📚 A-Level WJEC Computer Science: Networking Basics Revision Guide | A-Level WJEC 计算机：网络基础 考点精讲
Networking forms the backbone of modern computing, enabling data exchange across devices and systems. In the A-Level WJEC Computer Science specification, this topic covers fundamental concepts including network types, topologies, protocols, IP addressing, hardware, and security. Understanding these concepts is essential for both the examination and practical computer literacy.
网络是现代计算的基石，使数据能够在设备和系统之间进行交换。在 A-Level WJEC 计算机科学考试大纲中，本专题涵盖了网络类型、拓扑结构、协议、IP 地址、硬件以及安全等基本概念。理解这些概念对于考试和实际计算机应用能力都至关重要。
1. Network Types (LAN, WAN, MAN, PAN) | 网络类型
A Local Area Network (LAN) connects computers within a limited geographical area such as a single building or campus. It is typically owned, controlled, and managed by a single organisation, using high-speed cables or Wi-Fi. Because of the small scale, LANs offer low latency and high data transfer rates.
局域网（LAN）在有限的地理范围内连接计算机，例如单一建筑或园区。它通常由单个组织拥有、控制和管理，使用高速电缆或 Wi-Fi。由于规模小，局域网具有低延迟和高数据传输率的特点。
A Wide Area Network (WAN) spans large geographical distances, often connecting multiple LANs across cities or countries. The internet is the largest example of a WAN. WANs rely on leased telecommunication lines, satellite links, or fibre optic cables, and often involve multiple service providers.
广域网（WAN）跨越广阔的地理距离，通常在城市或国家之间连接多个局域网。互联网就是广域网的最大例子。广域网依赖租用的电信线路、卫星链路或光纤电缆，并且常常涉及多个服务提供商。
A Metropolitan Area Network (MAN) is larger than a LAN but smaller than a WAN, typically covering a city. It may be used to connect campuses of a university or branches of a local government. MANs often use high-speed fibre connections and can combine both public and private infrastructure.
城域网（MAN）比局域网大但比广域网小，通常覆盖一个城市。它可用于连接大学的多个园区或地方政府的各个分支。城域网常使用高速光纤连接，并可以结合公共和私有基础设施。
A Personal Area Network (PAN) is a very small network used for communication between personal devices like a smartphone, tablet, and laptop, usually over Bluetooth or Wi-Fi Direct. It operates over a range of a few metres and is centrally managed by the user.
个人局域网（PAN）是一种非常小的网络，用于个人设备之间的通信，如智能手机、平板和笔记本电脑，通常通过蓝牙或 Wi-Fi Direct 连接。它的操作范围只有几米，由用户集中管理。
2. Network Topologies (Star, Bus, Ring, Mesh) | 网络拓扑
In a star topology, all nodes connect to a central switch or hub. If one cable fails, only that node is affected, making fault diagnosis easy. However, the central device is a single point of failure; if it goes down, the entire network loses connectivity.
在星型拓扑中，所有节点都连接到一个中心交换机或集线器。如果一条电缆故障，只有该节点受影响，便于故障诊断。然而，中心设备是单点故障；如果它宕机，整个网络将失去连接。
A bus topology uses a single backbone cable to which all computers connect directly. Data is sent along the cable, and all devices check the message but only the intended recipient processes it. It requires less cable but is difficult to troubleshoot and suffers from signal reflection at the ends unless properly terminated.
总线拓扑使用单根主干电缆，所有计算机直接连接其上。数据沿电缆发送，所有设备都会检查消息，但只有目标接收者会处理它。它所需电缆较少，但难以排除故障，且若末端未正确终结，会产生信号反射问题。
In a ring topology, nodes are connected in a closed loop, and data travels in one direction. Each device acts as a repeater, boosting the signal. This topology can suffer from whole-network failure if any single connection breaks, unless a dual ring is implemented.
在环型拓扑中，节点以闭环方式连接，数据单向传输。每个设备充当转发器，增强信号。如果任何一个连接断开，整个网络都会瘫痪，除非采用双环结构。
A mesh topology provides each node with a dedicated point-to-point link to every other node. This offers the highest fault tolerance and privacy, but the cabling cost and complexity are extremely high. It is commonly used in wireless networks and critical infrastructure.
网状拓扑为每个节点提供通往其他所有节点的专用点对点链路。这提供了最高的容错性和隐私性，但布线成本和复杂性极高。它通常用于无线网络和关键基础设施。
3. OSI and TCP/IP Models | OSI与TCP/IP模型
The OSI (Open Systems Interconnection) model is a conceptual framework with seven layers: Physical, Data Link, Network, Transport, Session, Presentation, and Application. It standardises network communication functions, enabling diverse systems to interoperate.
OSI（开放系统互连）模型是一个七层概念框架：物理层、数据链路层、网络层、传输层、会话层、表示层和应用层。它标准化了网络通信功能，使不同的系统能够互操作。
The TCP/IP model is a simpler four-layer architecture: Link, Internet, Transport, and Application. It is the practical protocol suite used for the internet. The layers map roughly to OSI: Link combines Physical and Data Link, Internet equals Network, and Application covers Session, Presentation, and Application.
TCP/IP 模型是一个更简单的四层架构：链路层、网络层、传输层和应用层。它是互联网实际使用的协议集。这些层大致对应 OSI 模型：链路层结合了物理层和数据链路层，网络层等于 OSI 的网络层，应用层则涵盖了会话层、表示层和应用层。
The Physical layer (OSI) deals with raw bit transmission over a physical medium, specifying cables, voltages, and timing. The Data Link layer provides node-to-node transfer, framing, and MAC addressing. The Network layer handles routing and logical addressing (IP).
物理层（OSI）处理物理介质上的原始比特传输，规定了电缆、电压和时序。数据链路层提供节点到节点的传输、成帧和 MAC 地址。网络层处理路由和逻辑寻址（IP）。
The Transport layer ensures reliable data transfer (TCP) or fast delivery without guarantee (UDP). The Session layer manages dialogues; the Presentation layer translates data formats; the Application layer provides network services to user applications.
传输层确保可靠的数据传输（TCP）或无保证的快速交付（UDP）。会话层管理对话；表示层转换数据格式；应用层为用户应用程序提供网络服务。
4. Network Protocols | 网络协议
TCP (Transmission Control Protocol) is connection-oriented and guarantees delivery by using acknowledgements and retransmissions. It establishes a session with a three-way handshake and is used where data integrity is crucial, such as web browsing and email.
TCP（传输控制协议）是面向连接的，通过使用确认和重传来保证交付。它通过三次握手建立会话，用于数据完整性至关重要的场合，如网页浏览和电子邮件。
UDP (User Datagram Protocol) is connectionless and sends packets without acknowledgements, reducing overhead. It is ideal for real-time applications like video streaming and online gaming, where minor packet loss is acceptable.
UDP（用户数据报协议）是无连接的，发送数据包无需确认，降低了开销。它非常适合实时应用，如视频流和在线游戏，在这些场景下少量丢包是可以接受的。
HTTP (Hypertext Transfer Protocol) governs the transfer of web pages, using a request-response model. HTTPS encrypts this communication with SSL/TLS, providing confidentiality and integrity. FTP (File Transfer Protocol) is used for transferring files between a client and a server.
HTTP（超文本传输协议）管理网页传输，采用请求-响应模型。HTTPS 使用 SSL/TLS 加密通信，提供机密性和完整性。FTP（文件传输协议）用于在客户端和服务器之间传输文件。
SMTP (Simple Mail Transfer Protocol) sends emails from a client to a mail server and between servers. POP3 and IMAP are used by a client to retrieve emails from a server; IMAP keeps emails on the server, while POP3 downloads and often deletes them.
SMTP（简单邮件传输协议）将电子邮件从客户端发送到邮件服务器以及服务器之间。POP3 和 IMAP 用于客户端从服务器检索邮件；IMAP 将邮件保留在服务器上，而 POP3 下载并通常会删除邮件。
5. IP Addressing and Subnetting | IP地址与子网划分
An IPv4 address is a 32-bit number, commonly written in dotted decimal notation as four octets (e.g., 192.168.1.10). It consists of a network portion and a host portion, determined by the subnet mask.
IPv4 地址是一个 32 位数字，通常用点分十进制表示为四个八位字节（例如 192.168.1.10）。它由网络部分和主机部分组成，由子网掩码决定。
The subnet mask is a 32-bit number that uses consecutive 1s to identify the network bits and 0s for host bits. A common mask is 255.255.255.0, which in CIDR notation is /24, meaning the first 24 bits are the network prefix.
子网掩码是一个 32 位数字，使用连续的 1 标识网络位，0 标识主机位。常见的掩码是 255.255.255.0，采用 CIDR 表示法即为 /24，表示前 24 位是网络前缀。
Subnetting divides a larger network into smaller logical sub-networks to improve performance and security. The number of available host addresses in a subnet is 2host bits – 2, because the network address and broadcast address are reserved.
子网划分将较大的网络分成较小的逻辑子网，以提高性能和安全性。一个子网中可用的主机地址数量为 2主机位数 – 2，因为网络地址和广播地址是被保留的。
Network Address Translation (NAT) allows multiple private IP addresses to share a single public IP, conserving global address space. The router maps internal addresses to its public IP for outgoing packets and reverses the process for incoming packets.
网络地址转换（NAT）允许多个私有 IP 地址共享一个公共 IP，节省了全球地址空间。路由器将内部地址映射到其公共 IP 用于出站数据包，并对入站数据包反向操作。
6. IPv4 vs IPv6 | IPv4与IPv6
IPv4 uses 32-bit addressing, providing approximately 4.3 billion unique addresses. Due to the internet's growth, this address space has been exhausted. IPv6 was developed as the successor, using 128-bit addressing to offer a vastly larger pool.
IPv4 使用 32 位地址，提供约 43 亿个唯一地址。由于互联网的增长，该地址空间已耗尽。IPv6 被开发为继任者，使用 128 位地址，提供了极大的地址池。
An IPv6 address is written as eight groups of four hexadecimal digits, separated by colons (e.g., 2001:0db8:85a3:0000:0000:8a2e:0370:7334). Leading zeros can be omitted, and consecutive groups of zeros can be compressed with a double colon (::).
IPv6 地址写作用冒号分隔的八组四位十六进制数字（例如 2001:0db8:85a3:0000:0000:8a2e:0370:7334）。前导零可以省略，连续的零组可以用双冒号（::）压缩。
IPv6 includes enhanced security features (IPsec mandatory), simplified header, auto-configuration, and better support for mobile devices. It eliminates the need for NAT due to its huge address space, which simplifies peer-to-peer connections.
IPv6 包括增强的安全特性（强制 IPsec）、简化的报头、自动配置和更好的移动设备支持。由于其巨大的地址空间，无需 NAT，简化了点对点连接。
7. Network Hardware | 网络硬件
A router operates at the network layer, forwarding IP packets between different networks based on routing tables. It makes decisions using the destination IP address and is essential for connecting a LAN to the internet.
路由器工作在网络层，根据路由表在不同网络之间转发 IP 数据包。它根据目标 IP 地址做出决策，是局域网连接到互联网的必备设备。
A switch operates at the data link layer, forwarding frames based on MAC addresses within the same network. It learns the addresses of connected devices and creates a collision-free environment by dedicating bandwidth to each port.
交换机工作在数据链路层，在同一网络内根据 MAC 地址转发帧。它会学习连接设备的地址，并通过为每个端口分配专用带宽来创建无冲突环境。
A hub is a simple device that broadcasts data to all connected nodes, regardless of the destination. It operates at the physical layer and can cause collisions and unnecessary network traffic. Hubs are largely obsolete in modern networks.
集线器是一种简单的设备，不论目的地，将数据广播给所有连接的节点。它工作在物理层，可能引起冲突和不必要的网络流量。集线器在现代网络中已基本被淘汰。
A bridge connects two network segments and filters traffic based on MAC addresses, reducing collisions. A gateway connects networks using different protocols, translating between them, operating typically at layers above the network layer.
网桥连接两个网络段，并根据 MAC 地址过滤流量，减少冲突。网关连接使用不同协议的网络，在它们之间进行转换，通常工作在网络层以上的层级。
8. Data Transmission Methods | 数据传输方式
Serial transmission sends bits sequentially over a single wire. It is simpler and suitable for long distances, as it avoids clock skew issues. USB and RS-232 are common serial interfaces. Parallel transmission sends multiple bits simultaneously across multiple wires, achieving higher throughput over short distances but suffers from crosstalk.
串行传输通过单根线顺序发送比特。它更简单，适合长距离传输，因为它避免了时钟偏移问题。USB 和 RS-232 是常见的串行接口。并行传输通过多根线同时发送多个比特，在短距离内实现更高吞吐率，但易受串扰影响。
Synchronous transmission relies on a shared clock signal between sender and receiver, allowing continuous stream of data blocks. It is efficient for high-speed transfers. Asynchronous transmission uses start and stop bits for each data unit, making it simpler but with higher overhead.
同步传输依赖发送方和接收方之间的共享时钟信号，允许连续传输数据块。它适用于高速传输。异步传输为每个数据单元使用起始位和停止位，使其简单但开销较高。
Simplex communication is unidirectional (e.g., TV broadcast). Half-duplex allows communication in both directions but only one at a time (e.g., walkie-talkie). Full-duplex provides simultaneous two-way communication (e.g., telephone).
单工通信是单向的（例如电视广播）。半双工允许双向通信，但一次只能一个方向（例如对讲机）。全双工提供同时双向通信（例如电话）。
9. Error Detection and Correction | 差错检测与纠正
Parity checking adds a parity bit to data to make the number of 1s even (even parity) or odd (odd parity). It can detect single-bit errors but cannot correct them, and fails if an even number of bits flip.
奇偶校验为数据添加一个奇偶位，使 1 的数量为偶数（偶校验）或奇数（奇校验）。它可以检测单比特错误，但无法纠正，且如果偶数个比特翻转则会失效。
A checksum involves summing up data blocks and sending the complement of that sum along with the data. The receiver recalculates and compares. It detects multiple errors but is not completely reliable.
校验和是将数据块相加，并将该和的补码随数据一起发送。接收方重新计算并进行比较。它可以检测多个错误，但并非完全可靠。
Cyclic Redundancy Check (CRC) treats data as a binary polynomial and divides it by a generator polynomial; the remainder is appended. It is highly effective at detecting burst errors and is widely used in network frames.
循环冗余校验（CRC）将数据视为二进制多项式，并用生成多项式除它；余数被附加到数据后。它在检测突发错误方面非常有效，广泛用于网络帧中。
Forward error correction (FEC) techniques, such as Hamming codes, add redundant bits that allow the receiver to both detect and correct some errors without retransmission, which is critical for unreliable links.
前向纠错（FEC）技术，如汉明码，添加冗余位使接收方能够检测并纠正某些错误而无需重传，这对于不可靠的链路至关重要。
10. Network Security | 网络安全
Firewalls monitor and control incoming and outgoing network traffic based on predetermined security rules. They can be hardware- or software-based, and use packet filtering, stateful inspection, or proxy services to block threats.
防火墙根据预定安全规则监控和控制进出网络流量。它们可以是基于硬件或软件的，并使用包过滤、状态检测或代理服务来阻止威胁。
Encryption transforms plaintext into ciphertext using an algorithm and a key. Symmetric encryption (e.g., AES) uses the same key for encryption and decryption; asymmetric encryption (e.g., RSA) uses a public and private key pair for secure key exchange and digital signatures.
加密使用算法和密钥将明文转换为密文。对称加密（如 AES）使用相同密钥进行加密和解密；非对称加密（如 RSA）使用公钥和私钥对来实现安全密钥交换和数字签名。
Authentication verifies the identity of a user or device. Methods include passwords, multi-factor authentication, biometrics, and digital certificates. Strong authentication prevents unauthorised access and is often combined with authorisation.
认证验证用户或设备的身份。方法包括密码、多因素认证、生物识别和数字证书。强认证可防止未经授权的访问，并常与授权结合使用。
Denial-of-Service (DoS) and Distributed DoS (DDoS) attacks flood a server or network with excessive traffic, making it unavailable. Mitigation includes traffic filtering, rate limiting, and using content delivery networks.
拒绝服务（DoS）和分布式拒绝服务（DDoS）攻击用过量流量淹没服务器或网络，使其不可用。缓解措施包括流量过滤、速率限制和使用内容分发网络。
11. Client-Server vs Peer-to-Peer | 客户端-服务器与点对点
In the client-server model, a central server provides services and resources, and clients request them. The server manages data storage, security, and backups. This model is scalable and secure but requires expensive server hardware and maintenance.
在客户端-服务器模型中，中央服务器提供服务与资源，客户端请求它们。服务器管理数据存储、安全和备份。该模型可扩展且安全，但需要昂贵的服务器硬件和维护。
Peer-to-peer (P2P) networks have no central server; each node acts as both client and server, sharing resources directly. They are easy to set up and cost-effective for small groups, but security and management are more challenging.
点对点（P2P）网络没有中央服务器；每个节点既作为客户端也作为服务器，直接共享资源。它们易于设置，对于小群体具有成本效益，但安全性和管理更具挑战性。
Cloud computing extends the client-server concept by hosting services on remote data centres, offering on-demand scalability, reliability, and various service models (IaaS, PaaS, SaaS). Data is accessed over the internet.
云计算通过将服务托管在远程数据中心来扩展客户端-服务器概念，提供按需可扩展性、可靠性和各种服务模型（IaaS、PaaS、SaaS）。数据通过互联网访问。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
或截图后用「扫一扫 → 相册」选择本图