gateway setting
- Preferred DNS server

No DHCP?
- APIPA (169.254.0.0/16)
- a.k.a. “link-local addressing”
Private IP Address Ranges

Not accessible on the public Internet

10.0.0.0/8 (class A)
- 10.0.0.0 to 10.255.255.255

172.16.0.0/12 (class B)
- 172.16.0.0 to 172.31.255.255

192.168.0.0/16 (class C)
- 192.168.0.0 to 192.168.255.255
How Is IPv6 Different?
Much larger address space (128 bits vs. 32)
- So we don’t need to use subnet masks

8 groups (“hextets”) of 4 hex digits

- 2001:0db8:85a3:0000:0000:8a2e:0370:7334
- 2001:db8:85a3:::8a2e:370:7334

A hextet can have a value from 0 to FFFF

in hexadecimal (FFFF = 65,535 decimal)
More efficient routing
Stateless configuration
Host (interface) ID always 64 bits long
 Number of possible unique addresses in IPv4:
4,294,967,296
Number of possible unique addresses in IPv6:
340,282,366,920,938,463,463,374,607,431,768,211,45
6
Types of IPv6 Addresses
Link-local
- Local network (subnet)
- Prefix FE80
- Analogous to APIPA in IPv4

Unique local
- Routable but not on Internet
- Prefix FC00
- Analogous to private ranges in IPv4

Global
- Routable on public Internet
IP Toolkit
IPCONFIG
NETSH
PING, PATHPING
TRACERT
POWERSHELL
- Get-NetIPConfiguration …
- Test-NetConnection
- Set-NetIPAddress …
- etc.
Demo

Viewing and changing IPv4 settings

Name Resolution
Name Resolution
The process of correlating numerical addresses with
“friendly” names (e.g. workstation1.acmecorp.com),
either “forward” or “reverse.”

A “friendly” name is a lot easier to remember than either

a MAC address or an IP address.
People prefer names!
Preferred method is Domain Name
System (DNS)
- Correlate IP address to “host name”
- Hierarchical database
- Forward lookup: name is known, IP is
not (A or AAAA record)
- Reverse lookup: IP is known, name is
not (PTR)
- Service location records (SRV)

NetBIOS resolution = older technology

Name Resolution Example:

gm-ws1
gm-ws1.globomantics.local
172.20.1.99
Demo

DNS Resource Records

Mechanics of DNS

Contents of HOSTS file preloads into cache

Caching occurs at client and server levels
Preferred & alternate DNS servers specified
via DHCP
DNS servers can forward requests up,
down, or outside as necessary
“Dynamic DNS” updates the database
automatically
Name Resolution Toolkit
IPCONFIG
- /displaydns
- /flushdns

NSLOOKUP
POWERSHELL
- Get-DnsClientCache
- Clear-DnsClientCache
- Resolve-DnsName
- etc.
Demo

Testing DNS name resolution

Routing and NAT
Routers
Move packets of data between networks
- Operates at layer 3 of the OSI model

Can also manage network traffic

- e.g. by blocking broadcast messages
Routers Can Take Many Forms

Dedicated or multipurpose
- Firewall
- VPN

Hardware-based or software-based
Dynamic or static
Routers Can Have Different Purposes

Connect two private networks

- e.g. site-to-site VPN

Connect a private network to the Internet

- e.g. NAT

Connect between ISPs

Provide remote access (VPN, DirectAccess)
Network Address Translation (NAT)
A routing protocol that translates private IPv4 addresses
into one or more public IPv4 addresses
IPv4 Concerns

Finite pool of addresses (32-bit space)

Cost of public addresses
Security of internal systems
Access to public Internet from internal
networks
Network Address Translation Solutions

Use private, unrestricted addresses

internally
Only one or more public IPv4 addresses
required (save $, conserve IPs)
Internet users do not see internal systems
(except for desired static routes)
Internal users can access Internet resources
as though directly connected
How Does NAT Do It?

“IP masquerading” hides a private IP

address space behind a single public IP
address
Mapping table correlates internal addresses
with public address/port combinations
NAT router remaps addresses on the fly,
both outbound and inbound
Non-translated and Translated Routing

Pub1 Pub2 Pub1 Pub2

Can see Pub8 and Pub9 Can see Pub5 only

Pub5

Pub8 Pub9 Priv1 Priv2

NAT Example Event Sequence

Internal computer initiates communication

with Internet server
NAT router translates internal IP to its own
public IP with a unique port #
Router maintains mapping table correlating
the two addresses
Reply traffic containing unique port # gets
reverse-translated and forwarded to proper
internal computer
 Analogy:
Office phone system with
multiple internal extensions
Postscript: Static NAT

Predefined, permanent entry in mapping

table
Associates public IP + specific port # with
specific internal system
Inbound traffic with that port # always
goes to same internal computer
A.K.A. “port forwarding”
Network Card Properties
Network Interface Card (NIC)
- Often not actually a card!
- Includes wired and wireless interfaces

Default properties might all be OK!

Change properties several ways:
- BIOS/UEFI
- Control Panel
- Settings
- Device Manager
- Manufacturer utilities
NIC Properties via Device Manager
NIC Properties via Control Panel
Speed and Duplex Settings
Speed
- Auto-negotiation usually best; if not
working, could be other problem(s)
- 10Mbps, 100Mbps, 1Gbps = typical
choices
Duplex
- Full: NIC can send and receive at same
time (2 pairs of wires) (switches)
- Half: NIC can only send when not
receiving (1 pair of wires) (hubs)
Wake-on-LAN

NIC and/or PC listening even when asleep

Requires motherboard support (BIOS)
Plug-in NIC may need extra cable
“Wake on magic packet” in Windows NIC
properties “Advanced” tab
Configure remote access tool to send
magic packet
Quality of Service (QoS)
Different traffic types (e.g. streaming
media) have different demands:
- Fixed bitrate
- Intolerant of dropouts/delays

QoS can prioritize data streams

Implementation points:
- Routers & switches
- Group Policy (domains)
- Network properties in
conjunction with applications
Network Troubleshooting
Networking Commands
ipconfig (many uses)
/all, /release, /renew
/displaydns, /flushdns
ping, pathping
Can one device “see” another?
tracert
See the path a packet takes
netstat
See connections and “listeners”
Networking Commands
net (many subcommands)
net use [driveletter][path][/persistent:]
Map a drive to a share
net user
Account management (local, domain)
netsh
Configure IP, BranchCache, wifi, etc.
nslookup
Forward and reverse DNS lookups
Demo

Networking commands
Troubleshooting Local IP Address
Verify address details
- ipconfig /all
- Settings > Network & Internet > Status >
“View your network properties”
Is DHCP server online and responding?
- An address in the 169.254.c.d range
suggests “no”
Is DHCP client configured correctly?
- Check IPv4 properties of NIC
- Check “Alternate configuration”
To connect with other computers on
the same subnet, your computer
needs a correct IP address and the
correct subnet mask.
Troubleshooting Connectivity
Ping computers by IP address
- Firewall must pass ICMP packets
- “Ping localhost” means TCP/IP is
working
- Ping target on local subnet
- Ping target on remote subnet

Pathping takes longer but reports on hops

Test-NetConnection –ComputerName
- Optionally add -TraceRoute
Troubleshooting Name Resolution

Ping computers by hostname

Is DNS server correctly configured?
Is DNS server on line and responding?
Are DNS servers in the correct order?
Is DNS cache stale?
- ipconfig /displaydns, /flushdns
- Get-DNSClientCache,
Clear-DNSClientCache
When Nothing Else Works:
Good work! Next up:

Configuring Mobile
Networking