Core Network Devices
Router: connects multiple networks (typically the home network to the internet). Routes packets between networks based on IP addresses. Home routers typically combine router, switch, wireless AP, and firewall in one device. The default gateway IP is the router's LAN-facing IP. WAN port connects to the modem/ISP; LAN ports connect to internal devices.
Switch: connects multiple devices within the same network (same subnet). Operates at Layer 2 (MAC addresses) — forwards frames only to the correct port based on the destination MAC. Unmanaged switch: plug and play, no configuration. Managed switch: configurable VLANs, port mirroring, STP — requires expertise. Home and SOHO environments typically use unmanaged switches.
Hub: legacy Layer 1 device — broadcasts all traffic to all ports regardless of destination MAC. Creates a single collision domain — all devices compete for bandwidth. Completely replaced by switches in modern networks. You may still see hubs referenced on the exam for historical context.
Wireless Access Point (WAP): provides Wi-Fi connectivity. In homes, the router includes a built-in AP. Enterprise environments use separate APs managed by a wireless controller. Access points connect to the wired network via Ethernet and bridge wireless clients into the wired LAN.
Specialized Network Devices
Modem: MOdulates/DEModulates signal between digital (computer) and analog (telephone line) or specific (cable, fiber) transmission. DSL modem: connects to phone line, modulates data over POTS. Cable modem: connects to cable TV coaxial, uses DOCSIS standard. Fiber ONT (Optical Network Terminal): connects fiber from ISP to your home network — converts optical signal to Ethernet. Modern ISP equipment often combines modem + router in one unit.
Firewall: filters network traffic based on rules — allows or blocks based on IP address, port, protocol. Hardware firewall: standalone device or built into router — protects the entire network. Software firewall: installed on individual computers (Windows Defender Firewall) — protects that device. SOHO routers include a basic NAT firewall (blocks unsolicited inbound connections). Next-generation firewalls (NGFW) add application awareness, IPS, and content filtering.
PoE switch (Power over Ethernet): delivers power to connected devices through the Ethernet cable — eliminates separate power adapter. Used for: IP phones, wireless access points, security cameras, VoIP devices. 802.3af (PoE): 15.4W per port. 802.3at (PoE+): 30W per port. 802.3bt (PoE++): up to 100W. Verify total PoE budget of switch before adding many PoE devices.
Patch panel: passive device in a wiring closet that aggregates cable terminations — cables from wall jacks terminate on the back, patch cables connect to the switch on the front. Protects switch ports from constant cable changes. Cable certifier/toner/probe used for identifying which wall jack connects to which patch panel port.