System Administration Guide: IP Services

MTU

Maximum Transmission Unit. The size, given in octets, that can be transmitted over a link. For example, the MTU of an Ethernet is 1500 octets.

multicast address

An IP address that identifies a group of interfaces in a particular way. A packet that is sent to a multicast address is delivered to all of the interfaces in the group.

neighbor advertisement

A response to a neighbor solicitation message or the process of a node sending unsolicited neighbor advertisements to announce a link-layer address change.

neighbor discovery

An IP mechanism that enables hosts to locate other hosts that reside on an attached link.

neighbor solicitation

A solicitation that is sent by a node to determine the link-layer address of a neighbor. A neighbor solicitation also verifies that a neighbor is still reachable by a cached link-layer address.

Network Access Identifier (NAI)

A designation that uniquely identifies the mobile node in the format of user@domain.

network interface card (NIC)

Network adapter that is either internal or a separate card that serves as an interface to a link.

node

A host or a router.

packet

A group of information that is transmitted as a unit over communications lines. Contains a header plus payload.

physical interface

A node's attachment to a link. This attachment is often implemented as a device driver plus a network adapter. Some network adapters can have multiple points of attachment, for example, qfe. The usage of network adapter in this document refers to a "single point of attachment."

physical interface group

The set of physical interfaces on a system that are connected to the same link. These interfaces are identified by assigning the same (non-null) character string name to all the physical interfaces in the group.

physical interface group name

A name that is assigned to a physical interface that identifies the group. The name is local to a system. Multiple physical interfaces, sharing the same group name, form a physical interface group.

PKI

Public Key Infrastructure. A system of digital certificates, Certificate Authorities, and other registration authorities that verify and authenticate the validity of each party involved in an Internet transaction.

private address

An IP address that is not routable through the Internet.

public key cryptography

A cryptographic system that uses two keys - a public key known to everyone and a private key known only to the recipient of the message. IKE provides public keys for IPsec.

redirect

In a router, to inform a host of a better first-hop node to reach a particular destination.

registration

The process by which a mobile node registers its care-of address with its home agent and foreign agent when it is away from home.

repair detection

The process of detecting when a NIC or the path from the NIC to some layer-3 device starts operating correctly after a failure.

reverse tunnel

A tunnel that starts at the mobile node's care-of address and terminates at the home agent.

router advertisement

The process of routers advertising their presence together with various link and Internet parameters, either periodically or in response to a router solicitation message.

router discovery

The process of hosts locating routers that reside on an attached link.

router solicitation

The process of hosts requesting routers to generate router advertisements immediately, rather than at their next scheduled time.

RSA

A method for obtaining digital signatures and public-key cryptosystems. The method was first described in 1978 by its developers, Rivest, Shamir, and Adleman.

SADB

Security Associations Database. A table that specifies cryptographic keys and algorithms that are used in the transmission of data.

security associations

Associations that specify security properties from one host to another.


	MTU Maximum Transmission Unit. The size, given in octets, that can be transmitted over a link. For example, the MTU of an Ethernet is 1500 octets. multicast address An IP address that identifies a group of interfaces in a particular way. A packet that is sent to a multicast address is delivered to all of the interfaces in the group. neighbor advertisement A response to a neighbor solicitation message or the process of a node sending unsolicited neighbor advertisements to announce a link-layer address change. neighbor discovery An IP mechanism that enables hosts to locate other hosts that reside on an attached link. neighbor solicitation A solicitation that is sent by a node to determine the link-layer address of a neighbor. A neighbor solicitation also verifies that a neighbor is still reachable by a cached link-layer address. Network Access Identifier (NAI) A designation that uniquely identifies the mobile node in the format of user@domain. network interface card (NIC) Network adapter that is either internal or a separate card that serves as an interface to a link. node A host or a router. packet A group of information that is transmitted as a unit over communications lines. Contains a header plus payload. physical interface A node's attachment to a link. This attachment is often implemented as a device driver plus a network adapter. Some network adapters can have multiple points of attachment, for example, qfe. The usage of network adapter in this document refers to a "single point of attachment." physical interface group The set of physical interfaces on a system that are connected to the same link. These interfaces are identified by assigning the same (non-null) character string name to all the physical interfaces in the group. physical interface group name A name that is assigned to a physical interface that identifies the group. The name is local to a system. Multiple physical interfaces, sharing the same group name, form a physical interface group. PKI Public Key Infrastructure. A system of digital certificates, Certificate Authorities, and other registration authorities that verify and authenticate the validity of each party involved in an Internet transaction. private address An IP address that is not routable through the Internet. public key cryptography A cryptographic system that uses two keys - a public key known to everyone and a private key known only to the recipient of the message. IKE provides public keys for IPsec. redirect In a router, to inform a host of a better first-hop node to reach a particular destination. registration The process by which a mobile node registers its care-of address with its home agent and foreign agent when it is away from home. repair detection The process of detecting when a NIC or the path from the NIC to some layer-3 device starts operating correctly after a failure. reverse tunnel A tunnel that starts at the mobile node's care-of address and terminates at the home agent. router advertisement The process of routers advertising their presence together with various link and Internet parameters, either periodically or in response to a router solicitation message. router discovery The process of hosts locating routers that reside on an attached link. router solicitation The process of hosts requesting routers to generate router advertisements immediately, rather than at their next scheduled time. RSA A method for obtaining digital signatures and public-key cryptosystems. The method was first described in 1978 by its developers, Rivest, Shamir, and Adleman. SADB Security Associations Database. A table that specifies cryptographic keys and algorithms that are used in the transmission of data. security associations Associations that specify security properties from one host to another.