In today’s class, we discussed Chapter 5, covering the ever-elusive question of how do we get Internet connection to our network computers without buying an AOL account for each one. (Ha!)
Just as a reminder, and to make sure we’re all on the same page, the Internet is simply a connection of thousands (millions?) of networks, all “touching” one another. The way we get a packet of information from one network (such as the one in our home) to another network (such as the network of our Aunt Sue) is by sending that packet out to the inter-connected structure of devices that make up the Internet. That structure is largely made up of routers. As we discussed, routers basically have their feet in a couple of different LANs and can transform a packet from one LAN to another. These routers operate very swiftly, passing packets from one LAN to another to another until eventually the packet arrives to Aunt Sally’s LAN. It looks like this:

There are a number of ways of launching your packet out from your LAN to the vast sprawling chaos we call the Internet, and we briefly discussed each one: Dial-up modem, ISDN, CATV and DSL,Leased lines, andFrame relay. Each method has its strengths and weaknesses, and when you’re planning your network around the established requirements, you’ll need to choose the appropriate method based on your needs and budget.
What discussion would be without a mention of security? Of course, there are security concerns we should keep in mind as we are setting up access. We need to identify any applications or users that we don’t want using the internet, as well as setting up policies on how allowed applications and users do use the Internet.
In older days, each computer that had Internet access actually sat on the Internet. This was scary because not only was this computer extremely vulnerable, it would use up an IP address, which is a finite resource. To overcome these obstacles, NAT was developed. NAT stands for Network Address Translation, and it allows us to set up LANs with “private” IP addresses, and then funnel them through a “public” IP address. The NAT server keeps up with which computer is what, and to the Internet, all computers behind the NAT server appear to be coming from the same public IP address. This keeps computers somewhat safer, as it (assuming we’re smart) puts firewalls and other security devices in between the Internet connection and our computer, and also hides individual machines away from the prying eyes of the ‘net.
Microsoft has a solution for a NAT server (proxy server too) called the Internet Acceleration Server 2006. Using IAS, we can set up policies for users to get Internet access and to actually require only authenticated users to access the Internet. Think of it as NTFS permissions for Internet Access.
As a reminder, you will be taking a midterm exam next week over Chapters 1-5. Make sure you’re ready!!!
Homework: