Exit Zen
87
../../protocols/tls.rst:482
English
On the web, TLS clients use certificates to authenticate servers but the clients are not authenticated. However, there are environments such as enterprise networks where servers may need to authenticate clients as well. A popular deployment is to authenticate remote clients who wish to access the enterprise network through a Virtual Private Network service. Some of these services run above TLS (or more precisely a variant of TLS named DTLS that runs above UDP [MoR2004]_ but is outside the scope of this chapter). In such services, each client is authenticated thanks to a public key and a certificate that is trusted by the servers. To establish a TLS session, such a client needs to prove that it owns the public key associated with the certificate. This is done by the server thanks to the CertificateRequest message. The TLS handshake becomes the following one:
0/8690 · 869
88
../../glossary.rst:146
English
Intermediate System- Intermediate System. A link-state intradomain routing that was initially defined for the ISO CLNP protocol but was extended to support IP v4 and IP v6. IS-IS is often used in ISP networks. It is defined in [ISO10589]_
0/2380 · 238
88
../../principles/network.rst:365
English
For example, consider the `label forwarding table` of a network node below.
0/750 · 75
88
../../principles/reliability.rst:306
English
In this section, we develop a reliable datalink protocol running above the physical layer service. To design this protocol, we first assume that the physical layer provides a perfect service. We will then develop solutions to recover from the transmission errors.
0/2630 · 263
88
../../principles/sharing.rst:407
English
Carrier Sense Multiple Access with Collision Detection
0/540 · 54
88
../../principles/security.rst:953
English
Bob chooses a secret integer : :math:`b=13` and sends :math:`B= g^{b} \mod p=5^{13} \mod 23=21` to Alice
0/1040 · 104
88
../../exercises/ipv6.rst:819
English
When debugging a network, it can be interesting to capture packets using tcpdump_ on specific links to check that they follow the expect. If you use tcpdump_ without any filter, you will capture the packets generated by xterm. To capture packets, you need to specify precise filters that will match the packets of interest. For traceroute6, you need to match the IPv6 packets that contain UDP segments and some ICMPv6 packets. The script below provides a simple filter that you can reuse. It takes one argument: the name of the interface on which tcpdump_ needs to run.
0/5690 · 569
88
../../exercises/routing-protocols.rst:1312
English
The network does not provide a full connectivity. The hosts attached to ``AS5`` cannot ping the hosts attached to ``AS8``.
0/1220 · 122
88
../../protocols/bgp.rst:352
English
How to prefer a cheap link over an more expensive one ?
0/550 · 55
88
../../protocols/email.rst:242
English
F
0/100 · 1
88
../../protocols/ethernet.rst:358
English
2000
0/100 · 4
88
../../protocols/ipv6.rst:338
English
`Hop Limit` : this 8-bit field indicates the number of routers that can forward the packet. It is decremented by one by each router and prevents packets from looping forever inside the network.
0/1930 · 193
88
../../protocols/ethernet.rst:334
English
the `identifier` of the root switch (`R`)
0/410 · 41
88
../../protocols/tcp.rst:264
English
the `maximum segment size` (MSS)
0/320 · 32
88
../../protocols/tls.rst:510
English
The server sends a CertificatRequest message. The client returns its certificate and signs the Handshake with is private key. This confirms to the server that the client owns the public key indicated in its certificate.
0/2190 · 219
89
../../glossary.rst:105
English
ISN
0/100 · 3
89
../../principles/network.rst:369 • ../../principles/network.rst:410 • ../../principles/network.rst:420 • ../../principles/network.rst:430 • ../../principles/network.rst:440
English
index
0/100 · 5
89
../../principles/reliability.rst:308
English
The datalink layer is designed to send and receive frames on behalf of a user. We model these interactions by using the `DATA.req` and `DATA.ind` primitives. However, to simplify the presentation and to avoid confusion between a `DATA.req` primitive issued by the user of the datalink layer entity, and a `DATA.req` issued by the datalink layer entity itself, we will use the following terminology :
0/3990 · 399
89
../../principles/security.rst:955
English
Alice computes :math:`S_{A}=B^{a} \mod p= 21^{8} \mod 23=3`
0/590 · 59
89
../../exercises/ipv6.rst:827
English
Starting from the :download:`/exercises/ipmininet_scripts/static-1.py` IPMininet_ script, we can explore classical problems when networks are configured with static routes. A first problem is when a router has an incomplete forwarding table. We configure the static routes as shown below. The entire script is available from :download:`/exercises/ipmininet_scripts/static-1-hole.py`.
0/3830 · 383