Connecting to the Internet A Practical Guide about LAN-Internet Connectivity

by
Edition: 1st
Format: Paperback
Pub. Date: 1999-02-19
Publisher(s): Addison-Wesley Professional
List Price: $21.35

Rent Book

Select for Price
There was a problem. Please try again later.

New Book

We're Sorry
Sold Out

Used Book

We're Sorry
Sold Out

eBook

We're Sorry
Not Available

How Marketplace Works:

  • This item is offered by an independent seller and not shipped from our warehouse
  • Item details like edition and cover design may differ from our description; see seller's comments before ordering.
  • Sellers much confirm and ship within two business days; otherwise, the order will be cancelled and refunded.
  • Marketplace purchases cannot be returned to eCampus.com. Contact the seller directly for inquiries; if no response within two days, contact customer service.
  • Additional shipping costs apply to Marketplace purchases. Review shipping costs at checkout.

Summary

Look before You Leap

As Internet usage continues to grow throughout the world, increasing numbers of network administrators face the task of connecting their local area networks (LANs) to the Internet. For these personnel, this project represents an entirely new challenge, and in some cases a daunting one. After all, there is much to consider when implementing a dedicated connection to the Internet.

In the past, only a small group of people possessed the skills and knowledge needed to build an Internet connection. Until recently, the Internet was not a huge network. Furthermore, until the 1990s, access was too expensive for small and midsize organizations. Lower access prices and an increase in the number of ISPs, however, have now led to a pervasive expansion of the Internet.

Today, network professionals need basic information about how to connect their LANs to the Internet. This book seeks to fill this information gap and explain the process of building and maintaining a dedicated connection from the LAN to the Internet. Unlike other networking projects, building a dedicated Internet connection poses a unique challenge because it requires functional expertise in a range of technical subjects, including:

  • TCP/IP
  • Internet services and functions
  • Wide area networking
  • Security
  • Network architecture
  • Testing and validation procedures

Moreover, constructing an Internet connection usually requires the administrator to involve other external parties, such as the Internet service provider (ISP), the telecommunications vendor, and sometimes a consultant (or two). Thus the process of connecting the LAN to the Internet requires both technical and project management expertise.

Many excellent books focus on specific aspects of Internet connectivity. In particular, the most popular subjects are TCP/IP and security. Excellent books can also be found on wide area networks (WANs) and Internet-specific topics such as Domain Name System (DNS). Yet, few books bring together the pertinent parts of these technical subjects in a manner that enables the reader to start building a connection without overloading him or her with unnecessary information. This book focuses on what is immediate and necessary to build such a connection.

This book really describes the process of connecting your LAN to the Internet. Its structure reflects the order in which you carry out tasks necessary to build an Internet connection. Each chapter discusses one particular element of the construction process, providing both conceptual information and useful tips on how to avoid common pitfalls in the construction process.

With the exception of Chapter 1, which provides additional information about TCP/IP and Internet services that is pertinent to building a connection, each chapter includes a checklist of key points to address when you build your connection. This book is your travel guide to putting your LAN on the Internet.

Audience

This book is intended for network and system administrators who are implementing an Internet connection for the first time, as well as managers who are overseeing the construction of such a connection. We have attempted to make the book international in scope so that the contents will prove useful to administrators throughout the world.

Prerequisites

Only one prerequisite exists for readers of this book--an understanding of the TCP/IP communications protocol. In particular, we assume the reader has a basic knowledge of the following:

  • OSI Reference Model
  • IP addressing
  • Subnet masking
  • Default gateways
  • Domain Name System (DNS)

Acknowledgments

I never really understood why authors write acknowledgements until I wrote a book myself. Now I understand. Most books, including this one, are really a joint effort. Although the author may write the words, he or she depends on the support of many folks. This support includes sharing ideas, offering opinions, and encouraging the author's effort.

Without the help of many people, this book would not have been possible. In particular, I owe a world of thanks to Saskia (my spouse) for putting up with my crazy project, especially during weekends when we should have been doing fun things like backpacking. I also wish to thank my family and friends, who helped me keep my sense of humor and direction throughout the writing process.

Many thanks go out to my colleague and friend, Darryl Black, whom I blame entirely for this book. (I am joking, of course!) Without his involvement, technical skills, and encouragement over an occasional beer, I would not have completed this project. I also wish to acknowledge my colleagues at 3Com, from whom I have learned much over the years. Many thanks go to my managers, Scott Graham and Adam Wasylyshyn.

Of course, nothing would have been possible without the guidance of my editor, Mary Hart, and the Addison Wesley Longman team. In addition, I am indebted to the technical reviewers of this text, who shared their experiences, thoughts, and comments on Internet connectivity and made many suggestions about how to improve the book. They include Dustin Andrews, Howard Lee Harkness, Richard P. Jussaume, Brendan Kehoe, Dana Love, Alain Mayer, James McGovern, Ravi Prakash, Thomas H. Ptacek, Ian Redfern, Dan Ritter, and Vincent Stemen.


--Andrew F. Ward


0201379562P04062001

Author Biography

Andrew F. Ward works as a network administrator for 3Com Corporation. He is responsible for Internet connectivity, security, and LAN and WAN design and operations. Previously Mr. Ward worked as a Novell system administrator and software developer.

Table of Contents

Preface--Look before You Leapp. xiii
Audiencep. xiv
Prerequisitesp. xiv
Acknowledgmentsp. xv
TCP/IP Internetworking and Internet Servicesp. 1
Comparing TCP/IP to the OSI Reference Modelp. 2
Packet-Based Communicationp. 4
Media Access Control (MAC)p. 4
Framesp. 5
Unicast, Broadcast, and Multicast Packetsp. 6
Communication in IP Networksp. 7
Address Resolution Protocol (ARP)p. 7
Routingp. 9
Route Advertisement and Learningp. 12
Internet Control Message Protocol (ICMP)p. 14
Internet Servicesp. 16
Emphasis on TCP and UDPp. 16
TCP Connectionsp. 17
UDP Data Streamsp. 19
Request for Comments (RFC)p. 19
Standard Internet Service Protocolsp. 19
Domain Name System (DNS)p. 20
File Transfer Protocol (FTP)p. 21
Mailp. 25
News (NNTP)p. 26
Terminal Emulation (Telnet)p. 26
Web (HTTP)p. 26
Security/Encryption (SSL)p. 27
Non-TCP-Based and Non-UDP-Based Servicesp. 27
IP Protocolsp. 27
IP in IP Encapsulationp. 28
Generic Routing Encapsulation (GRE)p. 28
Selecting Your Internet Service Providerp. 29
Chapter Overviewp. 29
Types of ISPsp. 30
Network Service Providersp. 30
Internet Service Providers (Resellers)p. 31
Which Type of ISP Is Right for You?p. 32
Basic Access Productsp. 33
Internet Services Providedp. 33
Connection Capacity (Bandwidth)p. 33
Access Provisioning (WAN Circuits)p. 35
Equipment Selection and Provisioningp. 37
Installation and Setup Servicesp. 37
Domain Name Registrationp. 38
Mail Exchange (MX) Recordsp. 39
Allocation of an IP Address Poolp. 39
Activation Support (Installation)p. 40
Post-Sales Supportp. 41
Extended Servicesp. 43
Web Hostingp. 43
Securityp. 44
Virtual Private Networksp. 45
Remote Accessp. 46
Faxingp. 46
Multicasting and MBonep. 47
News Fedp. 47
Knowledge Services (Consulting)p. 48
Capacity Scaling and Oversubscriptionp. 48
Network Infrastructurep. 49
Pricingp. 50
Fixed versus Usage-Based Pricingp. 50
Obtaining Quotationsp. 51
Contract Termsp. 53
Negotiatingp. 53
Checklist--Selecting the ISPp. 54
Provisioning Your Wide Area Networkp. 59
Chapter Overviewp. 59
Circuit Capacity (Bandwidth)p. 60
DS-1 Circuits (E-1 and T-1)p. 64
Dual DS-1 Circuitsp. 65
DS-3 Circuits (T-3 and E-3)p. 66
Components of WAN Circuitsp. 67
Circuit Technologiesp. 69
Point-to-Pointp. 70
Frame Relayp. 71
SMDSp. 75
ISDNp. 77
ADSLp. 79
Delivering the Circuitp. 82
Facilitiesp. 82
Premise Demarcationp. 84
Circuit Conditioningp. 84
North American T-1p. 85
European E-1p. 86
North American T-3p. 86
Premise Equipment Configuration and Connectionsp. 86
CSU/DSUsp. 86
T-1 Circuitsp. 87
E-1 Circuitsp. 88
T-3 Circuitsp. 89
ISDN Network Terminationp. 89
Checklist--WAN Provisioningp. 92
Planning Your Securityp. 95
Chapter Overviewp. 95
The Real Need for Securityp. 96
World View, Default Stance, and Directionp. 97
World Viewp. 97
Default Stancep. 98
Default Actionp. 98
Directionp. 99
Access Control Technologiesp. 99
Packet Filteringp. 99
Circuit Proxiesp. 104
Application Gatewaysp. 106
Stateful Inspectionp. 108
Network Address Translationp. 110
Firewall Products Explainedp. 111
Configuringp. 112
Attack Screeningp. 113
Authenticationp. 117
Encryption and Virtual Private Networksp. 118
Event Logging and Intrusion Notificationp. 120
Other Integrated Servicesp. 120
Vendorsp. 122
Typical Policiesp. 124
Outbound Trafficp. 124
Inbound Trafficp. 125
Service-Specific Recommendationsp. 125
Problematical Servicesp. 130
Security Auditingp. 130
Needp. 130
Software Toolsp. 131
Auditing Servicesp. 131
Keeping Currentp. 132
Checklist--Securityp. 133
Designing Your Network Architecturep. 135
Chapter Overviewp. 135
Delineate Your Service Objectivesp. 136
Services Accessed from the Internetp. 136
Services Provided to the Internetp. 137
Other Servicesp. 139
Assess Your Design Factorsp. 139
Securityp. 140
Costp. 141
Select a Prototype Designp. 142
Design 1--Single Filter for Screening Internal Hostsp. 143
Design 2--Single Filter for Screening Serversp. 145
Design 3--Single Filter with Screened Subnetp. 148
Design 4--Dual Filter with Screened Subnetp. 152
Determine Your IP Architecturep. 155
IP Addressingp. 155
IP Subnettingp. 160
Configuring IP Routing (Tips and Traps)p. 163
Equipment Selectionp. 171
Routersp. 172
WAN Interfaces for Routersp. 174
Reiterating the Design Processp. 174
Checklist--Network Architecture and Equipment Selectionp. 176
Staging and Testing Your Designp. 181
Chapter Overviewp. 181
Assemble Your Toolsp. 182
Software Utilitiesp. 182
Network Analyzerp. 184
Routing Diagnosticsp. 185
Server Applicationsp. 186
Client Applicationsp. 186
Network Hardwarep. 187
Staging Equipmentp. 187
Test Your Routingp. 189
Test Your Security (Filtering)p. 192
Test Mandatory Servicesp. 196
Checklist--Staging and Testingp. 198
Implementing and Validating Your New Connectionp. 203
Chapter Overviewp. 203
Complete the WAN Circuitp. 203
Going Live with the ISPp. 206
Deactivate Your Securityp. 206
Test WAN Connectivityp. 206
Test Routing to the Internetp. 207
Test Connectivity to DNS and Mail Serversp. 207
Reactivate Securityp. 208
Troubleshooting the WANp. 209
Validating Operation and Security after Start-Upp. 210
Checklist--Implementation and Validationp. 213
Managing Your Connectionp. 215
Chapter Overviewp. 215
Evaluating New Servicesp. 215
Checking for Security Breachesp. 218
Usage Monitoring and Baseliningp. 221
Addressing Performance and Connectivity Issuesp. 223
Moving to a New ISPp. 228
Your Internet Connection on Autopilotp. 229
Network Address Translationp. 231
Virtual Private Networksp. 235
How the Internet Functionsp. 239
Backbone Constructionp. 239
Domain Name Systemp. 241
The Internet Management and Servicesp. 242
Obtaining IP Addresses and Domain Namesp. 244
Internet Problemsp. 245
Predicted Growth and Capacity Planningp. 245
IP Address Depletionp. 246
Dynamic Host Configuration Protocolp. 249
Helpful Web Sitesp. 251
Firewall/Security Sitesp. 251
Freeware Sitesp. 251
Internet Administration Sitesp. 251
Internet Service Providersp. 252
Bibliographyp. 253
Glossaryp. 255
Indexp. 279
Table of Contents provided by Syndetics. All Rights Reserved.

Excerpts

Look before You Leap As Internet usage continues to grow throughout the world, increasing numbers of network administrators face the task of connecting their local area networks (LANs) to the Internet. For these personnel, this project represents an entirely new challenge, and in some cases a daunting one. After all, there is much to consider when implementing a dedicated connection to the Internet. In the past, only a small group of people possessed the skills and knowledge needed to build an Internet connection. Until recently, the Internet was not a huge network. Furthermore, until the 1990s, access was too expensive for small and midsize organizations. Lower access prices and an increase in the number of ISPs, however, have now led to a pervasive expansion of the Internet. Today, network professionals need basic information about how to connect their LANs to the Internet. This book seeks to fill this information gap and explain the process of building and maintaining a dedicated connection from the LAN to the Internet. Unlike other networking projects, building a dedicated Internet connection poses a unique challenge because it requires functional expertise in a range of technical subjects, including: TCP/IP Internet services and functions Wide area networking Security Network architecture Testing and validation procedures Moreover, constructing an Internet connection usually requires the administrator to involve other external parties, such as the Internet service provider (ISP), the telecommunications vendor, and sometimes a consultant (or two). Thus the process of connecting the LAN to the Internet requires both technical and project management expertise. Many excellent books focus on specific aspects of Internet connectivity. In particular, the most popular subjects are TCP/IP and security. Excellent books can also be found on wide area networks (WANs) and Internet-specific topics such as Domain Name System (DNS). Yet, few books bring together the pertinent parts of these technical subjects in a manner that enables the reader to start building a connection without overloading him or her with unnecessary information. This book focuses on what is immediate and necessary to build such a connection. This book really describes the process of connecting your LAN to the Internet. Its structure reflects the order in which you carry out tasks necessary to build an Internet connection. Each chapter discusses one particular element of the construction process, providing both conceptual information and useful tips on how to avoid common pitfalls in the construction process. With the exception of Chapter 1, which provides additional information about TCP/IP and Internet services that is pertinent to building a connection, each chapter includes a checklist of key points to address when you build your connection. This book is your travel guide to putting your LAN on the Internet. Audience This book is intended for network and system administrators who are implementing an Internet connection for the first time, as well as managers who are overseeing the construction of such a connection. We have attempted to make the book international in scope so that the contents will prove useful to administrators throughout the world. Prerequisites Only one prerequisite exists for readers of this book--an understanding of the TCP/IP communications protocol. In particular, we assume the reader has a basic knowledge of the following: OSI Reference Model IP addressing Subnet masking Default gateways Domain Name System (DNS) Acknowledgments I never really understood why authors write acknowledgements until I wrote a book myself. Now I understand. Most books, including this one, are really a joint effort. Although the author may write the words, he or she depends on the support of many folks. This support includes sharing ideas, offering opinions, and encouraging the author''s effort. Without the help of many people, this book would not have been possible. In particular, I owe a world of thanks to Saskia (my spouse) for putting up with my crazy project, especially during weekends when we should have been doing fun things like backpacking. I also wish to thank my family and friends, who helped me keep my sense of humor and direction throughout the writing process. Many thanks go out to my colleague and friend, Darryl Black, whom I blame entirely for this book. (I am joking, of course!) Without his involvement, technical skills, and encouragement over an occasional beer, I would not have completed this project. I also wish to acknowledge my colleagues at 3Com, from whom I have learned much over the years. Many thanks go to my managers, Scott Graham and Adam Wasylyshyn. Of course, nothing would have been possible without the guidance of my editor, Mary Hart, and the Addison Wesley Longman team. In addition, I am indebted to the technical reviewers of this text, who shared their experiences, thoughts, and comments on Internet connectivity and made many suggestions about how to improve the book. They include Dustin Andrews, Howard Lee Harkness, Richard P. Jussaume, Brendan Kehoe, Dana Love, Alain Mayer, James McGovern, Ravi Prakash, Thomas H. Ptacek, Ian Redfern, Dan Ritter, and Vincent Stemen. --Andrew F. Ward 0201379562P04062001

An electronic version of this book is available through VitalSource.

This book is viewable on PC, Mac, iPhone, iPad, iPod Touch, and most smartphones.

By purchasing, you will be able to view this book online, as well as download it, for the chosen number of days.

Digital License

You are licensing a digital product for a set duration. Durations are set forth in the product description, with "Lifetime" typically meaning five (5) years of online access and permanent download to a supported device. All licenses are non-transferable.

More details can be found here.

A downloadable version of this book is available through the eCampus Reader or compatible Adobe readers.

Applications are available on iOS, Android, PC, Mac, and Windows Mobile platforms.

Please view the compatibility matrix prior to purchase.