📚 IGCSE CIE Computer Science: Fundamentals of Networks | IGCSE CIE 计算机：网络基础 考点精讲
Computer networks are essential to modern life, enabling communication, data sharing, and access to online resources. For IGCSE CIE Computer Science, candidates must understand the core principles that underpin these interconnected systems — from the basic types of networks and common hardware to protocols, addressing, and security considerations. This article provides a focused revision guide, breaking down each key concept so you can tackle exam questions with confidence.
计算机网络是现代生活不可或缺的一部分，它让通信、数据共享和在线资源的获取成为可能。在 IGCSE CIE 计算机科学考试中，考生必须掌握支撑这些互联系统的核心原理——从基本的网络类型和常见硬件，到协议、寻址以及安全方面的考量。本文提供一份重点复习指南，逐一剖析每个关键概念，助你自信应对考题。
1. What is a Computer Network? | 什么是计算机网络？
A computer network is a collection of two or more computing devices that are connected together, allowing them to share data, resources (such as printers or internet connections), and communicate with one another. Networks can be established using cables (wired) or radio waves (wireless). The primary benefits include efficient resource sharing, centralised management, and enhanced communication.
计算机网络是由两台或以上计算机设备连接而成的集合，使它们能够共享数据、资源（如打印机或互联网连接）并互相通信。网络可以通过线缆（有线）或无线电波（无线）建立。其主要优点包括高效的资源共享、集中管理以及增强的沟通能力。
- Advantages: File sharing, hardware sharing (e.g. one printer for multiple users), software sharing, and improved communication via email or instant messaging.
- 优点：文件共享、硬件共享（例如多用户共用一台打印机）、软件共享，以及通过电子邮件或即时消息改善通信。
- Disadvantages: Security risks (viruses can spread easily), dependency on a central server (if it fails, the network may go down), and setup costs.
- 缺点：安全风险（病毒易于传播）、对中央服务器的依赖（若服务器故障，网络可能瘫痪）以及建设成本。
2. Types of Networks: LAN and WAN | 网络类型：局域网和广域网
Networks are often classified by their geographical size. A Local Area Network (LAN) covers a small area, like a single building or campus. A Wide Area Network (WAN) spans a large geographical area, connecting LANs across cities, countries, or even continents. WANs often use external communication links such as telephone lines, fibre optics, or satellite links.
网络通常按地理范围分类。局域网（LAN）覆盖较小区域，如单栋建筑或校园。广域网（WAN）则跨越大地理范围，将不同城市、国家甚至大洲的局域网连接起来。广域网通常使用外部通信链路，如电话线、光纤或卫星链路。
| Feature | LAN | WAN |
|---|---|---|
| Full name | Local Area Network | Wide Area Network |
| 地理范围 | Small (building/campus) | Large (city/country/world) |
| Ownership | Usually owned by a single organisation | Often uses public/shared infrastructure |
| Data transfer speed | High (e.g. 1 Gbps or more) | Slower relative to LAN, though fibre can be fast |
| Examples | School network, home Wi-Fi | The Internet, a bank's national network |
Exam questions often ask you to compare LAN and WAN using points about ownership, speed, and geographic area. You may also need to describe how a WAN is formed by connecting LANs through routers and leased lines.
考题常要求你从所有权、速度和地理区域等方面比较局域网和广域网。你可能还需描述广域网是如何通过路由器和专线将局域网连接而成的。
3. Network Topologies: Star, Bus, and More | 网络拓扑：星型、总线型等
Network topology refers to the physical or logical layout of nodes and cables in a network. The two most common topologies in the IGCSE syllabus are the star topology and the bus topology. A star topology features a central switch or hub to which all devices are connected individually. In a bus topology, all devices share a single backbone cable.
网络拓扑是指网络中节点和线缆的物理或逻辑布局。IGCSE 大纲中最常见的两种拓扑是星型拓扑和总线型拓扑。星型拓扑有一个中央交换机或集线器，所有设备单独与之连接。在总线型拓扑中，所有设备共享一条主干电缆。
- Star topology advantages: If one cable fails, only that device is disconnected; easy to add new devices; centralised management. Disadvantages: If the central switch fails, the whole network fails; requires more cable than bus.
- 星型拓扑优点：一条电缆故障只会断开该设备；易于添加新设备；集中管理。缺点：如果中央交换机故障，整个网络瘫痪；比总线型需要更多电缆。
- Bus topology advantages: Cheaper due to less cable; simple to set up for small networks. Disadvantages: If the backbone cable breaks, the network is split; performance degrades with many devices; difficult to troubleshoot.
- 总线型拓扑优点：因电缆少而成本较低；小型网络易于搭建。缺点：主干电缆断裂会导致网络分裂；设备多时性能下降；难以排查故障。
You may also encounter the mesh topology (each device connects to multiple others, providing high fault tolerance) and the hybrid topology, but star and bus are the main focus.
你可能还会遇到 网状拓扑（每台设备与多台其他设备相连，容错性高）和 混合拓扑，但星型和总线型是重点。
4. Network Devices: Router, Switch, NIC, and Hub | 网络设备：路由器、交换机、网卡和集线器
Various hardware devices enable data to travel across a network. Candidates must know the roles of:
Network Interface Card (NIC): A piece of hardware inside a computer that allows it to connect to a network. Every NIC has a unique MAC address.
Switch: Connects devices within a LAN and uses MAC addresses to forward data only to the intended recipient, making it intelligent and efficient.
Router: Connects different networks together, such as a home LAN to the Internet. It routes data packets using IP addresses.
Hub: An older, simpler device that broadcasts received data to all connected ports, leading to collisions and security risks.
多种硬件设备使数据能在网络中传输。考生必须了解以下设备的角色：
网络接口卡（NIC）：计算机内部的一块硬件，使其能够连接到网络。每块网卡都有一个唯一的 MAC 地址。
交换机：在局域网内连接设备，并使用 MAC 地址将数据仅转发给目标接收者，因此智能且高效。
路由器：连接不同网络，如家庭局域网和互联网。它利用 IP 地址路由数据包。
集线器：一种较旧、较简单的设备，将接收到的数据广播到所有端口，容易导致冲突和安全风险。
A common exam question is to distinguish between a switch and a hub: a switch is more secure and reduces unnecessary traffic because it forwards data intelligently, whereas a hub sends data to every device on the network.
一个常见的考题是区分交换机和集线器：交换机更安全，因为它智能转发数据，减少不必要的流量；而集线器将数据发送给网络上的每台设备。
5. IP Addressing and MAC Addresses | IP 地址和 MAC 地址
Every device on a network requires an address to send and receive data. There are two fundamentally important types of addresses: IP addresses and MAC addresses.
网络上的每台设备都需要一个地址来发送和接收数据。有两种至关重要的地址类型：IP 地址和 MAC 地址。
An IP (Internet Protocol) address is a logical address assigned to a device, either manually or via DHCP. It can change when a device moves to a different network. IPv4 addresses are 32-bit numbers written as four octets (e.g. 192.168.1.10), while IPv6 uses 128-bit hexadecimal to overcome address exhaustion.
IP（互联网协议）地址是分配给设备的逻辑地址，可手动或通过 DHCP 分配。当设备移动到不同网络时，IP 地址可能会更改。IPv4 地址是 32 位数字，写成四个八位字节（如 192.168.1.10），而 IPv6 使用 128 位十六进制地址，以解决地址枯竭问题。
A MAC (Media Access Control) address is a unique hardware identifier burned into the NIC by the manufacturer. It is 48 bits long, expressed as 6 pairs of hexadecimal digits (e.g. 00:1A:2B:3C:4D:5E). MAC addresses normally do not change and are used for communication within a local network segment.
MAC（媒体访问控制）地址是制造商烧录在网卡中的唯一硬件标识符。它长 48 位，表示为 6 对十六进制数字（如 00:1A:2B:3C:4D:5E）。MAC 地址通常不会变更，用于本地网段内的通信。
| Property | IP Address | MAC Address |
|---|---|---|
| Type | Logical | Physical (hardware) |
| Length (typical) | 32 bits (IPv4) or 128 bits (IPv6) | 48 bits |
| Can it change? | Yes, depending on network | Generally static |
| Used for | Routing across networks | Delivery within a local network |
6. Client-Server and Peer-to-Peer Networks | 客户端-服务器和对等网络
Networks can be organised according to the relationship between devices. The client-server model relies on a central server that provides services (files, applications, authentication) to client machines. Servers are powerful and always on; clients request resources. This model offers centralised control and security but can be expensive and requires a specialist to manage.
网络可以根据设备之间的关系进行组织。客户端-服务器模型依赖于中央服务器，它为客户端计算机提供服务（文件、应用程序、身份验证）。服务器功能强大且始终保持运行；客户端请求资源。这种模式提供集中控制和安全，但成本较高，且需要专业人员管理。
In a peer-to-peer (P2P) network, each computer has equal status and can act as both a client and a server. No central server is needed; each machine can share resources directly. P2P is inexpensive and easy to set up but less secure and harder to manage at scale. File-sharing applications commonly use P2P.
在 对等（P2P）网络中，每台计算机地位平等，既可作客户端也可作服务器。无需中央服务器；每台机器都能直接共享资源。P2P 成本低廉、易于搭建，但安全性较低，且难以大规模管理。文件共享应用常采用 P2P。
- Client-server examples: School network, web servers, email systems.
- 客户端-服务器示例：学校网络、网页服务器、电子邮件系统。
- P2P examples: Home file sharing, BitTorrent, blockchain networks.
- P2P 示例：家庭文件共享、BitTorrent、区块链网络。
7. The TCP/IP Protocol Suite | TCP/IP 协议族
The TCP/IP (Transmission Control Protocol / Internet Protocol) suite is the fundamental set of protocols that governs communication on the Internet and most modern networks. It organises networking functions into four conceptual layers: Application, Transport, Internet, and Link (or Network Access). The syllabus expects you to understand the roles of TCP and IP in particular.
TCP/IP（传输控制协议/互联网协议）协议族是管理互联网及大多数现代网络通信的基本协议集。它将网络功能分为四个概念层：应用层、传输层、互联网层和链路层（或网络接入层）。大纲要求你特别理解 TCP 和 IP 的作用。
IP (Internet Protocol) is responsible for addressing and routing packets across networks. It relies on IP addresses but does not guarantee delivery. TCP works above IP and ensures reliable, ordered, and error-checked delivery of data between applications. Together they provide the reliable data transfer needed for web browsing, email, and file downloads.
IP（互联网协议）负责数据包的寻址和跨网络路由。它依赖 IP 地址，但不保证送达。TCP 在 IP 之上工作，确保应用程序之间可靠、有序且经过错误检查的数据传输。两者共同提供了网页浏览、电子邮件和文件下载所需的可靠数据传输。
Other common protocols in the suite include UDP (User Datagram Protocol), which is faster but connectionless and unreliable (used for streaming and online gaming), and application-layer protocols like HTTP and SMTP.
该协议族中的其他常见协议包括 UDP（用户数据报协议），它速度更快、无连接但不可靠（用于流媒体和在线游戏），以及 HTTP 和 SMTP 等应用层协议。
8. Data Transmission Methods: Simplex, Half-Duplex, Full-Duplex | 数据传输方式：单工、半双工、全双工
Data transmission can be categorised based on the direction of data flow and timing. Simplex communication is one-way only; data flows from sender to receiver with no return channel. Half-duplex allows data to flow in both directions, but not at the same time (like a walkie-talkie). Full-duplex permits simultaneous two-way communication (like a telephone call).
数据传输可以根据数据流方向和时间进行分类。单工通信是单向的；数据从发送方流向接收方，无反向信道。半双工允许数据双向流动，但不能同时进行（像对讲机）。全双工允许同时进行双向通信（像电话通话）。
| Transmission mode | Direction | Example |
|---|---|---|
| Simplex | One direction only | TV broadcast, keyboard to computer |
| Half-duplex | Both directions, but one at a time | Walkie-talkie, traditional Ethernet hub |
| Full-duplex | Simultaneous both ways | Phone call, modern switched Ethernet |
In an exam, you might be asked to identify which mode a given scenario uses, or explain why full-duplex increases network throughput by avoiding collisions.
考试中，你可能会被要求判断特定场景使用哪种模式，或解释为何全双工通过避免冲突来增加网络吞吐量。
9. Factors Affecting Network Performance | 影响网络性能的因素
Network performance is measured by parameters such as bandwidth, throughput, latency, and error rate. The main factors that can degrade performance include:
网络性能通过带宽、吞吐量、延迟和错误率等参数衡量。可能降低性能的主要因素包括：
- Bandwidth: The maximum data transfer capacity of a connection; if many users share a limited bandwidth, each gets a smaller slice, slowing down transfers.
- 带宽：连接的最大数据传输能力；如果许多用户共享有限带宽，每人分得的份额就小，导致传输变慢。
- Number of users/devices: More devices contending for the same network resources cause congestion and collisions, especially on older hubs.
- 用户/设备数量：越多设备争用相同网络资源，会导致拥塞和冲突，在使用旧式集线器时尤甚。
- Transmission media: Wired (fibre optic, copper) generally offers higher speed and reliability than wireless. Fibre optic is least susceptible to interference.
- 传输介质：有线（光纤、铜缆）通常比无线提供更高速度和可靠性。光纤最不受干扰影响。
- Latency: Delays caused by processing, queuing, and distance. High latency makes real-time applications (VoIP, gaming) sluggish.
- 延迟：由处理、排队和距离引起的时延。高延迟会让实时应用（VoIP、游戏）卡顿。
- Error rate: Poor cabling, interference, or weak wireless signals can corrupt data, requiring retransmissions that slow effective throughput.
- 错误率：劣质线缆、干扰或微弱无线信号可能损坏数据，需要重传，从而降低有效吞吐量。
To improve performance, networks can upgrade bandwidth, use switches instead of hubs, and implement quality of service (QoS) policies.
要改善性能，网络可升级带宽、使用交换机代替集线器，并实施服务质量（QoS）策略。
10. Network Security Basics | 网络安全基础
Security is a crucial aspect of networking. Threats include malware (viruses, worms), phishing, denial-of-service (DoS) attacks, data interception, and unauthorised access. Candidates must know common prevention and protection methods.
安全是计算机网络的关键方面。威胁包括恶意软件（病毒、蠕虫）、网络钓鱼、拒绝服务（DoS）攻击、数据截获和未授权访问。考生必须了解常见的预防和保护方法。
- Firewall: Monitors and controls incoming/outgoing network traffic based on predetermined security rules. Can be hardware or software.
- 防火墙：根据预设安全规则监控并控制进出网络流量。可为硬件或软件形式。
- Encryption: Scrambles data so that only authorised parties with the decryption key can read it. Essential for secure online transactions (e.g. HTTPS).
- 加密：对数据加扰，使得只有持有解密密钥的授权方才能读取。对安全在线交易（如 HTTPS）至关重要。
- Passwords and multi-factor authentication (MFA): Ensure only legitimate users can access systems. Strong policies require complexity, regular changes, and extra factors.
- 密码与多因素认证（MFA）：确保只有合法用户能访问系统。严格策略要求复杂性、定期更换和额外因素。
- Antivirus and anti-malware: Software that detects, prevents, and removes malicious programs.
- 反病毒与反恶意软件：检测、阻止和清除恶意程序的软件。
- Physical security: Locking server rooms, using security cameras, and restricting hardware access.
- 物理安全：锁闭服务器机房、使用监控摄像头和限制硬件访问。
Exam questions may present a scenario and ask you to recommend appropriate security measures, explaining how each method reduces risk.
考题可能会给出一个场景，请你就适当的安全措施提出建议，并解释每种方法如何降低风险。
11. Common Network Protocols: HTTP, HTTPS, FTP, SMTP, IMAP | 常用网络协议：HTTP, HTTPS, FTP, SMTP, IMAP
Application layer protocols define rules for specific services. You should be able to match each protocol to its function and port number where relevant.
应用层协议为特定服务定义规则。你应能够将每种协议与其功能及相关的端口号对应起来。
| Protocol | Full Name | Purpose | Typical Port |
|---|---|---|---|
| HTTP | HyperText Transfer Protocol | Transmits web pages between server and browser | 80 |
| HTTPS | HTTP Secure | Encrypted version of HTTP using SSL/TLS | 443 |
| FTP | File Transfer Protocol | Uploading and downloading files | 20, 21 |
| SMTP | Simple Mail Transfer Protocol | Sending emails from client to server and between servers | 25 |
| IMAP | Internet Message Access Protocol | Retrieving email; messages stay on the server | 143 |
| POP3 | Post Office Protocol v3 | Retrieving email; typically downloads and deletes from server | 110 |
Remember that HTTPS is not a separate protocol but rather HTTP layered over SSL/TLS encryption. Also note the difference between SMTP (sending) and IMAP/POP3 (receiving).
记住，HTTPS 并非一个独立的协议，而是覆盖 SSL/TLS 加密的 HTTP。还需注意 SMTP（发送）与 IMAP/POP3（接收）之间的区别。
12. Summary of Exam Tips | 考点总结
To maximise your marks on the Networks topic, keep these key points in mind:
要想在网络主题上得到最高分，请牢记以下要点：
- Be precise with definitions: know the difference between 'bandwidth' and 'throughput', 'switch' and 'hub', 'LAN' and 'WAN', 'IP' and 'MAC'.
- 精确使用定义：分清“带宽”与“吞吐量”、“交换机”与“集线器”、“局域网”与“广域网”、“IP”与“MAC”。
- Use structured comparisons: when asked to compare, make a table or use clear bullet points. Use connectives like 'whereas' and 'on the other hand'.
- 使用结构化比较：当要求比较时，制作表格或使用清晰的项目符号。使用“而”、“另一方面”等连接词。
- Relate security measures to threats: do not just list 'firewall'; explain that it filters unauthorised traffic and can prevent DoS attacks.
- 将安全措施与威胁关联起来：不要只列出“防火墙”；要说明它能过滤未授权流量，可防止 DoS 攻击。
- Remember real-world applications: linking concepts to everyday technologies (Wi-Fi, web browsing, file sharing) helps you construct longer-answer arguments.
- 联系实际应用：将概念与日常技术（Wi-Fi、网页浏览、文件共享）联系起来，有助于构建长篇论述。
- Practise past paper questions that ask you to describe the advantages and disadvantages of a given topology or network type.
- 练习要求描述给定拓扑或网络类型优缺点的大量真题。
- Know the protocols and their port numbers as stated in the syllabus; CIE often expects you to recall default port numbers for HTTP, HTTPS, FTP, SMTP, POP3, and IMAP.
- 掌握大纲中列出的协议及其端口号；CIE 常要求你记忆 HTTP、HTTPS、FTP、SMTP、POP3 和 IMAP 的默认端口号。
Networks form a substantial part of Paper 1 and also appear in practical contexts. Mastering these fundamentals will build the confidence you need to tackle any IGCSE Computer Science question.
网络是卷一的重要组成部分，也出现在实践情境中。掌握这些基础知识将为你打下必要的信心，去应对任何 IGCSE 计算机科学考题。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
或截图后用「扫一扫 → 相册」选择本图