1.1 Network Components

Before configuring protocols, you must understand the hardware. This module covers the explicit roles of the physical and logical appliances that make up an enterprise network.

Core Forwarding Devices

Routers

Layer 3 (Network)

Connects distinct networks together (e.g., your LAN to the ISP). Routers make forwarding decisions based on destination IP addresses and routing tables. They break broadcast domains; a broadcast packet sent on one port will not be forwarded out another.

MSP Perspective

When a user says 'the internet is down', the router (or firewall acting as a router) is your gateway to the outside world.

Layer 2 Switches

Layer 2 (Data Link)

Connects end devices within the SAME network. Forwards frames based on destination MAC addresses using a MAC address table. They break collision domains (every port is its own collision domain) but do NOT break broadcast domains.

MSP Perspective

If PC-A cannot ping PC-B on the same subnet, the issue is at Layer 2 (switchport, VLAN, or cable), not the router.

Layer 3 Switches

Layer 2 & Layer 3

A highly advanced switch with a routing engine built-in. It can do everything a Layer 2 switch can do, but it can also route traffic between VLANs internally without needing to send the traffic to an external router (Router-on-a-Stick).

MSP Perspective

Used in enterprise core and distribution layers for extremely fast, hardware-based inter-VLAN routing.

The Security Edge

Next-Generation Firewalls (NGFW)

Layer 7 Application Awareness

Traditional firewalls only block IP addresses and Ports (Layer 4). NGFWs inspect the actual data payload. They can block 'Facebook Video' while allowing 'Facebook Messenger', even though both use HTTPS on Port 443.

Intrusion Prevention Systems (IPS)

Active Threat Mitigation

Often built into an NGFW. An IPS scans traffic for known malware signatures or anomalous behavior. Unlike an IDS (Intrusion Detection System) which only logs the event, an IPS actively drops the malicious packets in real-time.

Wireless & Centralized Management

Access Points (APs)

Wireless to Wired Bridge

Translates wireless 802.11 radio frequencies into wired 802.3 Ethernet frames. In modern enterprise networks, APs are usually 'Lightweight' (LAPs), meaning they contain no configuration themselves and must pull their settings from a controller.

Wireless LAN Controllers (WLC)

Centralized Wireless Management

The brain of the wireless network. It manages dozens or hundreds of Lightweight APs, handles roaming for client devices, pushes firmware updates, and centralizes wireless security policies (like 802.1X radius authentication).

Cisco DNA Center

SDN Controller

The ultimate modern management appliance. Cisco Digital Network Architecture (DNA) Center acts as a centralized controller for the entire wired and wireless network, pushing configurations via intent-based networking (Automation) rather than manual CLI typing.

Endpoints & Servers

Endpoints are the devices users interact with (Laptops, PCs, IP Phones, Printers). They originate or terminate data flows.

Servers provide software services to endpoints. In the context of CCNA, you must understand servers providing core network services like DHCP (assigning IP addresses) and DNS (resolving hostnames like google.com to IP addresses). If an endpoint cannot reach the DHCP server, it will assign itself an APIPA address (169.254.x.x) and network connectivity will fail.