A network switch (also called switching hub, bridging hub, Ethernet switch, and, by the IEEE, MAC bridgeIEEE 802.1D) is networking hardware that connects devices on a computer network by using packet switching to receive and forward data to the destination device.
A network switch is a multiport network bridge that uses to forward data at the data link layer (layer 2) of the OSI model. Some switches can also forward data at the network layer (layer 3) by additionally incorporating routing functionality. Such switches are commonly known as layer-3 switches or multilayer switches.
Switches for Ethernet are the most common form of network switch. The first MAC BridgeW. Hawe, A. Kirby, A. Lauck, "An Architecture for Transparently Interconnecting IEEE 802 Local Area Networks", technical paper submitted to the IEEE 802 committee, document IEEE-802.85*1.96, San Diego CA, October 1984.
Unlike , which broadcast the same data out of each port and let the devices pick out the data addressed to them, a network switch learns the Ethernet addresses of connected devices and then only forwards data to the port connected to the device to which it is addressed.
A switch is more intelligent than an Ethernet hub, which simply retransmits packets out of every port of the hub except the port on which the packet was received, unable to distinguish different recipients, and achieving an overall lower network efficiency.
An Ethernet switch operates at the data link layer (layer 2) of the OSI model to create a separate collision domain for each switch port. Each device connected to a switch port can transfer data to any of the other ports at any time and the transmissions will not interfere. Because broadcasts are still being forwarded to all connected devices by the switch, the newly formed network segment continues to be a broadcast domain. Switches may also operate at higher layers of the OSI model, including the network layer and above. A switch that also operates at these higher layers is known as a multilayer switch.
Segmentation involves the use of a switch to split a larger collision domain into smaller ones in order to reduce collision probability and to improve overall network throughput. In the extreme case (i.e. micro-segmentation), each device is directly connected to a switch port dedicated to the device. In contrast to an Ethernet hub, there is a separate collision domain on each switch port. This allows computers to have dedicated bandwidth on point-to-point connections to the network and also to run in full-duplex mode. Full-duplex mode has only one transmitter and one receiver per collision domain, making collisions impossible.
The network switch plays an integral role in most modern Ethernet local area networks (LANs). Mid-to-large-sized LANs contain a number of linked managed switches. Small office/home office (SOHO) applications typically use a single switch, or an all-purpose device such as a residential gateway to access small office/home broadband services such as DSL or cable Internet. In most of these cases, the end-user device contains a router and components that interface to the particular physical broadband technology.
/ref> These modules were preceded by Medium Attachment Units connected via Attachment Unit Interfaces to switches and have evolved over time: the first modules were Gigabit interface converters, followed by XENPAK modules, SFP modules, ,
/ref>
In switches intended for commercial use, built-in or modular interfaces make it possible to connect different types of networks, including Ethernet, Fibre Channel, RapidIO, ATM, ITU-T G.hn and 802.11. This connectivity can be at any of the layers mentioned. While the layer-2 functionality is adequate for bandwidth-shifting within one technology, interconnecting technologies such as Ethernet and Token Ring is performed more easily at layer 3 or via routing. Devices that interconnect at the layer 3 are traditionally called routers.
Where there is a need for a great deal of analysis of network performance and security, switches may be connected between WAN routers as places for analytic modules. Some vendors provide firewall, Cisco Catalyst 6500 Series Firewall Services Module, Cisco Systems, 2007 Switch 8800 Firewall Module, 3Com Corporation, 2006 network intrusion detection, Cisco Catalyst 6500 Series Intrusion Detection System (IDSM-2) Module, Cisco Systems, 2007 and performance analysis modules that can plug into switch ports. Some of these functions may be on combined modules. Getting Started with Check Point Fire Wall-1, Checkpoint Software Technologies Ltd., n.d.
Through port mirroring, a switch can create a mirror image of data that can go to an external device, such as intrusion detection systems and .
A modern switch may implement power over Ethernet (PoE), which avoids the need for attached devices, such as a VoIP phone or wireless access point, to have a separate power supply. Since switches can have redundant power circuits connected to uninterruptible power supplies, the connected device can continue operating even when regular office power fails.
In 1989 and 1990, Kalpana introduced the first multiport Ethernet switch, its seven-port EtherSwitch.
A layer 2 network device is a multiport device that uses hardware addresses () to process and forward data at the data link layer (layer 2).
A switch operating as a network bridge may interconnect otherwise separate layer 2 networks. The bridge learns the MAC address of each connected device, storing this data in a table that maps MAC addresses to ports. This table is often implemented using high-speed content-addressable memory (CAM), some vendors refer to the MAC address table as a CAM table.
Bridges also buffer an incoming packet and adapt the transmission speed to that of the outgoing port. While there are specialized applications, such as storage area networks, where the input and output interfaces are the same bandwidth, this is not always the case in general LAN applications. In LANs, a switch used for end-user access typically concentrates lower bandwidth and into a higher bandwidth.
The Ethernet header at the start of the frame contains all the information required to make a forwarding decision, some high-performance switches can begin forwarding the frame to the destination whilst still receiving the frame payload from the sender. This cut-through switching can significantly reduce latency through the switch.
Interconnects between switches may be regulated using the Spanning Tree Protocol (STP) that disables forwarding on links so that the resulting local area network is a tree without . In contrast to routers, spanning tree bridges must have topologies with only one active path between two points. Shortest path bridging and TRILL (Transparent Interconnection of Lots of Links) are layer 2 alternatives to STP which allow all paths to be active with multiple equal cost paths.
Rack-mounted switches may be stand-alone units, or large chassis units with swappable line cards.
Methods that are specifically designed to allow a network analyst to monitor traffic include:
These monitoring features are rarely present on consumer-grade switches. Other monitoring methods include connecting a layer-1 hub or network tap between the monitored device and its switch port.
|
|