Ethernet Switching
Fortinet Named a Visionary in the 2022 Gartner® Magic Quadrant™ for Enterprise Wired and Wireless LAN Infrastructure
フォーティネット グローバル脅威レポート 2023年下半期版 セキュリティ対策のエキスパートに相談する
Definition: What Is an Ethernet Switch?
An Ethernet switch, or network switch, is a type of networking hardware that uses multiple ports to communicate between devices in the local area network (LAN). Ethernet is the underlying infrastructure that enables wired connectivity, whereas Wi-Fi does the same for wireless connectivity.
In short, Ethernet switching connects wired devices such as computers, laptops, routers, servers, and printers to the LAN. Advances in the technology enable connectivity for laptops and video conferencing devices as well. For these reasons, Ethernet switching is essential to enterprise networking, as having multiple ports enables faster connectivity and smoother access across many devices simultaneously.
Generally, Ethernet switches don’t offer built-in network security features like firewalls or intrusion prevention capabilities. However, there are dedicated security appliances and techniques organizations can deploy, such as access control lists (ACLs) to restrict access to specific network resources, port security to prevent unauthorized connections, and monitoring capabilities for detecting and responding to suspicious activity.
With advanced equipment, administrators can segment the network into virtual LANs (VLANs). This allows organizations to logically divide a single LAN into multiple networks, helping to contain and control the spread of security threats by limiting the scope of potential breaches.
It’s best to complement switch-based security with additional protections. Take FortiSwitch, for example. Through integration with the Fortinet Security Fabric, it gains access to a wide range of robust secure networking capabilities, including Next-Generation Firewall (NGFW), Network Access Control (NAC), Secure Access Service Edge (SASE), and more.
What Are The Benefits Of Ethernet Switching?
Switches can positively impact a network in several significant ways:
1. Improved network performance
Ethernet switches reduce network congestion by allowing devices to communicate directly, eliminating the need for data to pass through a central hub. This means the network can handle more traffic and transmit data at higher speeds while minimizing the likelihood of collisions. That’s an especially key advantage for larger organizations where there are many users and devices connected to the network.
Likewise, switches support full-duplex communication — the ability for devices to transmit and receive data simultaneously on separate channels instead of taking turns. This effectively increases available bandwidth, leading to better network performance and user experience.
2. Easy scalability
Switches can accommodate a large number of devices and come in a variety of deployment options with different port densities and stacking capabilities. In other words, organizations can find a solution right-sized for their network needs.
More importantly, modular switches are highly scalable and can adapt to meet evolving infrastructure requirements. Additional modules, like transceivers or line cards, plug into the switch to extend its capabilities. This allows administrators to plan expansion and future-proof their LAN for continuous improvement.
3. Efficient data transfer
Ethernet switches optimize data transfer by forwarding data only to the intended recipients, cutting down on unnecessary broadcast traffic. Moreover, using a feature called auto-negotiation, switches automatically determine the highest possible data transfer speed supported by both ends of the connection.
In short, this flexibility allows devices of varying capabilities to coexist on the same network. For instance, a switch with ports supporting speeds of 10, 100, and 1,000 Mbps can automatically negotiate the appropriate one with connected devices, ensuring optimal performance for each endpoint.
4. Standardization
Ethernet switches are standards-based, meaning they follow specifications established by organizations like the Institute of Electrical and Electronics Engineers (IEEE). By following these standards, switches from different vendors can work together seamlessly regardless of make or model.
This interoperability allows organizations to easily integrate different switches into existing network infrastructures without compatibility problems. That way, they can build and expand their LANs according to their specific needs.
How Ethernet Switches Work: Terms And Functionality
Ethernet switching involves many complex terms and processes. Let’s break these concepts down one by one:
- Packet switching is a networking technology that switches use to forward data frames through a network based on their destination address, rather than using a dedicated circuit for each communication. This allows devices to communicate simultaneously and independently on the same network, facilitating a smooth traffic flow with minimal delay.
- Frames are sequences of information that travel over Ethernet networks to move data between devices. Like data packets, they consist of a header, payload, and trailer and include a destination and source address, which respectively signify where they’re headed and where they originate. Although packets travel between networks, frames do so between computers — therefore, they’re at Layer 2 of the Open Systems Interconnection (OSI) model.
- Transparent bridging is the most common form of bridging, the process by which switches link Ethernet frames to network segments. Switch operations are meant to be invisible to network devices by automatically working without manual configuration — hence the name “transparent.”
- Address learning refers to how switches forward traffic based on 48-bit media access control (MAC) addresses. In short, a switch learns which devices are on certain network segments using the source MAC addresses of the frames it receives. Each port has a unique address, so when a switch port receives a frame, it identifies the source and adds it to a database called a Content Addressable Memory (CAM) table.
- Traffic filtering is a process that occurs once a switch builds a CAM table. As it learns addresses, the switch can decide how to filter and forward traffic based on the frame’s destination address. It can also isolate traffic to segments needed to receive frames from senders, ensuring traffic doesn’t flow to other ports.
- Frame flooding occurs when a switch receives a frame with a destination address that isn’t in its database. In this case, it forwards the frame to all connected devices except the one from which it received the frame. When it finds the correct destination, the switch once again learns the correct port, and frame flooding stops.
- Multicast traffic refers to a LAN’s ability to transmit frames to multicast addresses, which are received by groups of endpoint destinations rather than single addresses. Broadcast addresses are a particular type of multicast traffic that groups all endpoint destinations in the LAN. Both multicasts and broadcasts are used for dynamic address assignment — sending data in multimedia applications to multiple users on a network at once.
- Broadcast and collision domains are important concepts in Ethernet switching. The former is a logical network segment where devices can directly communicate without the need for routing. When a device sends a broadcast message, all other devices in the domain will receive it. By contrast, a collision domain is a network segment where data transmitted by its devices can collide with one another. The larger the collision domain, the greater the chance of this occurring. Switches help reduce collisions by isolating traffic within each port.
Ethernet Switches vs Other Network Devices
Aside from switches, most corporate networks use a combination of wired and wireless technologies, including routers, hubs, and Ethernet splitters.
Ethernet switch vs router
Network switches and routers are often confused with one another, but they serve two very different purposes. Their main differences include:
- Function: Switches facilitate communication between multiple devices on a single LAN. In contrast, routers connect two or more networks, commonly bridging LANs to wide area networks (WAN). Practically speaking, this means routers are necessary for internet access, while switches are used only for interconnecting devices.
- Layer: Switches are most often Layer 2 devices, whereas routers are primarily Layer 3 — the network layer. This means switches use data frames, while routers use data packets. That said, Ethernet switches also can operate at Layer 3, forwarding data based on internet protocol (IP) address rather than MAC address. Some hardware devices can function as both a switch and router.
Switch vs hub
Ethernet hubs are also vital networking components, but are notably different from switches for the following reasons:
- Function: Hubs are similar to Ethernet switches in that connected devices on the LAN are wired to them using multiple ports. The key distinction is that hubs share bandwidth equally among their ports, while switches devote more bandwidth to particular ones. Because hubs can’t manage data flow like a switch can, there’s a greater risk of collision when multiple devices are active on the network.
- Layer: Additionally, hubs operate as Layer 1 devices — the physical transport layer. They act as broadcasters/aggregators, but cannot manage any traffic. Therefore, the switching process significantly improves network efficiency as opposed to a hub.
Switch vs ethernet splitter
An Ethernet splitter is an adapter device that divides a single Ethernet connection into multiple. Here’s how it compares to a network switch:
- Function: Splitting allows you to connect multiple devices to a single Ethernet port, such as on a router or switch. Most splitters are passive, meaning they simply divide the incoming signal. Active splitters are more advanced and amplify the incoming signal, allowing for a stronger and more stable connection. While switches manage network traffic, splitters merely extend connectivity.
- Layer: Because they simply split electrical signals into multiple outputs, Ethernet splitters are considered a physical device, operating at Layer 1.
Key Features Of Ethernet Switches
Advanced Ethernet switch providers offer more flexibility and functionality than conventional solutions. Here are some essential features and capabilities you can expect from an effective network switch:
Power over Ethernet (PoE)
PoE is the ability to provide low-voltage, direct-current power to network devices using the same Ethernet cable, eliminating the need for multiple wires or a separate power source. Critically, this affords more flexibility in terms of where administrators can place Ethernet switches and other devices. In other words, they don’t have to worry about keeping a power outlet nearby.
Traditionally, PoE switches have been used by businesses to power equipment such as outdoor lighting, security cameras, voice over IP (VoIP) telephony, and other practical applications. Recent advancements in Wi-Fi technology enable them to power wireless AP devices that support applications and devices for video conferencing, laptops, and flat screens as well.
PoE types and power levels
PoE technology has advanced to support the needs of digital acceleration. Types 1 and 2 power devices at the lowest power levels, whereas Types 3 and 4 provide the highest levels needed for the sophisticated and power-hungry devices that support hybrid work.
Both PoE Type 1 (also called IEEE 802.3af) and PoE Type 2 (known as 802.3at or PoE+) use 2-pair PoE. Type 1 delivers a maximum of 15.4 W per port and Type 2, 30 W per port. Type 3 and Type 4 support the latest IEEE 802.3bt standard and both use 4-pair PoE.
Type 3 (also called 4-pair PoE, 4PPoE, PoE++, or UPoE) provides 60 W of power per port making it ideal for video conferencing equipment, multi-radio wireless access points, PTZ cameras, and building management devices.
In contrast, high-power PoE, or Type 4, provides up to 100 W of DC power (71.3 W to each device) enabling it to support flat screens and laptops. Refer to the table below to compare PoE types.
POE + latest generation of access points
In addition to its primary function, a PoE switch can source power to other equipment by sending power through the Ethernet cable to PoE-enabled devices.
For some time, PoE switches have been relied upon to power multiple wireless APs at expansive campuses enabling thousands of users’ devices to connect to the network. More recently, PoE switches are powering wireless access points (APs) that connect WLANs with fixed wire networks. This extended network connectivity enables users to send and receive data over a WLAN.
Bandwidth-hungry applications and the growing number of IoT devices have driven advancements in Wi-Fi and POE-enabled wireless AP technology that are enabling enterprises to support hybrid and work-from-anywhere users on distributed networks.
Gigabit ethernet high-speed data transfer
The term “Gigabit Ethernet” refers to an Ethernet network that supports data transfer rates of at least 1 Gigabit per second (Gbps). That’s significantly faster than traditional Ethernet speeds, which often only provide up to 100 Mbps.
Simply put, faster speeds between connected devices can result in improved performance and responsiveness. It’s especially important for high-bandwidth use cases, such as video conferencing, large-file transfers, or environments where real-time data processing is critical to business operations, like finance.
High-density ethernet ports
In this context, density refers to the number of ports an Ethernet switch allows. The more ports on a switch, the more devices that can connect to the network directly.
Having multiple ports allows for simultaneous connections, which is vital for office environments. For example, a business may need to facilitate many different devices, such as computers, printers, servers, etc. Deploying switches with numerous ports provides the flexibility required to design and expand infrastructure over time as the network grows.
VLAN support
Ethernet switches are commonly used to power devices on Virtual Local Area Networks (VLANs) or Virtual Private Networks (VPNs) that allow administrators to divide the network into smaller, more manageable pieces called segments or subnets. For example, a company might create separate VLANs for different departments. From a security perspective, this can help isolate traffic between different groups of users or devices and lower the risk of a data leak.
In this manner, VLANs help prevent unauthorized access to sensitive data and uplift network protection. Plus, layer 3 PoE switches on VLANs can help reduce congestion and enhance the performance of dedicated subnets and connected devices for video traffic and streaming.
Quality of Service (QoS)
Ethernet switches also can offer QoS capabilities, which are a set of techniques used to prioritize network traffic based on various factors, such as application type, data type, source/destination, and more. In essence, this ensures critical data is given priority over less important types of traffic, such as web browsing or email.
Ultimately, QoS helps to maintain consistent performance while providing essential applications the necessary bandwidth to operate effectively.
Types Of Ethernet Switches
Ethernet switches receive data from multiple input ports and send it to the specific output port that takes data to its intended destination on the network. This is how they provide connectivity by communicating between devices in a local area network (LAN) or wireless LAN. There are two types of Ethernet switches in a network: managed and unmanaged.
Managed vs unmanaged
An Ethernet switch is either managed or unmanaged based on the size and complexity of the network it supports.
Unmanaged switches are used primarily in home networks and small businesses because they are simple to use with no configuration required. Unmanaged switches connect devices on a LAN to each other such as connecting computers to a printer. While unmanaged switches are inexpensive, easy to install and operate, they have limited network management, security, and performance capabilities.
For networks supporting large organizations, managed switches are used to provide high levels of security, precise control, and network management. They can be customized in large networks to enhance functionality and can scale with dynamic networks via simple network management protocol (SNMP).
Managed switches can be used to control network traffic, enhance performance and security, and allow remote management and monitoring. However, they require technical expertise to configure and manage, and are more expensive than unmanaged switches.
Managed switches include both Ethernet switches and Power over Ethernet (PoE) switches as follows:
Ethernet switches, also known as network or data switches connect points on a LAN. They help reduce network congestion or bottlenecks by distributing a data packet only to its intended device.
PoE switches integrate data and power on the same Ethernet cable allowing PoE-enabled devices to receive data in parallel to power. This flexibility simplifies the electrical cabling process for IT.
Flexible management options
Historically, deploying and managing Ethernet networks has presented challenges to IT administrators. While wireless LANs adopted a controller model to simplify building, deploying, and running wireless networks, Ethernet networks often required some basic configuration for management.
Modern management interfaces allow Ethernet switches to be managed standalone or centrally as part of an integrated network connectivity and security platform. Zero-touch discovery and provisioning simplifies management of switches whether on-premises or cloud infrastructure, or operating as hardware devices or as virtual machines. Zero-touch configuration enables rapid deployment of thousands of switches without complex staging.
Next-generation firewalls can also manage Ethernet switches as part of an integrated network security fabric.
Layer 2 vs layer 3
Managed switches can be categorized as OSI Layer 2 (data) Ethernet switches or OSI Layer 3 (network) Ethernet switches. Layer 2 Ethernet switches forward network traffic (data packets) quickly and efficiently to reduce network congestion but have limited control over traffic and no support for OSI Layer 3 protocols.
Layer 3 Ethernet switches support Layer 3 protocols and deliver advanced routing capabilities, network segmentation, and increased performance and scalability. However, Layer 3 switches require technical expertise to configure and manage and are more expensive than Layer 2 switches.
Future Trends In Ethernet Switching
Wi-Fi 7
Wi-Fi 7 is a new standard networking protocol that provides a leap forward in wireless connectivity, offering several times more throughput for bandwidth-hungry applications and devices.
Under the hood, Wi-Fi 7 can quadruple the performance capabilities of Wi-Fi 6, providing 4K quadrature amplitude modulation (QAM) vs the 1K of the previous network protocol. QAM is a technique that combines two amplitude modulation (AM) signals into a single channel, effectively doubling available bandwidth. Wi-Fi 7 also supports 320 MHz channels, allowing significantly more throughput than Wi-Fi 6.
While Wi-Fi 6 also supports all three Wi-Fi bands (2.4 GHz, 5 GHz, and 6 GHz), a client can be associated with a single band only. The new, multi-link operation supported in Wi-Fi 7 allows a client to be associated with, and pass traffic on multiple channels allowing a client to use, for example, one band for uplink and another for downlink. It also enables things like videoconferencing systems to keep low power association on 2.4 GHz but leverage other bands for high-data throughput.
Multi-gigabit PoE switching
Large organizations need high-performance Ethernet switches designed to intelligently organize AP traffic and scale throughput to prevent bottlenecks that degrade network performance and frustrate users. Their legacy switching infrastructure is struggling to keep up with these new demands.
For example, the standard access port speed of 1 gigabit per second is giving way to faster capabilities, such as multigigabit or even 10 gigabit Ethernet to support devices at the access layer edge. For this reason, enterprises are escalating the deployment of next-generation Ethernet switches and wireless APs capable of delivering 5G speeds at scale.
Anticipating this need, Fortinet announced a new Wi-Fi 7–enabled access point, the FortiAP 441K, and the new FortiSwitch T1024 model that provides 10 Gigabit Ethernet access and 90W PoE to support Wi-Fi 7 bandwidth requirements at the edge. These new devices deliver the multi-gigabit wireless switching performance enterprises require along with integrated secure networking and centralized management capabilities.
Considerations For Choosing An Ethernet LAN Solution
Digital acceleration requires Ethernet networks to do more and faster than ever before. However, it’s important to remember that what makes a good Ethernet LAN solution is more than speeds and feeds. A next-generation Ethernet LAN should be secure, capable of providing power to devices, offer automated onboarding options, have QoS capabilities, be easy to manage and monitor, and have no surprise costs.
The following considerations will help you select an Ethernet LAN that meets your current and future secure networking needs.
Speed
Ethernet switches have a long refresh cycle—upwards of seven years—and speed demands are constantly increasing. As the number of wireless devices deployed inside your organization continues to grow—from laptops and smartphones to printers and other connected IoT devices—the pressure is on to address the escalating demand for secure, high-speed access to your network.
The only way to ensure network availability to all these resources while optimizing the user experience is to upgrade the supporting Ethernet LAN infrastructure to support a growing network. Look ahead to make sure you choose the switches that will support the features you need now and scale with the future.
セキュリティ
Ethernet can be too easy to access with the Ethernet RJ45 ports that are ubiquitous in office cubicles and conference rooms. Due to the challenges of implementing authentication technologies, such as 802.1x in Ethernet LANs, these ports may provide immediate access to the network without user or device verification. They allow anyone in the office to plug in to your network.
A key consideration for any Ethernet LAN should be how easy it is to implement security. This includes virtual LANs (VLANs) for segmenting traffic, access control lists (ACLs) for restricting access to specific network resources, port security for preventing unauthorized devices from connecting, and monitoring capabilities to detect and respond to suspicious activity.
Power
Today’s Ethernet switches are not only capable of transmitting data, but they are also able to power the devices that they connect. PoE switches can power devices such as IP phones and IoT devices directly from the switch, eliminating the need for additional power sources. Any next-generation Ethernet LAN should employ the latest 802.3bt PoE++ technology, which can deliver enough power to charge your workstations as well as next-generation wireless APs.
Internet-of-things onboarding
As the number of connected devices continues to increase, it becomes more difficult to identify and securely onboard these devices to your network. Key considerations for your Ethernet LAN investment are whether this process can be automated and whether zero-trust principles can be implemented.
Quality of service
Even with increased bandwidth, as Ethernet LANs are asked to do more, how traffic traverses the network of switches needs prioritization, regardless of the architecture. Quality of service (QoS) allows you to ensure that important traffic is given priority over less important traffic. This should be part of any Ethernet LAN solution.
Management and visibility
Ethernet switches should be easy to configure and manage, so it’s important to check the switch’s management features before purchasing. Historically, Ethernet switches have required some staging during implementation to enable them to join a network. Zero-touch provisioning capabilities are a must for any next-generation Ethernet LAN.
A management platform that integrates Wi-Fi, switching, firewall, and network access control (NAC) into secure connectivity can offer insight and access into the Ethernet LAN, wireless LAN (WLAN), and security, providing a holistic view of your network.
Artificial intelligence and machine learning integration
Artificial intelligence (AI) and machine learning (ML) are changing the way network administrators view and do their jobs. AI for IT operations (AIOPs) enables IT teams to be more proactive by predicting issues and automating their resolutions before they become a problem for clients and users. However, with all the potential of AIOPs, it can be only as good as the information it receives.
An Ethernet LAN should be part of an AIOPs solution that includes key LAN, WLAN, WAN, and secure networking functions.
Cost
While the technology driving Ethernet switches is standard, the total cost of ownership (TCO) can vary widely. Often, the hardware in new pricing models is but a small part of the long-term cost of your Ethernet LAN. Extra licensing for many standard features has become common. Close attention should be paid to the additional licenses and fees required to enable the basic features you require.
Fortinet Products and Services
The Fortinet Secure Networking approach includes PoE switches and wireless APs as a native part of the overall security architecture. Our differentiated wired and wireless LAN solutions converge networking and security under FortiOS, a single operating system and cloud management platform. This enables the Ethernet LAN to become an extension of the security infrastructure through FortiSwitch and FortiLink.
Simple to deploy and manage, FortiSwitch offers many features, including NAC, without additional licensing. Our broad portfolio of secure and scalable Ethernet switches provides secure connectivity to the campus, SD-Branch, or data center.
FortiSwitch and FortiAP bring Wi-Fi 7 to the enterprise
The FortiAP 441K is a Wi-Fi 7–enabled access point for secure wireless LANs and the new FortiSwitch T1024 model provides 10 Gigabit Ethernet access and 90W PoE to support Wi-Fi 7 bandwidth requirements at the edge. The FortiAP 441K delivers the following benefits over Wi-Fi 6:
- Up to 2x faster connection speeds for the same configuration
- Faster data transfer critical for bandwidth-heavy enterprise applications
- Lower latency by using 320MHz channels, the broader spectrum improves data speeds
- Better load balancing and reduced interference with flexible channel utilization for reliable connections
As a part of the Fortinet Secure Networking approach, FortiSwitch and FortiAP seamlessly integrate with AIOps and FortiGuard AI-Powered Security Services for unmatched security, visibility, and control.
Ethernet Switching FAQs
How do ethernet switches work?
An Ethernet switch creates networks and uses multiple ports to communicate between devices in the LAN. Ethernet switches differ from routers, which connect networks and use only a single LAN and WAN port.
Do ethernet switches reduce speed?
Multiple Ethernet switch ports allow for faster connectivity and smoother access across many devices at once.
Does an ethernet switch need a router?
Routers connect networks to other networks, most commonly connecting LANs to wide area networks (WANs). Routers are usually placed at the gateway between networks and route data packets along the network.
セキュリティ対策のエキスパートに相談する
フォームにご記入いただければ、すぐに知識豊富な担当者がご連絡いたします。