📚 Network Hardware | 网络硬件
In modern computer networks, hardware devices are the physical building blocks that enable data to travel from one device to another. Whether you are sending an email, streaming a video, or loading a website, a range of specialised network hardware works behind the scenes to direct, filter, and deliver your data reliably. This article explores the essential network hardware components covered in Cambridge IGCSE Science, explaining what each device does, how it operates, and how they fit together in typical home and school networks.
在现代计算机网络中，硬件设备是使数据能从一台设备传输到另一台设备的物理构建模块。无论是发送电子邮件、流媒体播放视频还是加载网页，一系列专门的网络硬件在幕后工作，来引导、过滤并可靠地传递你的数据。本文探索剑桥 IGCSE 科学课程中涵盖的基本网络硬件组件，解释每种设备的作用、工作方式以及它们在典型的家庭和学校网络中如何协同工作。
1. What Is Network Hardware? | 什么是网络硬件？
Network hardware refers to the physical devices that connect computers and other endpoints within a network. These components handle tasks such as signal transmission, data forwarding, addressing, and security enforcement. Without them, digital devices would remain isolated islands, unable to share information or access the internet.
网络硬件指的是将计算机和其他终端节点连接在一个网络中的物理设备。这些组件负责信号传输、数据转发、寻址和安全策略的执行等任务。没有它们，数字设备将如同孤岛，无法共享信息或访问互联网。
Key examples of network hardware include network interface cards (NICs), hubs, switches, routers, modems, wireless access points and firewalls. Each device operates at a specific layer of the network model, and understanding their roles helps in designing efficient and secure networks.
网络硬件的关键例子包括网络接口卡（NIC）、集线器、交换机、路由器、调制解调器、无线接入点和防火墙。每种设备在网络模型的特定层次上运行，理解它们的角色有助于设计高效、安全的网络。
2. Network Interface Card (NIC) | 网络接口卡
A network interface card, often called a NIC, provides the physical connection between a computer and a network cable or wireless signal. Every NIC contains a unique Media Access Control (MAC) address, usually expressed as six pairs of hexadecimal digits, such as 00:1A:2B:3C:4D:5E. This address is burned into the hardware and identifies the device on the local network.
网络接口卡，通常称为网卡，提供计算机与网线或无线信号之间的物理连接。每一块网卡都包含一个唯一的介质访问控制（MAC）地址，通常表示为六对十六进制数字，比如 00:1A:2B:3C:4D:5E。这个地址被固化在硬件中，用于在本地网络中标识该设备。
NICs can be wired (using an RJ45 Ethernet port) or wireless (using Wi‑Fi antennas). They prepare outgoing data by converting parallel data from the computer into serial signals suitable for the network medium, and they also check for errors in incoming frames.
网卡可以是有线的（使用 RJ45 以太网端口）或无线的（使用 Wi‑Fi 天线）。它们通过将计算机内部的并行数据转换为适合网络介质的串行信号来准备待发送的数据，也会检查接收帧中的错误。
3. Hub: The Simplest Connector | 集线器：最简单的连接器
A hub is a straightforward networking device that joins multiple computers together in a star topology. When a hub receives a data signal on one port, it simply repeats that signal out to all other ports, regardless of the intended recipient. This means every device connected to the hub sees all the traffic, which creates unnecessary network load and security risks.
集线器是一种简单的网络设备，用于将多台计算机以星型拓扑连接在一起。集线器在一个端口上收到数据信号时，会简单地把该信号复制到所有其他端口，完全不考虑谁是预期接收者。这意味着每个连接到集线器的设备都能看到所有流量，从而产生不必要的网络负载和安全风险。
Hubs operate at Layer 1 (the physical layer) of the OSI model. They do not read MAC addresses or make any forwarding decisions. Because of their inefficiency and lack of intelligence, hubs have largely been replaced by switches in modern networks.
集线器工作在 OSI 模型的第 1 层（物理层）。它们不读取 MAC 地址，也不做任何转发判断。由于效率低下且缺乏智能，集线器在现代网络中已基本被交换机取代。
4. Switch: Intelligent Data Forwarding | 交换机：智能数据转发
A switch is a more advanced device that connects devices within a local area network (LAN) and forwards data only to the specific destination port. When a frame arrives, the switch reads the destination MAC address and looks it up in its MAC address table. If the address is known, the frame is sent out only on the corresponding port, which greatly reduces unnecessary traffic.
交换机是一种更先进的设备，用于在局域网（LAN）内连接设备，并仅将数据转发到特定的目标端口。当一个帧到达时，交换机会读取目标 MAC 地址并在其 MAC 地址表中查找。如果地址已知，帧就只从相应的端口发出，这大大减少了不必要的流量。
Switches work at Layer 2 (the data link layer) and support full‑duplex communication, meaning devices can send and receive simultaneously without collisions. Managed switches also offer features such as virtual LANs (VLANs) and bandwidth control, making them suitable for larger networks.
交换机工作在第 2 层（数据链路层），并支持全双工通信，即设备可以同时收发而不会发生冲突。可管理交换机还提供虚拟局域网（VLAN）和带宽控制等功能，因此适用于较大的网络。
5. Router: Connecting Different Networks | 路由器：连接不同网络
A router joins multiple networks together and forwards data packets between them using IP addresses. Unlike a switch, which only cares about MAC addresses within the same network, a router examines the destination IP address of a packet and decides the best path to send it across the internet or between different LANs. This is a Layer 3 (network layer) function.
路由器将多个网络连接在一起，并使用 IP 地址在它们之间转发数据包。与只关心同一个网络中 MAC 地址的交换机不同，路由器检查数据包的目的 IP 地址，并决定将其发送到互联网或不同局域网之间的最佳路径。这是第 3 层（网络层）的功能。
Home routers often combine routing, switching and wireless access point functions in one box. They also perform Network Address Translation (NAT), which allows multiple devices to share a single public IP address provided by the internet service provider.
家用路由器通常将路由、交换和无线接入点功能集成在一个盒子里。它们还执行网络地址转换（NAT），允许多台设备共享互联网服务提供商提供的单个公共 IP 地址。
6. Modem: Bridging the Internet Gap | 调制解调器：弥合互联网鸿沟
A modem (modulator‑demodulator) converts digital signals from a computer into analogue signals that can travel over telephone lines, coaxial cables or fibre‑optic connections, and vice versa. Without a modem, the digital data generated by your devices cannot be transmitted over the long‑distance analogue infrastructure of an ISP.
调制解调器（调制器‑解调器）将计算机的数字信号转换为可通过电话线、同轴电缆或光纤传输的模拟信号，反之亦然。没有调制解调器，你的设备生成的数字数据就无法通过 ISP 的长距离模拟基础设施传输。
In fibre‑optic networks, an Optical Network Terminal (ONT) acts as the modem, translating light signals into electrical signals. Modems are often paired with a router, and many internet service providers supply combined modem‑router units to simplify home setups.
在光纤网络中，光网络终端（ONT）扮演调制解调器的角色，将光信号转换为电信号。调制解调器常常与路由器配对使用，许多互联网服务提供商提供一体化的调制解调器‑路由器单元，以简化家庭配置。
7. Wireless Access Point (WAP) | 无线接入点
A wireless access point connects Wi‑Fi‑enabled devices to a wired network. It bridges the wireless radio signals used by laptops and smartphones with the Ethernet‑based LAN. A WAP contains a radio transmitter and receiver, and it broadcasts a Service Set Identifier (SSID) so that wireless clients can discover and connect to the network.
无线接入点将支持 Wi‑Fi 的设备连接到有线网络。它在笔记本电脑和智能手机使用的无线射频信号与基于以太网的局域网之间架起桥梁。WAP 包含一个无线电收发器，并广播一个服务集标识符（SSID），以便无线客户端能够发现并连接到网络。
Standalone access points are common in schools and offices, where multiple WAPs provide seamless coverage over large areas. Many home routers have a built‑in access point, but in enterprise environments, dedicated access points offer better performance, security and roaming capability.
独立的接入点在覆盖大面积的学校和办公室中很常见，多个 WAP 可提供无缝覆盖。许多家用路由器内置了接入点功能，但在企业环境中，专用接入点提供更好的性能、安全性和漫游能力。
8. Firewall: Protecting the Network Perimeter | 防火墙：保护网络边界
A firewall is a network security device, either hardware or software, that monitors incoming and outgoing traffic and decides whether to allow or block specific data packets based on predefined security rules. It is often placed at the boundary between a trusted internal network and the untrusted internet, forming the first line of defence against cyber threats.
防火墙是一种网络安全设备（硬件或软件），用于监视传入和传出的流量，并根据预定义的安全规则决定是允许还是阻止特定的数据包。它通常部署在可信内部网络与不可信互联网之间的边界上，构成抵御网络威胁的第一道防线。
Firewalls can filter traffic by IP addresses, port numbers, protocols and even by inspecting the content of packets (deep packet inspection). In the IGCSE context, a basic firewall is often included in the home router and helps prevent unauthorised access to devices on the local network.
防火墙可以根据 IP 地址、端口号、协议进行流量过滤，甚至检查数据包内容（深度包检测）。在 IGCSE 的语境中，基本的防火墙通常内置在家用路由器里，有助于防止未经授权访问本地网络上的设备。
9. Bridge and Gateway: Specialist Connection Devices | 网桥与网关：专用连接设备
A bridge connects two separate network segments so that they function as a single network. At its core, a bridge filters traffic based on MAC addresses, forwarding only frames that need to cross to the other segment. This reduces collision domains and can improve overall network performance. A wireless bridge can also link wired LANs via Wi‑Fi.
网桥连接两个独立的网段，使它们像一个网络一样工作。网桥的核心功能是根据 MAC 地址过滤流量，只转发需要跨越到另一网段的帧。这减少了冲突域，并能提高网络的整体性能。无线网桥还可以通过 Wi‑Fi 连接两个有线局域网。
A gateway is a more complex device that connects networks using different protocols, translating data between the systems. For example, an email gateway converts SMTP messages into a format understood by a proprietary messaging system. In everyday language, the term "gateway" often refers to the router that provides access to the internet, but true gateways operate at multiple layers of the OSI model.
网关是更复杂的设备，用于连接使用不同协议的网络，并在系统之间转换数据。例如，电子邮件网关将 SMTP 消息转换为专有消息系统能够理解的格式。在日常用语中，“网关”一词常指提供互联网接入的路由器，但真正的网关工作在 OSI 模型的多个层次上。
10. Comparing Key Network Hardware | 关键网络硬件比较
The table below summarises the main differences between a hub, a switch and a router — three devices that IGCSE learners often need to distinguish clearly.
下表总结了集线器、交换机和路由器之间的主要差异——这三种设备是 IGCSE 学生经常需要明确区分的。
| Feature | Hub | Switch | Router |
|---|---|---|---|
| OSI layer | Layer 1 (Physical) | Layer 2 (Data link) | Layer 3 (Network) |
| Addressing used | None | MAC addresses | IP addresses |
| Traffic forwarding | Floods to all ports | Forward to specific port | Choose best path |
| Collision management | One big collision domain | Separate collision domain per port | Not applicable |
| Typical use | Obsolete, small LAN | Connecting devices within LAN | Connecting LAN to internet |
Understanding these distinctions helps when designing a network and answering IGCSE exam questions. For example, a question may ask why a switch is preferred over a hub in a school computer lab.
理解这些区别有助于网络设计和回答 IGCSE 考题。例如，试题可能会问为什么在学校计算机实验室中交换机比集线器更受欢迎。
11. Practical Selection for Home and Small Networks | 家庭与小型网络的实用选择
When building a small network, the choice of hardware depends on the number of wired devices, the need for Wi‑Fi, and the level of security required. A typical setup might include a combined modem‑router provided by the ISP, a switch for additional Ethernet ports, and a dedicated wireless access point for extended coverage. A hardware firewall may be integrated into the router, but for higher security, a separate firewall appliance can be used.
在搭建小型网络时，硬件的选择取决于有线设备的数量、对 Wi‑Fi 的需求以及所需的安全级别。典型的配置可能包括 ISP 提供的一体化调制解调器‑路由器、为增加以太网端口使用交换机，以及用于扩展覆盖的专用无线接入点。硬件防火墙可能已集成在路由器中，但如果需要更高的安全性，则可使用单独的防火墙装置。
For IGCSE coursework, students should be able to recommend suitable hardware for given scenarios, such as a home with several smart TVs, or a classroom with 30 computers. Justifying choices based on cost, scalability and performance is a key skill.
对于 IGCSE 课程作业，学生应能够针对给定的场景推荐合适的硬件，例如有多台智能电视的家庭，或有 30 台计算机的教室。基于成本、可扩展性和性能来证明选择的合理性是一项关键技能。
12. Summary: The Network Hardware Ecosystem | 总结：网络硬件生态系统
Network hardware components form a cooperative system in which each device plays a distinct role. NICs provide the physical identity, switches handle local delivery, routers make long‑distance decisions, modems translate signals, access points extend wireless coverage, and firewalls guard the boundaries. Together, they enable the seamless, reliable and secure communication that underpins today's digital world.
网络硬件组件构成一个协作系统，每种设备都扮演着不同的角色。网卡提供物理身份，交换机处理本地交付，路由器进行长距离路径决策，调制解调器转换信号，接入点扩展无线覆盖，防火墙守护边界。它们共同实现了无缝、可靠且安全的通信，这就是当今数字世界的基石。
For IGCSE Science students, mastering this topic means not only memorising definitions but also visualising how data flows through each piece of hardware. A strong grasp of network hardware lays the foundation for further study in computer science, cybersecurity and ICT.
对 IGCSE 科学学生而言，掌握这一主题不仅意味着记住定义，还需要想象数据如何流经每一台硬件。牢固掌握网络硬件知识，为在计算机科学、网络安全和信息通信技术领域的进一步学习打下基础。
Published by TutorHao | Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
或截图后用「扫一扫 → 相册」选择本图