Chapter 5 Topics

• 5.1 Network Interface Card
• 5.2 Hub
• 5.3 Bridge
• 5.4 Layer 2 Switch
• 5.5 Layer 3 Switch
• 5.6 Router
• 5.7 Firewall
• 5.8 Intrusion Detection System (IDS)
• 5.9 Intrusion Prevention System (IPS)
• 5.10 Proxy Server
• 5.11 Reverse Proxy
• 5.12 Load Balancer
• 5.13 Wireless Access Point
• 5.14 Wireless LAN Controller
• 5.15 VPN Concentrator
• 5.16 Modem
• 5.17 Media Converter
• 5.18 PoE Injector
• 5.19 CSU/DSU Concepts
• 5.20 Smart Jack Concepts
• 5.21 Network TAP
• 5.22 SDN Controller

5.1 Network Interface Card

A network interface card (NIC) is the hardware that gives a computer or other device a network connection. It may be built into the motherboard or added as a separate adapter. A wired NIC normally provides an Ethernet port, while a wireless adapter provides radio connectivity.

Very beginner example

A desktop computer has an Ethernet NIC. You plug a network cable from the computer into a switch. The NIC sends and receives Ethernet frames for that computer.

Computer → NIC → Ethernet cable → Switch

5.2 Hub

A hub is an older Layer 1 networking device that repeats incoming electrical signals out to its other ports. It does not learn device addresses and does not intelligently choose a destination port.

Very beginner example

PC A sends data into a hub. The hub repeats the signal toward PC B, PC C, and PC D. Only the intended device should process the relevant data, but every connected port receives the repeated signal.

PC A → Hub → PC B
           ├→ PC C
           └→ PC D

5.3 Bridge

A bridge connects network segments and makes forwarding decisions using Layer 2 addresses. Traditional bridges helped reduce unnecessary traffic between segments and are an important historical step toward modern switching.

Very beginner example

A bridge learns that Computer A is on one side and Computer B is on the other. When traffic is only needed on one side, the bridge can avoid forwarding it to the other side.

LAN Segment A ↔ Bridge ↔ LAN Segment B

5.4 Layer 2 Switch

A Layer 2 switch connects devices inside a local network and forwards Ethernet frames using MAC-address information. It learns which MAC addresses are reachable through which physical ports.

Very beginner example

PC A is on port 1 and PC B is on port 8. After learning their locations, the switch can forward a frame for PC B only toward port 8 instead of sending it everywhere.

PC A ─port 1─┐
              Switch ─port 8─ PC B

5.5 Layer 3 Switch

A Layer 3 switch combines high-speed switching with routing functions. It can forward traffic inside a Layer 2 network and can also route IP packets between different IP networks or virtual LANs when configured to do so.

Very beginner example

A company has an Accounting network and a Sales network. A Layer 3 switch can provide routing between the two networks while also connecting many local devices.

Accounting LAN ↔ Layer 3 Switch ↔ Sales LAN

5.6 Router

A router connects different IP networks and chooses where IP packets should go next. Routers use routing information to send traffic toward another local network, a remote office, an internet service provider, or another destination.

Very beginner example

Your home devices use a local private network. The router connects that network to an upstream provider network and forwards packets between them.

Home LAN → Router → Provider network → Internet

5.7 Firewall

A firewall is a security control that permits or blocks network traffic according to configured rules and security policy. Firewalls can exist as dedicated appliances, software, cloud services, or functions built into other systems.

Very beginner example

A firewall rule can allow normal web traffic from employees to the internet while blocking an unwanted inbound connection from an untrusted source.

Trusted network → Firewall → Untrusted network

5.8 Intrusion Detection System (IDS)

An intrusion detection system monitors network or system activity for suspicious patterns or events. Its main role is detection and alerting. It can help administrators investigate possible attacks or policy violations.

Very beginner example

An IDS sees traffic that matches a suspicious pattern. It records the event and alerts the security team so they can investigate.

Traffic → IDS monitoring → Alert

5.9 Intrusion Prevention System (IPS)

An intrusion prevention system examines traffic and can take action to stop or block traffic that matches configured detection or prevention rules. It is commonly placed where it can actively affect the traffic path.

Very beginner example

A suspicious connection matches a prevention rule. The IPS blocks the connection instead of only reporting it.

Traffic → IPS → Allow or Block

5.10 Proxy Server

A forward proxy, often simply called a proxy server, receives requests from clients and makes requests to other servers on their behalf. It can be used for access control, filtering, logging, privacy, caching, or policy enforcement.

Very beginner example

A user's browser sends a web request to the proxy. The proxy then requests the website and returns the response to the user.

Client → Proxy → Website

5.11 Reverse Proxy

A reverse proxy sits in front of one or more servers and receives client requests on their behalf. Users communicate with the reverse proxy, which then selects or contacts an internal server.

Very beginner example

Visitors connect to one public website address. The reverse proxy receives the requests and forwards each request to the appropriate application server.

Internet users → Reverse Proxy → Web servers

5.12 Load Balancer

A load balancer distributes incoming work across multiple available servers or services. Its goal is to prevent one server from receiving all the work and to improve availability and scalability.

Very beginner example

Three web servers run the same application. The load balancer sends one request to Server A, another to Server B, and another to Server C according to its configured method.

Clients → Load Balancer → Server A
                       ├→ Server B
                       └→ Server C

5.13 Wireless Access Point

A wireless access point (AP) provides wireless devices with access to a network. It connects wireless clients through radio communication and usually connects back to the wired network through Ethernet.

Very beginner example

A laptop and phone connect by Wi-Fi to an access point. The access point connects by cable to the network switch.

Laptop )))
Phone  ))) Access Point → Switch

5.14 Wireless LAN Controller

A wireless LAN controller is a centralized system used to manage multiple wireless access points. Depending on the design, it can help administrators apply configurations, coordinate access points, monitor status, and enforce wireless policies.

Very beginner example

A school has 40 access points. Instead of configuring every access point separately, administrators use a controller to manage common settings from one place.

Controller → AP 1
          ├→ AP 2
          └→ AP 3 ...

5.15 VPN Concentrator

A VPN concentrator is a system designed to terminate and manage many virtual private network connections. It can authenticate users or sites, establish encrypted tunnels, and handle many simultaneous VPN sessions.

Very beginner example

Remote employees create encrypted VPN connections to the organization's VPN concentrator. After successful authentication, approved traffic can reach internal resources.

Remote users → Encrypted VPN tunnels → VPN Concentrator → Internal network

5.16 Modem

A modem converts or adapts signals so data can travel across a provider's access technology. The exact modem function depends on the service type, such as cable, DSL, cellular, or other broadband technologies.

Very beginner example

A cable internet service uses a cable modem between the provider's coaxial line and the customer's router.

Provider line → Modem → Router → Home network

5.17 Media Converter

A media converter changes one physical network media type into another while allowing compatible network communication to continue. A common use is conversion between copper Ethernet and fiber Ethernet.

Very beginner example

A switch has a copper connection in one room, but the long link to another building uses fiber. A media converter can provide the change between copper and fiber where appropriate.

Copper Ethernet → Media Converter → Fiber link

5.18 PoE Injector

A Power over Ethernet (PoE) injector adds electrical power to a compatible Ethernet connection so a powered device can receive data and power over the cabling. This is useful when the existing switch does not provide PoE on that port.

Very beginner example

A non-PoE switch connects to a PoE injector. The injector adds power, and the outgoing cable connects to a compatible access point.

Switch → PoE Injector → Powered Access Point

5.19 CSU/DSU Concepts

A channel service unit/data service unit (CSU/DSU) is a traditional WAN interface concept associated with certain digital leased-line services. It provides functions between customer networking equipment and a carrier circuit. Modern services may use different equipment, but the concept is still useful historically.

Very beginner example

A router connects to a CSU/DSU, and the CSU/DSU connects to a digital carrier circuit. The device handles the electrical and line-interface responsibilities for that service.

Router → CSU/DSU → Carrier circuit

5.20 Smart Jack Concepts

A smart jack is a carrier-side network interface or demarcation device concept used with some telecommunications services. It can provide line termination, diagnostics, loopback testing, or monitoring near the boundary between the service provider and customer equipment. The exact features depend on the service.

Very beginner example

A provider installs a managed interface at the customer's demarcation point. If a circuit problem occurs, diagnostic functions can help determine whether the problem is on the provider side or customer side.

Provider network → Smart jack / demarcation → Customer equipment

5.21 Network TAP

A network test access point, commonly called a network TAP, provides a copy of network traffic to monitoring or analysis equipment. A TAP is used for visibility and troubleshooting without making the monitoring tool the normal destination of the traffic.

Very beginner example

Traffic continues between Device A and Device B while the TAP provides a copy to a monitoring system.

Device A ↔ Network TAP ↔ Device B
                 └→ Monitoring system

5.22 SDN Controller

A software-defined networking (SDN) controller is a software-based control component that can centrally manage or program network behavior through defined interfaces. The exact design varies, but the general idea is to separate centralized control decisions from distributed packet forwarding.

Very beginner example

An administrator defines a network policy through a management application. The controller translates that intent into instructions for compatible network devices.

Application / Policy
        ↓
SDN Controller
   ↓    ↓    ↓
Network devices

Chapter 5 Important Comparison Table

Chapter 5 Practice Questions and Answers