Network / Security, Network, overview

Transcription

1 Network / Security, Network, overview Orsys, with 30 years of experience, is providing high quality, independant State of the Art seminars and hands-on courses corresponding to the needs of IT professionals. Orsys proposes a set of courses on the most important topics in IT technologies and management. Seminars Networks, State of Art... Best ( p2 ) Networks and the future of Internet... Best ( p4 ) Wireless networks... Best ( p6 ) VOIP, Architectures and Processes... Best ( p8 ) Hands-on courses Unix/Linux Open LDAP Directory Service... ( p10 ) ORSYS, La Grande Arche, Paroi Nord, Paris La Défense cedex. Tél : +33 (0) Fax : +33(0) page 1

2 Seminar, 3 day(s) Ref : TER Participants Project managers, architects networks, systems and networks engineers. Pre-requisites Basic knowledge in networks and communications. Next sessions Brussels sep , nov Geneve sep , nov Luxembourg sep , nov Networks, State of Art Best > Network / Security > Network, overview OBJECTIVES This seminar presents an overview of the main protocols, the standardization, the voice quality and bandwith, the migration, the performance and the security of voip technologies, and introduces you to the major components of voice over IP networks. On all these topics, the main solutions are detailed and illustrated with case studies. 1) Main solutions for networks 2) Network architectures and access 3) Cellular and wireless networks 4) Businesses networks Presenter 5) Carriers networks 6) IP environments 7) Multimedia, video and voice over IP 8) Security, managment Xavier CARCELLE After Engineering studies in France and in the US, he worked on telecommunications engineering projects in France, US and Chile. He served as CTO for OpenPattern a french telecommunications company developing an OpenHardware FPGA-based router-board. He is currently working for a Linux-based VoIP company managing the development of the XiVO IPBX OpenHardware appliance. He is the author of numerous telecommunications books among them a reference book about PowerLineCommunications. 1) Main solutions for networks - Main categories of data networks: computers, telecommunications and cable carriers. Equipments. 2) Network architectures and access Physical-level architectures - SONET and SDH. WDM and DWDM techniques. Wavelength switching and burst switching. Link layer architectures - Ethernet frames. ATM architecture and exploitation. PPP frames and links for Internet. Switching techniques. Packet-level architectures - IP architectures. Routers and layer functionnalities. - Routing principles. IP controling and signaling. Link/packet layer architectures - Label switching techniques. MPLS standard. - Distribution. Quality of Service. GMPLS extensions. Local loop - Toward very high bandwidth. Optical technologies. - Solutions from the cable carriers. xdsl techniques. - Local loop. WiFi and WiMax. 3G. - Optical fiber to the business, to the CPE. - Voice (VoDSL) and television (TVoDSL). 3) Cellular and wireless networks Cellular networks - Wireless networks typologies: PAN, WLAN, WMAN, WRAN. Hot-spot, handover, roaming. - GSM. GPRS. 3G (UMTS, W-CDMA and CDMA-2000) and different flavors HSPDA, HSUPA. 4G. RFID tags. Wireless network technologies - Bluetooth 3.0 new products , WiFi products and WLAN. WiMAX. - QoS. Geolocalization techniques. 4) Businesses networks LAN Technologies - Principles. Cabling: Supports (UTP, STP, Optical Fiber, Wireless), topologies (rings, tree, star, cell). Standardisation and evolutions of the LANs - Evolution of the medium access methods: ISO (CSMA/CD), ISO (Token ring). Standardisation. Local Ethernet networks ORSYS, La Grande Arche, Paroi Nord, Paris La Défense cedex. Tél : +33 (0) Fax : +33(0) page 2

3 - Different solutions among the Ethernet family. - Protocols in the 802 family, management of the QoS. - Virtual networks VLAN and their implementations. Interconnections - Tools for interconnecting networks. Switching. - Overlays networks, CDN and P2P. Virtual private networks - Data filtering. Security and management. - VPN-IP- IPsec and VPN-IP-MPLS environments. 5) Carriers networks Functionalities - Quality of Service, control and managment. - Signalling. Convergence. Robustness. - Voice/Data/Video integration. Interconnecting sites. - Virtual private networks (VPNs). Internet solutions - Internet boom. ISP networks architectures. - IP VPNs, IPSec VPNs. VPLS solutions. Frame Relay and ATM networks - ATM and Frame Relays. - Voice/Data integration. Quality of Service. MPLS architecture - Label switching and MPLS architecture. - Quality of service ; MPLS-DiffServ ; VPN-MPLS. Policy-based architecture - COPS protocol (Commong Open Policy Service). - SLAs (Service Level Agreements). - PIBs (Policy Information Bases). 6) IP environments Internet-based environments - Goals. Fundamental principles of Internet. - TCP/IP and UDP/IP global architecture. - IPv4 protocol. IPv6 protocol. ICMP, the control protocol. - Diff-Serv and Int-Serv. RSVP. IP multicast. IP VPN. Applications layer - The basic applications: FTP, mail, Web... - Corporate multimedia. Voice over IP. Distributed video. 7) Multimedia, video and voice over IP Voice over IP or VoIP - From voice encoding to data transport. IETF standards.qos. VoIP applications and products. Video over IP, Video-on-demand (VoD) and IPTV - Encoding and compression techniques (MPEG and wavelets). IPTV performances. 8) Security, managment Networks managment - ISO proposals for network managment model. - SNMP protocol: features, proxies, MIB. Security - Main attacks: Viruses, Worms and DDoS. - Solutions: Firewall, authentication (MD5, RSA), IPSEC... Strategies for the future - The future of Internet and Mobility. Smart networks: adapting to the user demands. Autonomic networks. ORSYS, La Grande Arche, Paroi Nord, Paris La Défense cedex. Tél : +33 (0) Fax : +33(0) page 3

4 Seminar, 3 day(s) Ref : RNG Participants This seminar targets network managers, architecture designers and system administrators who need to manage the evolution of their networks. Pre-requisites Knowledge base in the network domain. Next sessions Brussels Geneve Luxembourg Networks and the future of Internet Best > Network / Security > Network, overview OBJECTIVES This seminar will cover the state of the latest features and technologies in the world of networks and telecommunications, emerging technologies and their integraton in the current environments. The different solutions will be described under a technological and economical angle. This seminar targets network architects and engineers as well as IT heads who carry strong knowledge in telecommunications. 1) Internet and the upcoming generation of protocols 2) Mobility in networks 3) Prospective for the mobile Internet 4) Evolution of the technologies in the access networks 5) Controling the Quality of service (QoS) 1) Internet and the upcoming generation of protocols 6) Technologies and evolutions of the access networks 7) Local lopp 8) Wireless networks 9) Voice over IP 10) Security and the next generation of Internet - The Internet Society. Standardization. - The main features of IP : addressing, routing (BGP, RIP, OSPF)...Issues and solutions. - Local networks/public networks : NAT/PAT. IPv6. - The transport layer in TCP/IP : UDP, TCP. 2) Mobility in networks - The first generation of mobile networks. - GSM and its breakthroughs. Packet mode in GSM networks : GPRS/EDGE. GPRS networks routing. - 3G : UMTS, CDMA2000 ; architecture, throuputs, applications. Evolutions to 3G/3G+ : HSDPA, HSUPA, HSOPA, MIMO. - Next generations : throughputs, caracteristics (LTE and UMB). - Inter-netwoks mobility : vertical handover and cognitive radio. - IP mobile architecture in heteregeneous networks. 3) Prospective for the mobile Internet - Mobility, UMTS, 4G and wireless routers. - Contrôle. Content Distributed Networks. Signaling. Control. - Quality of Service for fixed and mobile networks. 4) Evolution of the technologies in the access networks - Switching : high throughputs, label and contents. - Content-based routing and XML routing. - Overlays networks, CDN and P2P networks. - Services-based architectures. 5) Controling the Quality of service (QoS) - Definition of the QoS : from design to state machines. - Traffic engineering. Source-to-destination boundaries. - Access control. Packets sequencing. - Queues handling : RED, RIO. - QoS reults for different technologies. - Application-based trafic shaping. The RTP/RTCP proposition. 6) Technologies and evolutions of the access networks - ATM, a possible universal network? - ATM for ISP and telcos. - Data control and services classifications. - Ethernet-for-all! - From 10Mbits/s to 10Gbits/s. - From LAN to long-distance core network Ethernet First Mile for FTTH. - IP for a new generation. - IPv4 and IPv6. Advantages of IPv6 for fast networks and multimedia. - IP multicast routing. IntServ and DiffServ models. - Different class of services : EF, AF and BE. - DiffServ and MPLS. DiffServ and IntServ : differences. - MPLS and the new generation of core networks for Internet. ORSYS, La Grande Arche, Paroi Nord, Paris La Défense cedex. Tél : +33 (0) Fax : +33(0) page 4

5 - Label switching. Origins and reasons. - LDP Protocols, CR-LDP, RSVP-TE, G-MPLS for new generation. - MPS vs IP. Déployments and key players. 7) Local lopp - Optical fibers access networks (FTTC, FTTH). - Cable-TV access networks. Cable-TV modems. - Twisted pairs access networks. DSL modems. Throughputs. Other solutions : xdsl, DSLAM. - Upcoming triple-play and quadruple-play. - Architectures. Home networking : The Wi-Fi and PLC (PowerLine Communications) technologies. 8) Wireless networks - WPAN networks - Newer generations and the standard. - UWB (Ultra Wide Band) and the very high troughput. - Bluetooth 3.0, WUSB products and WINET. ZigBee. - WLAN networks. - WiFi environment with IEEE a/b/g/n. - Handovers, Quality of service and security. - Fast handover and mesh-networks. - WMAN networks. - WiMAX. Metropolitan networks and IEEE WDSL, mobile ADSL and IEEE e. - WRAN networks. - Usage of the UHF/VHF bands for wireless regional networks and IEEE Smart antennas and cognitive radio. - Wi-xx solutions for networks. - Wireless networks and IEEE Wi-xx networks vs 4G. 9) Voice over IP - Convergence. - Voice over IP, ToIP and VoIP. - Towards a full-ip telephony network. - Standards, industrial key players. - H323 : close the original PSTN. - Architecture and deployment using compatible signalling with PSTN. - SIP approach and unified communications. - An open-system of signalization to build-up services. The SIP Forum. SIP within a 3G mobile network. - Comparison of SIP and H MGCP and gatekeepers. - Interconnexion of ToIP and PSTN devices. Integration of heterogeneous services. 10) Security and the next generation of Internet - Internet security model : still avalailable? Authentication, RADIUS and IEEE 802.1x. - Encryption and electronic signature. - Data Classification for security usage. - New generation of firewalls. Authentication with chips. - Certificates architectures (PKI). - Autonomous networks. Networks managment. Smart networks. Virtual networks. After IP. ORSYS, La Grande Arche, Paroi Nord, Paris La Défense cedex. Tél : +33 (0) Fax : +33(0) page 5

6 Seminar, 3 day(s) Ref : RSW Participants This seminar is intended for IT professionals and network engineers wishing to specialize in cellular networks, mobile networks. Pre-requisites Strong knowledge in corporate networks administrations. Next sessions Brussels sep , nov Geneve sep , nov Luxembourg sep , nov Wireless networks Best > Network / Security > Network, overview OBJECTIVES The domain of wireless networks grows rapidly with newer standards. Those networks allows us to interconnect corporates equipements transmitting voice, data, images. They are also the baseline for telcos «hot spots». The IEEE (Wi-Fi and all its variants), Bluetooth, UWB, ZigBee, IEEE , WiMAX, WiRAN, etc..will be described in depth during this seminar and their applications that can be used. The last day of this seminar will put the stress on the key topic of the wireless security to cover its aspects. 1) Principles of wireless networks 2) Bluetooth, UWB, ZigBee and IEEE networks. 3) Personal networks technologies 4) Mesh-networks and ad-hoc networks 5) IEEE standard and IEEE standard 1) Principles of wireless networks 6) The other solutions 7) Protocols and applications of wireless networks 8) 3G vs WLAN 9) Wi-Fi security 10) ILAN and WAN interconnexion - Introduction to wireless networks. - Fixed networks vs Wireless networks. Different generations. - WPAN, WLAN, WMAN, WRAN networks. - Caracteristics and theoretical performances. - Handover and integration of the different solutions. - Wireless networks for businesses. - Troughputs needed. Available applications. Home, Office and Business networks. - ISP Wi-Fi «Hot spots». - Wi-Fi. Advantages of wireless technologies. - The Wi-Fi issues for ISPs. - Handovers. - Mobility issues. Different types of handovers. - Integration within mobile networks. 2) Bluetooth, UWB, ZigBee and IEEE networks. - The IEEE standard, the UWB, ZigBee and Bluetooth technologies. - The standard and bluetooth. - IEEE Very high trhoughput technology UWB. - Wimedia consortium and WUSB. - IEEE and ZigBee products. - Personal networks technologies. 3) Personal networks technologies - WiFi (IEEE b/g). - A massive success. Specifications. - Wi-Fi devices : cards and access points. - MAC layer : CSMA/CA. Frequency bands. - Ethernet integration. Trhoughputs and performances. - Medium Access technologies. - Quality of Service and IEEE e. - Voice encoding and audio «streams». - Wireless controlers and switches. - Wi-Fi engineering and managment. - Future of IEEE b with n and MIMO. - Deployment of a Wi-Fi network. - Constraints. Devices. Cost. Configuration. 4) Mesh-networks and ad-hoc networks - Definition of a mesh-network and ad-hoc network. - Mesh-networks routing. - Different routing protocols : pro-actives (OLSR, DSDV) and reactives (AODV, DSR). - Security and QoS in ad-hoc networks. 5) IEEE standard and IEEE standard - Definition of the Wireless Local Lopp and WDSL access (Wireless DSL). - WDSL vs fixed networks. ORSYS, La Grande Arche, Paroi Nord, Paris La Défense cedex. Tél : +33 (0) Fax : +33(0) page 6

7 - Technologies and frequencies available. - WiMAX. Theoretical performances. - IEEE standard. Mobile WiMAX. 6) The other solutions - The new genration of regional wireless networks. - Usage of the UHF/VHF bands and IEEE Cognitive radio. Interactive radio. - A unified network with wireless networks. - IEEE and the vertical handover. - Continuity of service and a wireless Internet. 7) Protocols and applications of wireless networks - The IP environment. The slow-start and buffer-bloat issues. - MIMO technologies and the increase of the trhoughput. - Home networks : UPnP and DLNA. - Applications : voice, production, P2P... - Pervasive Internet - Developments. Internet city. Integration with the new IP generation. - Sensors networks. Dust networks. 8) 3G vs WLAN - 3GPP/3GPP2 vs Wi-xx. - Comparison with UMTS. - Fourth generation of mobile networks and UMA/IMS integration. 9) Wi-Fi security - Weaknesses by design of wireless networks. - Protection against Denial of Service possible? How to control the radio coverage? - SSID and security issue. - Attacks : Man-in-the-middle, ARP spoofing. - Weaknesses of the authentication solutions. - Elementary techniques based on SSID and MAC filtering. - Interests and limits. Risks of the beacon frame usage and ssid probe request. - Example of attacks : SSID brute forcing... - Wired Equivalent Privacy WEP - Features. Key exchange. Authentication and encryption. Popular attacks. Demonstrations. - WiFi Protected Access WPA. Features. Advantages of WPA over WEP. - Extensible Authentication Protocol EAP. Temporal Key Integrity Protocol TKIP. - Message Integrity Check MIC. WPA v2 and the i standard. 10) ILAN and WAN interconnexion - Radio coverage control. - Network separaton. - Firewall and DMZ. - End-user device protection. - Mobile users, VPN and wireless networks. ORSYS, La Grande Arche, Paroi Nord, Paris La Défense cedex. Tél : +33 (0) Fax : +33(0) page 7

8 Seminar, 2 day(s) Ref : VIP Participants Project managers, networks architects, systems and networks engineers. Pre-requisites Knowledge in networks. Next sessions Brussels nov Geneve nov Luxembourg nov VOIP, Architectures and Processes Best > Network / Security > Network, overview OBJECTIVES This seminar presents the major components of voice over IP networks. It reviews the main protocols, standardization, voice quality and bandwidth, migration, performance and security of voip technologies. The main solutions will be studied and illustrated with case studies. 1) Networks and telecommunications review 2) Voice over IP 3) Protocols essential (H323, SIP...) 4) Migrating to Voice over IP 1) Networks and telecommunications review 5) Integration and administration 6) Performance and quality of service of Voip networks 7) Security 8) The future - Switched Telephone Network. - Enterprise Telephone Service. Architecture. Assets (PABX, Terminals). Available services. Constraints and limitations. - The Internet architecture, TCP / IP. - Enterprise data network. Architecture. 2) Voice over IP - Definition and concepts. The vocabulary of voip. - Enterprise networks and their evolutions: Voice / Data separation, single network convergence. Why migrate to voip? - How to integrate voip to enterprise information system? - How to interoperate with traditional telephone networks? - The user functionalities offered by voip. - The market and its players. 3) Protocols essential (H323, SIP...) - Roles and interests of each of the protocols. - H323 Presentation and architecture. Principles and definitions. H323 components roles: gatekeeper, MCU, gateway... The steps of a H323 communication: RAS, H225, H Examples of enterprise architecture. - SIP Presentation and architecture. Principles and definitions. SIP components roles: proxy, registrar, redirector, locator... The steps of a SIP communication: registration, localisation, call, roaming... Examples of enterprise architecture. - Other VoIP protocols. MGCP, MEGACO, H IAX protocol, from Asterisk Open Source. 4) Migrating to Voice over IP Key choice for voip - Cost: profit (communications, maintenance), loss (equipment, skills), etc. - New services: improving the productivity of employees (VisioConf, Mobility... etc.). - Scalability of the network and its applications. - The image of the company. Business scenarios and market solutions - Several solutions for various enterprises. - PABX-PABX interconnection. - Migration to IP PABX: examples of manufacturers solutions, advantages and constraints. - IP Centrex solution: examples of operators solutions, advantages and constraints. Peer-to-peer solutions: Skype and Wengo models. - Satisfaction and maturity of the solutions. The management of a Voip project - Different steps: needs analysis, data networks audit, comparison of available solutions, solution adaptation to the company, migration... - Success keys and brakes. 5) Integration and administration - Manufacturers administration tools. - Measures of QoS. - Integration with users databases : LDAP, SSO. - Use and update of network equipment : DHCP, TFTP, DNS... - The mobile phone terminals (VoIP over WiFi, DECT, dual-mode terminal...). - Links: xdsl, Ethernet, radio links, sizing. ORSYS, La Grande Arche, Paroi Nord, Paris La Défense cedex. Tél : +33 (0) Fax : +33(0) page 8

9 6) Performance and quality of service of Voip networks - Why data networks do not give reliability required by the transport of voice? - The reliability reference: the PSTN. - Strengths and weaknesses of data networks in terms of quality of service. Definition and concepts of the QoS Quality of Service. Delay, jitter, packet loss... impacts of the IP network QoS on Voip. - To compensate the unreliability of IP networks, use of specific protocols: RTP and RTCP. - Summary of flows in Voip. Signalling ( call setup). Media (voice, video...). - How to bring the performance to IP networks. Strengthen bandwidth. QoS management tools for IP networks (802.1P/Q, RSVP, DiffServ, MPLS...). VoIP quality referential: E-model, PESQ, PAMS, PSQM. 7) Security - The emerging issues related to the migration to Voip solutions. What should we protect, who, why can we be attacked? - The known threats. Confidentiality: protecting the media flow and the signalling exchanges. Integrity: control and prevent changes in data transmitted over the network. The availability and denial of service. - Identity spoofing. Fraud. The spam. The regulation: the legal obligations of security and brakes for technological development. - The issue of emergency services. 8) The future - Operators evolution: fixed / mobile convergence and abandonment of PSTN model for VoIP. - The convergence of technologies: WiMax, MPLS... - The new services and multimedia uses. - IMS, IP Multimedia Subsystem, tomorrow, the multimedia network. ORSYS, La Grande Arche, Paroi Nord, Paris La Défense cedex. Tél : +33 (0) Fax : +33(0) page 9

10 Hands-on course, 3 day(s) Ref : LDX Pre-requisites The students should have basic system administration knowledge of a Unix/Linux system. Next sessions Brussels Geneve Luxembourg Unix/Linux Open LDAP Directory Service > Network / Security > Network, overview OBJECTIVES At the end of this training, students will master the directory concepts as well as the LDAP protocol. This training will cover security features while deploying an enterprise directory service. Labs will be using the Unix/Linux OpenLDAP public domain implementation. 1) Introduction 2) LDAP Framework and setup 3) Name directory security strategy 1) Introduction - What is a name directory? - Distributed directory principle. - Directory Framework. - LDAP Standards : OSI, X OpenLDAP Directories. Workshop Installing LDAP on a Linux System. Configuration files and customization. 2) LDAP Framework and setup 4) Developing applications using LDAP 5) Conclusion - LDAP models. - Managing data and model. - Managing LDAP Scheme. - Naming and designing your LDAP service. - LDAP access. - Distribution model. Workshop Designing an LDAP directory. Extending the LDAP scheme. Using authentication. Making LDAP requests. Using fetch requests. Setting up SLURP. Using referrals to other name services. 3) Name directory security strategy - Authentication. - LDAP and secure LDAP. - Security protocols and communications. - Integrating security frameworks in LDAP (RSA, DES, etc.). Workshop Integrating SSL module in OpenLDAP. Securing data access. User authentication. 4) Developing applications using LDAP - LDAP Development interfaces. - Using directory features in scripts. - Web access : LDAP access URL. - Interface between LDAP and JAVA. Workshop Programming OpenLDAP Access. C APIs for LDAP. Windows client accessing an OpenLDAP server on a Unix system. 5) Conclusion - Other directory products on Unix/Linux : Netscape, Netware Directory Service, Sun/Oracle Solutions. - Tools to help building directories. Meta-directories. - Designing an Enterprise Directory solution. ORSYS, La Grande Arche, Paroi Nord, Paris La Défense cedex. Tél : +33 (0) Fax : +33(0) page 10