Submitting an IP version 6 is much simpler than in the case of IP version 4 where sometimes it is necessary
to convert the numbers from decimal to by unary.
In this case there are 64 bits on the left side.
These are the network address 48 bits can be omitted because they represent the main network address
the other 16 bits can be divided into subnets so divide a network in a sudden it's you only need to
adjust these bits typing for example 0 0 0 0 0 then 0 0 0 1 and so on.
Submitting an IP version 6 is much simpler than it was before
dividing the network into sermonettes.
You might want to highlight one special session that called the demilitarized zone.
You can see the demilitarized zone in the upper right corner of the picture and below it.
This depends on the implementation.
There's a principle that states that a firewall cannot be configured in such a way that it protects
both local users and external servers.
Rules established to ensure the security of workstations will block servers rules that allow servers
to work will not protect workstations effectively.
It appears that more than one set of rules is needed.
And thus more than one firewall the firewall should protect the high risk.
Dedicated computers
to achieve that you need a firewall with three interfaces for each of the internal interfaces.
There is a separate set of rules that protect the network connected to this interface Another way is
to have two adjacent firewalls with the demilitarized zone between them.
The rules that separate the DMZ from the internet are less restrictive than the rules set on the firewall
between the DMZ and the local network.
In addition to the sudden netting that takes place in the network layer of the OSA model you can also
come across data link where routing and switches that perform functions of routers when you use two
switches and they are not connected to each other as in the picture on the top of the slide above.
Each of them creates a sudden computers connected to the same switch can exchange data with one another.
Instead of using switches you can also divide a network into sudden that's using specific ports for
example ports 5:59 what constitutes sudden that a.
And the rest will constitute something that be
the final effect will be the same direct communication between individual sections of the network is
now possible.
In this way the network topology can be adapted to the company's needs.
Such a division is commonly applied for security reasons.
However this technology was not designed as a technology for security.
Rather it's a solution for a more effective inefficient local network.
The solution has been implemented in two ways.
The simplest kind of network partitioning the virtual local area network or vlan is a static partitioning
VLAN numbers are assigned to the switch ports
or dynamic partitioning consists of assigning the MAC addresses of hosts of V'Landys in the case of
the latter.
It is no longer important which switch port an individual connects to.
It's important how the individual identifies themselves in the second layer the switches to control
the frameset and one ethernet packet.
In such a way that they're delivered only to other hosts within the same VLAN to make this possible.
Some additional information must be attached to the frame.
Thus a tag is added which represents the VLAN membership of a given host.
To ensure correct communication between the switches it is necessary to make at least one port of each
switch a trunk port.
This is the transport port through which all frames pass regardless of the Tag value.
In this way the computers connected to one switch are able to communicate with the computers connected
to another switch provided that the tag values are the same.
This is a standardized solution but it's implemented under different names by different manufacturers.
However it does not influence security directly because the tags are not protected in any way.
Data carried by the tag can be freely modified during this part of our seminar.
We touched upon the issues associated with the administration of computer networks.
We said that thanks to some netting you can limit the area affected by potential attack.
In addition subediting makes it easier to manage and network and improves its performance.
It allows you to control data traffic easily.
We discuss sudden getting an IP version 4 and IP version 6.
We examine the issues related to network partitioning in the second layer of us-I model V'Landys we
mentioned several services that allow to further improve the performance and security of the network.
Thank you.