Network switch
A network switch is a computer networking device that connects LAN segments. It was developed from the electronic hub where the hub provided a central nodal device for a star configured network. A hub, which utilises a central bus within the device, allows all star network connections receive a broadcast frame.A switch can connect Ethernet, Token Ring or other type network segments together to form a hetergenous network operating at OSI Layer 2
Switches differ mainly from hubs in that they perform microsegmentation. Microsegmentation is a term used to describe the segmentation of a collision domain into as many segments as there circuits, minus one. (#segments = # circuits - 1). This microsegmentation performed by the switch cuts the collision domain down so that only two nodes coexist within each collision domain. This way, collisions are decreased and only the two NICs which are directly connected via a point-to-point link are contending for the medium.
This point-to-point approach allows the switch to connect multiple pairs of segments at a time allowing more than one computer to transmit data at a time, without causing collisions
There are three types of ways in which a switch can operate:
- cut through
- store and forward
- fragment free cut-through
Switches provide difficulties in monitoring traffic because each port is isolated until it transmits data and even then only the sending and receiving ports are connected.
Two popular methods that are specifically designed to allow a network manager to monitor traffic are:
- port mirroring -- the switch sends a copy of network packets to a monitoring network connection.
- SMON -- "Switch Monitoring" is described by RFC 2613 and is a protocol for controlling facilities such as port mirroring.
- ARP Spoofing -- fooling the target computer into using your own MAC address for the network gateway, or alternatively getting it to use the broadcast MAC.
- MAC Flooding -- overloading the switch with a large number of MAC addresses, so that it drops into a "failopen mode".