Router: devices connected to different IP address subnets are responsible for routing and forwarding, and work at the OSI network layer.
Bridge: connects different subnets for transparent communication, works at the data link layer, and parses data frames. The disadvantage is that the "broadcast storm" cannot be avoided ".
Gateway: A translator that works at the application layer and works between different subnets to repackage the received information.
========================================================== ==================================
Hub:
The basic function of a hub is information distribution, which distributes all signals received by a port to all ports. Some hubs regenerate weak signals before distribution, and some hubs sort the signal timing to provide synchronous data communication between all ports.
Vro:
As the name suggests, a router is a router device. Routing refers to the activity of moving information from the source location to the target location through a interconnected network. The router determines data forwarding through routing. The forwarding policy is called routing. This is also the origin of the router name (router, forwarder ).
Bridge:
1. A bridge, also known as a bridge, is a storage and forwarding device that connects two local networks. It can be used to connect a network system with the same or similar architecture.
2. Functions of the bridge: 1) the bridge only packs a small amount of received information frames without any modification.
2) The bridge can use another protocol to forward information.
3) The bridge has enough buffer space to meet the requirements during peak periods.
4) bridges must have addressing and Path Selection capabilities. 4. vro1 1. vrouters are connected at the network layer, that is, different networks
The connection to the network.
2. path selection is the main task of a vro. Path selection includes two basic activities: first, determining the optimal path, and second, transferring information packets between networks.
Differences between routers and bridges:
1) the router provides connection services at the network layer. The networks connected by the router can use completely different protocols at the data link layer and the physical layer. A Router service is usually explicitly requested by the end user device. It only processes packets that are requested by other end user devices.
2) Another important difference between a router and a bridge is that the router understands the entire network, maintains the topology of the interconnected network, and understands the network status. Therefore, the most effective path can be used to send packets.
Gateway: 1. The Gateway (Protocol converter) is a facility that operates on the OSI network layer in the interconnection network. It is called a facility because the gateway is not necessarily a device, it is possible to implement the gateway function in a host.
Gateways are used for heterogeneous network interconnection in the following scenarios:
1). LAN with different configurations, such as interconnected private exchange network PBX and lan that complies with the IEEE802 standard.
2) interconnection between LAN and WAN.
3) interconnection between Wan and wan.
4). Lan and host Interconnection (when the host's operating system is incompatible with the network operating system, you can connect through the gateway ).
3. Gateway Classification
1) Protocol Gateway: Protocol Gateway generally performs protocol conversion between network regions using different protocols.
2) Application Gateway: application gateway is a system that translates data between different data formats.
3) Security Gateway: Security Gateway integrates various technologies and plays an important and unique protection role. Its scope ranges from protocol-level filtering to extremely complex application-level filtering.
Supplement:
The Hub does not have the storage and forwarding function. It is a physical layer device,
The switch has the storage and forwarding function link layer device, and the layer-3 Switch has the routing function.
Vrouters connect networks of different network segments or different media, such as Ethernet, optical fiber network, and dial-up network. A computer can be configured with several NICs as vrowinwin2000.
A gateway is the egress address of a LAN. The gateway address is the address configured on the router,
A bridge is a special usage. It can be used to separate large networks. It seems that it is used to isolate broadcast or something.
A computer network is often composed of many different types of network connections. If several computer networks are physically connected together and cannot communicate with each other, then this "interconnection" is meaningless. Therefore, when talking about "interconnection", it is suggested that these computers can communicate with each other. That is to say, in terms of functions and logic, these computer networks have formed a large computer network, or an interconnected network, or Internet.
Some intermediate devices (or intermediate systems) are used to connect networks. ISO is called Relay Systems. Based on the level of the relay system, there can be the following five relay systems:
1. Physical Layer (that is, the first layer and layer L1) repeater system ).
2. data link layer (Layer 2, layer l2), that is, bridge or bridge ).
3. The network layer (Layer 3, layer l3) relay system, that is, the router ).
4. A mixture of bridges and routers. brouter has the functions of bridges and routers.
5. A relay system above the network layer, that is, a gateway ).
When the relay system is a forwarder, it is generally not called network interconnection, because it only expands a network, and it is still a network. High-level gateways are rarely used due to their complexity. Therefore, network interconnection generally refers to the network in which vswitches and vrouters are interconnected. This article describes the differences between vswitches and vrouters.
Ii. vswitches and vrouters
"Exchange" is the most frequently used word on the network today. It can be applied on any occasions from the bridge to the ATM to the telephone system. It is hard to figure out what is the real exchange. In fact, the word exchange first appeared in the telephone system, specifically to achieve the exchange of voice signals between two different telephones, the device to complete this work is the telephone switch. Therefore, in terms of intention, exchange is only a technical concept, that is, to complete the forwarding of signals from the device entry to the exit. Therefore, any device that complies with this definition can be called an exchange device. It can be seen that "Exchange" is a widely used term. When it is used to describe the second layer of the data network, it actually refers to a bridge device; when it is used to describe the third-layer device of the data network, it also refers to a routing device. We often mention that an Ethernet switch is actually a multi-port L2 network device based on the bridge technology, it provides low-latency and Low-overhead channels for data frame forwarding from one port to another.
It can be seen that the core of the switch should have an exchange matrix to provide a channel for communication between any two ports, or a fast exchange bus, to send data frames received by any port from other ports. In actual devices, the function of the switching matrix is usually completed by a dedicated chip (ASIC. In addition, there is an important assumption in the design philosophy of the Ethernet switch, that is, the speed of the switching core is very fast, so that the normal large-volume data will not cause congestion. In other words, the exchange capability is infinite relative to the amount of information transmitted (on the contrary, the design idea of the ATM switch is that the exchange capability is limited to the amount of information transmitted ). Although the second layer Ethernet switch is developed based on a multi-port bridge, after all, the switch has more features, making it the best way to get more bandwidth, it also makes the network easier to manage.
A router is a group exchange device (or network layer Relay Device) in the network layer of the OSI protocol model. The basic function of a router is to transmit data (IP packets) to the correct network, including:
1. IP datagram forwarding, including path finding and transmission of the datagram;
2. subnet isolation to prevent broadcast storms;
3. Maintain the route table and exchange route information with other routers. This is the basis for IP packet forwarding.
4. IP datagram error handling and simple congestion control;
5. Filtering and accounting of IP datagram.
Vrouters of different regions have different roles.
On the backbone network, the main role of a router is routing selection. The router on the backbone network must know the path to all the lower-Layer Networks. This requires maintaining a large route table and responding to connection status changes as quickly as possible. A Router failure may cause serious information transmission problems.
In the regional network, the main role of the router is network connection and route selection, that is, to connect to the lower-layer grass-roots network units-the campus network, while responsible for data forwarding between the lower-Layer Networks. Inside the campus network, the main role of a router is to separate subnets. In the early days, the basic unit of the Internet connection was lan, where all hosts were in the same logical network. With the continuous expansion of the network scale, the LAN has evolved into a campus network composed of multiple subnets connected to the high-speed trunk and router. The subnet is logically independent, and the router is the only device that can separate them. It is responsible for packet forwarding and broadcast isolation between subnets, the vro on the border is responsible for connecting to the upper-layer network.
Iii. Differences Between Layer 2 vswitches and vrouters
Traditional switches are developed from bridges and belong to the OSI Layer 2 (data link layer device. It selects routes from the station table based on MAC address addressing. The establishment and maintenance of the station table is automatically implemented by the switch. A router is a layer-3 network-layer device of OSI. It is addressing based on IP addresses and is generated through the route table routing protocol. The biggest advantage of a vswitch is that it is fast. Because the vswitch only needs to identify the MAC address in the frame, the selection of forwarding Port Based on the MAC address is simple, Which is easy for ASIC implementation. Therefore, the forwarding speed is extremely high. However, the working mechanism of vswitches also brings about some problems. 1. Loop: Based on the vswitch address learning algorithm and the station table, no loop is allowed between vswitches. Once a loop exists, the Spanning Tree Algorithm must be enabled to block the ports that generate the loop. The router routing protocol does not solve this problem. There are multiple channels between routers to balance the load and improve reliability. 2. Load aggregation: only one channel is available between switches, so that information is concentrated on one communication link and cannot be dynamically allocated to balance the load. The router routing protocol algorithm can avoid this. The OSPF routing protocol algorithm can not only generate multiple routes, but also select different optimal routes for different network applications.
3. Broadcast control: A vswitch can only narrow down the conflicted domain, but not the broadcast domain. The entire exchange network is a large broadcast domain, where broadcast packets are scattered across the entire exchange network. Vrouters can isolate broadcast domains, and broadcast packets cannot be broadcast through vrouters.
4. subnet division: The switch can only recognize MAC addresses. The MAC address is a physical address and uses a flat address structure. Therefore, you cannot divide subnets Based on the MAC address. Vro identifies IP addresses. IP addresses are allocated by network administrators. They are logical addresses and IP addresses have hierarchies. They are divided into network numbers and host numbers, which can be easily used to divide subnets, the main function of a vro is to connect to different networks. 5. confidentiality: although the switch can also filter Frames Based on the source MAC address, target MAC address, and other frames, however, the vro filters packets based on the source IP address, destination IP address, and TCP port address of the packets, making them more intuitive and convenient.
6. media-related: A switch can also be used as a bridge device to convert between the link layer and the physical layer. However, this conversion process is complicated and is not suitable for ASIC implementation. This will inevitably reduce the forwarding speed of the switch. Therefore, currently, vswitches primarily Interconnect Networks with the same or similar physical media and link protocols, instead of connecting networks with different physical media and link layer protocols. Different routers are used for interconnection between different networks, so they can connect networks with different physical media, link layer protocols, and network layer protocols. Although a vro has a functional advantage, it is expensive and has a low packet forwarding speed. In recent years, vswitches have made many improvements to improve performance. The most prominent improvement is the virtual network and layer-3 switching.
Dividing subnets can narrow the broadcast domain and reduce the impact of broadcast storms on the network. Each vro interface is connected to a subnet. broadcast packets cannot be broadcast by the vro. The subnets connected to different vro interfaces belong to different subnets. The subnet ranges are physically divided by the vro. For a vswitch, each port corresponds to a CIDR block. Because the subnet consists of several CIDR blocks, you can logically divide subnets by combining vswitch ports. Broadcast packets can only be broadcast within the subnet and cannot be spread to another subnet. By rationally dividing the logical subnet, broadcast can be controlled. Because logical subnets are composed of vswitch ports and have no physical correlation, they are called virtual subnets or virtual networks. The virtual network technology eliminates the need for routers to isolate broadcast packets, and the virtual network INTRANET segment has nothing to do with its physical location, that is, the adjacent network segment can belong to different virtual networks, however, the two CIDR blocks that are far from each other may belong to different virtual networks, while the two CIDR blocks that are far from each other may belong to the same virtual network. Terminals in different virtual networks cannot communicate with each other, enhancing access control over network data. Vswitches and vrouters are the contradiction between performance and functions. The switch exchange speed is fast, but the control function is weak, the vro control performance is strong, but the packet forwarding speed is slow. The latest technology to resolve this conflict is layer-3 switching, which provides both the ability to forward packets at the wire speed of the switch and the good control function of the router.
Iv. Differences between layer-3 vswitches and vrouters
Before the emergence of layer-3 switching technology, there was almost no need to distinguish routing devices from routers. They were exactly the same: Providing routing functions is working on routers. However, currently, layer-3 vswitches can fully perform most of the functions of traditional routers. As a device for network interconnection, layer-3 switches have the following features:
1. forward business flows based on layer-3 addresses;
2. full exchange of functions;
3. Special services such as packet filtering or authentication can be completed;
4. perform or not perform route processing.
Layer-3 vswitches have the following advantages over traditional vrouters:
1. transmission bandwidth between subnets can be arbitrarily allocated: each interface of a traditional router connects to a subnet, and the transmission rate of the subnet through the router is limited by the bandwidth of the interface. The layer-3 switch is different. It can define multiple ports as a virtual network and use a virtual network composed of multiple ports as a virtual network interface, the information in the virtual network can be sent to the layer-3 Switch through the port that forms the virtual network. The number of ports can be specified arbitrarily, so there is no limit on the inter-subnet transmission bandwidth. 2. reasonable configuration of Information Resources: As there is no difference between the resource rate in the subnet access and the resource rate in the global network access, it is of little significance to set a separate server in the subnet. Setting a server group in the global network not only saves money, more reasonable configuration of information resources.
3. Cost Reduction: Generally, vswitches are used to form subnets and vrouters are used to interconnect subnets. Currently, a three-tier switch is used for network design. It can be divided into any virtual subnet, and inter-subnet communication can be completed through the three-tier routing function of the switch, which saves the cost of a router.
4. Flexible Connections between vswitches: As vswitches, no loops are allowed between them. As vrouters, there are multiple channels to improve reliability and balance load. Layer-3 switches use the Spanning Tree Algorithm to block the loop port. However, when selecting a route, the blocked path is still used as an optional path for route selection.
V. Conclusion
To sum up, the switch is generally used for the LAN-WAN connection, the switch belongs to the bridge, is the data link layer equipment, some switches can also realize the third layer of the exchange. A vro is used for Wan-WAN connections. It can resolve forwarding groups between different networks and act on the network layer. They only accept the input group from one line and then forward it to another line. These two lines may belong to different networks and adopt different protocols. In comparison, vro features more powerful than vswitches, but the speed is relatively slow and expensive. layer-3 vswitches have both the ability to forward packets at the wire speed of vswitches and the good control function of vrouters, therefore, it can be broadcast applications.
Add the upstairs
1. the hub works on the first layer and only supports signal regeneration.
2. Bridges and switches work on the second layer and work on physical addresses to solve CSMA/CD conflicts. bridges are based on software and currently are not used much. They only have one concept, A switch is a hardware-based bridge (ASIC ).
3. vrouters work on Layer 3 and rely on logical addresses to provide logical addressing to solve broadcast problems.
4. A gateway is a concept of Layer 3 or above. It is a general concept. For example, a router or a firewall can all be called a gateway. It is the egress of a network.
5. From the perspective of your teacher, he is too ignorant. His idea is still 20 years ago, and now lan has gradually broken through the regional restrictions, a lan with hundreds of thousands of machines is no longer fresh. In such a large LAN, if you use flat address management, no one will be willing to do network management, so we need to divide it into small subnets for management purposes. So what is the use of routing between subnets for connection? Now, we not only consider routing in the LAN, but also have LAN switches with routing functions, which are all practical applications. Ask your teacher how to manage a LAN with 1000 machines ?!