📚 IB Edexcel Computer Science: Networking Fundamentals – Key Concepts | IB Edexcel 计算机：网络基础 考点精讲
Computer networks form the backbone of modern digital communication, enabling data exchange, resource sharing, and global connectivity. Understanding the fundamental principles, protocols, and hardware is essential for success in both IB and Edexcel Computer Science examinations. This article provides a concise yet thorough review of key networking concepts, ensuring you are well-prepared for exam questions ranging from network topologies to IP addressing and security mechanisms.
计算机网络是现代数字通信的骨干，它使数据交换、资源共享和全球互联成为可能。理解基本原理、协议和硬件是 IB 和 Edexcel 计算机科学考试成功的关键。本文对核心网络概念进行了简明而深入的回顾，确保你能够从容应对从网络拓扑到 IP 寻址及安全机制等各类考题。
1. Introduction to Networking: Definition and Benefits | 网络概论：定义与优势
A computer network is a collection of interconnected devices (nodes) such as computers, printers, and servers that can communicate with each other to share resources and information. The primary benefits include cost savings through shared peripherals (e.g., printers), centralized data management, enhanced communication (email, instant messaging), and increased reliability through data redundancy. Networks enable collaborative work and facilitate access to the Internet, making them indispensable in education, business, and everyday life.
计算机网络是由计算机、打印机和服务器等相互连接的设备（节点）组成的集合，它们可以相互通信以共享资源和信息。主要优势包括通过共享外设（如打印机）节约成本、集中数据管理、增强通信（电子邮件、即时消息）以及通过数据冗余提高可靠性。网络使协作工作成为可能，并方便接入互联网，因此在教育、商业和日常生活中不可或缺。
In exam settings, you may be asked to compare standalone computers with networked ones, highlighting advantages such as easier software updates, centralized backup, and the ability to support multiple users simultaneously. Be prepared to discuss potential drawbacks like security vulnerabilities, initial setup costs, and dependence on network administrators.
在考试中，你可能会被要求比较单机与联网计算机，突出易于软件更新、集中备份和支持多用户同时使用等优点。同时也要准备好讨论潜在缺点，如安全漏洞、初始建设成本以及对网络管理员的依赖。
2. Types of Networks: LAN, WAN, PAN, MAN | 网络类型：局域网、广域网、个域网、城域网
Networks are categorised by geographical scope. A LAN (Local Area Network) spans a small area such as a school, office, or home, typically using Ethernet or Wi-Fi technologies and offering high data transfer rates. A WAN (Wide Area Network) covers a large geographical area, often a country or continent, connecting multiple LANs; the Internet is the largest WAN. WANs rely on leased telecommunication lines, satellites, or fibre optics.
网络按地理范围分类。局域网 (LAN) 覆盖学校、办公室或家庭等小范围区域，通常使用以太网或 Wi-Fi 技术，提供高数据传输速率。广域网 (WAN) 覆盖大片地理区域，通常连接多个局域网，范围可达国家或洲际；互联网是最大的广域网。广域网依赖租用电信线路、卫星或光纤。
A PAN (Personal Area Network) is even smaller, centred around an individual’s workspace, using technologies like Bluetooth or USB to connect devices such as smartphones, tablets, and laptops. A MAN (Metropolitan Area Network) falls between LAN and WAN, covering a city or town, often used by municipalities or large corporations to connect branches across a city.
个域网 (PAN) 范围更小，围绕个人工作空间，使用蓝牙或 USB 等技术连接智能手机、平板电脑和笔记本电脑等设备。城域网 (MAN) 介于局域网和广域网之间，覆盖城市或城镇，常被市政机构或大型企业用于连接城市各分支机构。
3. Network Topologies: Star, Bus, Ring, Mesh | 网络拓扑：星型、总线、环型、网状
Network topology refers to the physical or logical layout of devices and connections. In a star topology, all nodes connect to a central switch or hub. If one node fails, the rest remain unaffected, but failure of the central device disables the whole network. It is easy to add new devices and troubleshoot.
网络拓扑指设备与连接的物理或逻辑布局。在星型拓扑中，所有节点连接到中央交换机或集线器。若一个节点故障，其余不受影响，但中央设备故障会导致全网瘫痪。添加新设备和故障排除较为容易。
A bus topology uses a single backbone cable (the bus) with terminators at both ends. Nodes tap into the bus. It is cheaper to set up but if the backbone fails, the entire network goes down; performance degrades with heavy traffic. Ring topology connects each device to two others, forming a closed loop; data travels in one direction, reducing collisions, but a break anywhere disrupts the whole ring. Mesh topology provides each node a dedicated point-to-point link to every other node, offering excellent redundancy; however, it is extremely expensive due to extensive cabling and is mainly used in WANs or critical systems.
总线拓扑使用单根主干电缆（总线），两端配有终端器。节点接入总线。建造成本较低，但若主干故障，整个网络瘫痪；流量大时性能下降。环型拓扑将每台设备与另外两台相连，形成闭环；数据单向传输，可减少冲突，但任何一处断开都会干扰整个环。网状拓扑为每个节点提供与其他所有节点的点对点专用链路，冗余性极佳；但因需要大量布线，成本极高，主要用于广域网或关键系统。
Exam tip: Be ready to sketch these topologies and evaluate advantages/disadvantages with respect to cost, reliability, scalability, and cable length requirements.
考试提示：请准备好绘制这些拓扑结构，并从成本、可靠性、可扩展性和所需线缆长度等方面评价其优缺点。
4. Network Hardware: Router, Switch, Hub, NIC | 网络硬件：路由器、交换机、集线器、网卡
A NIC (Network Interface Card) is an internal or external hardware component that allows a device to connect to a network. Every NIC has a unique MAC address. Hubs operate at the physical layer; they broadcast all incoming data to every port, causing unnecessary traffic and collisions. They are largely obsolete.
网卡 (NIC) 是允许设备连接网络的内部或外部硬件组件。每块网卡都有唯一的 MAC 地址。集线器工作于物理层，它将所有传入数据广播到每个端口，导致不必要的流量和冲突，现已基本被淘汰。
A switch works at the data link layer; it learns MAC addresses and forwards data only to the intended recipient port, significantly improving efficiency and reducing collisions. Modern networks use switches instead of hubs. A router operates at the network layer, connecting different networks (e.g., your home LAN to the Internet) and forwarding data packets based on IP addresses using routing tables. Routers also often provide NAT, DHCP, and firewall functions.
交换机工作在数据链路层；通过学习 MAC 地址，仅将数据转发到目标接收端口，大大提高了效率并减少了冲突。现代网络使用交换机代替集线器。路由器工作在网络层，连接不同网络（例如家庭局域网与互联网），并根据 IP 地址使用路由表转发数据包。路由器通常还提供 NAT、DHCP 和防火墙功能。
5. Network Protocols and the TCP/IP Model | 网络协议与 TCP/IP 模型
A protocol is a set of rules governing how data is transmitted and received. The TCP/IP model provides the foundation for Internet communication, comprising four layers: the Application layer, Transport layer, Internet layer, and Network Access layer. The IB curriculum also often references the OSI model, but TCP/IP is central to Edexcel specifications.
协议是一套管理数据如何发送和接收的规则。TCP/IP 模型为互联网通信提供了基础，包括四层：应用层、传输层、互联网层和网络接入层。IB 课程也常涉及 OSI 模型，但 TCP/IP 是 Edexcel 规范的核心。
TCP (Transmission Control Protocol) is connection-oriented, guaranteeing delivery through acknowledgments, sequencing, and flow control. UDP (User Datagram Protocol) is connectionless, faster but without guarantees, suitable for streaming or DNS queries. The IP (Internet Protocol) handles logical addressing and routing, enabling data packets to traverse multiple networks.
TCP（传输控制协议）是面向连接的，通过确认、排序和流量控制保证可靠交付。UDP（用户数据报协议）是无连接的，速度更快但无担保，适用于流媒体或 DNS 查询。IP（互联网协议）处理逻辑寻址和路由，使数据包能够穿越多个网络。
Understanding the encapsulation process is vital: application data is packed into TCP segments, then IP packets, then frames for the physical medium. Each layer adds its own header information.
理解封装过程至关重要：应用数据被包装成 TCP 段，然后是 IP 包，再封装为适用于物理介质的帧。每一层都添加各自的报头信息。
6. IP Addressing and Subnetting | IP 地址与子网划分
An IPv4 address is a 32-bit number typically written in dotted decimal notation (e.g., 192.168.1.1). It consists of a network portion and a host portion, determined by the subnet mask. A subnet mask like 255.255.255.0 indicates that the first three octets identify the network, while the last octet identifies the host.
IPv4 地址是一个 32 位的数字，通常用点分十进制表示（如 192.168.1.1）。它由网络部分和主机部分组成，由子网掩码决定。子网掩码如 255.255.255.0，表示前三个字节识别网络，最后一个字节识别主机。
CIDR notation (e.g., /24) simplifies subnet mask representation. IPv6 uses 128-bit addresses, written in hexadecimal, to overcome IPv4 address exhaustion. Be familiar with reserved addresses: private ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), loopback (127.0.0.1), and APIPA (169.254.0.0/16).
CIDR 表示法（如 /24）简化了子网掩码的表示。IPv6 使用 128 位地址，以十六进制书写，以解决 IPv4 地址枯竭问题。请熟悉保留地址：私有地址范围（10.0.0.0/8、172.16.0.0/12、192.168.0.0/16）、环回地址（127.0.0.1）和 APIPA 地址（169.254.0.0/16）。
Subnetting allows a larger network to be divided into smaller, manageable sub-networks, improving security and performance. Basic calculations include finding the network address (bitwise AND of IP and mask) and determining the number of available hosts (2h – 2, where h is the number of host bits).
子网划分可将较大的网络分割为更小、更易于管理的子网，从而改善安全性和性能。基本计算包括求网络地址（IP 与掩码的按位与运算）以及确定可用主机数（2h – 2，其中 h 为主机位数）。
7. MAC Addresses vs IP Addresses | MAC 地址与 IP 地址
A MAC (Media Access Control) address is a 48-bit hardware identifier burned into the NIC by the manufacturer, typically displayed as six pairs of hexadecimal digits (e.g., 00:1A:2B:3C:4D:5E). It operates at the data link layer and is used for communication within the same local network.
MAC（介质访问控制）地址是一个 48 位硬件标识符，由制造商烧录在网卡中，通常显示为六组十六进制数字（如 00:1A:2B:3C:4D:5E）。它工作在数据链路层，用于同一本地网络内的通信。
In contrast, an IP address is logical, network-layer assigned manually or via DHCP, and can change. MAC addresses are permanent and globally unique. The ARP (Address Resolution Protocol) maps IP addresses to MAC addresses, enabling packets to be delivered to the correct hardware interface within a LAN.
相比之下，IP 地址是逻辑的、网络层的，可手动配置或通过 DHCP 分配，且可以更改。MAC 地址是永久的并在全球唯一。ARP（地址解析协议）将 IP 地址映射到 MAC 地址，使数据包能够在局域网内正确传送到相应硬件接口。
Exam questions frequently ask students to explain the need for both addresses: IP provides end-to-end global connectivity and routing, while MAC enables device-to-device delivery on the local segment.
考题常要求学生解释为何同时需要这两种地址：IP 提供端到端的全球连接和路由功能，而 MAC 实现本地网段上设备间的传递。
8. Key Application Layer Protocols: HTTP, FTP, SMTP, DNS | 关键应用层协议：HTTP、FTP、SMTP、DNS
The application layer provides network services to end-users. HTTP (Hypertext Transfer Protocol) is the foundation of data communication on the World Wide Web; it uses a request-response model. HTTPS adds encryption via SSL/TLS for secure transactions. FTP (File Transfer Protocol) is used for transferring files between client and server, supporting uploads, downloads, and authentication.
应用层为最终用户提供网络服务。HTTP（超文本传输协议）是万维网数据通信的基础，采用请求-响应模型。HTTPS 通过 SSL/TLS 加密确保安全交易。FTP（文件传输协议）用于在客户端和服务器之间传输文件，支持上传、下载和身份验证。
SMTP (Simple Mail Transfer Protocol) sends outgoing emails from a client to a mail server or between servers. For retrieving emails, POP3 (Post Office Protocol) downloads emails to the client, while IMAP allows accessing and managing emails directly on the server. DNS (Domain Name System) converts human-friendly domain names (e.g., http://www.example.com) into IP addresses, functioning like a phonebook of the Internet.
SMTP（简单邮件传输协议）将发出的电子邮件从客户端发送到邮件服务器或服务器之间发送。接收邮件使用 POP3（邮局协议） 将邮件下载到客户端，而 IMAP 允许直接在服务器上访问和管理邮件。DNS（域名系统）将易于记忆的域名（如 http://www.example.com）转换为 IP 地址，如同互联网的电话簿。
Remember the port numbers: HTTP uses port 80, HTTPS 443, FTP 21 (control) and 20 (data), SMTP 25, POP3 110, IMAP 143, DNS 53. These are commonly tested in multiple-choice and short-answer questions.
记住端口号：HTTP 使用 80，HTTPS 443，FTP 21（控制）和 20（数据），SMTP 25，POP3 110，IMAP 143，DNS 53。这些在选择题和简答题中经常考查。
9. Network Security: Firewalls and Encryption | 网络安全：防火墙与加密
A firewall is a hardware or software system that monitors and controls incoming/outgoing network traffic based on predetermined security rules. It forms a barrier between a trusted internal network and untrusted external networks (e.g., the Internet), blocking unauthorised access while permitting legitimate communication.
防火墙是一种硬件或软件系统，根据预设的安全规则监控和控制传入/传出的网络流量。它在受信任的内部网络与不可信的外部网络（如互联网）之间形成屏障，阻止未授权访问，允许合法通信。
Encryption transforms plaintext into ciphertext using an algorithm and a key, ensuring confidentiality. Symmetric encryption uses the same key for encryption and decryption (e.g., AES), while asymmetric encryption uses a public-private key pair (e.g., RSA); the latter is fundamental to digital signatures and secure key exchange.
加密使用算法和密钥将明文转换为密文，以确保机密性。对称加密使用相同密钥进行加密和解密（如 AES），而非对称加密使用公钥-私钥对（如 RSA）；后者是数字签名和安全密钥交换的基础。
Other security measures include authentication (passwords, biometrics, multi-factor), access control lists, and VPNs (Virtual Private Networks) that create encrypted tunnels over public networks. Edexcel and IB exams often present scenarios requiring identification of appropriate threats (e.g., phishing, DoS attacks, malware) and countermeasures.
其他安全措施包括身份验证（密码、生物识别、多因素）、访问控制列表以及可在公共网络上创建加密隧道的VPN（虚拟专用网络）。Edexcel 和 IB 考试常给出情景，要求识别相应威胁（如网络钓鱼、DoS 攻击、恶意软件）及应对措施。
10. Configuring a Simple Network: DHCP and DNS | 简单网络配置：DHCP 与 DNS
When setting up a network, devices need an IP configuration. DHCP (Dynamic Host Configuration Protocol) automates the assignment of IP addresses, subnet masks, default gateways, and DNS servers. A DHCP server listens for client requests on UDP port 67, offering a lease for an IP from its pool, reducing manual configuration errors.
建立网络时，设备需要 IP 配置。DHCP（动态主机配置协议） 自动分配 IP 地址、子网掩码、默认网关和 DNS 服务器。DHCP 服务器在 UDP 端口 67 上监听客户端请求，从其地址池中提供 IP 租约，减少手动配置错误。
DNS enables resolution of domain names. A typical DHCP configuration includes the IP address of a DNS server (often the ISP’s or a public DNS like 8.8.8.8). When you type a URL, your device queries the configured DNS server to obtain the corresponding IP address, allowing the connection to be established.
DNS 实现域名解析。典型的 DHCP 配置会包含 DNS 服务器的 IP 地址（通常是 ISP 的或 8.8.8.8 等公共 DNS）。当输入网址时，设备会向配置的 DNS 服务器查询以获得相应 IP 地址，从而建立连接。
Practical questions may ask you to describe the steps after a laptop joins a Wi-Fi network: it broadcasts a DHCP Discover, receives an Offer, sends a Request, and gets an Acknowledgement, obtaining full configuration. Followed by DNS resolution when a browser opens.
实践题可能要求描述笔记本电脑加入 Wi-Fi 网络后的步骤：它广播 DHCP Discover，接收 Offer，发送 Request，并得到 Acknowledgment，获得完整配置。随后打开浏览器时进行 DNS 解析。
11. Common Network Threats and Mitigations | 常见网络威胁与缓解措施
Networks face numerous security threats. Malware (viruses, worms, trojans) can spread across a network, corrupting data or stealing information. Denial‑of‑Service (DoS) attacks overwhelm a server with traffic to make it unavailable. Man‑in‑the‑middle attacks intercept communications between two parties. Phishing uses deceptive emails to trick users into revealing credentials.
网络面临众多安全威胁。恶意软件（病毒、蠕虫、木马）可在网络中传播，破坏数据或窃取信息。拒绝服务（DoS）攻击通过大量流量使服务器瘫痪。中间人攻击拦截双方通信。钓鱼攻击利用欺骗性电子邮件诱骗用户泄露凭据。
Mitigations include installing and updating antivirus/antimalware, implementing firewalls and intrusion detection systems, using encryption and digital certificates for data in transit, and educating users about safe practices. Network policies (password complexity, regular updates, least privilege) are equally crucial. Be able to match threats to appropriate defences in scenario-based questions.
缓解措施包括安装并更新杀毒/反恶意软件，部署防火墙和入侵检测系统，为传输中的数据使用加密和数字证书，以及对用户进行安全行为教育。网络策略（密码复杂度、定期更新、最小权限）同样关键。在情景题中要能将威胁与合适的防御手段匹配。
12. The Client-Server and Peer-to-Peer Models | 客户端-服务器与对等模型
The client-server model centralises resources on a powerful server; clients request services (e.g., web pages, files). This allows centralised administration, backup, and scalability, but the server is a single point of failure and can be expensive. Most business networks and websites use this architecture.
客户端-服务器模型将资源集中在性能强大的服务器上；客户端请求服务（如网页、文件）。这种模式便于集中管理、备份和扩展，但服务器是单点故障且成本较高。多数企业网络和网站采用此架构。
In a peer-to-peer (P2P) network, each device (peer) shares resources directly without a central server. It is cheap to set up and resilient because any peer can provide services, but management and security are harder to enforce. P2P is common in file-sharing applications (BitTorrent) and small home networks.
在对等网络（P2P）中，每台设备（对等点）直接共享资源，无需中央服务器。搭建成本低且具有弹性，因为任何对等点都可提供服务，但管理和安全较难实施。P2P 在文件共享应用（BitTorrent）和小型家庭网络中常见。
Exam tip: Be prepared to evaluate which model suits a given scenario, considering factors like cost, number of users, security requirements, and fault tolerance.
考试提示：准备好根据场景评估哪种模型合适，考虑成本、用户数量、安全要求和容错能力等因素。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导