3.2.1. Common Networking Hardware Devices

💡 First Principle: Each piece of networking hardware operates at a specific layer of the network model to perform a distinct function, from physical connection to intelligent routing.

Scenario: You are designing a network for a new office. You need a switch to connect all the local computers, a router to route traffic to the internet, and a wireless access point to provide Wi-Fi connectivity. You decide to use a PoE switch to power the ceiling-mounted APs.

These are the physical building blocks of a network.

• Router: A Layer 3 device that connects different networks and makes decisions on where to forward traffic based on IP addresses. Your gateway to the internet.
• Switch: A Layer 2 device that connects devices on the same local network. It forwards traffic to specific devices based on their MAC (Media Access Control) address.
  • Hub, bridge, Layer 3 switch: A hub (Layer 1, obsolete) repeats every signal out of every port; a bridge (Layer 2) joins two LAN segments by MAC address; a Layer 3 switch adds IP routing to switching, so a router and a Layer 3 switch both operate at Layer 3.
  • Link aggregation (LACP, IEEE 802.1AX): Combines several physical switch ports into one logical link for more bandwidth and resilience if one cable fails.
• Access Point (AP): A device that allows wireless devices to connect to a wired network.
• Firewall: A security device that monitors and filters incoming and outgoing network traffic based on a set of security rules.
  • Implicit deny: Firewall rule sets block anything not explicitly allowed (e.g., only ports 80 and 443 permitted).
  • Functions: Filters traffic by IP address, protocol or port number, blocks unauthorized inbound traffic, and logs network activity. A next-generation firewall (NGFW) or UTM appliance adds application-layer (Layer 7) inspection, so it can block specific applications or types of web content.
• Modem (Cable/DSL): Modulates and demodulates signals to connect your network to your Internet Service Provider (ISP) over a cable or phone line.
• Patch Panel: A panel of network ports that connects incoming and outgoing lines in a LAN. Used for organization in wiring closets.
  • Punchdown tool: Seats each wire of a cable run into the panel's (or wall jack's) contacts and cuts off the excess in a single motion. A crimper attaches RJ-45 plugs instead.
• Patch Cable: A short, flexible (stranded-conductor) Ethernet cable that connects a computer to a wall jack, or a patch panel port to a switch port; solid-core cable is for the long, permanent runs behind the walls. A crossover cable (transmit and receive pairs swapped) was once needed to join two like devices such as switch to switch, but modern switch ports auto-detect the cable (Auto-MDI-X), so a standard patch cable is used. A console (rollover) cable is only for managing a device's command line.
• Repeater: Regenerates and retransmits a signal to extend a cable run beyond its distance limit.
• Media Converter: Converts between media types, for example copper Ethernet to fiber optic, so a link can span a distance copper cannot (twisted pair is limited to 100 m).
• PoE (Power over Ethernet): A technology that allows network cables to carry electrical power.
  • Sources: A PoE switch has power built into its ports; a PoE injector is a separate device added inline between a non-PoE switch and the powered device.
  • Use Case: Powering devices like VoIP phones, security cameras, and wireless access points where a power outlet is not available. Can be provided by a PoE switch or a PoE injector.
• Managed Switch Features:
  • STP (Spanning Tree Protocol, IEEE 802.1D): Blocks redundant paths so a cabling loop cannot create a broadcast storm that slows the whole network.
  • Port security: Limits which MAC addresses may use a switch port; a device whose MAC is not permitted is blocked even when its IP settings and cabling are correct.

Visual: 19-inch rackmount Ethernet switches and patch panels in a server rack — switches forward traffic to specific devices by MAC address, while patch panels organize incoming and outgoing cable connections in a wiring closet.

⚠️ Common Pitfall: Confusing a hub with a switch. A hub (an obsolete device) simply broadcasts all traffic to all ports, creating collisions and inefficiencies. A switch is intelligent and sends traffic only to the intended destination port.

Key Trade-Offs:

• All-in-One SOHO Router vs. Separate Components: A consumer-grade SOHO router combines the functions of a router, switch, and access point. In a larger business, these functions are typically handled by separate, more powerful, dedicated devices.

Reflection Question: Why would you use a PoE switch to connect wireless access points that are being installed on the ceiling of an office?