CHAPTER 13
Intermediate
Network Services and Protocols
Updated: May 16, 2026
25 min read
# CHAPTER 13
Network Services and Protocols
1. Introduction
If you build a perfect network—flawless routers, fast switches, and secure Wi-Fi—but forget to configure Network Services, the network is useless. Humans do not navigate the internet by typing142.250.190.46 into their browser; they type google.com. Laptops do not magically know their own IP addresses; they must ask for them. In this chapter, we will ascend to the Application Layer (Layer 7) to explore the critical background services that automate the network. We will demystify the Domain Name System (DNS), dissect the automated IP leasing of DHCP, and understand the absolute necessity of Network Address Translation (NAT) for internet connectivity.
2. Learning Objectives
By the end of this chapter, you will be able to:- Explain the hierarchical resolution process of DNS.
- Detail the DORA process used by DHCP to lease IP addresses.
- Define Network Address Translation (NAT) and why it is required for Private IPs.
- Differentiate between Static NAT, Dynamic NAT, and PAT (Port Address Translation).
- Identify common Application Layer protocols and their standard TCP/UDP port numbers (HTTP, HTTPS, FTP, SSH).
3. DNS (Domain Name System)
The Phonebook of the Internet. Computers only understand IP addresses. Humans only understand words. DNS bridges this gap. When you typeamazon.com, your computer stops. It cannot send a packet to a word.
-
1.
Your computer sends a DNS Query to a DNS Server (usually
8.8.8.8).
- 2. It asks: *"What is the IP address for amazon.com?"*
- 3. The DNS server replies: *"Amazon is at 205.251.242.103."*
- 4. Your computer now constructs the Layer 3 IP Packet and sends it to the router.
4. DHCP (Dynamic Host Configuration Protocol)
If a company has 5,000 employees, the IT team cannot manually type Static IPs into 5,000 laptops. They use a DHCP Server. When a laptop connects to the Wi-Fi, it performs the DORA process:- D (Discover): The laptop shouts a Layer 2 broadcast: *"Is there a DHCP server here? I need an IP!"*
- O (Offer): The DHCP server hears the shout and replies: *"I can offer you 192.168.1.50."*
- R (Request): The laptop accepts: *"I request to lease 192.168.1.50!"*
- A (Acknowledge): The server finalizes it: *"Acknowledged. You own this IP for 24 hours."*
5. NAT (Network Address Translation)
As learned in Chapter 4, your laptop uses a Private IP (e.g.,192.168.1.100). Private IPs are illegal on the public internet. If your router sent a packet onto the internet with a Source IP of 192.168.1.100, the ISP would drop it instantly.
Your home router uses NAT.
-
1.
Your laptop (
192.168.1.100) sends a web request.
- 2. The packet hits your router.
-
3.
The router intercepts the packet, erases your Private IP, and rewrites the Source IP using its own Public IP (
72.14.20.5).
- 4. The router sends the packet to Google.
-
5.
Google replies to the router. The router remembers who asked, rewrites the destination back to
192.168.1.100, and passes it to the laptop.
6. Common Port Numbers to Memorize
At Layer 4, the router uses Port Numbers to sort traffic to the correct service. You must memorize these for the CCNA:- Port 80 (TCP): HTTP (Unencrypted web traffic)
- Port 443 (TCP): HTTPS (Encrypted web traffic)
- Port 53 (UDP): DNS (Domain Name System)
- Port 67/68 (UDP): DHCP
- Port 22 (TCP): SSH (Secure Command Line access to routers)
- Port 21 (TCP): FTP (File Transfer Protocol)
7. Diagrams/Visual Suggestions
*Visual Concept: The NAT Translation Table* Draw a Router in the middle. On the left (Inside Local), draw a PC with IP192.168.1.50. On the right (Outside Global), draw a Server with IP 8.8.8.8.
Below the Router, draw a "NAT Translation Table" showing the exact mapping:
Inside: 192.168.1.50:4000 -> Translated: 72.14.20.5:4000 -> Outside: 8.8.8.8:443.
This visually demonstrates the mathematical IP swapping process happening inside the router.
8. Best Practices
- Port Address Translation (PAT): Also known as NAT Overload. A standard Public IP can only map to one Private IP at a time. By utilizing PAT, the router adds a unique TCP/UDP *Port Number* to the translation. This allows up to 65,000 internal computers to share a single Public IP address simultaneously. This is how your home network works.
9. Common Mistakes
-
Hardcoding DNS on Laptops: A user complains they can't access the internet at a coffee shop. You check their settings and realize they manually typed their corporate DNS server (
10.0.5.15) into their network adapter. When they left the office, their laptop kept trying to reach10.0.5.15to resolve names, which doesn't exist at Starbucks. End-user devices should always be set to "Obtain DNS server address automatically" via DHCP.
10. Mini Project: Explore Your Network Services
- 1. Open Command Prompt (Windows).
-
2.
Type
nslookup google.com. This forces your computer to execute a raw DNS query. You will see the exact IP address of the DNS server you used, and the IP address it returned for Google.
-
3.
Type
ipconfig /all.
-
4.
Look at the output. You will see your
IPv4 Address. Look further down to findLease ObtainedandLease Expires. This proves you are using DHCP! You will also see the exact IP of yourDHCP Server.
11. Practice Exercises
- 1. Explain the "DORA" process utilized by DHCP. Why does the initial "Discover" message have to be sent as a Layer 2 broadcast?
- 2. Detail the exact mechanism of Network Address Translation (NAT). What problem was NAT invented to solve?
12. MCQs with Answers
Question 1
Which Application Layer protocol operates on UDP Port 53 and is responsible for translating human-readable domain names into Layer 3 IP addresses?
Question 2
When a network administrator configures Port Address Translation (PAT) on an edge router, what specific Layer 4 information does the router use to track and separate multiple internal connections sharing a single Public IP address?
13. Interview Questions
-
Q: A user states, "The internet is down." You open their command prompt. You can successfully ping
8.8.8.8, but you cannot pinggoogle.com. What is the exact network service failure, and how do you prove it?
- Q: Walk me through the exact steps of how a laptop obtains a dynamically assigned IP address, Subnet Mask, and Default Gateway when connecting to a new Wi-Fi network.
- Q: Contrast Static NAT with Dynamic PAT (Overload). In what specific scenario would a network engineer be forced to configure Static NAT? (Hint: Think about inbound server traffic).
14. FAQs
Q: If DNS is just a phonebook, who maintains the master phonebook? A: The internet uses a hierarchical structure. At the very top are 13 "Root" DNS servers scattered globally, managed by organizations like ICANN. If your local ISP's DNS server doesn't know the IP for a website, it asks the Root servers, which point it to the.com servers, which finally point it to the specific web server.