1 1 00:00:00,590 --> 00:00:02,020 Other devices. 2 2 00:00:02,020 --> 00:00:03,960 In this lesson, we're going to take a quick look 3 3 00:00:03,960 --> 00:00:06,580 at some devices you may find on your networks. 4 4 00:00:06,580 --> 00:00:09,040 This includes things like VoIP phones, printers, 5 5 00:00:09,040 --> 00:00:12,930 access control devices, cameras, HVACs, internet of things, 6 6 00:00:12,930 --> 00:00:14,890 ICS and SCADA devices. 7 7 00:00:14,890 --> 00:00:16,600 First we have VoIP phones. 8 8 00:00:16,600 --> 00:00:19,180 A VoIP phone is a voice over internet protocol phone, 9 9 00:00:19,180 --> 00:00:21,760 and it's a hardware device that connects to your IP network 10 10 00:00:21,760 --> 00:00:23,640 in order to make a connection to a call manager 11 11 00:00:23,640 --> 00:00:24,900 within your network. 12 12 00:00:24,900 --> 00:00:25,860 Now a call manager, 13 13 00:00:25,860 --> 00:00:28,210 also known as a unified communications manager 14 14 00:00:28,210 --> 00:00:30,840 or a unified call manager in Cisco based networks, 15 15 00:00:30,840 --> 00:00:33,200 is going to be used to perform the call processing 16 16 00:00:33,200 --> 00:00:35,880 for hardware and software based IP phones. 17 17 00:00:35,880 --> 00:00:37,570 Now, if you have an IP phone, 18 18 00:00:37,570 --> 00:00:39,450 you can call another IP phone directly. 19 19 00:00:39,450 --> 00:00:40,750 There's no issue with that. 20 20 00:00:40,750 --> 00:00:43,280 For example, if you VoIP phones in your office building, 21 21 00:00:43,280 --> 00:00:45,350 and they're all connected to your local area network, 22 22 00:00:45,350 --> 00:00:47,250 you could pick up a phone and dial another phone 23 23 00:00:47,250 --> 00:00:48,660 and talk to your coworkers. 24 24 00:00:48,660 --> 00:00:50,330 But if you want to be able to talk to your spouse 25 25 00:00:50,330 --> 00:00:51,320 on their cell phone, 26 26 00:00:51,320 --> 00:00:53,070 you have to configure your call manager 27 27 00:00:53,070 --> 00:00:55,440 to route those calls to the public telephone network 28 28 00:00:55,440 --> 00:00:57,920 by connecting it with a telephone provider. 29 29 00:00:57,920 --> 00:01:00,230 VoIP systems are very popular these days 30 30 00:01:00,230 --> 00:01:02,210 because they lower the cost of long distance, 31 31 00:01:02,210 --> 00:01:04,610 and it allows you to provide encrypted voice lines 32 32 00:01:04,610 --> 00:01:05,670 within your own companies 33 33 00:01:05,670 --> 00:01:07,920 if you're doing VoIP to VoIP calls. 34 34 00:01:07,920 --> 00:01:10,440 Now, VoIP phones often look like a regular phone, 35 35 00:01:10,440 --> 00:01:12,250 but they may also include a digital display 36 36 00:01:12,250 --> 00:01:13,280 or a video camera, 37 37 00:01:13,280 --> 00:01:15,690 so you can make face-to-face calls as well. 38 38 00:01:15,690 --> 00:01:18,110 The next device, we're going to talk about our printers. 39 39 00:01:18,110 --> 00:01:20,010 Now, if you've already taken your A+ exam 40 40 00:01:20,010 --> 00:01:21,690 or you've ever printed out a document, 41 41 00:01:21,690 --> 00:01:23,510 you already know what a printer is. 42 42 00:01:23,510 --> 00:01:26,500 Printers can be directly connected to a computer using USB, 43 43 00:01:26,500 --> 00:01:28,370 or they can be connected to your network 44 44 00:01:28,370 --> 00:01:30,200 and shared by multiple users. 45 45 00:01:30,200 --> 00:01:31,500 When it comes to network printers, 46 46 00:01:31,500 --> 00:01:33,230 they can be wired or wireless, 47 47 00:01:33,230 --> 00:01:35,210 and you have the ability to configure them 48 48 00:01:35,210 --> 00:01:39,100 with the right IP address statically or by using DHCP. 49 49 00:01:39,100 --> 00:01:40,880 This way they can connect to the network 50 50 00:01:40,880 --> 00:01:43,480 and other users can connect to them as well. 51 51 00:01:43,480 --> 00:01:46,130 Next, we have physical access control devices, 52 52 00:01:46,130 --> 00:01:47,840 which includes things like security gates, 53 53 00:01:47,840 --> 00:01:50,720 and turnstiles, and door locks, and many others. 54 54 00:01:50,720 --> 00:01:53,380 All of these things are often connected to a network, 55 55 00:01:53,380 --> 00:01:55,270 and when they're connected to the network, 56 56 00:01:55,270 --> 00:01:57,160 they're often going to be on their own network 57 57 00:01:57,160 --> 00:01:58,410 for additional security, 58 58 00:01:58,410 --> 00:02:00,540 not connected to your corporate network. 59 59 00:02:00,540 --> 00:02:02,830 Now, if you do connect them to your corporate network, 60 60 00:02:02,830 --> 00:02:05,560 you need to make sure you place them in their own VLAN, 61 61 00:02:05,560 --> 00:02:08,440 this will give you additional security controls and safety. 62 62 00:02:08,440 --> 00:02:10,140 But for the most secure environment, 63 63 00:02:10,140 --> 00:02:11,120 you really should have them 64 64 00:02:11,120 --> 00:02:13,490 on their own separate physical network. 65 65 00:02:13,490 --> 00:02:15,430 Next, we have security cameras. 66 66 00:02:15,430 --> 00:02:18,060 Often these will be connected to your security network, 67 67 00:02:18,060 --> 00:02:20,430 just like your physical access control devices, 68 68 00:02:20,430 --> 00:02:23,540 but in a lot of small office or home office environments, 69 69 00:02:23,540 --> 00:02:24,500 you may have them connected 70 70 00:02:24,500 --> 00:02:26,340 to your corporate network as well. 71 71 00:02:26,340 --> 00:02:27,950 This way they can access the internet 72 72 00:02:27,950 --> 00:02:30,410 and you don't have a bunch of extra gear to have to pay for. 73 73 00:02:30,410 --> 00:02:32,340 Again, though, if you're going to do this, 74 74 00:02:32,340 --> 00:02:34,860 I highly recommend getting some additional security, 75 75 00:02:34,860 --> 00:02:36,590 like putting them on a separate VLAN 76 76 00:02:36,590 --> 00:02:38,680 and adding ACL's to protect them. 77 77 00:02:38,680 --> 00:02:40,280 Traditionally, security cameras 78 78 00:02:40,280 --> 00:02:42,410 can actually be very insecure devices 79 79 00:02:42,410 --> 00:02:44,850 just because they're part of the greater internet of things 80 80 00:02:44,850 --> 00:02:45,850 and it's risky to have them 81 81 00:02:45,850 --> 00:02:48,270 on your enterprise or corporate networks. 82 82 00:02:48,270 --> 00:02:50,990 Next, we have heating ventilation and air conditioning 83 83 00:02:50,990 --> 00:02:52,110 or HVAC. 84 84 00:02:52,110 --> 00:02:54,050 There are going to be lots of different sensors and controllers 85 85 00:02:54,050 --> 00:02:55,710 to help work with these things. 86 86 00:02:55,710 --> 00:02:57,440 These like security cameras, 87 87 00:02:57,440 --> 00:02:59,090 should be placed on their own VLAN 88 88 00:02:59,090 --> 00:03:01,220 and have security protections in place. 89 89 00:03:01,220 --> 00:03:03,810 These HVAC sensors and controllers are going to be useful 90 90 00:03:03,810 --> 00:03:04,780 to have on a network, 91 91 00:03:04,780 --> 00:03:07,540 so you can detect the temperature and humidity of the spaces 92 92 00:03:07,540 --> 00:03:09,060 that people don't work in daily, 93 93 00:03:09,060 --> 00:03:11,410 like server rooms and communication closets. 94 94 00:03:11,410 --> 00:03:12,243 But again, 95 95 00:03:12,243 --> 00:03:15,170 these devices tend to not have a lot of security built in. 96 96 00:03:15,170 --> 00:03:16,800 So you need to put additional protections 97 97 00:03:16,800 --> 00:03:19,880 and defenses in place when you connect them to your network. 98 98 00:03:19,880 --> 00:03:22,210 Just like security cameras and HVAC sensors, 99 99 00:03:22,210 --> 00:03:24,140 there is a whole host of other devices 100 100 00:03:24,140 --> 00:03:25,960 you may find attached to your network, 101 101 00:03:25,960 --> 00:03:28,060 we call these the internet of things. 102 102 00:03:28,060 --> 00:03:30,620 This is things like smart TVs, and smartwatches, 103 103 00:03:30,620 --> 00:03:33,450 smart refrigerators, and smart speakers, smart thermostats, 104 104 00:03:33,450 --> 00:03:35,850 and smart doorbells, and many others. 105 105 00:03:35,850 --> 00:03:37,890 All of these things are part of IOT 106 106 00:03:37,890 --> 00:03:39,490 or the internet of things. 107 107 00:03:39,490 --> 00:03:41,970 Just like I said for HVAC and security cameras, 108 108 00:03:41,970 --> 00:03:44,400 you should be putting these devices on a corporate network 109 109 00:03:44,400 --> 00:03:47,180 or enterprise network in their own segmented VLAN 110 110 00:03:47,180 --> 00:03:49,320 or on a separate network altogether, 111 111 00:03:49,320 --> 00:03:51,710 to be able to give yourself more protection. 112 112 00:03:51,710 --> 00:03:54,400 Finally, we have ICS and SCADA. 113 113 00:03:54,400 --> 00:03:56,660 ICS stands for industrial control system 114 114 00:03:56,660 --> 00:03:58,640 and SCADA stands for supervisory control 115 115 00:03:58,640 --> 00:04:00,050 and data acquisition. 116 116 00:04:00,050 --> 00:04:02,860 When we talk about ICS or industrial control systems, 117 117 00:04:02,860 --> 00:04:03,693 this is a term 118 118 00:04:03,693 --> 00:04:05,960 that's used to describe different types of control systems 119 119 00:04:05,960 --> 00:04:07,950 and the associated instrumentation. 120 120 00:04:07,950 --> 00:04:11,210 This includes devices, systems, networks, and controls 121 121 00:04:11,210 --> 00:04:13,970 that are used to operate and automate industrial processes. 122 122 00:04:13,970 --> 00:04:16,700 Now the specific type is going to depend on your industry, 123 123 00:04:16,700 --> 00:04:19,480 but normally this includes electronic sensors in equipment 124 124 00:04:19,480 --> 00:04:20,400 that are built specifically 125 125 00:04:20,400 --> 00:04:22,520 to have an effect on the physical world. 126 126 00:04:22,520 --> 00:04:24,400 I mentioned earlier, the term SCADA, 127 127 00:04:24,400 --> 00:04:28,510 well SCADA is one type of industrial control system or ICS. 128 128 00:04:28,510 --> 00:04:29,380 For example, 129 129 00:04:29,380 --> 00:04:31,630 I used to work as a nuclear reactor operator 130 130 00:04:31,630 --> 00:04:32,790 early in my life. 131 131 00:04:32,790 --> 00:04:35,030 Now, when I was sitting at the reactor plant control panel, 132 132 00:04:35,030 --> 00:04:37,080 there were a lot of pressure and sensor gauges 133 133 00:04:37,080 --> 00:04:37,913 that I would monitor, 134 134 00:04:37,913 --> 00:04:39,000 and lots of different switches 135 135 00:04:39,000 --> 00:04:41,910 that I could turn to turn things on like pumps and heaters, 136 136 00:04:41,910 --> 00:04:44,360 SCADA systems allow me to take all that data 137 137 00:04:44,360 --> 00:04:45,550 and put it in one place. 138 138 00:04:45,550 --> 00:04:47,460 I could acquire it and transmit the data 139 139 00:04:47,460 --> 00:04:49,070 from all of these different systems 140 140 00:04:49,070 --> 00:04:50,840 and put it all into a central panel 141 141 00:04:50,840 --> 00:04:52,320 so that I, as a reactor operator, 142 142 00:04:52,320 --> 00:04:54,150 could monitor and control it. 143 143 00:04:54,150 --> 00:04:56,460 Now, I didn't have to sit inside the nuclear reactor 144 144 00:04:56,460 --> 00:04:59,140 or next to the reactor to turn on the coolant pump. 145 145 00:04:59,140 --> 00:05:02,750 Instead, I could be safely away from all that radiation 146 146 00:05:02,750 --> 00:05:04,550 and be able to control and see everything 147 147 00:05:04,550 --> 00:05:06,150 using these SCADA systems. 148 148 00:05:06,150 --> 00:05:08,700 That way, we actually also do things like automation. 149 149 00:05:08,700 --> 00:05:10,230 We could set a range of values 150 150 00:05:10,230 --> 00:05:12,240 that are programmable logic controller could take 151 151 00:05:12,240 --> 00:05:14,160 and that way, if we need to turn the pump on 152 152 00:05:14,160 --> 00:05:16,640 at a certain temperature or off at a certain temperature, 153 153 00:05:16,640 --> 00:05:18,360 we could do that too, to keep the reactor 154 154 00:05:18,360 --> 00:05:20,980 at the right temperature for safe operations. 155 155 00:05:20,980 --> 00:05:24,180 Now, why is this important to consider ICS and SCADA systems 156 156 00:05:24,180 --> 00:05:25,510 as a network engineer? 157 157 00:05:25,510 --> 00:05:28,170 Well, because these things run on networks too, 158 158 00:05:28,170 --> 00:05:30,560 and you may be asked to work as a network technician 159 159 00:05:30,560 --> 00:05:31,590 at a reactor plant, 160 160 00:05:31,590 --> 00:05:33,920 or automobile factory, or on an oil pipeline. 161 161 00:05:33,920 --> 00:05:35,820 And all of these sensors need to be connected, 162 162 00:05:35,820 --> 00:05:37,950 and that happens using a network. 163 163 00:05:37,950 --> 00:05:41,240 Again, like IOT, I highly recommend you have a separate 164 164 00:05:41,240 --> 00:05:44,660 or segmented network for your ICS and SCADA devices. 165 165 00:05:44,660 --> 00:05:47,460 The reason for this is that these things are very sensitive 166 166 00:05:47,460 --> 00:05:49,140 and they need to be protected. 167 167 00:05:49,140 --> 00:05:52,000 I don't want my reactor plant connected to my email server, 168 168 00:05:52,000 --> 00:05:54,990 that's a bad day because if somebody has a malicious email 169 169 00:05:54,990 --> 00:05:56,930 and infects our systems with ransomware, 170 170 00:05:56,930 --> 00:05:59,710 it can make it so I'm locked out of my ICS and SCADA systems 171 171 00:05:59,710 --> 00:06:01,570 and won't be able to control the reactor too. 172 172 00:06:01,570 --> 00:06:02,580 So we don't want that, 173 173 00:06:02,580 --> 00:06:04,830 you need to have it on a separate network. 174 174 00:06:04,830 --> 00:06:06,360 All right, for the exam, 175 175 00:06:06,360 --> 00:06:07,280 I want you to remember, 176 176 00:06:07,280 --> 00:06:08,560 there are lots of different things 177 177 00:06:08,560 --> 00:06:10,960 that you might work on as a network technician. 178 178 00:06:10,960 --> 00:06:13,300 This includes things like VoIP phones, printers, 179 179 00:06:13,300 --> 00:06:16,040 access control, devices, cameras, HVAC, 180 180 00:06:16,040 --> 00:06:18,550 internet of things, ICS and SCADA devices. 181 181 00:06:18,550 --> 00:06:19,440 Each of these devices 182 182 00:06:19,440 --> 00:06:21,030 is going to bring risks to your networks 183 183 00:06:21,030 --> 00:06:22,530 and to the devices themselves. 184 184 00:06:22,530 --> 00:06:24,830 So you have to weigh the operations and the security 185 185 00:06:24,830 --> 00:06:27,180 as you're building security into your networks 186 186 00:06:27,180 --> 00:06:29,380 and figure out where to place these devices.