Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
Network Access is always a security risk, and you can bet that you're going to see some questions about, first of all, how to provide network access, and then the security ramifications of that on the Network+ Exam and so I want to go through some things here. And we're going to focus on the three methods of network access and the security implications as laid out in the Objectives that CompTIA has published. And there's three methods of providing security when we're talking about trying to access our network resources over the network. The first one is filtering, the second is tunneling and encryption, and then the third is just straight up remote access. Now in this video I'm going to start by talking about filtering and then I'll do a separate video for tunneling and encryption because it's a little more involved, and then do a separate one on remote access, because again, you have quite a few options there. So let's talk about filtering. There are basically two ways that we can do filtering, and keep in mind that this is considered pretty base, pretty simple security, and most thirteen-year-olds can easily get around this stuff now, so just be aware of this. First of all, MAC Address Filtering. This is where we're going to limit access to our network, based on the 48 bit MAC address of the network card. Now as you know, every NIC, or every Network Interface Card, has a unique MAC address on it, and if we use that MAC address as the point of authentication then we are providing access based on the device address. Now at first glance this looks pretty secure, because if you don't have the right machine you're not getting on our network. However, we're basing our access notice on the device and not the user. That means I can steal your machine and get on the network and do whatever permissions have been granted to that particular device address, and so that can be a problem. Plus, I can relatively easily circumvent MAC Address Filtering simply by spoofing the MAC Address. In other words, changing the MAC address that's being reported by using some of the various tools that I can find out there on the Internet. So, MAC Address Filtering's kind of cool, but it's by no means what you would call hard security. Now IP Filtering, probably a little better. Access is based on the various IP Address Port information. This can get kind of involved. We can only allow access to certain Protocols, to certain Port Numbers, based on whatever the source address of the packets are, or the destination address. Now, again, this is very, very similar to MAC Address Filtering, and that means that we can use spoofing and that sort of stuff to get around this kind of security. So understand, filtering is OK. You can't depend on it. All this is done as granted access. It has not taken care of encrypting data. It has not really taken care of authenticating the individual user. This is just going to be on a machine level, and so, while this is, some might consider security, I wouldn't depend on this and I wouldn't bet my corporate data on it, OK? But you could see MAC Address and IP Address Filtering mentioned as a security method on the exam, and I just wanted you to kind of see it, and be aware of it.
| Course: | CompTIA Network+ (2009 Objectives) |
| Author: | Mark Long |
| SKU: | 34216 |
| ISBN: | 1-936334-90-9 |
| Release Date: | 2011-04-29 |
| Duration: | 6 hrs / 91 lessons |
| Work Files: |
Yes |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |