Best Practices in Network Design











Alan Mark


Program Track:
Peak Performance

Program Duration:
50 Minutes

Tower:
Infrastructure




Roles:  
Primary: Networks: Voice and Data
Secondary: Architecture
Tertiary: Security and Risk Management
 
Value Category: Best practices
Key Issues: How can an organization's network infrastructure be redesigned to enhance reliability and scalability? How can network design priorities -- such as enabling speed improvements, redundancy or remote connectivity -- be determined? What are the current trends in network technologies? What's some practical advice on planning a network, including cost and management options, and personnel issues? What are the proven network design techniques and security considerations?
- high
- medium
- low
Architecture and Infrastructure
Business Management
Communications
Data Management
IT Management
Networking
Security and Privacy
Wireless
 
    

Term

Definition

Access Point
(AP)
A base station in a wireless LAN (local area network). Access points are typically stand-alone devices that plug into an Ethernet hub or server. As with a cellular phone system, users can roam around with their mobile devices and be handed off from one access point to the other. Access points are similar to the transceivers in cellular phone systems. They cover a certain range, perhaps as much as a thousand feet, and mobile users are automatically handed off from one to the other as they walk to other offices. (Source: TechWeb.com)
Certified NetWare (or Novell) Engineer
(CNE)
CNE certification, more advanced than CNA certification, qualifies an individual to manage network environments, and solve company wide support problems. CNE certification offers specialization in different product areas, including: NetWare, IntranetWare and GroupWise. (Source: Course Technology IT Glossary)
DeMilitarized Zone
(DMZ)
Area between two firewalls; a type of firewall configuration that protects internal networks from being compromised through the Web server by placing the Web server between two firewalls.
Digital Subscriber Line
(DSL)
A family of digital telecommunications protocols designed to allow high-speed data communication over the existing copper telephone lines between end-users and telephone companies. (Source: FOLDOC)
Disaster Recovery Plan
(DRP)
(1) A plan to resume, or recover, a specific essential operation, function or process of an enterprise. (Source: First Recovery Glossary of Terms) (2) A plan for duplicating computer operations after a catastrophe occurs, such as a fire or earthquake. It includes routine off-site backup as well as a procedure for activating necessary information systems in a new location. (Source: TechWeb.com)
Distributed Denial of Service
(DDoS)
(1) Any activity designed to disrupt the normal online activities of a domain or user, typically a mail bomb or a ping of death. (2) A type of attack on a network that is designed to bring the network to its knees by flooding it with useless traffic. Many DoS attacks, such as the ping of death and teardrop attacks, exploit limitations in the TCP/IP protocols. For all known DoS attacks, there are software fixes that system administrators can install to limit the damage caused by the attacks. But, like viruses, new DoS attacks are constantly being dreamed up by hackers. (Source for 2: Webopedia) (3) An attack, routed through software remotely installed on a compromised system, in which a computer system is flooded with messages, causing the system to malfunction or shut down temporarily. The compromised system is made to be an unwitting accomplice to the attack. (Source: Cameron Consulting)
Gigabit Ethernet
An Ethernet technology with transmission speed of 1 billion bits/sec. Its ability to integrate into existing Ethernets is a distinct advantage.
HyperText Transfer Protocol
(HTTP)
The client/server protocol used to fetch hypertext objects, including HTML documents, from remote hosts on the Internet. Based on TCP/IP, it is the basis of the World Wide Web (WWW). Addresses of Web sites begin with an http:// prefix. It conventionally uses port 80.
IP address
(1) Internet Protocol address, the physical address of a TCP/IP packet. A 32-bit address, used in IP routing, that includes a network address identifier (netid) assigned by a central authority, and a host ID (hostid), which is an end-station identifier assigned by the LAN administrator. The IP address is expressed as a numeric code, n.n.n.n., where n is a number from zero through 255. It can identify a particular computer, or other networked component, on a TCP/IP network. (2) A unique 32 bit address that is assigned to each computer on the Internet. It has four parts separated by a period, for example 208.245.125.178. (Source for 2: K2Mall.com Glossary)
IP network
A network that uses the TCP/IP protocol, which includes the Internet, intranets and private UNIX networks. (Source: TechWeb.com)
Instant Message
(IM)
Also known as a buddy list program, it is client software than informs users when any individuals in their list of 'buddies' (colleagues, workgroup members, friends, etc.) log onto the network so they can chat. It also notifies them if a 'buddy' sends them a message. (Source: TechWeb.com)
Integrated Services Digital Network
(ISDN)
(1) An international set of communications standards that allow a single wire or optical fiber to carry voice, digital network services and video. ISDN uses 64 kbps channels, called B channels, to carry voice and data and a separate D channel for control signals. There are different kinds of ISDN connections, of varying bandwidth, which can allow a variety of services to be provided, including call forwarding, call waiting and advice of charge. (2) Connections that use ordinary phone lines to transmit digital instead of analog signals, allowing data to be transmitted at a much faster rate than with a traditional modem. (Source for 2: Learn the Net.com)
Internet Service Provider
(ISP)
Company that offers Web access services, allowing the user to concentrate on content, rather than hardware, software and maintenance of the server and connections. ISPs handle the connection needed to link consumers and businesses with the Internet. An ISP provides the servers that store data sent to or from trading partners/correspondents until each retrieves the data.
Intrusion Detection System
(IDS)
(1) An intrusion detection system (IDS) inspects all inbound and outbound network activity and identifies suspicious patterns that may indicate a network or system attack from someone attempting to break into or compromise a system. (Source: Webopedia) (2) An intrusion detection system is a security administrator's tool that monitors all network traffic, looking for patterns that indicate that an attack is in progress.
LAN switch
A high-speed switch that forwards packets between data-link segments. Most LAN switches forward traffic based on MAC addresses. This variety of LAN switch is sometimes called a frame switch. LAN switches often are categorized according to the method they use to forward traffic: cut-through packet switching or store-and-forward packet switching. Multilayer switches are an intelligent subset of LAN switches. (Source: Cisco Glossary Internetworking Terms and Acronyms)
Layer 2
In networking, the communications protocol that contains the physical address of a client or server station. It is called the 'data link layer' or 'MAC layer' - and contains the address inspected by a bridge or switch. Layer 2 processing is faster than Layer 3 processing, because less analysis of the packet is required. (Source: TechWeb.com)
Layer 3
The network layer that determines how data is transferred between computers. It also addresses routing within and between individual networks.
Layer 3 switching
Layer 3 switching technology integrates routing with switching, to yield very high routing throughput rates in the millions-of-packets-per-second range. The movement to Layer 3 switching is designed to address the downsides of the current generation of Layer 2 switches, which functionally are equivalent to bridges. These downsides for a large, flat network include being subject to broadcast storms, spanning tree loops, and address limitations. (Source: Cisco Internetworking Terms and Acronyms)
Lightweight Directory Access Protocol
(LDAP)
LDAP defines a relatively simple protocol for updating and searching directories running over TCP/IP. LDAP provides access for management and browser applications that provide read/write interactive access to the X.500 directory.
Local Area Network
(LAN)
A short distance data communications network - typically within a building, or 'campus' of a few square kilometers or less. However, FDDI extends a local area network over a much wider area. It is used to link computers, workstations, servers, and peripheral devices under some form of standard control. The controlling software is the network OS, which resides in the server and supports workstations or desktops connected via communications links. Because the network covers only a small area, optimizations can be made in the network signal protocols that permit data rates up to 100 Mbs. While a LAN is typically contained within a building or complex, and a MAN (metropolitan area network) generally covers a city or suburb. A WAN may be privately owned or rented, but the term usually connotes the inclusion of public (shared user) networks.
Microsoft Certified Systems Engineer
(MCSE)
A certification that is awarded after passing 6 extremely difficult tests of networking and troubleshooting knowledge. (Source: NetworkDrs.com)
NetWare
A family of network operating systems from Novell that supports DOS, OS/2, Mac and UNIX clients and various LAN access methods including Ethernet, Token Ring and ARCNET. An extremely popular and extremely good operating system for a LAN, it is actually its own operating system. This means it is the link between machine hardware (file servers, printers, modems, etc.) and people who want it use that hardware.
Network Attached Storage
(NAS)
Servers that are optimized for network storage and are connected directly to the network. They function independently of other servers on the network, providing data directly to clients, and are generally less expensive and easier to install and maintain than general-purpose file servers. (Source: Quantum)
Network Operations Center
(NOC)
A center that monitors a network and communicates with other networks on the Internet to improve services and solve problems. (Source: ComputerUser.com High-Tech Dictionary)
OCX
32-bit OLE 2.0 custom controls, a group of components based on Microsoft's OLE system.
Pocket PC
A handheld Windows-based computer that runs the Pocket PC operating system - formerly Windows CE. The Pocket PC operating system (Version 3.0 of Windows CE) adds a new interface along with greater stability, Pocket Office applications (Internet Explorer, Word and Excel), handwriting recognition, an e-book reader, wireless Internet and longer battery life. The Pocket PC was designed to compete more directly with the popular Palm devices. (Source: TechWeb.com)
Quality of Service
(QoS)
(1) In networking, a term that specifies a guaranteed throughput level. QoS has become a major issue on the Internet as well as in enterprise networks, because voice and video are increasingly traveling over IP-based data networks. (2) In the context of outsourcing, the term quality of service is used to differentiate one provider from another. Typically, the outsourcing customer seeks to enhance its own quality of service by obtaining quality of service from its outsourcing suppliers. (Source: Outsourcinglaw.com) (3) In the simplest sense, Quality of Service (QoS) means providing consistent, predictable data delivery service. In other words, satisfying customer application requirements. QoS is to the ability of a network element (e.g. an application, host or router) to have some level of assurance that its traffic and service requirements can be satisfied. To enable QoS requires the cooperation of all network layers from top to bottom, as well as every network element from end-to-end. Any QoS assurances are only as good as the weakest link in the chain between sender and receiver. QoS does not create bandwidth. It isn't possible for the network to give what it doesn't have, so bandwidth availability is a starting point. QoS only manages bandwidth according to application demands and network management settings, and in that regard it cannot provide certainty if it involves sharing. Hence, QoS with a guaranteed service level requires resource allocation to individual data streams. (Source: Stardust Forums IP QoS FAQ)
Registered Jack-45
(RJ-45)
(1) A telephone connector that holds up to eight wires. RJ-45 plugs and sockets are used in Ethernet and Token Ring Type 3 devices. (Source: TechWeb.com) (2) A 10BASE-T standard for connecting UTP cabling; inexpensive and easy to install onto UTP cable. (Source: Wondersky Networking Glossary of Terms)
Secure Sockets Layer
(SSL)
A protocol designed by Netscape Communications Corporation to provide secure communications on the Internet. SSL uses a private key to encrypt data that's transferred over the SSL connection. SSL is layered beneath application protocols such as HTTP, SMTP, Telnet, FTP, and Gopher and is layered above the connection protocol TCP/IP. It is used by the HTTP access method.
Service Level Agreement
(SLA)
Abbreviated SLA, a service level agreement is a contract between a service provider and the end user which stipulates and commits the service provider to a required level of service. An SLA should contain a specified level of service, support options, enforcement or penalty provisions for services not provided, a guaranteed level of system performance as relates to downtime or uptime, a specified level of customer support and what software or hardware will be provided and for what fee. (Source: Webopedia)
Single Sign-On
(SSO)
(1) The ability for users to log-on once to a network and be able to access all authorized resources within the enterprise. A single sign-on program accepts the user's name and password and automatically logs on to all appropriate servers. Single sign-on services such as Microsoft's Passport are increasingly being used for Web sites. (Source: TechWeb.com) (2) Single sign-on is a feature of some portals that enables users to be authenticated automatically if they have already signed onto one enterprise system. (Source: Aboutportals.com)
Small Computer System Interface
(SCSI)
(1) A hardware interface that allows for the connection of up to seven or 15 peripheral devices to a single expansion board that plugs into the computer called a SCSI host adapter or SCSI controller. The advantage of SCSI is that several peripherals can be daisy chained to one host adapter, using only one slot in the bus. SCSI is widely used from personal computers to mainframes. (2) A short-range (25 meters or less) protocol designed to link host computers with storage devices such as disk drives. Typically implemented over copper cabling, SCSI is the most widely used and the oldest method of connecting computers to storage devices. Its distance limitations and lack of support for fiber helped launch the migration to SANs. (Source for 2: byteandswitch.com)
Storage Area Network
(SAN)
A high-speed subnetwork of shared storage devices. A storage device is a machine that contains nothing but a disk or disks for storing data. A SAN's architecture works in a way that makes all storage devices available to all servers on a LAN or WAN. As more storage devices are added to a SAN, they too will be accessible from any server in the larger network. In this case, the server merely acts as a pathway between the end user and the stored data. (Source: Webopedia)
T1
A high-speed digital connection that transmits data at a rate of 1.544 million bits per second over 2 pairs of normal twisted wires. Each of 24 individual channels supports data rates of 64 kbps, and each can be configured to carry voice or data. A T1 allows sending and receiving large text files, graphics, sounds, and databases, and is the fastest speed commonly used to connect networks to the Internet. Sometimes referred to as a leased line or DS1, T1 is a standard for digital transmission in the United States, Canada, Hong Kong and Japan.
Transmission Control Protocol/Internet Protocol
(TCP/IP)
This protocol suite provides for the reliable delivery of data streams from one host to another across interconnected networks in the Internet. The two protocols allow different computer systems to communicate. TCP controls data transfer and IP controls routing. TCP/IP includes TCP and IP plus other complementary and cooperative protocols. TCP/IP was developed under contract from the U.S. Department of Defense to enable internetworking of dissimilar systems. It is a de facto UNIX standard, but is now supported on almost all platforms. TCP/IP is the protocol of the Internet.
Virtual LAN
(VLAN)
A logical grouping of users regardless of their physical locations on the network. A local area network extended beyond its geographical limit, and flexibly configured to add or remove locations.
Virtual Private Network
(VPN)
A private network that is constructed by using public wires to connect nodes. Common carriers build VPNs that appear as private networks to the customer, but physically share backbone trunks with other customers. These systems use encryption and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.
Web server
A server process running at a Web site that sends out Web pages in response to HTTP requests from remote browsers. If one site runs more than one server they must use different port numbers.
Wide Area Network
(WAN)
A communications network that uses common carrier links provided by local telephone companies to connect sites dispersed over a wide geographic area, such as state or country. A LAN (local area network) is contained within a building or complex, and a MAN (metropolitan area network) generally covers a city or suburb. A WAN may be privately owned or rented, but the term usually connotes the inclusion of public (shared user) networks. (Source: Cisco)
X.25
(1) A standard for the protocols and message formats that defines the interface between a terminal and a packet-switching network. X.25 defines standard physical layer, data link layer and network layers in the OSI Reference Model. It was developed to describe how data passes into and out of public data communications networks. (2) The first international standard packet switching network developed in the early 1970s and published in 1976 by the CCITT (now ITU). X.25 was designed to become a worldwide public data network similar to the global telephone system for voice, but it never came to be, due to incompatibilities and the lack of interest within the U.S. It has been used primarily outside the U.S. for low-speed applications (up to 56 Kbps) such as credit card verifications and automatic teller machine (ATM) and other financial transactions. X.25 provides a connection-oriented technology for transmission over highly-error prone facilities, which were more common when it was first introduced. Error checking is performed at each node, which can slow overall throughput, and renders X.25 incapable of handling real-time voice and video. In the U.S., leased T1 lines were favored for internetworking offices together rather than public data networks. However, frame relay, which was modeled after X.25, has been successful as a public data network technology for meeting the high bandwidth demands of today's organizations. (Source for 2: TechWeb.com)
attack
(1) An attempt to bypass security controls on a computer. The attack may alter, release, or deny data. Whether an attack will succeed depends on the vulnerability of the computer system and the effectiveness of existing countermeasures. (Source: SANS Institute NSA Glossary of Terms Used in Security and Intrusion Detection) (2) An assault against a computer system or network. (Source: TechWeb.com) (3) An attacker is one who attacks. In the context of distributed computing, one who attacks a computer system either to gain access or cause a failure in the system resulting in temporary or permanent damage. (Source: Implementing CIFS Glossary)
authentication
(1) The process of identifying an individual, usually based on a username and password. In security systems, authentication is distinct from authorization, which is the process of giving individuals access to system objects based on their identity. Authentication merely ensures that the individual is who he or she claims to be, but says nothing about the access rights of the individual. (Source: Webopedia) (2) The process whereby a user or information source proves they are who they claim to be; the process of determining the identity of a user attempting to access a system. (3) The process of verifying the identity of the user at the other end of a link. Authentication is accomplished by using a link key stored in the device memory or by a user PIN - called pairing. (Source for 3: anywhereyougo.com)
authentication protocol
A formal procedure for verifying a principal's network identity; Kerberos is an instance of a shared-secret authentication protocol. (Source: DCE Glossary of Technical Terms)
authorization
(1) The process of granting or denying access to a network resource. Most computer security systems are based on a two-step process. The first stage is authentication, which ensures that a user is who he or she claims to be. The second stage is authorization, which allows the user access to various resources based on the user's identity. (Source: Webopedia) (2) The process of verifying the credit card has sufficient funds (credit) available to cover the amount of the transaction. An authorization is obtained for every sale. (Source: U.S. Merchant Services)
bandwidth
The amount of data that can be sent through a given communications circuit per second. A measure of the transmission capacity of a computer network. The bandwidth is the difference between the highest and lowest frequencies a network can transmit. It should be noted that this is limited not only by the physical infrastructure of the traffic path within the transit networks, which provides an upper bound to available bandwidth, but is also by the number of other flows that share common components of this selected end-to-end path.
bottleneck
(1) A lessening of throughput. It often refers to networks that are overloaded, which is caused by the inability of the hardware and transmission lines to support the traffic. It can also refer to a mismatch inside the computer where slower-speed peripheral buses and devices prevent the CPU from being used to its fullest capacity. (Source: TechWeb.com) (2) A narrow or obstructed section, as of a highway or a pipeline. A point or an area of traffic congestion. A hindrance to progress or production. (Source: Dictionary.com)
breach
(1) A break in the system security that lets a person or program access resources on a computer that the person or program is normally not allowed to access. (2) A violation of controls of a particular information system such that information assets or system components are unduly exposed. (Source for 2: Lynn Wheeler Security Glossary)
cable modem
A type of modem that allows people to access the Internet via their cable television service. (Source: FOLDOC)
cache
High-speed memory designed to hold upcoming to-be-accessed and/or recently accessed data. It sends information to and from the computer's central microprocessor much faster than a hard disk could. A cache is especially important in a LAN file server. It can be used to 'speed up' access to a database stored on the file server, thereby saving workstation users time and aggravation.
cluster
(1) A group of processors interconnected by a high-speed network - typically dedicated - for increased reliability and scalability. (3) In Oracle, an Oracle object that allows one to store related rows from different tables in the same data block. Table clustering is very seldom used by Oracle DBAs and developers. (Source for 2: Oracle FAQ) (3) Clustering refers to using two or more systems that work together. It generally refers to multiple computer systems that are linked together in order to handle variable workloads, or to provide continued operation in the event one fails. Each computer may be a multiprocessor system itself. For example, a cluster of four computers, each with four CPUs, would provide a total of 16 CPUs processing simultaneously. (Source: TechWeb.com)
connectivity
A computer buzzword that refers to a program's or device's ability to link with other programs and devices. For example, a program that can import data from a wide variety of other programs and can export data in many different formats is said to have good connectivity. On the other hand, computers that have difficulty linking into a network - many laptop computers, for example - have poor connectivity. (Source: Webopedia)
core switch
Used to concentrate traffic into a few, highly utilized backbone trunks for the longest and most expensive links. (Source: Glossary of ATM Terms)
cracker
(1) Someone who tries to break the security of, and gain access to, someone else's system without being invited to do so. This is, of course, an attempt to avoid the controversial usage of hacker. (Source: Rob Slade's Glossary of Communications, Computer, Data, and Information Security Terms) (2) A malicious person who tries to discover sensitive information by gaining illegal access to a computer system.
dial-up
(1) Dial-up access refers to connecting a device to a network via a modem and a public telephone network. Dial-up access is really just like a phone connection, except that the parties at the two ends are computer devices rather than people. Because dial-up access uses normal telephone lines, the quality of the connection is not always good and data rates are limited. In the past, the maximum data rate with dial-up access was 56 Kbps (56,000 bits per second), but new technologies are providing faster rates. An alternative way to connect two computers is through a leased line, which is a permanent connection between two devices. Leased lines provide faster throughput and better quality connections, but they are also more expensive. (Source: Webopedia) (2) Dial-up line referred to a two-wire line, as found in a dial-up network. Contrast with leased line. A dial-up network is a switched telephone network regulated by the government and administered by common carriers.
disparate
(1) Fundamentally distinct or different in kind; entirely dissimilar (2) Containing or composed of dissimilar or opposing elements (Source: Dictionary.com)
dynamic
Refers to actions that take place at the moment they are needed rather than in advance. For example, many programs perform dynamic memory allocation, which means that they do not reserve memory ahead of time, but seize sections of memory when needed. In general, such programs require less memory, although they may run a little more slowly. The opposite of dynamic is static. (Source: Webopedia)
eXtensible Markup Language
(XML)
A subset of the SGML document language designed for use on the Web and sanctioned by the W3C. It enables designers to create their own customized tags to provide functionality not available with HTML. Whereas HTML uses a fixed set of tags to describe the pages, XML maintains the flexible meta-language characteristic of SGML by defining the codes that will be used in each document.
encryption
Scrambling data in such a way that it can only be unscrambled through the application of the correct cryptographic key. (Source: ssimail.com)
failover
Maintaining an up-to-date copy of a database on an alternate computer system for backup. The alternate system takes over if the primary system becomes unusable.
fault tolerant
(1) Refers to the ability of a system to continue nonstop when a hardware failure occurs. A fault tolerant system is designed from the ground up for reliability by building multiples of all critical components - such as CPUs, memories, disks and power supplies - into the same computer. In the event one component fails, another takes over without skipping a beat. Many systems are designed to recover from a failure by detecting the failed component and switching to another computer system. These systems, although sometimes called fault tolerant, are more widely known as 'high availability' systems, and require the software to resubmit the job when the second system is available. (Source: TechWeb.com) (2) A method of making a computer or network system resistant to software errors and hardware problems. A fault tolerant LAN system tries to ensure that even in the event of a power failure, a disk crash, or a major user error, data isn't lost and the system can keep running.
fiber optic
(1) A method of transmission alternative to copper. The way it works is by pulsing light down a strand of glass. These pulses represent binary code. So far, that's no better than copper. The advantage is that a single strand of fiber optic can carry thousands and thousands of different frequencies at once without data loss. (Source: Geek.com) (2) The science or technology of light transmission through very fine, flexible glass or plastic fibers. (Source: Dictionary.com)
firewall
Hardware and/or software that splits a network into two physical pieces to prevent traffic in one segment from crossing over to another. They are used to limit the exposure of computers on the network to unauthorized access, including attack or infiltration by external computers. They may also be used to improve network traffic. A firewall may be implemented in a router, or it may be a device specialized for such purposes.
frame relay
A high-speed packet switching protocol used for wide area networks (WANs). It is faster than traditional X.25 networks, because it was designed for today's reliable circuits and performs less rigorous error detection. It provides for a granular service up to DS1 rates of 1.544 Mbps, and frame relay networks support data transfer speeds up to DS3 rates of 44.736 Mbps. It is suitable for data and image transfer, but because of its variable-length packet architecture, it is not the most efficient technology for real-time voice and video.
hard disk
The primary computer storage medium, which is made of one or more aluminum or glass platters, coated with a ferromagnetic material. Most hard disks are fixed disks, which are permanently sealed in the drive. Removable cartridge disks are gaining in popularity and are increasingly available in more varieties. (Source: TechWeb.com)
hub
A device used to connect several computers together. It is the hub that exchanges messages between both local and nonlocal computers.
identity management
The processes and procedures for administering user authentication and authorization in the enterprise and between domains over the Internet. (Source: Cafesoft)
infrastructure
IT infrastructure is the underlying technological components that constitute an organization's systems architecture. The seven components of IT infrastructure are hardware, operating system, network, database, development environment, user interface and application. (Source: Gartner Group, Inc.)
internet SCSI
(iSCSI)
The small computer systems interface (SCSI) is a popular family of protocols for communicating with I/O devices, especially storage devices. SCSI over IP, or iSCSI (internet SCSI), is a transport protocol for SCSI that operates on top of TCP. The iSCSI protocol aims to be fully compliant with the requirements laid out in the SCSI Architecture Model - 2 (SAM2) document. (Source: Internet Draft Document: draft-ietf-ips-iscsi-02.txt) (2) An IP-based protocol for establishing and managing connections between IP based storage devices, hosts, and clients. Pronounced 'eye-scuzzy.' (3) A protocol that serializes SCSI commands and converts them to TCP/IP. (Source for 3: Commweb.com)
intranet
Corporate communications network that combines the functions of the Internet with the speed and security of an internal corporate LAN. They are popular because they display documents electronically, as well as link software, databases and hardware into a universal network. As development tools mature, intranets are expected to embrace interactivity and new functions. (Source: Cisco)
leased line
(1) Private communications channel leased from a common carrier. It can be ordered in pairs, providing a four-wire channel for full-duplex transmission, By contrast, a dial-up system provides only two-wire lines. To improve line quality, it can also be conditioned. (2) A permanent telephone connection between two points set up by a telecommunications common carrier. Typically, leased lines are used by businesses to connect geographically distant offices. Unlike normal dial-up connections, a leased line is always active. (Source for 2: Cisco)
legacy system
A computer system or application program that continues to be used because of the cost of replacing or redesigning it and often despite its poor competitiveness and compatibility with modern equivalents.
management console
A terminal or workstation used to monitor and control a network.
modem
From MOdulator-DEModulator, A modem modulates outgoing digital signals from a computer or other digital device to analog signals for a conventional copper twisted pair telephone line and demodulates the incoming analog signal and converts it to a digital signal for the digital device. (Source: Geek.com) (2) A device that adapts a terminal or a computer to a telephone line. It converts the computer's digital pulses into analog audio for the telephone system, and converts the frequencies back into pulses at the receiving side. Features to look for in a modem are high speed, error checking and data compression.
network administrator
The person who is responsible for setting up and maintaining a network. Duties of the administrator include installing software, assigning passwords, making backups, and finding a way to restore the network when it goes down. (Source: ComputerUser.com High-Tech Dictionary)
node
(NN)
(1) In communications, a network junction or connection point - for example, a personal computer in a LAN, or a terminal connected to a minicomputer or mainframe. In database management, a node is an item of data that can be accessed by two or more routes. In the document object model (DOM), which exposes HTML and XML content to an application or script, every element, every attribute of that element, and each piece of textual content for every attribute is considered a node. In computer graphics, a node is an endpoint of a graphical element. In multiprocessing systems, a node can be a single processor or system. In MPP, it is one processor. In SMP, it is one computer system with two or more processors and shared memory. (Source: TechWeb.com) (2) A point of connection into a network. In database management, it is an item of data that can be accessed by two or more routes. In communications, it's a network junction or connection point: terminal or computer.
packet
(1) A block or bundle (frame) of data - usually in binary form - that is organized in a specific way for transmission in LANs and packet-switching systems. Three principal elements are included in the packet: control information (destination, origin, length of packet, etc.); the data to be transmitted; and error detection and correction bits. (2) The unit of data sent across a network. 'Packet' is a generic term used to describe a unit of data at any layer of the OSI protocol stack, but it is most correctly used to describe application layer data units. (Source for 2: FOLDOC) (3) In Bluetooth, a packet is a grouping of bits including an access code and possibly header and data. Packets may span one, three, or five RF hops (time slots). (Source for 3: anywhereyougo.com)
patch
A temporary fix to a program bug. A patch is an actual piece of object code that is inserted into - patched into - an executable program. (Source: Webopedia)
ping
(1) When submarine crews wanted to test the distance of an object, they would send a sonar 'ping' and wait to hear the echo. In the computer world, ping is a program that 'bounces' a request off of another computer over a network to see if the remote computer is still responding. If the ping comes back, the remote computer is still alive. (Source: CNET Glossary) (2) Though the name is based on the similarity to sonar pings, many people have created a post hoc acronym 'Packet INternet Groper.' (Source: Hacking Lexicon) (3) In Oracle, a ping is a forced disk write. Pings were common in the Oracle parallel server (OPS) architecture because a data block can only be modified by one instance at a time. The requirement that all the data blocks be available to all the instances forced an IDLM - integrated distributed lock manager - to ping data blocks constantly back and forth between the OPS instances. In Oracle9i, real application clusters overcomes this shortcoming. (Source: Oracle)
point-to-point connection
Communication or connection from one transmitter to one receiver. (Source: airfiber.com)
portal
A Web site, or service that offers a broad array of resources and services, such as e-mail, forums, search engines, and online shopping malls. The first Web portals were online services, such as AOL, that provided access to the Web, but by now most of the traditional search engines have transformed themselves into Web portals to attract and keep a larger audience. (Source: Webopedia)
protocol
(1) Data structures and rules for interactions between systems. (2) A procedure for adding order to the exchange of data: a specific set of rules, procedures or conventions relating to format and timing of data transmission between two devices. (3) The special set of rules of communication that the terminals or nodes (and related software) in a telecommunication connection use when they send signals back and forth. (4) A set of procedures in telecommunications connections that the terminals or nodes use to send signals back and forth. Transmission control protocol/internet protocol (TCP/IP) is the standard protocol for the Internet and related networks such as intranets and extranets. Local-area networks (LANs) often rely on a different protocol. Networks and systems cannot communicate unless they use the same protocol or make use of a gateway. (Source for 4: IT Glossary)
proxy
A proxy is someone or something delegated to do something for another. On the Internet, a 'proxy Web server' is often used for hosts behind firewalls. The firewalled host sends an http request to the proxy server, which forwards it to the real web server outside, collects the response, and passes it back to the internal host. (Source: Internet & UNIX Dictionary)
proxy cache
A facility in a proxy server that caches incoming Web pages on the hard disk. If the next page requested by a browser is already in the proxy cache, the page is retrieved locally instead of from the Internet. With proxy caches, the browsers must be configured to use the proxy server. (Source: TechWeb.com)
proxy server
(1) A server that provides access to files from other servers by retrieving them either from its local cache or from the remote server. (Source: ComputerUser.com High-Tech Dictionary) (2) A server that sits between a client application, such as a Web browser, and a real server. It intercepts all requests to the real server to see if it can fulfill the requests itself. If not, it forwards the request to the real server. (Source: Webopedia) (3) A process that acts like a switchboard through a firewall to manage the various types of permitted communications with the outside world. Proxy servers may also use caching to make communications more efficient. (Source: Glossary of Internet Terms)
redundancy
Backup components used to ensure uninterrupted operation of a system in case of failure. (Source: Butterfly Glossary)
reverse caching
Actively pushes out a company's Web content to a diverse group of remote users, such as customers. (Source: VNUnet.com)
reverse-proxy server
A secure server responsible for offloading SSL processing for the client. The client browser is configured to use the IP address of the reverse-proxy server as a proxy. The reverse-proxy server is set to listen for clear text on the specified port - usually 81 or 8080. DNS information must be configured on the reverse-proxy server. (Source: Cisco CSS 11000 SCA Versions Glossary)
roaming
(1) The ability to use a communications device such as a cell phone or PDA and be able to move from one cell or access point to another without losing the connection. (Source: TechWeb.com) (2) Within your home network, this means that your mobile phone automatically sets up communication procedures with different radio base stations when on the move. (3) International roaming means that you can use networks other than your own when traveling abroad. (Source: Ericsson)
router
A computer system or device in a network that stores and forwards data packets between LANs and WANs. Routers see the network as network addresses and all the possible paths between them. They read the network address in a transmitted message and can make a decision on how to send it based on the most expedient route - traffic load, line costs, speed, bad lines, etc.
snooping
(1) Passively observing a network. (Source: Cisco Systems) (2) Passively watching a network for information that could be used to a hacker's advantage, such as passwords. Usually done while 'camping out' - which refers to a hacker staying in a 'safe' place once he or she has broken into a system. The term can be used with a physical location, electronic reference, or an entry point for future attack. (Source: Netcentric Computer Solutions)
stack
(1) In programming, a special type of data structure in which items are removed in the reverse order from that in which they are added, also called last-in, first-out (LIFO). Adding an item to a stack is called pushing; removing an item is called popping. (2) In networking, short for protocol stack: the hierarchy of protocols used in a communications network. Network architectures designed in layers, such as TCP/IP, OSI and SNA, are referred to as stacks. Also, a group of drivers that work together to span the layers in the network protocol hierarchy; sometimes referred to as the protocol suite. Or, related layers of protocol software that function together to implement a particular communications architecture. (Source: 3com.com) (3) In Apple Computer's HyperCard software system, a collection of cards. (4) In programming, the memory area reserved for a predetermined amount of memory usage, as opposed to the heap. (Source: Computer, Telephony & Electronics Industry Glossary)
streaming media
(1) Streaming data refers to multimedia files, such as video clips and audio, that begin playing seconds after they are received from over the World Wide Web by a computer. The media is delivered in a 'stream' from the server so that you don't have to wait several minutes or longer to download multimedia files. (Source: Learn the Net.com) (2) Streaming media is the rapid transmission of audio and video in packets over the Internet. (Source: Web ProForums)
subnet address
The portion of an IP address that is specified as the subnetwork by the subnet mask. (Source: Cisco Glossary Internetworking Terms and Acronyms)
subnet mask
A 32-bit address mask used in IP (Internet protocol) to indicate the bits of an IP address that are being used for the subnet address. Sometimes referred to simply as mask. (Source: Cisco Glossary Internetworking Terms and Acronyms)
subnetwork
(1) Subnet for short; division of a network into an interconnected, but independent, segment or domain, in order to improve performance and security. Before the Internet the vast majority of traffic within an organization moved within subnets. Today, traffic is increasingly routed across subnets. (Source: TechWeb.com) (2) A collection of OSI end systems and intermediate systems under the control of a single administrative domain, and utilizing a single network access protocol. (3) A Token Ring LAN used to serve the communication needs of a department is also known as a subnet. (4) A subnet address is the portion of an IP address that is specified as the subnetwork by the subnet mask. (5) A subnet mask is a 32-bit address mask used in IP (Internet protocol) to indicate the bits of an IP address that are being used for the subnet address. Sometimes referred to simply as mask. (Source for 4 and 5: Cisco Glossary Internetworking Terms and Acronyms)
switch
(1) In networks, a device that filters and forwards packets between LAN segments. Switches operate at the data link layer (layer 2) of the OSI Reference Model and therefore support any packet protocol. LANs that use switches to join segments are called switched LANs or, in the case of Ethernet networks, switched Ethernet LANs. (Source: Webopedia) (2) A network switch is a computer networking device that connects LAN segments. It was developed from the electronic hub where the hub provided a central nodal device for a star configured network. In a shared hub, all star network connections receive a broadcast frame. The switch connects Ethernet or Token Ring segments together as needed based on the MAC address and the connections are maintained only as long as data is being transmitted. This point-to-point approach allows the switch to connect multiple pairs of segments at a time allowing more than one computer to transmit data at a time. (Source: Wikipedia)
syntax
The rules of grammar in any language, including computer language. Specifically, it is the set of rules for using a programming language. It is the grammar used in programming statements. In EDI, the standard message structure for data segment and transaction set character strings, determined by the particular format being used: ANSI X12 or U.N. EDIFACT.
throughput
The amount of data transferred from one place to another or processed in a specified amount of time. Data transfer rates for disk drives and networks are measured in terms of throughput. Typically, throughputs are measured in Kbps, Mbps and Gbps. (Source: Webopedia)
transparent
(1) Not visible, hidden. Said of a system that functions in a manner not evident to the user; e.g. the domain name system transparently resolves a fully qualified domain name into an Internet address without the user being aware of it. Compare to 'invisibility': 'You use computers when you use many modern automobiles, microwave ovens, games, CD players and calculators. You don't notice the computer because you think of yourself as doing the task, not as using the computer.' (D. Norman 'The Design of Everyday Things' Doubleday 1989) Also, fully defined, known, predictable; said of a subsystem in which matters generally subject to volition or stochastic state change have been chosen, measured or determined by the environment. Thus for transparent systems, output is a known function of the inputs, and users can predict the behavior and depend upon it. (Source: FOLDOC) (2) A change in hardware or software that, after installation, causes no noticeable change in operation.
virus
A program that replicates itself on computer systems by incorporating itself into programs that are shared among computer systems. When these infiltrated programs are executed the embedded virus is executed also, causing the 'infection.' Viruses may do things such as writing or popping-up a message on the screen, altering display settings, or even deleting files. The term virus has passed into popular usage, and is often incorrectly used to denote a worm or a Trojan horse.
workstation
A personal computer in a network. In this context, a workstation is the same as a client. Also, a high-performance, single-user microcomputer or minicomputer that is used for graphics, CAD, CAE, simulation and scientific applications. It is typically a RISC-based computer that runs under some variation of UNIX. Also, any terminal or personal computer. Originally coined to describe high-performance computers tailored to graphical or scientific applications.
worm
A program that sends itself over a network, reproducing as it goes. Worms may carry a simple message or a more serious computer virus. Unlike a virus, a worm can infect other computers without assistance.

©2003-2010 WatchIT.com. All rights reserved.