LAN Segmentation

LAN segmentation simply means breaking one LAN into parts, with each part called a segment. The term LAN segment comes from the original use of a physical bus with 10BASE2 and 10BASE5. A single Ethernet segment consisted of the devices connected serially with coaxial cable. When 10BASE-T came along, the term segment still was used, this time to identify a hub with multiple devices connected to it.

Figure 9-7 repeats an earlier figure, but with the term segment noted on the figure.

Figure 9-7 Segments and Segmentation with a Bridge

Figure 9-7 Segments and Segmentation with a Bridge

Network Segmentation

With a single hub, or multiple hubs but no bridges, switches, or routers, you have a single segment. When you separate the network with a bridge, switch, or router, you create multiple segments. So, in Figure 9-7, you can say that the bridge separates the network into two separate segments. Many people use the term Ethernet segment very loosely, but for the CCNA exams, you can think of segment as meaning the same thing as collision domain.

As mentioned earlier, a collision domain is the set of LAN interfaces whose frames could collide with each other, but not with any other devices in the network. The bridge in Figure 9-7 creates two separate Ethernet segments, and each is a separate collision domain. Figure 9-8 shows a typical example of the definition of collision domains.

Collision Domain Networking

Each separate segment, or collision domain, is shown with a dashed-line circle in the figure. The switch on the right has a separate collision domain for each port. The hub near the center of the network does not create multiple collision domains because it repeats all frames out all ports. Routers also separate LANs into separate collision domains (although that was not covered earlier in this chapter.)

Just like the concept of a collision domain relates to where a frame can be sent and where it can cause collisions, the concept of a broadcast domain relates to where broadcasts can be forwarded. Bridges and switches forward broadcasts and multicasts on all ports. Because broadcast frames are sent out all ports, a bridge or switch creates only a single broadcast domain. A broadcast domain is the set of devices for which, when one of the devices sends a broadcast, all the other devices receive a copy of the broadcast.

Only routers stop the flow of broadcasts. Figure 9-9 provides the broadcast domains for the same network depicted in Figure 9-8.

Broadcasts sent by a device in one broadcast domain are not forwarded to devices in another broadcast domain. In this example, there are two broadcast domains. For instance, the router will not forward a LAN broadcast sent by a PC on the left to the segment on the right. In the old days, the term broadcast firewall described the fact that routers did not forward LAN broadcasts.

Figure 9-9 Broadcast Domains

Figure 9-9 Broadcast Domains

Broadcast Collision Examples

General definitions for a collision domain and a broadcast domain are as follows:

■ A collision domain is a set of network interface cards (NICs) for which a frame sent by one NIC could result in a collision with a frame sent by any other NIC in the same collision domain.

■ A broadcast domain is a set of NICs for which a broadcast frame sent by one NIC will be received by all other NICs in the same broadcast domain.

In short, hubs do not actually segment an Ethernet into multiple segments. Bridges and switches do segment an Ethernet into different collision domains, and routers segment an Ethernet into different collision and broadcast domains.

The INTRO exam actually might phrase questions in terms of the benefits of LAN segmentation instead of just asking for the facts related to collision domains and broadcast domains. Table 9-4 lists some of the key benefits. The features in the table should be interpreted within the following context: "If I migrated from a single Ethernet segment to a network with two segments separated by a bridge/switch/router, and if traffic loads and destinations stayed constant, the result would be_."

Table 9-4 Benefits When Moving from One Ethernet Segment to Multiple Segments Using Bridges, Switches, and Routers

Readers' Questions

  • HENRIIKKA
    What is a collision domain in networking?
    8 months ago
  • A collision domain is a network segment or a portion of a network in which collisions can occur between network devices when they transmit data at the same time. In Ethernet networks, collisions occur when multiple devices connected to the same network segment attempt to send data simultaneously. In a collision domain, only one device can transmit data at a time. When two or more devices attempt to transmit data simultaneously, their signals interfere with each other, resulting in collisions. These collisions can cause data corruption and lead to network performance issues. Switches and bridges in modern Ethernet networks typically work to reduce the size of collision domains by creating separate collision domains for each connected device. This is achieved by using a method called store-and-forward, where each data packet is received, stored, and forwarded individually, rather than being transmitted immediately. This helps to prevent collisions and improve network performance.
    • harri
      What frames are commonly used in lans?
      1 year ago
    • The most common frames used in local area networks (LANs) are Ethernet frames, used for Ethernet networking. Additionally, Token Ring frames are used for Token Ring networks, while FDDI frames are used for FDDI networks.
      • everard
        What is segmentation in networking?
        1 year ago
      • Segmentation in networking is a process of dividing a larger network into smaller segments or subnets. This allows different groups of network users to be organized into different segments, each with its own set of security features and access control. Segmentation can also improve network performance by isolating traffic and allowing for more organized communication between users.
        • anssi
          Which of the following are results of using a router to segment a network?
          1 year ago
          1. Improved security and network performance.
          2. Reduced risk of broadcast storms.
          3. Isolation of local and remote traffic.
          4. Improved network scalability and flexibility.
          5. Increased network availability.
          • odovacar
            What is a segment in networking?
            1 year ago
          • In networking, a segment is a portion of a network that is separated from the rest of the network by a router, firewall, bridge, or other similar device. Segments help to control traffic across a network and improve its overall performance, and they can be used to create separate subnetworks.
            • Elanor
              How brigde block data passing from network segment?
              1 year ago
            • A bridge block data passing from a network segment by using a firewall. A firewall is a security device that is configured to block traffic from entering or exiting a network segment. Firewalls can be configured to allow or deny traffic based on a variety of criteria, such as IP address, port, protocol, or application. Firewalls are an essential part of network security, as they provide an additional layer of security to prevent unwanted or malicious traffic from entering a network.

              Disclosure: Some of the links above are affiliate links. This means that, at zero cost to you, I will earn an affiliate commission if you click through the link and finalize a purchase.

              Feature

              Bridging

              Switching

              Routing

              Greater cabling distances allowed

              Yes

              Yes

              Yes

              Decrease in collisions

              Yes

              Yes

              Yes

              Decreased adverse impact of broadcasts

              No

              No

              Yes

              Decreased adverse impact of multicasts

              No

              No*

              Yes

              Increase in bandwidth

              Yes

              Yes

              Yes

              *Switches today support several methods to optimize multicast forwarding, such as Internet Group Management Protocol (IGMP) snooping

              *Switches today support several methods to optimize multicast forwarding, such as Internet Group Management Protocol (IGMP) snooping

              Continue reading here: The Need for Spanning Tree

              Was this article helpful?

              +7 0