1 Subsistema de Red sobre GNU/Linux

2 Agenda Tecnologías Soportadas. Kernel. Ethernet Switching .IP Routing. Firewall. Alta Disponibilidad. Calidad de Servicio.

3 Tecnologías Soportadas

4 Tecnologías Soportadas Cobertura (1/7)PAN. Personal Area Network. SAN. System Area Network. LAN. Local Area Network. WAN Wide Area Network.

5 Tecnologías Soportadas (2/7) PAN :: Personal Area NetworkIrDA (Infrared Data Associations). Medio: Aereo. Cobertura: 2 metros. BW: 4 Mbps. Bluetooth. Cobertura: 10 metros. BW: 1 Mbps.

6 Tecnologías Soportadas (3/7) SAN :: System Area NetworkHPPI. Medio: Cobre, Fibra. Cobertura: 30 metros. BW: 1,6 Gbps. Myrinet 2000 Medio: Fibra. BW: 2 o 4 Gbps.

7 Tecnologías Soportadas (4/7) SAN :: System Area NetworkFiber Channel Medio: Fibra. BW: 2 o 4 Gbps. InfiniBand. BW: 10 Gbps.

8 Tecnologías Soportadas (5/7) LAN :: Local Area NetworkIEEE 802.3 Medio: Cobre, Fibra. Cobertura: Base T, SX, MM. Norma: Ethernet, FastEthernet, GigaEthernet, TenGigaEthernet. BW: 10 Mbps, 100 Mbps, 1000 Mbps, Mbps.

9 Tecnologías Soportadas (6/7) LAN :: Local Area NetworkIEEE 802.4 Token Ring de IBM. BW: 4 Mbps, 16 Mbps. IEEE 802.5 FDDI. IEEE Wireless Fidelity. Medio: Aereo. Norma: a, b, g. BW: 54 Mbps, 11Mbps, 54Mbps Lo nuevo n, ~ 150 Mbps, Banda 5.8 Ghz.

10 Tecnologías Soportadas (7/7) WAN :: Wide Area Network.X.25. Conmutación de Paquetes. BW: 2 Mbps. Frame Relay. Retrasmisión de Paquetes. ATM. Asynchronous Transfer Mode. BW: 622 Mbps.

11 Kernel 2.6

12 Kernel 2.6 ¿Donde obtenerlo? FTP ftp://ftp.kernel.org HTTP :/usr/src# tar jxvf linux- 2.6.xx.yy.tar.bz2 :usr/src/linux-2.6.xx.yy# make menuconfig

13 Kernel 2.6 :: Entrada Linux Kernel Configuration

14 Kernel 2.6 :: Networking Linux Kernel Configuration

15 Kernel 2.6 :: Networking Linux Kernel Configuration -->> Networking

16 Kernel 2.6 :: Networking Networking -->> Networking Options (a)

17 Kernel 2.6 :: Networking Networking -->> Networking Options (b)

18 Kernel 2.6 :: Networking Networking -->> Networking Options (c)

19 Kernel 2.6 :: Networking Networking -->> Networking Options (d)

20 Kernel 2.6 :: Device Drivers Linux Kernel Configuration

21 Kernel 2.6 :: Device Drivers Linux Kernel Configuration -->> Device Drivers

22 Kernel 2.6 :: Device Drivers Device Drivers -->> Network Device Support (a)

23 Kernel 2.6 :: Device Drivers Device Drivers -->> Network Device Support (b)

24 Kernel 2.6 :: Salida

25 Kernel 2.6 :: Compilar :/usr/src# make:usr/src/linux-2.6.xx.yy# make modules_install :/usr/src# make install

26 Linux IEEE 802.3

27 Linux IEEE 802.3 ¿Como saber las caracteristicas de mi Hardware ?Utilizar aplicación lspci Mirar Ethernet Controller :# lspci -v 0000:01:03.0 Ethernet controller: Realtek Semiconductor Co., Ltd. RTL-8139/8139C/8139C+ (rev 10) Subsystem: Elitegroup Computer Systems: Unknown device b551 Flags: bus master, medium devsel, latency 64, IRQ 11 I/O ports at c800 [size=256] Memory at e00ff400 (32-bit, non-prefetchable) [size=256] Capabilities: [50] Power Management version 2

28 Dispositivos IEEE 802.3

29 Dispositivos IEEE 802.3

30 Dispositivos Ethernet IEEE 802.3 :: Pasos a SeguirCargar Modulo. :# modprobe 8139too Configurar Interfaz. :# ifconfig eth netmask Configurar Ruta por Defecto. :# route add default gw Archivo de Configuración y Script(Debian GNU/Linux). :# vi /etc/network/interfaces :# /etc/init.d/networking [stop,start]

31 Dispositivos Ethernet IEEE 802.3 :: Pasos a SeguirMostrar Datos de la Interfaz :# ifconfig eth0 eth Link encap:Ethernet HWaddr 00:11:5B:1F:F3:CC inet addr: Bcast: Mask: inet6 addr: fe80::211:5bff:fe1f:f3cc/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets: errors:272 dropped:527 overruns:272 frame:0 TX packets:80237 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes: (123.3 MiB) TX bytes: (9.4 MiB) Interrupt:11 Base address:0xc800

32 Linux Ethernet Bridge IEEE 802.1D

33 Linux Ethernet Bridge IEEE 802.1D :: Pasos para su UsoCargar Modulo. :# modprobe bridge Instalar Utilidades(Debian GNU/Linux). :# apt-get install bridge-utils Crear un Dispositivo Bridge. :# brctl addbr bridge0 Agregar Dispositivos al Bridge. :# brctl addif bridge0 eth0 :# brctl addif bridge0 eth1

34 Linux Ethernet Bridge IEE 802.1D :: Pasos para su UsoMostrar Configuración del Bridge :# brctl show bridge name bridge id STP enabled interfaces bridge c9f0bd2 no eth0 eth1 Mostrar Direcciones MACs. :# brctl showmacs bridge0 port no mac addr is local? ageing timer :00:4c:9f:0b:ae no :00:4c:9f:0b:d yes :00:4c:9f:0b:d yes

35 Linux Ethernet Bridge IEEE 802.1D + Spanning Tree IEEE 802.1sHabilitación Spanning Tree :# brctl stp bridge0 on Mostrar Spanning Tree :# brctl showstp bridge0 bridge0 bridge id c9f0bd2 designated root a00 root port path cost max age bridge max age hello time bridge hello time forward delay bridge forward delay ageing time gc interval hello timer tcn timer topology change timer gc timer flags

36 Linux Ethernet Bridge IEEE 802.1D + Spanning Tree IEEE 802.1sport id state forwarding designated root a path cost designated bridge e b message age timer designated port c forward delay timer designated cost hold timer flags eth1 (2) port id state disabled designated root c9f0bd path cost designated bridge c9f0bd message age timer designated port forward delay timer designated cost hold timer

37 Linux VLAN IEEE 802.1q

38 Linux VLAN IEEE 802.1q Pasos para su UsoCargar Modulo. :# modprobe 8021q Instalar Utilidades(Debian GNU/Linux). :# apt-get install vlan Agregar una VLAN a un Dispositivo. :# vconfig add eth0 5 Quitar una VLAN de un Dispositivo. :# vconfig rem eth0.5

39 IP Routing Utilidad sysctl :# sysctl -a | grep netHabilitación de Reenvio de Paquetes. :# sysctl -w net.ipv4.ip_fordward=1 Instalación de Iproute2(Debian GNU/Linux) :# apt-get install iproute

40 IP Routing ip link :# ip link ls eth0:# ip -s link ls eth0 ip address :# ip address ls eth0 ip neighbour :# ip neigh ls ip route :# ip route ls

41 Network Address Translation¿Cuando ocupar NAT ? Generalmente para Compartir acceso a Internet. Traduce de Dirección IP publica a IP privada. DNAT Destination NAT. SNAT Source NAT.

42 Firewall ebtables. Filtering para Bridge. iptables. Filtering para IP.

43 NetFilter

44 Netfilter Cargar Módulo. :# modprobe ip_conntrackInstalar utilidad iptables :# apt-get install iptables Ver Reglas. :# iptables -L Ver Reglas para NAT. :# iptables -L -t nat

45 Netfilter Construir una Regla.:# iptables -A INPUT -s j ACCEPT Borrar Reglas. :# iptables -F Borrar Reglas NAT. :# iptables -F -t nat

46 Redundancia Cargar Modulo. :# modprobe bondingInstalar aplicación ifenslave. :# apt-get install ifenslave Tecnicas. Balanceo RR, XOR. LACP. Fault Tolerance.

47 QoS Diffserv ToS. CBQ. Shaper.

48 Preguntas y Respuestas