MÓDULO 1 - Video 2: Dispositivos de red

Welcome to this video,

which will explain

fundamental concepts of network devices and

wireless security. Remember to take

notes and pause the video when you

need to. Let's begin.

At the Digital Innovation company,

a new network will be implemented to connect

offices, the boardroom, other

departments, and wireless areas

using various

interconnection devices.

The technical team will need to decide between

using older hops or

modern switches to ensure better

performance and avoid

communication collisions.

In addition, a router will be installed to

manage the internet connection,

assign IP addresses, and separate

academic and administrative networks.

[music]

To protect

institutional information, a firewall will be implemented

to control unauthorized access

and potential

external threats.

Finally, WPA3 secure access points will be installed

to provide

secure and stable Wi-Fi connectivity

to students and teachers throughout

the building. Have

you already identified the characteristics of

this situation? If you feel it's

necessary, review the

approach again. By the end of this video,

you will understand the function of each [music]

interconnection and

security device, as well as its importance

within a computer network. Pay close

attention.

Interconnection devices are

the physical components that allow

equipment to communicate [music] with each

other and with other networks. Each one operates at

a different layer of the OSI model and

performs a specific function [music].

Choosing the right device for each

scenario is a critical decision in the

design of any network. Unhob is the

most basic interconnection device. It

operates at layer 1, the physical layer of the

OSI model, and simply repeats the

electrical signal it receives through one port

to all other ports

simultaneously, regardless of who

the information is intended for. This creates a

shared collision domain among

all connected devices.

[music]

Today, hubs are practically

obsolete [music] and have been

completely replaced by switches

in any modern installation.

Let's look at a simple technical example,

let's suppose.

First, PC1 wants to send a file to

PC3. Two, the hub receives the signal,

copies it and sends it to PC2,

PC3,

PC,

all [music] ports, even though only

PC needed the information. On the other

hand, a switch operates at layer 2, the

data link layer of the OSI model.

Unlike a Hub, a Switch learns the

MAC address of each device

connected to its ports and builds an

internal table, the MAC table. When it receives

a frame, it consults that table and sends it

exclusively to the port where the

recipient is located, without interfering with

other devices.

This selective switching capability

eliminates collisions [music]

and allows multiple communications to

occur in parallel,

greatly increasing network performance.

To put it in practical terms,

think of an office where one PC

prints documents, another

downloads files, another uses

video calls, and so on. [music]

The switch allows all of the above to

happen simultaneously without affecting

other users too much.

So far everything is becoming clear.

Remember, if you have any questions, take

note and ask your facilitator.

[music]

Alright, now let's talk about the router.

A router operates at layer 3, the

network layer of the OSI model, and is responsible for

interconnecting different networks,

including connecting a local network

to the internet. It

makes routing decisions based

on destination IP addresses and

routing tables that it can

[music] build statically,

manually configured, or dynamically

using protocols such as OSPF or BGP.

In addition to routing,

modern home routers integrate a switch,

Wi-Fi access point,

DHCP server, and NAT into a single

device.

For example, when you open YouTube on

your mobile [music]. First, the cell phone

sends the request to the router. Two, the

router identifies that the [music]

destination is on the internet.

Three, forward the packets to the

internet provider.

Four, the answer returns to the

correct device.

Now, what is a [music] firewall? A

firewall is a security system that

monitors and controls

incoming and outgoing network traffic according to a set of

predefined rules. Its

main objective is to protect an internal network from

unauthorized access from

outside without blocking

legitimate traffic.

An example of a basic Firewall rule

would be the following: allow all

incoming HTTP traffic on port 80 and https [music] traffic on port 443. Block all

incoming SSH traffic to port 22 from

unauthorized external IPs.

The different

types of firewalls are explained below. The

packet filtering firewall examines each

network packet individually and

decides whether to allow or block based on the

source IP, destination IP,

protocol, and port. It is the most

basic type and operates at the network layer. On the

other hand, the

stateful firewall, in addition to analyzing each

packet, remembers the state of

active connections. It can distinguish whether

a packet belongs to an already

established connection or if it is an unsolicited access attempt

. For example, if you

opened a web page, the firewall

recognizes the response as valid and

automatically allows the [music] traffic.

But if someone tries to enter without

prior request, it blocks them, preventing

access to dangerous sites, malicious [music],

or content outside the scope of

the company or organization.

Another type of firewall is the

application firewall (WF). This operates at the

application layer and can inspect the

content of communications [music]

detecting specific attacks such as

SQL injection or cross-site scripting in

web applications.

In practical terms, depending on the type

of firewall, [music]

is like an advanced detector at the

airport that not only checks the ticket,

but also the contents of the luggage.

Now it's time to talk about what a

wireless access point is, also

known by its English name as

Access Point or Wireless Access Point. A

wireless access point is a

device that allows

wireless equipment to connect to an

existing wired network. It acts as a bridge

between the Wi-Fi [music] world and the

UTP cable or fiber

network infrastructure.

In business environments [music] it is

common to install multiple APS

distributed throughout the facilities to

ensure continuous coverage. The APSs

connect to the network switch via

cable, and mobile devices

associate with the AP with the best signal in their

location.

Some of the

key features of an enterprise AP are the

following:

support for multiple SSIDs, service

set identifier, independent Wi-Fi networks

over the same hardware,

centralized management via

wireless controller,

support for Wi-Fi 6 or Wi-Fi 6E standards

for high device density,

WPA3 security and authentication via

RADIUS server.

The security of a Wi-Fi network is critical

because the wireless signal can be

intercepted without physical access to the

infrastructure.

The most important security protocols

are the following.

WPA2, WiFi Protected [music] Access 2.

Uses AES 128 encryption, which is robust

for most current uses. It is

the minimum acceptable standard in [music] on

any network. Its main

vulnerability is the

dictionary attack on weak passwords.

WPA3, updated version [music]

introduced in 2018, improves

protection against dictionary attacks

by [music] using the SAE

Simultaneous Authentication of Equals protocol.

It encrypts traffic individually for

each client and offers advanced protection mode

for enterprise networks.

Finally, it is important to talk about

good Wi-Fi security practices,

among which the following should be considered

.

Use passwords of at least 12

characters with a combination of letters,

numbers, and symbols. Change the

router's default SSID to avoid revealing the

manufacturer. Disable WPS (Wi-Fi

protected setup), as it has

known vulnerabilities. Use WPA3

when all devices

support it. Otherwise,

WPA2.

Separate the guest network from the

main network using a

separate SSID. Update the

router's firmware regularly.

Implementing a network involves

understanding the importance of

correctly selecting the interconnection devices [music]

according to the needs

of each environment. The proper use of

switches, routers, firewalls, and access

points ensures

efficient, secure, and stable communication [music]

for every area of ​​the company. Furthermore, the

application of good

security practices [music] Wi-Fi and

network segmentation helps to protect

information and optimize the performance

of the technological infrastructure. This

case demonstrates that network design

involves not only connecting equipment, but

also strategically planning for the

security, availability, and

future growth of the organization. Best of luck and see you soon

.