Free Essay

Network

In:

Submitted By sunilkhan
Words 1540
Pages 7
CS 487

Firewalls and Network Defense

slide 1

Firewalls
 Idea: separate local network from the Internet
Trusted hosts and networks Firewall

Intranet DMZ

Router Demilitarized Zone: publicly accessible servers and networks

slide 2

Castle and Moat Analogy
 More like the moat around a castle than a firewall
• Restricts access from the outside • Restricts outbound connections, too (!!)
– Important: filter out undesirable activity from internal hosts!

slide 3

Conceptually..
• System to enhance of protection a local system or network of systems from networkbased security threats • All this while affording access to the outside world via WAN`s or the Internet • Deployed because of assumptions about different networks

slide 4

Operationally...
• A policy that dictates what traffic to allow, what to block, why this is done, and what to do if things break • Log connections and refused attempts • Periodic Auditing necessary for any successful deployment

slide 5

Firewall Locations in the Network
 Between internal LAN and external network  At the gateways of sensitive subnetworks within the organizational LAN
• Payroll’s network must be protected separately within the corporate network

 On end-user machines
• “Personal firewall” • Microsoft’s Internet Connection Firewall (ICF) comes standard with Windows XP slide 6

Firewall Types
 Packet- or session-filtering router (filter)  Proxy gateway
• All incoming traffic is directed to firewall, all outgoing traffic appears to come from firewall • Application-level: separate proxy for each application
– Different proxies for SMTP (email), HTTP, FTP, etc. – Filtering rules are application-specific

• Circuit-level: application-independent, “transparent”
– Only generic IP traffic filtering (example: SOCKS)

 Personal firewall with application-specific rules
• E.g., no outbound telnet connections from email client slide 7

Firewall Types: Illustration

slide 8

Packet Filtering
 For each packet, firewall decides whether to allow it to proceed
• Decision must be made on per-packet basis
– Stateless; cannot examine packet’s context (TCP connection details – state of the connection.)

 To decide, use information available in the packet
• • • • IP source and destination addresses, ports Protocol identifier (TCP, UDP, ICMP, etc.) TCP flags (SYN, ACK, RST, PSH, FIN) ICMP message type slide 9

 Filtering rules are based on pattern-matching

Packet Filtering Examples

slide 10

Example: FTP
FTP server
20 Data 21 Command

(borrowed from Wenke Lee)
FTP client

 Client opens command channel to server; tells server second port number  Server acknowledges  Server opens data channel to client’s second port  Client acknowledges

Connection from a random port on an external host

5150

5151



151” PORT 5

"

"

"
“OK” DATA C HAN NEL

K TCP AC

"

slide 11

FTP Packet Filter
The following filtering rules allow a user to FTP from any IP address to the FTP server at 172.168.10.12 access-list 100 permit tcp any gt 1023 host 172.168.10.12 eq 21 access-list 100 permit tcp any gt 1023 host 172.168.10.12 eq 20 ! Allows packets from any client to the FTP control and data ports access-list 101 permit tcp host 172.168.10.12 eq 21 any gt 1023 access-list 101 permit tcp host 172.168.10.12 eq 20 any gt 1023 ! Allows the FTP server to send packets back to any IP address with TCP ports > 1023 interface Ethernet 0 access-list 100 in ! Apply the first rule to inbound traffic access-list 101 out ! Apply the second rule to outbound traffic ! Anything not explicitly permitted by the access list is denied!

slide 12

Weaknesses of Packet Filters
 Do not prevent application-specific attacks
• For example, if there is a buffer overflow in URL decoding routine, firewall will not block an attack string

 No user authentication mechanisms
• … except (spoofable) address-based authentication • Firewalls don’t have any upper-level functionality

 Vulnerable to TCP/IP attacks such as spoofing
• Solution: list of addresses for each interface (packets with internal addresses shouldn’t come from outside)

 Security breaches due to misconfiguration slide 13

Stateless Filtering Is Not Enough
 In TCP connections, ports with numbers less than 1024 are permanently assigned to servers
• 20,21 for FTP, 23 for telnet, 25 for SMTP, 80 for HTTP…

 Clients use ports numbered from 1024 to 16383
• They must be available for clients to receive responses

 What should a firewall do if it sees, say, an incoming request to some client’s port 5612?
• It must allow it: this could be a server’s response in a previously established connection… • …OR it could be malicious traffic • Can’t tell without keeping state for each connection slide 14

Example: Variable Port Use

Inbound SMTP

Outbound SMTP

slide 15

Session Filtering
 Decision is still made separately for each packet, but in the context of a connection
• If new connection, then check against security policy • If existing connection, then look it up in the table and update the table, if necessary
– Only allow incoming traffic to a high-numbered port if there is an established connection to that port

 Hard to filter stateless protocols (UDP) and ICMP  Typical filter: deny everything that’s not allowed
• Must be careful filtering out service traffic such as ICMP slide 16

Example: Connection State Table

slide 17

Application-Level Gateway

 Splices and relays two application-specific connections
• Example: Web browser proxy • Daemon spawns proxy process when communication is detected • Big processing overhead, but can log and audit all activity

 Can support high-level user-to-gateway authentication
• Log into the proxy server with your name and password

 Simpler filtering rules than for arbitrary TCP/IP traffic  Each application requires implementing its own proxy slide 18

Circuit-Level Gateway

 Splices two TCP connections, relays TCP segments  Less control over data than application-level gateway
• Does not examine the contents of TCP segment

 Client’s TCP stack must be aware of the gateway  Often used when internal users are trusted
• Application-level proxy on inbound connections, circuit-level proxy on outbound connections (lower overhead) slide 19

Comparison
Performance Modify client application Defends against fragm. attacks

 Packet filter  Session filter  Circuit-level gateway  Application-level gateway

Best

No No Yes

No Maybe Yes Yes

Worst

Yes

slide 20

Bastion Host
 Bastion host is a hardened system implementing application-level gateway behind packet filter
• All non-essential services are turned off • Application-specific proxies for supported services
– Each proxy supports only a subset of application’s commands, is logged and audited, disk access restricted, runs as a nonprivileged user in a separate directory (independent of others)

• Support for user authentication

 All traffic flows through bastion host
• Packet router allows external packets to enter only if their destination is bastion host, and internal packets to leave only if their origin is bastion host

slide 21

Single-Homed Bastion Host

If packet filter is compromised, traffic can flow to interrnal network

slide 22

Dual-Homed Bastion Host

No physical connection between internal and external networks

slide 23

General Problems with Firewalls
 Interfere with networked applications  Don’t solve the real problems
• Buggy software (think buffer overflow exploits) • Bad protocol design

 Generally don’t prevent denial of service  Don’t prevent insider attacks  Increasing complexity and potential for misconfiguration

slide 24

Protecting Addresses and Routes
 Hide IP addresses of hosts on internal network
• Only services that are intended to be accessed from outside need to reveal their IP addresses • Keep other addresses secret to make spoofing harder

 Use NAT (network address translation) to map addresses in packet headers to internal addresses

slide 25

Reading Assignment
 “Firewall Gateways” (chapter 3 of “Firewalls and Internet Security” by Cheswick and Bellovin)
• Linked from the course website

slide 26

Fragmentation
 process of breaking down an IP datagram into smaller packets to be transmitted over different types of network media  reassembling them at the other end  is necessary in order for traffic, which is being sent across different types of network media to reach successfully  reason for this is that different types of network media and protocols have different rules involving the maximum size allowed for datagrams (MTU) slide 27

Fragmentation rules
 Rules for packet to be successfully reassembled at the destination each fragment  Must share a common fragment identification number (fragment Id.)  Each fragment must say what its place or offset is in the original unfragmented packet.  Each fragment must tell the length of the data carried in the fragment.  Finally the fragment must know whether more fragments follow this one. slide 28

Abnormal Fragmentation

For example, ACK bit is set in both fragments, but when reassembled, SYN bit is set (can stage SYN flooding through firewall)

slide 29

Fragmentation Attack
Telnet Server

(borrowed from Wenke Lee)

Telnet Client

, Send 2 fragments with the ACK bit set; fragment offsets are chosen so that the full datagram re-assembled by server forms a packet with the SYN bit set (the fragment offset of the second packet overlaps into the space of the first packet)  All following packets will have the ACK bit set

Allow only if ACK bit set
23 1234

(with FRAG1 (wit FRAG2
SYN packet (no ACK)

ACK)

" "

h ACK)



ACK

slide 30

More Fragmentation Attacks
 Split ICMP message into two fragments, the assembled message is too large
• Buffer overflow, OS crash

 Fragment a URL or FTP “put” command
• Firewall needs to understand application-specific commands to catch this

 chargen attacks
• “Character generation” debugging tool: connect to a certain port and receive a stream of data • If attacker fools it into connecting to itself, CPU locks slide 31

Similar Documents

Free Essay

Networks

...Case: You are appointed as a technical expert to implement a network system for a small size maritime supplyrepresentative company with four users. The company provides supply services to Maritime shipping companies through a worldwide network of suppliers. Its owner is a maritime business expert who doesnot know much about the use of computer systems to support her business. Therefore, she has decidedto employ you as a consultant on a short term basis to set-up appropriate systems in a network. She hasheard about various technologies and the efficiency achieved by computer systems and would welcomeadvice on the acquisition of hardware, software and network items to augment her existing systems inorder to meet the company’s growing needs. The company has a budget of £100,000 for this project. The company currently consists of the following departments (all located in the same open space office): The sales Manager who is responsible for dealing with Maritime companies. She is assisted by asales assistant, equipped with a laptop but with no ability to access the web. This department iscurrently the only one with a connection to the Internet and with access to the company’s commonemail.  The General Manager who is responsible for the general operation of the company. She tradeswith suppliers all over the world in order to ensure the best prices of goods for the company’sMaritime shipping clients. For client communication, she uses plain telephone services and a faxmachine....

Words: 545 - Pages: 3

Premium Essay

Network Infrastructure

... * How much growth is this network going to have to support? When planning for this, you want to make sure that the company is going to have room to grow, which may vary depending on the company. For example, Target is probably going to be a faster growing network than a local mom/pop shop. * Availability * How long your network is available to users. Basically: is your network and up and running all day, every day? * Network Performance * This includes categories that measure the throughput of data and how efficient your network actually is. (Optimum Utilization) * Security * Security design is one of the most important aspects of a network. Without proper security your network is vulnerable to online cyber attacks that can cripple and steal from your databases. * Manageability * This technical goal is going to vary based on company needs. Some customers are going to have more precise goals. The book talks about a company planning to record the number of bytes sent and received to each router. Other clients may have less specific goals than this, it just tends to vary based on company objectives. * Usability * Close to manageability, but different. Usability refers to people who are accessing and using the network you have setup. Your network needs to be easy to use for them (different from management. Easier To Use =/= Easier To Manage) * Adaptability * Design the network so that in can accept new technologies...

Words: 381 - Pages: 2

Premium Essay

Network Design

...Microsoft account Joseph Jackson  Westwood College Designing a Network Microsoft account Joseph Jackson  Westwood College Designing a Network Determining the networking requirements the designing of a network can be a difficult situation. Whether its data transfer rules that determine the number of channels needed and the priorities to be used. An alternate real issue is the most extreme size of data that can be sent and received leads to the need for segmentation at the sending end and reassembly at the receiving end. Networking design must reflect the objectives, attributes, and approaches of the associations in which they work. A decently planned network can help adjust these targets. At the point when legitimately executed, the network base can improve application accessibility and permit the savvy utilization of existing network assets. The primary step is to comprehend your networking necessities. (Cisco Systems, Inc.) There are two essential objectives when setting up a networking design and having the capacity to execute the design into a live environment. The principal objective is to have application accessibility. The system conveys application information between machines. On the off chance that the applications are not accessible to system clients, the system is not doing its occupying. Which can make trouble managing getting to applications over the system. The second of the essential objectives is the Cost of possession. The Information system (IS) plans...

Words: 874 - Pages: 4

Premium Essay

Network

...Assignment 2: Network Topology Design You are the network manager of a company that has grown from 10 employees to 100 employees in 12 months. Year 2 projected growth is estimated to be 100 additional employees located at a remote location. The aggressive growth has brought about some unique challenges and opportunities. The company has one remote warehouse and no off-site disaster recovery services or servers. The network design remains a non-redundant, flat topology. Your assignment must consider the three-layer hierarchical model. You are free to make supported assumptions of the applications and services that this organization uses. Write a one (1) page paper in which you: 1. Depict a network topology graphical model of the initial environment of 10 employees using Visio or its open source alternative software. Note: The graphically depicted solution is not included in the required page length. 2. Depict a network topology graphical model of the current 100 employees using Visio or its open source alternative software. Note: The graphically depicted solution is not included in the required page length. 3. Depict a network topology graphical model for future growth to 200 employees using Visio or its open source alternative software. Note: The graphically depicted solution is not included in the required page length. 4. Create a two-paragraph executive summary. Your assignment must follow these formatting requirements: Be typed, double spaced, using Times New...

Words: 378 - Pages: 2

Premium Essay

Network

...IT140-1302A-05: Introduction to Operating Systems and Client/Server Environments Group Assignment Carroll Backus, Sonia Crumbley, Willie Coffie, Jason Duggan, Christopher West 13 May 2013 Instructor: Dr. Betty Tipton Colorado Technical University Table of Contents Technology Analysis and Assessment Plan 3 Technology Analysis and Assessment Improvement Plan 6 Operating System Platform and Cost Containment 6 Architecture Assessment and Governance 9 Enterprise Authentication 11 Directory Services and Domain Consolidation 13 System Administration 15 Operating Systems 17 Email System 19 Maintenance 21 Network Security 23 Summary 25 References 26 Technology Analysis and Assessment Plan Listed below is a simple diagram of the hardware layout in Acme Gym Inc., a small local fitness company that serves the community from a single location. Following the diagram is a detailed description of the current technology available on-site and an assessment of its weaknesses. There are currently four workstation computers located across several office locations. All four workstations currently contain essentially the same hardware and software consisting of: * Microsoft Windows XP operating system * 2 GHz CPU * 2 GB RAM * 120 GB Hard drive * DVD burner drive * Built-in USB and Ethernet ports The server on-site is currently running Microsoft Windows Server 2000 operating system. It contains the following hardware: * 2 each removable 250...

Words: 5202 - Pages: 21

Premium Essay

Network

...Networks, Telecommunications, and Wireless Computing | | | Telecommunication systems enable the transmission of data over public or private networks. A network is a communications, data exchange, and resource-sharing system created by linking two or more computers and establishing standards, or protocols, so that they can work together. Telecommunication systems and networks are traditionally complicated and historically ineffi cient. However, businesses can benefi t from today’s modern network infrastructures that provide reliable global reach to employees and customers. Businesses around the world are moving to network infrastructure solutions that allow greater choice in how they go to market—solutions with global reach. These alternatives include wireless, voice-over internet protocol (VoIP), and radio-frequency identification (RFID). | | | | | Knowledge Areas | Business Dilemma | | | Business Dilemma Personal sensing devices are becoming more commonplace in everyday life. Unfortunately, radio transmissions from these devices can create unexpected privacy concerns if not carefully designed. We demonstrate these issues with a widely-available commercial product, the Nike+iPod Sport Kit, which contains a sensor that users put in one of their shoes and a receiver that users attach to their iPod Nanos. Students and researchers from the University of Washington found out that the transmitter in a sneaker can be read up to 60 feet away. Through the use of a prototype...

Words: 2881 - Pages: 12

Premium Essay

Network

...Home » Resources » Networking Tutorials » Network Switching Tutorial Network Switching Tutorial Network Switching Switches can be a valuable asset to networking. Overall, they can increase the capacity and speed of your network. However, switching should not be seen as a cure-all for network issues. Before incorporating network switching, you must first ask yourself two important questions: First, how can you tell if your network will benefit from switching? Second, how do you add switches to your network design to provide the most benefit? This tutorial is written to answer these questions. Along the way, we’ll describe how switches work, and how they can both harm and benefit your networking strategy. We’ll also discuss different network types, so you can profile your network and gauge the potential benefit of network switching for your environment. What is a Switch? Switches occupy the same place in the network as hubs. Unlike hubs, switches examine each packet and process it accordingly rather than simply repeating the signal to all ports. Switches map the Ethernet addresses of the nodes residing on each network segment and then allow only the necessary traffic to pass through the switch. When a packet is received by the switch, the switch examines the destination and source hardware addresses and compares them to a table of network segments and addresses. If the segments are the same, the packet is dropped or “filtered”; if the segments are different...

Words: 3115 - Pages: 13

Premium Essay

Networks

...Chapter 1 Analyzing Business Goals and Constraints This chapter serves as an introduction to the rest of the book by describing top-down network design. The first section explains how to use a systematic, top-down process when designing computer networks for your customers. Depending on your job, your customers might consist of other departments within your company, those to whom you are trying to sell products, or clients of your consulting business. After describing the methodology, this chapter focuses on the first step in top-down network design: analyzing your customer’s business goals. Business goals include the capability to run network applications to meet corporate business objectives, and the need to work within business constraints, such as budgets, limited networking personnel, and tight timeframes. This chapter also covers an important business constraint that some people call the eighth layer of the Open System Interconnection (OSI) reference model: workplace politics. To ensure the success of your network design project, you should gain an understanding of any corporate politics and policies at your customer’s site that could affect your project. The chapter concludes with a checklist to help you determine if you have addressed the business issues in a network design project. Using a Top-Down Network Design Methodology According to Albert Einstein: 000200010270745975 “The world we’ve made as a result of the level of thinking we have done...

Words: 8812 - Pages: 36

Premium Essay

Network

...Computer network From Wikipedia, the free encyclopedia "Computer networks" redirects here. For the periodical, see Computer Networks (journal). "Datacom" redirects here. For other uses, see Datacom (disambiguation). Network science Theory · History Graph · Complex network · Contagion Small-world · Scale-free · Community structure · Percolation · Evolution · Controllability · Topology · Graph drawing · Social capital · Link analysis · Optimization Reciprocity · Closure · Homophily Transitivity · Preferential attachment Balance · Network effect · Influence Types of Networks Information · Telecommunication Social · Biological · Neural · Semantic Random · Dependency · Flow Graphs Vertex · Edge · Component Directed · Multigraph · Bipartite Weighted · Hypergraph · Random Cycle · Loop · Path Neighborhood · Clique · Complete · Cut Data structure · Adjacency list & matrix Incidence list & matrix Metrics and Algorithms Centrality · Degree · Betweenness Closeness · PageRank · Motif Clustering · Degree distribution · Assortativity · Distance · Modularity Models Random · Erdős–Rényi Barabási–Albert · Watts–Strogatz ERGM · Epidemic · Hierarchical Browse Topics · Software · Network scientists Graph theory · Network theory v t e A computer network, often simply referred to as a network, is a collection of hardware components and computers interconnected by communication channels that allow sharing of resources...

Words: 7339 - Pages: 30

Premium Essay

Network

...2.1.1 Network History The history of computer networking is complex. It has involved many people from all over the world over the past 35 years. Presented here is a simplified view of how the Internet evolved. The processes of invention and commercialization are far more complicated, but it is helpful to look at the fundamental development. In the 1940s computers were large electromechanical devices that were prone to failure. In 1947 the invention of a semiconductor transistor opened up many possibilities for making smaller, more reliable computers. In the 1950s mainframe computers, which were run by punched card programs, began to be used by large institutions. In the late 1950s the integrated circuit that combined several, then many, and now millions, of transistors on one small piece of semiconductor was invented. Through the 1960s mainframes with terminals were commonplace, and integrated circuits were widely used. In the late 1960s and 1970s, smaller computers, called minicomputers came into existence. However, these minicomputers were still very large by modern standards. In 1977 the Apple Computer Company introduced the microcomputer, also known as the personal computer. In 1981 IBM introduced its first personal computer. The user-friendly Mac, the open-architecture IBM PC, and the further micro-miniaturization of integrated circuits led to widespread use of personal computers in homes and businesses. In the mid-1980s users with stand-alone computers...

Words: 2656 - Pages: 11

Premium Essay

Network

...Network Design Following the acquisition of new premises comprising a two-story office in Adeplhi, Maryland this provides UMUC with the ability to revise and improve their network topology accordingly and ensure that not only is connectivity provided in a consistent fashion but also to provide the required security for information accordingly. One of the fundamental requirements is to ensure that data is segregated in terms of staff and students so this will require the creation of dedicated subnets accordingly to follow through and implement the solution, while there is also a requirement to provide wireless connectivity for students in the lobby area. Given that there is a specific opportunity to develop a comprehensive infrastructure it is important that the fundamental basis in terms of cabling is of a sufficiently high quality to support current and future operational requirements. Due to the size of the building there would be limitations if using Cat 5 based Ethernet cables for example and so therefore there should be a requirement to utilize Cat 6 based Ethernet as this will support a maximum cable length in excess of 300 ft without there being any connectivity or performance issues (Mitchell, 2014). Each of the two floors will have a designated server room that is designed to provide a central point of connectivity for all locations on that floor, and each of the rooms on the first and second floor will require a certain number of data ports based on their expected utilization...

Words: 1451 - Pages: 6

Premium Essay

Network+

...XelPharm owns a large distribution warehouse approximately four miles away from the headquarters. Until now, its networks have relied entirely on wired connections. The company’s CIO (chief information officer) decided long ago that he would wait until wireless technology “settled down” before investing in it. 1. What can you tell him about the wireless standards that might convince him that now is the time to adopt wireless technology? Ans: Since 1997 after IEEE released its first wireless network standard, wireless network has evolved into several distinct standards. Most attracting thing about Wireless connection is the absence of wire. Addition to that, the newer technology of wireless network can provide maximum downlink throughput to120 Mbps and maximum uplink throughput to 60 Mbps (WiMax 2). This technology is being considered to be an alternative to DSL and T-carrier services for homes and businesses. It achieves much faster throughput than T-carriers at a lower cost for end users. This type of technology can transmit and receive signals up to 50 km, or approximately 30 miles, when antennas are fixed or up to 15 km, or approximately 10 miles, when they are mobile with QoS (quality of service) provisions. 2. Also, what can you tell him to convince him that wireless networking could improve the company’s productivity? Ans: Wireless networks are a powerful tool for boosting productivity and encouraging information sharing. With...

Words: 747 - Pages: 3

Premium Essay

Networks

...would be sharing only data files and accessing servers on the network. It is more flexible and less expensive if they use wireless a network than a wire network. However, for building number 3, I would recommend to use bound transmission media because people on this building would be sharing files that contain videos. As we know sharing videos require a lot of data bandwidth; therefore, bounded transmission media is the best transmission media that we can use for the network on this building. For building number 4, I would recommend wire transmission media too. As they mention on the book, in building four, 50 shipping and packing will be riding up and down every day. This building needs a lot of bandwidth because it will be transmitting a lot of data. What type of media would you recommend using to connect the buildings and why? I would recommend using a bounded connection to connect these buildings. Even though two of these building would be using wireless networks, some of the data that will be shared by these building require a lot of bandwidth. It’s better if we use a wire network to connect these buildings. Also, the distance between building four and the other buildings might cause problems if we used a wireless network. What kind of media should the company request from its ISP for connecting the corporate WAN to the Internet? Public IP Block, this block could be in the form of /29, /28, or /27 network; depending on which plan or subnet you choose to have. Moreover...

Words: 685 - Pages: 3

Free Essay

Networks

...The Wealth of Networks The Wealth of Networks How Social Production Transforms Markets and Freedom Yochai Benkler Yale University Press New Haven and London Copyright _ 2006 by Yochai Benkler. All rights reserved. Subject to the exception immediately following, this book may not be reproduced, in whole or in part, including illustrations, in any form (beyond that copying permitted by Sections 107 and 108 of the U.S. Copyright Law and except by reviewers for the public press), without written permission from the publishers. The author has made an online version of the book available under a Creative Commons Noncommercial Sharealike license; it can be accessed through the author’s website at http://www.benkler.org. Printed in the United States of America. Library of Congress Cataloging-in-Publication Data Benkler, Yochai. The wealth of networks : how social production transforms markets and freedom / Yochai Benkler. p. cm. Includes bibliographical references and index. ISBN-13: 978-0-300-11056-2 (alk. paper) ISBN-10: 0-300-11056-1 (alk. paper) 1. Information society. 2. Information networks. 3. Computer networks—Social aspects. 4. Computer networks—Economic aspects. I. Title. HM851.B457 2006 303.48'33—dc22 2005028316 A catalogue record for this book is available from the British Library. The paper in this book meets the guidelines for permanence and durability of the Committee on Production Guidelines for Book Longevity of the Council on Library Resources. 10 9 8 7 6 5 4 3 2 1...

Words: 214717 - Pages: 859

Free Essay

Network

...Analysis and Review Questions 1. Compare the currents obtained from calculation and simulation. Comment on the findings of the values. | Calculation | Simulation using Multisim | Simulation using Pspice | Current when RL = 50 ohms | 2.994 < 69.91 A | 2.994 A | 4.273 A | Current when RL = 200 ohms | 2.306 < 47.92 A | 2.306 A | 3.277 A | Table above show the results of current obtained from the experiment and simulation. There is a different result between simulation using pspice and simulation using multisim and calculation.From calculation, the value of current used in the calculation and multisim is rms current while value of current used in pspice simulation is peak current.The value of rms current if converted to peak current have to multiply by 2 . Current when RL = 50Ω from calculation if multiply by 2 will get 4.234 A which is almost the same with Pspice simulation. Same goes when RL = 200, from calculation 2.306 x 2 = 3.261 A, which give the value almost the same with current from Pspice simulation. In calculation method, the value of current through RL is obtained using the Norton’s theorem. Each RL is calculated using the equivalent Norton’s circuit. Norton theorem is used to simplify the circuit to make the calculation easier. Below show the equivalent circuit using Norton theorem to obtain the current through RL. Norton equivalent circuit Based on the table above, the results through simulation and calculation are similar which proves...

Words: 927 - Pages: 4