20:22
Common Ports - CompTIA Network+ N10-009 - 1.4
Professor Messer
Overview
This video explains common network port numbers and the protocols they use, which are essential for network professionals to understand for configuring and troubleshooting applications. It covers protocols for file transfer (FTP, SFTP), secure remote access (SSH, Telnet), email (SMTP, IMAP, POP3), name resolution (DNS), IP configuration (DHCP), web browsing (HTTP, HTTPS), time synchronization (NTP), network management (SNMP), directory services (LDAP), Windows file sharing (SMB/CIFS), log transfer (Syslog), database access (SQL), remote desktop access (RDP), and voice over IP (SIP). Understanding these ports and their associated protocols is crucial for managing network traffic and ensuring application functionality.
How was this?
Save this permanently with flashcards, quizzes, and AI chat
Chapters
- File Transfer Protocol (FTP) uses TCP ports 20 (data transfer) and 21 (control) for generic file operations like listing, adding, deleting, and renaming files.
- Secure Shell (SSH) uses TCP port 22 for encrypted, text-based remote console access and management of devices.
- Secure File Transfer Protocol (SFTP) also uses TCP port 22, leveraging SSH for encrypted file transfers and management, offering a secure alternative to FTP.
- Telnet, an older, unencrypted protocol for remote console access, uses TCP port 23 and is largely replaced by SSH due to security risks.
Understanding these protocols and their ports is fundamental for secure data transfer and remote device management, highlighting the shift from unencrypted to encrypted communication for better security.
Using SSH (TCP port 22) to securely log into a remote server's command line to manage its files, ensuring that login credentials and commands are encrypted.
- Simple Mail Transfer Protocol (SMTP) uses TCP port 25 for sending emails between servers and from clients to servers, though it's unencrypted.
- To secure email transfers, SMTP often uses TCP port 587 with Transport Layer Security (TLS) encryption.
- Protocols like IMAP and POP3 are used for receiving and managing emails in a client's inbox.
- Domain Name System (DNS) uses UDP port 53 for quick name queries (translating domain names to IP addresses) and TCP port 53 for larger data transfers between DNS servers.
These protocols are essential for modern communication, enabling email exchange and the user-friendly navigation of the internet via domain names instead of IP addresses.
When you send an email, SMTP (often on TCP port 587 with TLS) transmits it from your device to your email server, and then between mail servers until it reaches the recipient's server.
- Dynamic Host Configuration Protocol (DHCP) uses UDP ports 67 and 68 to automatically assign IP addresses and network configurations to devices joining a network.
- Trivial File Transfer Protocol (TFTP) uses UDP port 69 for quick, unauthenticated file transfers, often used for device configuration downloads or firmware updates.
- DHCP reservations allow administrators to assign a specific IP address to a device based on its MAC address, ensuring consistent network identity.
DHCP and TFTP automate critical network functions, simplifying device onboarding and essential file transfers, especially in environments where manual configuration is impractical.
When you connect a new VoIP phone to the network, it uses DHCP (UDP 67/68) to get an IP address and then TFTP (UDP 69) to download its configuration file from a server.
- Hypertext Transfer Protocol (HTTP) uses TCP port 80 for unencrypted web communication between browsers and servers.
- HTTPS, the secure version of HTTP, uses TCP port 443 and employs SSL/TLS encryption for secure web browsing.
- Network Time Protocol (NTP) uses UDP port 123 to synchronize clocks across all devices on a network, which is critical for log correlation and accurate timestamps.
These protocols ensure secure and reliable access to web resources and maintain accurate time synchronization, which is vital for security auditing and inter-device communication.
Visiting your bank's website uses HTTPS (TCP port 443) to encrypt your session, protecting sensitive financial information.
- Simple Network Management Protocol (SNMP) uses UDP port 161 for querying network devices for performance data and UDP port 162 for sending 'traps' (alerts) from devices to a management station.
- SNMP versions 1 and 2 send data in clear text, while SNMPv3 adds authentication, integrity, and encryption for enhanced security.
- Lightweight Directory Access Protocol (LDAP) uses TCP port 389 for accessing and managing directory information (like user accounts and device details), with a secure version (LDAPS) using TCP port 636.
SNMP and LDAP are crucial for maintaining network health and organizing network resources, allowing administrators to monitor performance, troubleshoot issues, and manage user/device information efficiently.
A network administrator uses SNMP (UDP 161) to query a router about its CPU usage and then configures it to send an SNMP trap (UDP 162) if the usage exceeds a certain threshold.
- Server Message Block (SMB), also known as Common Internet File System (CIFS), uses TCP port 445 for file and printer sharing in Windows networks.
- Syslog uses UDP port 514 to standardize the transfer of log messages from various network devices to a central logging server or SIEM for analysis.
- Structured Query Language (SQL) databases, like Microsoft SQL Server, commonly use TCP port 1433 for querying and managing data.
These protocols facilitate essential functions like shared resource access, centralized logging for security and troubleshooting, and efficient data management in database systems.
When you access a shared folder on a colleague's Windows computer, your computer is using SMB (TCP port 445) to communicate with theirs.
- Remote Desktop Protocol (RDP) uses TCP port 3389 to allow users to view and control a remote computer's desktop interface, supporting various operating systems.
- Session Initiation Protocol (SIP) uses TCP ports 5060 and 5061 as a control protocol for initiating, managing, and terminating Voice over IP (VoIP) calls, and can also support video and messaging.
RDP and SIP enable essential remote work capabilities and modern communication systems, allowing for remote support and flexible voice and video interactions.
A help desk technician uses RDP (TCP port 3389) to connect to an end-user's computer to troubleshoot software issues remotely.
Key takeaways
- Port numbers act as endpoints for network communication, directing traffic to the correct application or service on a device.
- Understanding the difference between TCP and UDP is crucial, as TCP provides reliable, ordered delivery, while UDP is faster but less reliable.
- Many older protocols that transmit data in clear text (like Telnet and HTTP) have secure, encrypted counterparts (SSH, HTTPS) that are preferred for modern networks.
- Protocols like DHCP and DNS are fundamental for network operation, automating IP configuration and name resolution, respectively.
- Network management protocols (SNMP) and directory services (LDAP) are vital for maintaining and organizing large networks.
- Centralized logging via Syslog is essential for security monitoring and troubleshooting across diverse network devices.
- The choice of protocol and port number often dictates the security and reliability of network communications.
Key terms
Port NumberProtocolTCP (Transmission Control Protocol)UDP (User Datagram Protocol)FTP (File Transfer Protocol)SSH (Secure Shell)SFTP (Secure File Transfer Protocol)TelnetSMTP (Simple Mail Transfer Protocol)DNS (Domain Name System)DHCP (Dynamic Host Configuration Protocol)TFTP (Trivial File Transfer Protocol)HTTP (Hypertext Transfer Protocol)HTTPS (HTTP Secure)NTP (Network Time Protocol)SNMP (Simple Network Management Protocol)LDAP (Lightweight Directory Access Protocol)SMB (Server Message Block)CIFS (Common Internet File System)SyslogSQL (Structured Query Language)RDP (Remote Desktop Protocol)SIP (Session Initiation Protocol)
Test your understanding
- What is the primary function of port 80 and port 443, and how do their associated protocols differ in terms of security?
- Why is SSH (TCP port 22) considered more secure than Telnet (TCP port 23), and what are the implications for network professionals?
- How does DHCP (UDP ports 67/68) automate network configuration for devices, and what is the role of a DHCP server?
- What is the purpose of DNS (UDP/TCP port 53), and why is it critical for internet navigation?
- Explain the difference between FTP (TCP ports 20/21) and SFTP (TCP port 22) in terms of security and functionality.