CompTIA Network+: Networking Appliances, Applications, and Functions

Introduction

Computer networks rely on different devices and services to connect users, manage traffic, protect data, and deliver applications. Understanding these technologies is important for the CompTIA Network+ certification and for working in real-world IT environments.

This article explains the main networking appliances, applications, and functions covered in this section:

• Ethernet network switches
• Ethernet network routers
• Proxies and load balancers
• Firewall appliances
• Intrusion Detection Systems
• Network-Attached Storage and Storage Area Networks
• Wireless Access Points and Controllers
• Content Delivery Networks
• Common networking functions

1. Ethernet Network Switches

An Ethernet switch connects devices within a local area network, known as a LAN.

Examples of devices connected to a switch include:

• Desktop computers
• Laptops
• Servers
• Printers
• IP phones
• Wireless access points
• Network cameras

A switch uses MAC addresses to identify devices on the network. When a frame arrives, the switch examines the destination MAC address and forwards the frame through the appropriate port.

Switches operate mainly at Layer 2 of the OSI model, the Data Link Layer. Some advanced switches, known as Layer 3 switches, also perform routing functions.

Important switch concepts include:

MAC Address Table

A switch learns which MAC address is connected to each physical port. It stores this information in a MAC address table.

For example:

Port 1 → PC A
Port 2 → PC B
Port 3 → Printer

When PC A sends data to PC B, the switch checks its MAC address table and forwards the traffic directly to the correct port.

VLANs

A Virtual LAN, or VLAN, divides a physical switch into separate logical networks.

For example:

VLAN 10 → Employees
VLAN 20 → Guests
VLAN 30 → Servers

VLANs improve network organisation and security by separating traffic.

PoE

Power over Ethernet, or PoE, allows a network cable to carry both data and electrical power.

PoE often powers:

• Wireless access points
• IP phones
• Security cameras

This reduces the need for separate power cables.

1. Ethernet Network Routers

A router connects different networks together.

For example, a router might connect:

Home LAN → Internet

Or:

Office Network → Branch Office Network

Routers use IP addresses to determine where network traffic should go. They operate primarily at Layer 3, the Network Layer, of the OSI model.

Routing Table

A routing table contains information about available networks and the paths used to reach them.

A router examines the destination IP address of a packet and selects the best available route.

Default Gateway

A default gateway allows devices on a local network to communicate with networks outside their own subnet.

For example, a computer might have:

IP address: 192.168.1.20
Default gateway: 192.168.1.1

When the computer wants to access the internet, it sends traffic to the default gateway.

NAT

Network Address Translation, or NAT, allows private IP addresses to communicate with public networks.

For example, multiple devices inside a home might use private IP addresses while sharing one public IP address when accessing the internet.

1. Proxies and Load Balancers

Proxy Servers

A proxy server acts as an intermediary between a client and another system.

Instead of:

Client → Internet Server

The connection becomes:

Client → Proxy → Internet Server

A proxy can provide:

• Web filtering
• Access control
• Caching
• Privacy
• Security
• Monitoring

Forward Proxy

A forward proxy represents the client.

It is often used by organisations to control and monitor internet access.

Reverse Proxy

A reverse proxy represents the server.

It receives requests from users and forwards them to backend servers.

A reverse proxy can improve:

• Security
• Performance
• Scalability
• Availability

Load Balancers

A load balancer distributes network traffic across multiple servers.

For example:

User 1 → Server A
User 2 → Server B
User 3 → Server C

This prevents one server from handling all the traffic.

Load balancing improves:

• Performance
• Availability
• Scalability
• Fault tolerance

Common load-balancing methods include:

Round Robin

Requests are distributed between servers in sequence.

Least Connections

New requests go to the server with the fewest active connections.

Health Checks

The load balancer checks whether servers are working correctly. If a server fails, the load balancer stops sending traffic to it.

1. Firewall Appliances

A firewall controls network traffic based on predefined security rules.

A firewall can allow or block traffic based on factors such as:

• Source IP address
• Destination IP address
• Port number
• Protocol
• Application
• User identity

For example, a firewall might allow HTTPS traffic on TCP port 443 while blocking unwanted connections.

Types of Firewalls

Network Firewall

Protects an entire network by controlling traffic entering and leaving the network.

Host-Based Firewall

Runs directly on an individual computer or server.

Next-Generation Firewall

A Next-Generation Firewall, or NGFW, provides advanced security features such as:

• Application awareness
• Deep packet inspection
• Intrusion prevention
• User-based policies

Firewalls are an important part of network security, but they should work alongside other security controls.

1. Intrusion Detection Systems

An Intrusion Detection System, or IDS, monitors network or system activity and looks for suspicious behaviour.

When an IDS detects potential malicious activity, it generates an alert.

Network IDS

A Network Intrusion Detection System, or NIDS, monitors network traffic.

Host IDS

A Host Intrusion Detection System, or HIDS, monitors activity on an individual computer or server.

IDS vs IPS

IDS:

Detects suspicious activity.
Generates alerts.
Does not normally block the attack automatically.

IPS:

Detects suspicious activity.
Can actively block or prevent the attack.

A simple way to remember this is:

IDS = Detect and alert

IPS = Detect and prevent

1. Network-Attached Storage

Network-Attached Storage, or NAS, provides file storage over a network.

Users access files stored on a NAS device through the network.

NAS is commonly used for:

• File sharing
• Backups
• Document storage
• Media storage

For example:

Computer A
Computer B
Computer C
↓
NAS

All three computers can access shared files stored on the NAS.

NAS generally operates at the file level. Users interact with files and folders rather than directly managing individual storage blocks.

1. Storage Area Networks

A Storage Area Network, or SAN, provides high-speed access to storage resources.

SAN technology is commonly used in enterprise environments and data centres.

Unlike NAS, which typically provides file-level access, SANs provide block-level storage access.

A simplified comparison is:

NAS → File-level storage

SAN → Block-level storage

SANs are useful for:

• Databases
• Virtual machines
• Enterprise applications
• High-performance storage

SAN technologies include Fibre Channel and iSCSI.

1. Wireless Access Points

A Wireless Access Point, or WAP, allows wireless devices to connect to a wired network.

For example:

Laptop
↓ Wi-Fi
Wireless Access Point
↓ Ethernet
Network Switch
↓
Network

Wireless access points use Wi-Fi standards to provide wireless connectivity.

Important wireless concepts include:

SSID

The Service Set Identifier, or SSID, is the name users see when selecting a wireless network.

WPA2 and WPA3

These are wireless security standards used to protect Wi-Fi networks.

WPA3 provides stronger security than older wireless security protocols.

Channels

Wireless networks use radio channels to communicate. Proper channel planning helps reduce interference.

Wireless Controllers

A Wireless LAN Controller, or WLC, manages multiple wireless access points from a central location.

A controller can help administrators:

• Configure access points
• Manage wireless security
• Monitor wireless networks
• Apply policies
• Manage roaming

Centralised management is useful in large organisations with many access points.

1. Content Delivery Networks

A Content Delivery Network, or CDN, is a distributed network of servers designed to deliver content to users efficiently.

Instead of every user accessing a central server, a CDN stores cached copies of content on servers located in different geographic locations.

For example:

User in London → CDN server in London

User in New York → CDN server in New York

User in Tokyo → CDN server in Tokyo

The CDN selects an appropriate server based on factors such as geographic location and network performance.

CDNs are commonly used for:

• Websites
• Images
• Videos
• Software downloads
• JavaScript and CSS files

Benefits include:

• Faster content delivery
• Reduced latency
• Reduced load on the origin server
• Better scalability
• Improved availability

1. Common Networking Functions

Several networking functions appear frequently in enterprise networks.

DHCP

Dynamic Host Configuration Protocol, or DHCP, automatically provides network configuration to devices.

DHCP can provide:

• IP address
• Subnet mask
• Default gateway
• DNS server

Without DHCP, administrators might need to configure every device manually.

DNS

Domain Name System, or DNS, translates domain names into IP addresses.

For example:

www.example.com → IP address

DNS allows users to access services using memorable names instead of IP addresses.

NTP

Network Time Protocol, or NTP, synchronises the clocks of network devices.

Accurate time is important for:

• Security logs
• Authentication
• Troubleshooting
• Event correlation

SNMP

Simple Network Management Protocol, or SNMP, allows network administrators to monitor and manage network devices.

SNMP can monitor:

• Routers
• Switches
• Servers
• Printers
• Firewalls

Administrators can use SNMP to monitor device health and performance.

VPN

A Virtual Private Network, or VPN, creates a secure connection over an untrusted network such as the internet.

VPNs are commonly used for:

• Remote employee access
• Connecting branch offices
• Protecting data in transit

A VPN can encrypt network traffic between the connected endpoints.

Syslog

Syslog provides a standard method for collecting and managing system and network logs.

Organisations often send logs from multiple devices to a central logging server.

This helps with:

• Troubleshooting
• Security monitoring
• Incident investigation
• Compliance

1. Key Comparison Table

Device or Function | Main Purpose | Key Concept

Switch | Connects devices on a LAN | MAC addresses

Router | Connects different networks | IP addresses

Proxy | Acts as an intermediary | Client or server requests

Load Balancer | Distributes traffic | Multiple servers

Firewall | Controls network traffic | Security rules

IDS | Detects suspicious activity | Alerts

IPS | Detects and blocks threats | Prevention

NAS | Provides file storage | File-level access

SAN | Provides high-performance storage | Block-level access

Wireless Access Point | Provides Wi-Fi connectivity | Wireless LAN

Wireless Controller | Manages multiple access points | Centralised management

CDN | Delivers content efficiently | Distributed servers

DHCP | Assigns network settings | Automatic configuration

DNS | Resolves names to IP addresses | Name resolution

NTP | Synchronises time | Accurate clocks

SNMP | Monitors network devices | Network management

VPN | Creates secure network connections | Encrypted tunnels

Syslog | Collects system logs | Centralised logging

1. CompTIA Network+ Exam Tips

For the Network+ exam, focus on understanding the purpose of each technology rather than memorising definitions alone.

Remember these key points:

Switch = Connects devices within a network.

Router = Connects different networks.

Proxy = Acts as an intermediary.

Load balancer = Distributes traffic across servers.

Firewall = Allows or blocks traffic based on rules.

IDS = Detects and alerts.

IPS = Detects and blocks.

NAS = File-level storage.

SAN = Block-level storage.

Access Point = Provides wireless network access.

Wireless Controller = Centrally manages wireless access points.

CDN = Delivers content from distributed locations.

DHCP = Automatically assigns network configuration.

DNS = Converts names into IP addresses.

NTP = Synchronises time.

SNMP = Monitors and manages network devices.

VPN = Creates a secure connection across an untrusted network.

Syslog = Collects and stores logs.

The main goal of this section is to understand how these technologies work together. A typical enterprise network might use switches to connect devices, routers to connect networks, firewalls to control traffic, wireless access points to provide Wi-Fi, DHCP and DNS to support network services, load balancers to distribute application traffic, and a CDN to deliver content efficiently to users.