In: Categories » Electronics and communication » Network security » What is Frame Relay
| Frame Relay is an industry-standard switched data link layer protocol operating at the physical and data link layers of the OSI model. It can handle multiple virtual circuits (VCs) between Frame Relay-capable devices. The fields of the Frame Relay frame are as follows:
The 10-bit DLCI value is a logical number in the range of 16 to 107 used to identify the logical connection or permanent virtual circuit (PVC) that will be multiplexed into the physical circuit. The DLCI has significance only between your customer premises equipment (CPE) and your provider's Frame Relay switch. Because the DLCI is used to differentiate between different conversations on the same physical circuit, you can think of it as the heart of the Frame Relay header. Without it, your Frame Relay access device (FRAD) could not identify the different data streams passing through it. Frame Relay provides you with a packet-switching data communications capability that is used across a data network interface to identify how the traffic will be formatted between your devices (such as routers, switches, multiplexers, and concentrators) and your service provider's network equipment (such as Frame Relay switching nodes). You need to know a couple terms used in Frame Relay. Your devices are often called data terminal equipment (DTE), and your service provider's network equipment is often called data circuit-terminating equipment (DCE). As the interface between the DTE and DCE, Frame Relay must provide a technique that can statistically multiplex many logical data conversations over your single physical transmission link. If you are familiar with systems that use only time-division multiplexing (TDM) techniques to support multiple data streams, this technique might seem alien to you. Because Frame Relay was conceived to replace less-efficient protocols, its statistical multiplexing provides more flexible and efficient use of available bandwidth than a traditional TDM circuit. You should be aware that you can run Frame Relay on top of the channels provided by a TDM circuit, or you can run Frame Relay without any TDM techniques. Frame Relay is a high-performance WAN protocol. It is standardized in the U.S. as an ANSI standard and internationally as an International Telecommunication Union Telecommunication Standardization Sector (ITU-T) standard. It operates at the physical and data link layers of the OSI reference model, much like Ethernet and Token Ring. Frame Relay was created to develop the next-generation protocol to replace X.25 that would be carried across an ISDN interface, but it has been adapted to operate successfully over a wide variety of other network interfaces as well. Originally, WAN technology was developed to operate over low-quality transmission lines. Frame Relay can exploit the recent advances in WAN transmission technology. Because the earlier transmission lines were predominately analog transmission facilities, protocols such as X.25 were overengineered with extensive error checking and correction techniques to combat the quality of the communications across copper transmission lines. Although Frame Relay does not implement error checking, it does frame error checking and sends any error information to upper-layer protocols for any necessary actions, such as a TCP retransmission. Today's links are much more reliable, often running across fiber media/digital transmission links. Because of this, Frame Relay can leave error detection and correction up to the higher protocol layers. Frame Relay does include a CRC algorithm for use in detecting corrupted bits so that the data can be discarded, but it does not include any protocol mechanisms for correcting bad data. Frame Relay does not need to provide the explicit, per-VC flow control that X.25 implements. In its place, Frame Relay uses a simple congestion-notification mechanism that allows a network to inform a FRAD that the network resources are close to a congested state. This notification can also be used to alert the higher-layer protocols that flow control might be needed. By using Frame Relay, you can reduce your network complexity and simplify your network architecture by supporting the three-tiered network model of core, distribution, and access layers. Frame Relay supports many different topologies for the placement of your network equipment, including full, partial, and hybrid meshing
|
legal disclaimer
1) Our website is not responsible for the information contained by this article as well for any and all copyright infringements by authors and writers. E-articles is a free information resource. If you suspect this article for any copyright infringements, please read the Terms of service and contact us to investigate the problem.
2) The E-articles directory team is not responsible for inaccuracies, falsehoods, or any other types of misinformation this tutorial may contain and will not be liable for any loss or damage suffered by a user through the user's reliance on the information gained here. Please read the Terms of service
Useful tools and features
If you like this article (tutorial), please link to it from your web page using the information above. Linking to this page, this is the only way to help us improve our service, the same time providing your visitors with a way to improve their online experience.
related articles
Can symmetric cryptography meet the requirements of the Biba model, based on the data integrity checks and proper authentication? The answer is "yes," but in a very inefficient way. Recall the practical authentication example with the UNIX (well, Linux in our case) password encryption flaw when DES in ECB is used. Of course, any of the feedback modes or 128-bit block ciphers can be used instead of DES, with the obvious performance penalties. However, in our example, MD5 scales very well. A cryptographic hash function i...
2. 802.11i Wireless Security Standard and WPA
Thus, the main hope of the international 802.11 community and network administrators lies with the 802.11i standard development. Sometimes 802.11i is referred to as the Robust Security Network (RSN) as compared to traditional security network (TSN). The "i" IEEE task group was supposed to produce a new wireless security standard that should have completely replaced legacy WEP by the end of 2003. In the meantime, some bits and pieces of the incoming 802.11i standard have been implemented by wireless equipment and software vendor...
3. Proprietary Improvements to WEP and WEP Usage
The article devoted to the proprietary and standards-based improvements for currently vulnerable 802.11 safeguards. The most publicized 802.11 vulnerability is the insecurity of WEP. We have already reviewed the cryptographic weaknesses of WEP linked to the key IV space reuse and insecure key-from-string generation algorithm. There are also well-known WEP key management issues: All symmetric cipher implementations suffer secure key distribution problems. WEP is no exception. In the original design,...
4. Penetration Testing as Your First Line of Defense
It is hard to overemphasize the importance of penetration testing in the overall information security structure and the value of viewing your network through the cracker's eyes prior to further hardening procedures. There are a variety of issues specific to penetration testing on wireless networks. First of all, the penetration tester should be very familiar with RF theory and specific RF security problems (i.e., signal leak and detectability, legal regulations pertaining to the transmitter power output, and characteris...
5. Asymmetric Cryptography
Message authentication using HMACs works just fine, but how do we distribute symmetric cipher keys among the users? We can pass them around on floppies or fancy USB pen-drives with encrypted partitions on them, but what if many users live all over the world? What if the physical key distribution method takes time and the keys must be frequently changed? This is the case with the traditional WEP, which should be rotated every few minutes. Key-encrypting keys (KEKs) were offered as symmetric cipher keys used only to encrypt...
6. Examples and Analysis of Common Wireless Attack Signatures
The best way of knowing these signatures is trying out the tools in question and sniffing out their output: "Attack through defending, defend through attacking" (Dr. Mudge). The best source on wireless network intrusion tool detection and attack signatures we are aware of is Joshua Wright's "Layer 2 Analysis of WLAN Discovery Applications for Intrusion Detection" and "Detecting Wireless LAN MAC Address Spoofing" papers. A large part of this tutorial is inspired by these brilliant articles and our experience of analyzing WLAN tr...
7. Deploying a Wireless IDS Solution for Your WLAN
How many IDS solutions that implement the recommendations and follow the guidelines we have already discussed are present on the modern wireless market? The answer is none. There are many wireless IDS solutions that look for illicit MAC addresses and ESSIDs on the monitored WLAN. Some of these solutions are even implemented as specialized hardware devices. Although something is better than nothing, in our opinion such "solutions" are a waste of both money and time. They might also give you a false sense of security. Let's...