Skip to content

Beginner · How networks work · topic 2 of 57 · 30 min

Network devices

Explanation

Each network device has one main job. A NIC connects a computer, a switch joins devices inside a LAN, a router joins different networks, an access point adds Wi-Fi, and a firewall decides which traffic is allowed. Switches split collision domains and routers split broadcast domains. The box your ISP gives you at home is several of these devices in one.

Why so many devices?

A network is built from devices that each do one job well. Knowing exactly what each one does is the base of all troubleshooting: if two PCs on the same switch can talk but cannot reach the internet, you look at the router, not the switch.

Endpoints and the NIC

Endpoints (also called hosts or end devices) are where data starts and ends: laptops, phones, printers, IP cameras, and servers. A server is just a computer whose job is to offer a service, such as a website, email or files. Every endpoint has a NIC (Network Interface Card), the hardware that connects it to the network. A NIC can be a port on the motherboard or a Wi-Fi chip. Each NIC has a MAC address burned in by the maker, which you will meet in the next module.

Hub: the old way

A hub is a simple box with many ports. Whatever arrives on one port, it copies out of every other port, without looking at it. It works at Layer 1, the physical layer. Because every device shares the same wire, only one device can send at a time. If two send together, their signals crash into each other, which is called a collision.

Hubs are obsolete because they waste bandwidth (everyone receives everything), they are insecure (any PC can see others' traffic), and they force half duplex, meaning a device can send or receive but not both at once. You will still meet them in exam questions and in Packet Tracer.

Switch: the heart of the LAN

A switch also has many ports, but it is smart. It learns which device (MAC address) lives on which port and sends each frame only out of the port where the destination is. It works at Layer 2, the data link layer. Every switch port can run full duplex, sending and receiving at the same time, so collisions disappear. In an office, every desk socket ends at a switch port.

Router: joining networks

A router connects different networks and decides the best path between them using IP addresses. It works at Layer 3, the network layer. Your office LAN is one network and the internet is another, so a router sits between them. The router address that PCs send outside traffic to is called the default gateway.

Wireless devices

An access point (AP) connects Wi-Fi devices to the wired network. In a small office each AP is configured on its own (an autonomous AP). In a campus with 200 APs, a wireless LAN controller (WLC) manages them centrally: it pushes settings, handles roaming between APs and shows which ones are down. Such APs are called lightweight APs because the controller does much of the thinking.

Firewall

A firewall inspects traffic and allows or blocks it based on rules, for example "allow web traffic out, block everything coming in unless it is a reply". Next-generation firewalls (NGFW) can also recognise applications and block known attacks. Firewalls usually sit at the edge between the LAN and the internet, and also between internal zones, such as the hospital billing network and the guest Wi-Fi.

Modem and ONT

Your provider's line does not carry Ethernet directly. A modem converts between the provider's signal (on a telephone or cable line) and Ethernet. For FTTH (Fibre To The Home), such as JioFiber or Airtel Xstream Fiber, the device is an ONT (Optical Network Terminal), which converts light on the fibre into Ethernet.

Collision domains and broadcast domains

A collision domain is a group of devices whose signals can collide with each other. All ports of a hub are one collision domain. Each port of a switch is its own collision domain. A broadcast domain is a group of devices that all receive a broadcast, a message sent to everyone. All ports of a switch (in one VLAN) are one broadcast domain. A router does not forward broadcasts, so each router interface is its own broadcast domain.

DeviceLayerCollision domainsBroadcast domains
Hub with 8 ports11 (all ports share it)1
Switch with 24 ports224 (one per port)1 (per VLAN)
Router with 3 interfaces33 (one per interface)3 (one per interface)

The home router: several devices in one box

The small box at home called a "router" or "Wi-Fi router" is really a router, a small switch (usually 4 LAN ports), an access point, a basic firewall, a DHCP server that gives out IP addresses, and sometimes the ONT or modem too. In a business these are separate devices, because each needs to be faster, more reliable and separately managed.

Careful: Common mistakes: calling every box a "router", and thinking a switch separates broadcast domains. A plain switch forwards broadcasts out of every port in the same VLAN. Only a router (or a Layer 3 device) stops them. Also, adding a hub to "get more ports" puts every device on it back into one collision domain; use a small switch instead.
Tip: Packet Tracer, Cisco's free network simulator, lets you drag hubs, switches, routers and APs onto a canvas and watch frames move. It is the easiest way to see these differences.

Need help?

Stuck on a word or an idea? Search this course, or every course, and jump straight to the explanation or a worked question.

Try:

Watch the lesson

Network devices · 1/7

Network devices

Each network device has one main job. Let us meet them one by one.

Prefer a video by a teacher? Find free videos on “network devices hub switch router access point firewall explained CCNA” on YouTube ↗

In real life: A 50-bed hospital in Nagpur

The hospital has an ONT from its ISP, a firewall behind it, and a router that joins the hospital LAN to the internet. On each floor, a 48-port switch connects the nurses' PCs, printers and IP phones. Twelve lightweight access points are managed by one wireless LAN controller, so a doctor can walk from ward to ward with a tablet without losing the connection. The firewall keeps the guest Wi-Fi away from the patient records server.

Practice (0/3 done)

Task 1 · Question

You need to join the office LAN to the internet. Which device is essential?

Task 2 · Question

A router has 2 interfaces. One connects to a 24-port switch with 10 PCs, the other to a hub with 4 PCs. How many broadcast domains are there?

Task 3 · Practice

Look at the Wi-Fi router or ONT at your home, hostel or office (or its product page online). List which separate network devices are built into that one box, and what each part does.

Quick quiz

Question 1

1.Which device forwards a frame only out of the port where the destination MAC address is?

Question 2

2.A 16-port switch has a PC on every port. How many collision domains are there?

Question 3

3.What does a wireless LAN controller do?

Question 4

4.Which device turns the light on an FTTH fibre into Ethernet at a customer home?

Question 5

5.Why are hubs no longer used?

Read more (free)

Before this, learn

This topic builds on these. If something here feels new, open them first.

Open a question to see the answer and why. The first ones are this topic's own quiz, so try the quiz above before you peek.

Which device forwards a frame only out of the port where the destination MAC address is?

Answer: Switch

A switch learns MAC addresses per port and forwards frames only where needed.

A 16-port switch has a PC on every port. How many collision domains are there?

Answer: 16

Each switch port is its own collision domain.

What does a wireless LAN controller do?

Answer: Centrally manages many lightweight access points

A WLC pushes configuration to APs and handles roaming.

Which device turns the light on an FTTH fibre into Ethernet at a customer home?

Answer: ONT

An Optical Network Terminal (ONT) ends the fibre and gives an Ethernet port.

Why are hubs no longer used?

Answer: They share one collision domain, force half duplex and send all traffic everywhere

A hub repeats everything to every port, so bandwidth is shared and collisions happen.

An IP phone and a PC share one switch port. Which command puts the phone traffic in VLAN 50?Related

Answer: switchport voice vlan 50

switchport voice vlan 50 tells the phone to tag voice frames with VLAN 50; the PC stays in the access VLAN.

From VLANs: what they are and why we use them

In split-MAC architecture, which job stays on the lightweight AP?Related

Answer: Sending beacons and acknowledgements

Real-time tasks like beacons, ACKs and encryption stay on the AP; the WLC handles network-wide management.

From WLAN architectures, CAPWAP and AP modes

What is the Ethernet broadcast MAC address written in Cisco format?Related

Answer: ffff.ffff.ffff

Broadcast is all ones. 255.255.255.255 is the IPv4 broadcast, not a MAC address.

From Ethernet frames and MAC addresses

Which address does a switch use to LEARN where a device is?Related

Answer: The source MAC address

Switches learn from the source MAC address of incoming frames.

From How a switch learns and forwards

Pass the quiz (60% or more) or mark this topic as done when you are ready.

Your progress is saved on this device only.

Next steps

  1. 3 more topics in “How networks work” before its exam: The OSI model, The TCP/IP model and encapsulation, TCP, UDP and port numbers.
  2. Module 1 exam: How networks work · 13 questions · 20 min, without help. 5 topics of this module still to finish first.
  3. Then the next module, Ethernet, MAC addresses and the Cisco CLI. 57 topics left in the course before the final exam.

← Previous: What a network is