From Hubs to Routers, Switches, Gateways and Firewalls — Understand Networking Like a Software Engineer
Series: Computer Science Fundamentals for Software Engineers
By: CodeWithObaid
Imagine this.
You are sitting in your room, working on your laptop.
You open WhatsApp Web and send a message to your friend who lives in another country.
You type:
"Hey! How are you?"
You press Enter.
Within milliseconds, your friend receives the message.
But have you ever stopped and wondered:
- How did your laptop communicate with the internet?
- How did your message leave your home network?
- Who decided where the message should go?
- How did it travel across different networks?
- Who prevented unauthorized traffic from entering your network?
Your laptop didn't magically communicate with your friend's phone.
Behind that seemingly simple action, several networking devices performed different responsibilities.
Some connected devices.
Some forwarded data.
Some selected routes.
Some protected your network.
And some translated information between systems that couldn't communicate directly.
Today, we are going to follow that single message and understand the networking devices responsible for making it possible.
By the end, you should be able to explain not just WHAT these devices do, but WHY they exist, WHEN they are used, and HOW they differ.
Let's begin.
Chapter 1: Before the Journey — Meet the Network
Imagine your home is a small office.
You have:
- A laptop.
- A smartphone.
- A smart television.
- A printer.
- An internet connection.
You want all these devices to communicate.
What would you do?
You would connect them through a network.
A computer network is a collection of interconnected devices that communicate and share resources.
But connecting devices is only the beginning.
We also need devices that manage communication.
Think about a real city.
A city needs:
- Roads to carry vehicles.
- Intersections to manage traffic.
- Bridges to connect separated areas.
- Traffic controllers to direct movement.
- Security checkpoints to control access.
A computer network needs similar infrastructure.
These networking devices are the infrastructure of digital communication.
The important idea: Different networking devices solve different communication problems.
Some operate with physical signals, others understand hardware addresses, and others make decisions using logical addresses.
To understand their responsibilities, let's first understand the OSI model.
Chapter 2: The OSI Model — Seven Floors of Communication
Imagine a large international company with seven departments.
Every department has a different responsibility.
One department handles physical delivery, another handles local identification, another handles routing, and others manage communication and application-level services.
The OSI model gives us a conceptual framework for understanding network communication through seven layers.
| Layer | Name | Main responsibility |
|---|---|---|
| 7 | Application | Network services used by applications |
| 6 | Presentation | Data representation, encryption and compression |
| 5 | Session | Managing communication sessions |
| 4 | Transport | End-to-end transport and port-based communication |
| 3 | Network | Logical addressing and routing |
| 2 | Data Link | Local delivery using MAC addresses |
| 1 | Physical | Transmitting raw bits as signals |
For today's topic, remember three important questions:
- How do we physically transmit data?
- How do we deliver data inside a local network?
- How do we send data between different networks?
These questions lead us to Layers 1, 2 and 3.
Advanced network security and protocol translation introduce additional responsibilities.
A useful memory trick:
- Layer 1: Signals.
- Layer 2: MAC addresses.
- Layer 3: IP addresses.
- Layers 4–7: Communication, services and application-aware processing.
Chapter 3: Layer 1 — The Physical Layer
The problem: How do we physically move information?
Imagine two offices connected by a long cable.
One office wants to send information to the other.
But there is a problem.
Computers don't transmit English sentences directly through Ethernet cables.
They transmit bits represented through physical signals.
Depending on the medium, these signals may be electrical, optical or radio signals.
Layer 1 is responsible for transmitting raw bits through the physical medium.
Let's meet three devices.
1. Hub — The Office Receptionist Who Doesn't Know Anyone
Imagine an office receptionist.
Someone enters the office and says:
"Please deliver this message to Ali."
But the receptionist doesn't know who Ali is.
Instead of finding Ali, the receptionist makes an announcement:
"EVERYONE! SOMEONE HAS A MESSAGE!"
Every person in the office receives the announcement.
That's exactly how a traditional Ethernet hub behaves.
A hub:
- Connects multiple devices in a LAN.
- Receives an incoming signal.
- Repeats the incoming bits to other connected ports.
- Doesn't examine MAC addresses or understand the intended recipient.
Real-world example
Imagine four computers connected to a hub.
Computer A sends data intended for Computer C.
The hub repeats the signal to the other ports.
Computers B, C and D all receive the transmitted signal.
Only the intended recipient processes the frame.
Why is this inefficient?
Because unnecessary traffic reaches every connected device.
Traditional shared Ethernet hubs also create a shared collision domain.
When multiple devices transmit simultaneously, collisions can occur.
What about security?
A hub doesn't provide intelligent traffic isolation.
Other connected devices may be able to observe traffic, depending on the network protocol and configuration.
This makes hubs unsuitable for modern switched networks.
Production insight: Traditional Ethernet hubs are largely obsolete. Modern LANs generally use switches.
Interview memory: A hub operates at Layer 1. It forwards signals without understanding MAC or IP addresses.
2. Repeater — The Signal Booster
Now imagine you are talking to your friend from a long distance.
Your voice becomes weaker as the distance increases.
Someone standing between you and your friend hears your weak voice and repeats it more strongly.
That's the basic idea behind a repeater.
A repeater:
- Receives a signal.
- Regenerates or reshapes it.
- Transmits it again.
- Helps extend the communication distance.
Real-world example
Imagine an Ethernet connection that needs to cover a distance greater than the permitted cable segment length.
A suitable repeater can regenerate the signal to extend the connection.
Similarly, wireless repeaters can help extend Wi-Fi coverage.
Important distinction
A repeater doesn't understand the meaning of the transmitted data.
It doesn't decide where a packet should go.
Its responsibility is signal regeneration.
Interview memory: A repeater operates at Layer 1 and extends the physical reach of a network.
3. Modem — The Translator Between Your Home and ISP
Now our story becomes interesting.
Your laptop is connected to your home network.
But how does your home connect to the Internet Service Provider (ISP)?
Meet the modem.
The word MODEM comes from:
- MODulator.
- DEModulator.
Traditionally, it converts digital information into signals suitable for transmission over a particular communication medium and converts received signals back into digital information.
Imagine this conversation
Your laptop speaks digital language.
Your ISP's access network uses a particular physical transmission technology.
The modem helps your equipment communicate over that access technology.
What does it do?
- Establishes communication over the ISP's access medium.
- Modulates outgoing information where required by the technology.
- Demodulates incoming signals.
- Provides the connection between customer equipment and the provider's network.
Real-world examples
Different technologies use different equipment:
- DSL modem for telephone-line broadband.
- Cable modem for cable internet.
- Fiber ONT for fiber-optic internet.
A small but important technical detail: a fiber ONT performs optical-to-electrical conversion and network termination. People sometimes casually call it a fiber modem, but it isn't necessarily a traditional modem performing the same modulation and demodulation process.
Interview memory: A modem connects customer equipment to an ISP's access network using the relevant transmission technology.
Chapter 4: Layer 2 — The Data Link Layer
The problem: How do we deliver data to the correct device inside a local network?
Imagine the office has grown.
There are now 100 employees.
Everyone has an employee identification number.
When someone wants to deliver a document, the office should identify the correct employee rather than announcing the document to everybody.
In networking, this is where MAC addresses become important.
A MAC address is a link-layer address used for communication on a local network.
For example:
00:1A:2B:3C:4D:5E
Now meet the devices responsible for local network communication.
4. Switch — The Smart Office Receptionist
Remember our hub?
The hub delivered everything to everybody.
Now imagine a receptionist who maintains a record of every employee's desk location.
When someone requests a document for Ali, the receptionist checks the record and delivers it directly to Ali.
That's the basic idea behind a switch.
A network switch:
- Connects devices within a LAN.
- Learns source MAC addresses.
- Maintains a MAC address table.
- Forwards frames through the appropriate port when the destination is known.
Let's understand how it works.
Imagine four computers:
- Computer A
- Computer B
- Computer C
- Computer D
All are connected to a switch.
Computer A wants to communicate with Computer C.
Step 1: A sends a frame.
The switch receives the frame from A.
Step 2: The switch learns A's MAC address.
It records the source MAC address and the port where it received the frame.
Step 3: It checks the destination MAC address.
The switch looks for Computer C's MAC address in its MAC address table.
Step 4: It forwards the frame.
If the destination is known, the switch forwards the frame through the associated port.
What if the destination MAC address isn't in the table?
The switch generally floods the frame through the other eligible ports in that VLAN, excluding the incoming port.
This is why saying "a switch always sends data only to one device" is technically inaccurate.
Why are switches better than hubs?
- They learn MAC addresses.
- They reduce unnecessary traffic.
- Each switched port normally creates its own collision domain.
- They improve network efficiency.
- They support network segmentation through VLANs.
Production example
Imagine a company with 50 employees.
Each employee has a computer.
A switch connects these computers, printers and local servers.
Without switches, managing communication across the office would be much less efficient.
Interview memory: A traditional Layer 2 switch forwards Ethernet frames using MAC addresses.
5. Bridge — Connecting Two Local Neighborhoods
Imagine two separate office departments.
Both departments belong to the same organization.
However, each department has its own local communication segment.
You want to connect them while avoiding unnecessary traffic between them.
A bridge solves this problem.
A network bridge:
- Connects LAN segments.
- Learns MAC addresses.
- Filters and forwards frames.
- Helps keep local traffic within its segment when possible.
Real-world example
Imagine two Ethernet network segments.
A device in Segment A wants to communicate with another device in Segment A.
The bridge can filter that traffic instead of forwarding it unnecessarily into Segment B.
However, if a destination is located in Segment B, the bridge forwards the frame accordingly.
Bridge vs Switch
A traditional bridge usually has fewer ports.
A switch is essentially a more advanced multiport bridge.
Modern Ethernet switches have largely replaced standalone bridges.
Interview memory: Both bridges and Layer 2 switches use MAC addresses to forward or filter frames.
6. Access Point — The Wireless Door to Your Wired Network
Imagine your office has Ethernet cables connecting all desktop computers.
But employees also want to connect their laptops and smartphones wirelessly.
Do you need to install an Ethernet cable in every smartphone?
Of course not.
You install a wireless access point.
An Access Point (AP):
- Provides wireless connectivity.
- Allows Wi-Fi-enabled devices to join a network.
- Bridges wireless clients with the wired LAN.
Real-world example
You enter a university.
You open your laptop.
You see the university Wi-Fi network.
You connect to it.
The access point allows your laptop to communicate with the university's wired network.
Important distinction: AP vs Router
An ordinary standalone access point primarily provides wireless connectivity and Layer 2 bridging.
It doesn't necessarily perform routing or DHCP address assignment.
However, many consumer devices combine an access point, router, firewall and DHCP server in one physical box.
This is why people often confuse these responsibilities.
Interview memory: An access point provides wireless access to a network; a router connects different IP networks.
Chapter 5: Layer 3 — The Network Layer
The problem: What happens when the destination is outside your local network?
Our message has successfully reached the home network.
But your friend isn't sitting in your room.
Your friend lives in another country.
The message needs to travel through multiple networks.
A MAC address alone isn't enough to determine the path across the internet.
We need logical addressing.
Meet the IP address.
Example:
192.168.1.10
An IP address identifies a network interface logically within an IP network.
Now meet the device responsible for connecting different networks.
7. Router — The GPS and Traffic Controller of the Internet
Imagine you want to travel from Lahore to London.
You cannot simply drive in one direction and expect to arrive.
You need a route.
You need to know:
- Where you are.
- Where you want to go.
- Which roads lead to your destination.
- Which route is appropriate.
A router performs a similar responsibility for network packets.
A router:
- Connects different IP networks.
- Examines destination IP addresses.
- Uses routing tables to select the next hop.
- Forwards packets toward their destinations.
Let's return to our WhatsApp message.
Your laptop wants to send data to a remote server.
Step 1: Your laptop checks the destination IP.
It determines whether the destination belongs to its local subnet.
Step 2: The destination is outside the local subnet.
Your laptop sends the packet to its default gateway.
Step 3: The router receives the packet.
It examines the destination IP address.
Step 4: The router checks its routing table.
It determines the next hop or outgoing interface.
Step 5: The packet continues its journey.
Another router may receive it and perform a similar operation.
This process continues until the packet reaches the destination network.
What is a routing table?
Think of it as a map maintained by the router.
It contains information such as:
- Destination network.
- Next hop.
- Outgoing interface.
- Route preference or metric.
A simplified routing table might look like this:
| Destination | Next hop |
|---|---|
| 192.168.1.0/24 | Directly connected |
| 10.0.0.0/8 | 192.168.1.254 |
| 0.0.0.0/0 | ISP gateway |
The default route (0.0.0.0/0) is used when no more specific matching route exists.
What about broadcasts?
Routers normally do not forward ordinary Layer 2 broadcasts between IP networks.
This helps separate broadcast domains.
Production example
Imagine your company has:
- A development network.
- A finance network.
- A production network.
- An internet connection.
Routers connect these different IP networks and forward traffic according to routing policies.
Interview memory: A router operates at Layer 3 and forwards packets using IP addresses and routing tables.
8. Brouter — The Hybrid of a Bridge and a Router
Now imagine an organization with two kinds of communication.
Some traffic uses protocols that can be routed.
Other traffic uses older protocols that cannot be routed in the same way.
You need one device that can perform both responsibilities.
This introduces the concept of a brouter.
The word comes from:
Bridge + Router = Brouter
A brouter combines bridging and routing functionality.
Depending on its configuration and supported protocols, it can:
- Route supported routable protocols.
- Bridge traffic for protocols that cannot be routed.
Why does it matter?
It demonstrates that networking devices don't always fit neatly into one layer.
Some devices combine multiple networking responsibilities.
Is it commonly used today?
Not really.
Modern networking equipment generally handles routing and switching through separate or integrated functions without requiring a dedicated brouter.
Interview memory: A brouter combines Layer 2 bridging and Layer 3 routing functionality.
Chapter 6: Advanced Networking — Translation and Security
We have connected devices.
We have forwarded frames.
We have routed packets.
But two important problems remain.
- What if two systems use different communication protocols?
- What if someone tries to access our network without authorization?
Let's meet our final devices.
9. Gateway — The International Translator
Imagine two companies.
Company A communicates in English.
Company B uses a completely different communication system.
Even if you connect their offices physically, they might not understand each other's messages.
You need a translator.
A gateway performs a similar role in networking.
A gateway is an entry or exit point that can connect networks or systems and, depending on its purpose, translate between different protocols, formats or communication architectures.
Real-world example
Imagine an organization connecting a modern IP-based application with a legacy enterprise system.
A suitable application gateway can translate requests between the two communication systems.
Important distinction: Gateway vs Default Gateway
These two terms are often confused.
A general gateway can perform protocol or application translation.
However, in everyday IP networking, your default gateway usually refers to the router or Layer 3 device your computer uses to reach destinations outside its local network.
For example:
Your laptop:
- IP address:
192.168.1.10 - Default gateway:
192.168.1.1
When you communicate with a remote network, your laptop sends the traffic to 192.168.1.1.
That address is typically your router's LAN interface.
Production example
Imagine a microservices-based application communicating with an external payment provider.
An API gateway can provide:
- Request routing.
- Authentication.
- Rate limiting.
- Request transformation.
- Centralized API management.
An API gateway is a software-level gateway, not necessarily a physical networking appliance.
Interview memory: A gateway is a broad term for an entry/exit point between systems; its exact functionality depends on its type.
10. Firewall — The Security Guard of Your Network
Imagine an office building.
Anyone can approach the building.
But should everyone be allowed inside?
Absolutely not.
You install security checkpoints.
Security personnel check:
- Who is entering.
- What access they have.
- Whether they are authorized.
- Whether their behavior violates security policies.
A firewall performs a similar responsibility for network traffic.
A firewall:
- Monitors incoming and outgoing traffic.
- Applies predefined security rules.
- Allows or blocks traffic.
- Can track active connections.
- Helps protect systems against unauthorized access.
Let's understand through an example.
Imagine your company hosts a production application.
You want:
- Public users to access HTTPS.
- Developers to access SSH only through an approved management path.
- Unauthorized connections to be blocked.
A firewall can enforce these policies.
Different types of firewalls
1. Packet-filtering firewall
Examines packet information such as source IP, destination IP, protocol and ports.
2. Stateful firewall
Tracks connection states and makes decisions based on the context of active connections.
3. Next-generation firewall (NGFW)
Can provide advanced inspection, application awareness and other security capabilities.
Where does a firewall operate in the OSI model?
This is an important interview trap.
It is incorrect to say that every firewall operates exclusively at Layer 4–7.
Different firewalls operate at different levels:
- Traditional packet-filtering firewalls inspect Layer 3 and Layer 4 information.
- Application-aware firewalls can inspect Layer 7 information.
- Some security appliances combine multiple capabilities.
A firewall can be implemented as:
- Hardware appliance.
- Software application.
- Cloud-based network security service.
Production example
Imagine deploying a web application on a cloud server.
You configure security rules to allow HTTPS traffic on port 443 while restricting administrative access.
That's firewall functionality in practice.
Interview memory: A firewall enforces network security policies by monitoring and controlling traffic.
Chapter 7: Now Follow the Complete Journey of Your Message
We have met all ten devices.
But knowing ten definitions is not the same as understanding networking.
Let's put everything together.
Remember the message you sent to your friend?
Here's a simplified journey.
Step 1: Your laptop creates network data.
Your application prepares the information to be transmitted.
Step 2: Your laptop determines the destination.
It uses IP addressing and its routing information to determine whether the destination is local or remote.
Step 3: Your laptop prepares a local network frame.
If the destination is remote, the frame is addressed to the MAC address of the default gateway.
Your laptop may use ARP in IPv4 networks to resolve that local next-hop MAC address.
Step 4: The switch forwards the frame.
The switch uses its MAC address table to determine where the frame should go.
Step 5: Your router receives the packet.
The router examines the destination IP and checks its routing table.
Step 6: Your ISP receives and forwards traffic.
The packet may pass through multiple routers and network devices.
Step 7: Security devices inspect traffic.
Firewalls and other security systems enforce relevant policies along the journey.
Step 8: The destination network receives the packet.
The destination's router forwards it into the appropriate local network.
Step 9: The destination device receives the data.
The receiving system processes the network information and delivers the data to the relevant application.
And that's how your simple message travels through a complex network infrastructure.
One important note: the internet doesn't require every message to pass through every device discussed in this article. These devices represent different networking functions, and the actual path depends on the network architecture.
Chapter 8: The Ultimate Comparison — Hub vs Switch vs Router
If an interviewer asks you to differentiate between these three devices, you should be able to answer confidently.
| Feature | Hub | Switch | Router |
|---|---|---|---|
| OSI layer | Layer 1 | Layer 2 | Layer 3 |
| Main addressing | None | MAC | IP |
| Main responsibility | Signal repetition | Frame forwarding | Packet routing |
| Decision-making | None | MAC table | Routing table |
| Connects | Physical LAN devices | LAN devices | Different IP networks |
| Collision domains | Shared | Usually one per port | Not its primary role |
| Broadcast domains | Shared | Per VLAN | Separated by routing boundaries |
Remember this forever:
Hub: Repeats signals.
Switch: Forwards frames using MAC addresses.
Router: Routes packets using IP addresses.
Three devices.
Three different responsibilities.
Three different problems being solved.
Chapter 9: Software Engineers — Why Should You Care?
You might be thinking:
"I'm a React, Laravel, Rails, Node.js or MERN developer. Why should I learn all these networking devices?"
Here's why.
Imagine you deploy your MERN application.
Everything works locally.
You deploy it to production.
Suddenly, users report:
- Website not accessible.
- API requests timing out.
- Database connection failures.
- Unauthorized network access.
- Services unable to communicate.
Can you debug these problems without understanding networking?
You need to understand the infrastructure behind your application.
Here are some real-world connections.
Scenario 1: Your application cannot reach the internet.
You investigate the default gateway, routing configuration and network connectivity.
Scenario 2: Two servers cannot communicate.
You investigate network segmentation, routing rules and firewall policies.
Scenario 3: Your application is accessible locally but not publicly.
You investigate the router, public IP configuration, firewall rules, NAT and reverse proxy configuration.
Scenario 4: Your cloud application exposes a database publicly.
You investigate network security groups, firewall rules and private networking.
Scenario 5: Your company wants to connect multiple departments.
You understand switches, VLANs, routers and access points.
The lesson:
You don't need to become a network administrator to become a good software engineer.
But you should understand enough networking to diagnose problems, design reliable systems and communicate effectively with infrastructure engineers.
Chapter 10: Interview Questions You Must Be Able to Answer
Don't memorize the answers blindly. Understand the reasoning behind them.
Q1. What is the difference between a hub and a switch?
A hub repeats incoming signals to other ports without examining destination addresses. A switch learns MAC addresses and forwards frames based on its MAC address table.
Q2. Why is a switch more efficient than a hub?
A switch reduces unnecessary frame forwarding, creates separate collision domains per port and supports more efficient communication.
Q3. What is the difference between a switch and a router?
A traditional Layer 2 switch forwards Ethernet frames using MAC addresses within a LAN. A router forwards IP packets between networks using IP addresses and routing tables.
Q4. What is a MAC address?
A MAC address is a link-layer address used to identify a network interface on a local network.
Q5. What is an IP address?
An IP address is a logical network-layer address used to identify an interface and support packet delivery across IP networks.
Q6. Can a switch connect different networks?
A Layer 2 switch primarily connects devices within the same VLAN. A Layer 3 switch can also perform routing between IP networks.
Q7. What is a default gateway?
It is the next-hop device, usually a router, that a host uses to reach destinations outside its local network.
Q8. What is a repeater?
A repeater regenerates signals to extend the physical communication distance.
Q9. What is the difference between a bridge and a switch?
A bridge connects LAN segments using MAC-based forwarding. A switch is essentially a multiport bridge with greater port density and advanced capabilities.
Q10. What is an access point?
An access point provides wireless devices with access to a network, typically bridging Wi-Fi clients to a wired LAN.
Q11. What is a modem?
A modem establishes communication over an ISP access technology through modulation and demodulation where applicable.
Q12. What is a gateway?
A gateway is an entry or exit point between networks or systems. Depending on its type, it may also translate protocols or data formats.
Q13. What is a firewall?
A firewall monitors and controls network traffic based on security policies.
Q14. What is the difference between a router and a firewall?
A router primarily forwards packets between networks. A firewall primarily enforces security policies. Modern devices may combine both responsibilities.
Q15. What is a brouter?
A brouter combines bridging and routing functionality.
Q16. Does a router forward broadcast traffic?
Ordinary Layer 2 broadcasts are not normally forwarded across IP routing boundaries.
Q17. What happens when a switch doesn't know the destination MAC address?
It generally floods the frame through eligible ports in the same VLAN, excluding the incoming port.
Q18. Why do we need routers if we already have switches?
Switches provide local network connectivity. Routers enable communication between different IP networks.
Q19. Can a firewall be software-based?
Yes. Firewalls can be hardware appliances, software implementations or cloud-based services.
Q20. Does every networking device operate at exactly one OSI layer?
No. The OSI model is a conceptual framework. Some devices combine multiple functions and may operate across several layers.
Chapter 11: Your Final Examination — Do You Understand Networking?
Enough reading.
Now it's time to prove that you actually understand what you have learned.
Imagine you are attending a software engineering interview.
The interviewer gives you the following examination.
Rules:
- Don't scroll back to the article.
- Don't search Google.
- Don't simply repeat definitions.
- Explain WHY the answer is correct.
- Try to solve the scenario-based questions yourself.
Total marks: 30
Part A — Quick Concept Check (10 Marks)
Choose the correct answer.
1. Which device operates at Layer 1 and forwards incoming signals without understanding addresses?
A. Switch
B. Router
C. Hub
D. Bridge
2. Which device maintains a MAC address table?
A. Hub
B. Switch
C. Repeater
D. Modem
3. Which address does a traditional Layer 2 switch primarily use for forwarding?
A. IP address
B. MAC address
C. Port number
D. Domain name
4. Which device connects different IP networks?
A. Hub
B. Repeater
C. Router
D. Access Point
5. Which device regenerates signals to extend communication distance?
A. Router
B. Repeater
C. Bridge
D. Firewall
6. Which device provides wireless access to a wired LAN?
A. Access Point
B. Modem
C. Hub
D. Brouter
7. Which device combines bridging and routing functionality?
A. Gateway
B. Repeater
C. Brouter
D. Switch
8. Which device enforces network security policies?
A. Hub
B. Firewall
C. Bridge
D. Repeater
9. What does a router primarily use to select a forwarding path?
A. MAC address table
B. Routing table
C. Employee ID
D. Wi-Fi password
10. What does MODEM stand for?
A. Modern Device Manager
B. Modulator-Demodulator
C. Modular Data Management
D. Modified Digital Memory
Part B — Real-World Scenarios (10 Marks)
These questions test understanding, not memorization.
11. A company has 30 computers. The network administrator wants to connect all computers and forward frames intelligently using MAC addresses.
Which device should be selected, and why?
12. Two computers belong to different IP networks. They need to communicate.
Which networking device is generally responsible for forwarding their traffic between networks?
13. A company has a weak wireless signal in one part of its building.
Which device could help extend Wi-Fi coverage?
14. A switch receives an Ethernet frame whose destination MAC address is not present in its MAC address table.
What happens next?
15. A company wants to prevent unauthorized users from accessing its production server through SSH.
Which networking security mechanism should be configured, and what kind of rule would help?
Part C — Explain Like a Software Engineer (10 Marks)
Write your answers in your own words.
16. Explain the difference between a MAC address and an IP address using a real-world analogy.
17. Why is it incorrect to say that a firewall always operates at Layer 4–7?
18. Explain why a switch cannot replace a router in a traditional network architecture.
19. Your application works on localhost but cannot communicate with a production database. Explain at least four networking-related things you would investigate.
20. Describe the journey of an IP packet from your laptop to a server outside your local network. Explain the responsibilities of the switch and router.
Answer Key — Check Your Understanding
Part A
- C — Hub
- B — Switch
- B — MAC address
- C — Router
- B — Repeater
- A — Access Point
- C — Brouter
- B — Firewall
- B — Routing table
- B — Modulator-Demodulator
Part B
A switch, because it connects LAN devices and forwards Ethernet frames using MAC addresses.
A router or another Layer 3 forwarding device, because communication between IP networks requires routing.
A wireless repeater or an additional properly configured access point, depending on the network design.
The switch generally floods the frame to eligible ports in the same VLAN, excluding the incoming port.
A firewall rule restricting SSH access to authorized source IP addresses or management networks.
Part C — What a Good Answer Should Contain
A MAC address identifies an interface at the link layer, while an IP address provides logical addressing for communication across IP networks.
Because traditional packet-filtering firewalls can operate at Layers 3 and 4, while advanced application-aware firewalls can inspect Layer 7 information.
A traditional Layer 2 switch provides local connectivity, while a router forwards traffic between different IP networks.
Possible checks include:
IP address and DNS resolution.
Default gateway and routing.
Firewall and security-group rules.
Database port accessibility.
Database listening configuration.
Network segmentation and access permissions.
A host determines whether the destination is local or remote. For a remote destination, it sends a frame to its default gateway. The switch forwards the frame locally, and the router uses its routing table to forward the IP packet toward the destination network.
Final Challenge: Can You Explain Networking Without Memorizing Definitions?
Close this article.
Imagine someone asks you:
"What happens when I open a website on my laptop?"
Can you explain:
- How your laptop connects to Wi-Fi?
- How your local network forwards traffic?
- Why a MAC address is needed?
- Why an IP address is needed?
- What the default gateway does?
- How routers select paths?
- How firewalls protect communication?
- How the destination server receives the request?
If you can explain the entire journey in your own words, you have learned something far more valuable than ten textbook definitions.
Remember this:
A good software engineer doesn't just learn what a technology does.
A good software engineer understands why it exists, what problem it solves, what happens when it fails, and how it interacts with the rest of the system.
Keep learning. Keep questioning. Keep building.
CodeWithObaid — Understand the concepts. Build the solutions. Become the engineer.
Further Learning
To strengthen your networking fundamentals, explore:
- OSI Model and TCP/IP Model.
- MAC Address vs IP Address.
- ARP and DNS.
- TCP vs UDP.
- DHCP and subnetting.
- NAT and port forwarding.
- HTTP and HTTPS.
- Reverse proxies and load balancers.
- Firewalls and network security.
- Network troubleshooting using
ping,traceroute,ipconfigandnslookup.
Top comments (0)