Read 03 301 - jserpa-p/lisbon-ops-301n1_Reading GitHub Wiki
Read 03
CIDR notation
CIDR Block is simply a range of IP addresses. In an IP address there are 4 octets that add up to 32 bits, for a range of 0.0.0.0-255.255.255.255. In CIDR notation this range would be represented by 0.0.0.0/0. The "/" represents hom many bits make up the mask. The larger the mask, the smaller the range.
Network Segmentation
There are reasons to implement network segmentations, we can also see them as rules. We call them Regulatory Compliances, for example ITAR or HIPAA.
-
Interfaces, can be the physical ethernet ports on a router, but can also be represented virtually.
-
Network segmentation, divides a computer network into smaller parts Advantages- improve performance and security Important terms- Segregation, Partition, Network Isolation
-
Microsegmentation, is a concept of segmentation but at extremes that enables policies that are more granular and flexible to meet high specific needs.
-
Segmentaion Methods
- Traditional technologies
- Internal firewalls
- ACLs
- VLANs
- Network equipment
- Software-defined networking
- Grouping and tagging network
- Enforce segmentation on network equipment
- Traditional technologies