📚 Network Fundamentals for IB and CIE Computer Science | IB CIE 计算机：网络基础 考点精讲
Networking is a cornerstone of modern computer science, enabling devices to share resources and communicate. This revision guide covers key networking concepts examined in IB and CIE Computer Science, from basic network types and topologies to protocols, IP addressing, and security. Each section pairs English explanations with Chinese translations to support bilingual learning and exam preparation.
网络是现代计算机科学的基石，使设备能够共享资源并相互通信。本复习指南涵盖了IB和CIE计算机科学考试中的关键网络概念，从基本的网络类型、拓扑结构，到协议、IP地址和网络安全。每个部分均采用中英对照的双语讲解，助力理解和备考。
1. What is a Network? Types of Networks | 什么是网络？网络类型
A computer network is a collection of interconnected devices that can exchange data and share resources like printers, files, and internet connections. Networks are classified by their geographical span, ownership, and the technologies they use. The main categories include Personal Area Network (PAN), Local Area Network (LAN), Metropolitan Area Network (MAN), and Wide Area Network (WAN). A PAN typically covers a few metres around a single person (e.g. Bluetooth headphones). A LAN connects devices within a building or campus, often using Ethernet or Wi‑Fi. A MAN spans a city, while a WAN covers large geographical areas, often across countries, using leased telecommunication lines or satellite links.
计算机网络是一组互连的设备，可以交换数据并共享打印机、文件和互联网连接等资源。网络根据地理覆盖范围、所有权和使用的技术进行分类。主要类别包括个人区域网（PAN）、局域网（LAN）、城域网（MAN）和广域网（WAN）。PAN通常覆盖一人周围几米的范围（例如蓝牙耳机）。LAN连接建筑物或校园内的设备，通常使用以太网或Wi‑Fi。MAN横跨一个城市，而WAN覆盖广阔的地理区域，经常跨越国家，使用租用的电信线路或卫星链路。
| Network Type | Typical Span | Example |
|---|---|---|
| PAN | Up to 10 m | Bluetooth, USB |
| LAN | Building / Campus | Office Ethernet, School Wi‑Fi |
| MAN | City | Cable TV networks |
| WAN | Country / Global | The Internet, VPN tunnels |
除了按地理范围分类，网络还可以根据管理模型划分，例如客户端‑服务器网络和对等网络（P2P）。在客户端‑服务器模型中，专用服务器提供文件、网页或数据库服务，客户端请求并接收这些服务。在P2P模型中，所有设备地位对等，直接共享资源，常见于文件共享应用。IB和CIE大纲均强调需要理解这些模型在可扩展性、安全性和性能方面的权衡。
2. Network Topologies | 网络拓扑结构
Network topology refers to the physical or logical layout of nodes and links in a network. Common topologies include star, bus, ring, and mesh. In a star topology all devices connect to a central switch or hub; failure of one cable affects only that device, but the central point is a single point of failure. A bus topology uses a single backbone cable: it is cheap to install but a break in the backbone disables the whole segment. A ring topology links each node to exactly two neighbours, forming a closed loop; data travels in one direction, and a failure in any link can bring down the network unless redundancy is built in. Mesh topologies connect every node to several others (partial mesh) or to every other node (full mesh), offering high fault tolerance but at greater cost.
网络拓扑是指网络中节点和链路的物理或逻辑布局。常见拓扑包括星型、总线型、环型和网状。在星型拓扑中，所有设备连接到一个中央交换机或集线器；单根电缆故障只影响对应设备，但中央设备是单点故障。总线型拓扑使用单根主干电缆：安装成本低，但主干断裂会导致整个网段瘫痪。环型拓扑将每个节点恰好与两个邻居相连，形成闭合环路；数据单向传输，除非内置冗余，否则任何链路故障都可能导致网络瘫痪。网状拓扑将每个节点连接到多个其他节点（部分网状）或所有其他节点（全网状），提供高容错性但成本更高。
Logical topologies describe how data actually flows through the network, which may differ from the physical wiring. For example, an Ethernet star may logically behave like a bus when using a hub, because every message is broadcast to all ports. IB diploma and CIE A‑level both expect students to evaluate topology choices under constraints of cost, scalability, and fault tolerance.
逻辑拓扑描述数据实际如何流经网络，这可能与物理布线不同。例如，使用集线器的以太网星型拓扑在逻辑上可能像总线，因为每条消息都被广播到所有端口。IB文凭和CIE A‑Level都要求学生能在成本、可扩展性和容错性等约束下评估拓扑的选择。
3. The OSI Model | OSI 模型
The Open Systems Interconnection (OSI) model is a conceptual framework that standardises network functions into seven layers. Each layer serves the layer above it and is served by the layer below. From top to bottom they are: Application (7), Presentation (6), Session (5), Transport (4), Network (3), Data Link (2), and Physical (1). Understanding the role of each layer helps in troubleshooting and protocol analysis.
开放系统互连（OSI）模型是一个概念框架，将网络功能标准化为七个层次。每一层为上层服务，并接受下层的服务。从上到下依次为：应用层（7）、表示层（6）、会话层（5）、传输层（4）、网络层（3）、数据链路层（2）和物理层（1）。理解各层的角色有助于故障排除和协议分析。
Layer 1 – Physical: Transmits raw bit streams over a physical medium. Defines electrical, mechanical, and timing specifications. Examples: cables, radio frequencies, repeaters.
第1层——物理层：在物理介质上传输原始比特流。定义电气、机械和时序规范。例如：线缆、无线电频率、中继器。
Layer 2 – Data Link: Organises bits into frames, handles physical addressing (MAC addresses), and provides error detection. Switches operate at this layer. Divided into Logical Link Control (LLC) and Media Access Control (MAC) sublayers.
第2层——数据链路层：将比特组织成帧，处理物理寻址（MAC地址），并提供错误检测。交换机工作在这一层。分为逻辑链路控制（LLC）和介质访问控制（MAC）子层。
Layer 3 – Network: Manages logical addressing (e.g. IP addresses) and determines the best path for routing packets across multiple networks. Routers and Layer‑3 switches function here.
第3层——网络层：管理逻辑寻址（例如IP地址），并确定跨多个网络路由数据包的最佳路径。路由器和三层交换机在此工作。
Layer 4 – Transport: Ensures reliable data delivery through segmentation, flow control, and error recovery. TCP and UDP are the main transport protocols.
第4层——传输层：通过分段、流量控制和错误恢复确保可靠的数据交付。TCP和UDP是主要的传输协议。
Layer 5 – Session: Manages dialogues between applications, establishing, maintaining, and terminating sessions. Less commonly referenced today as many application protocols handle these functions.
第5层——会话层：管理应用程序间的对话，建立、维护和终止会话。如今较少单独提及，因为许多应用层协议自行处理这些功能。
Layer 6 – Presentation: Translates data formats into a common format, handling encryption, compression, and character encoding (e.g. ASCII to EBCDIC). SSL/TLS partially operates here.
第6层——表示层：将数据格式转换为通用格式，处理加密、压缩和字符编码（例如ASCII与EBCDIC转换）。SSL/TLS部分在此运行。
Layer 7 – Application: The layer closest to the end user. Provides network services directly to applications such as web browsers and email clients. Protocols include HTTP, FTP, SMTP.
第7层——应用层：最接近最终用户的一层。直接为Web浏览器、电子邮件客户端等应用程序提供网络服务。协议包括HTTP、FTP、SMTP。
4. The TCP/IP Model | TCP/IP 模型
The TCP/IP model (also known as the Internet protocol suite) is a simpler, four‑layer framework used in real‑world networking. It maps loosely to the OSI model but combines some layers. From top to bottom: Application, Transport, Internet, and Network Access (or Link) layers. The Application layer roughly corresponds to OSI layers 5‑7; Transport maps to OSI layer 4; Internet is equivalent to OSI layer 3; Network Access encompasses OSI layers 1‑2.
TCP/IP模型（也称为互联网协议套件）是一个更简洁的四层框架，用于实际网络中。它与OSI模型有松散的对应关系，但合并了一些层次。从上到下依次为：应用层、传输层、互联网层和网络接入层（或链路层）。应用层大致对应OSI的第5至7层；传输层对应OSI第4层；互联网层等同于OSI第3层；网络接入层涵盖OSI第1和第2层。
The TCP/IP model emphasises end‑to‑end connectivity and defines how data should be packetised, addressed, transmitted, routed, and received. Its key protocols include IP (Internet layer), TCP and UDP (Transport), and HTTP, DNS, SMTP (Application). Many exam questions ask students to compare the two models and explain why TCP/IP is more practical for the modern Internet.
TCP/IP模型强调端到端连接，并定义了数据应如何打包、寻址、传输、路由和接收。其关键协议包括IP（互联网层）、TCP和UDP（传输层），以及HTTP、DNS、SMTP（应用层）。许多考题要求学生比较这两个模型，并解释为什么TCP/IP对于现代互联网更实用。
5. Key Network Protocols | 关键网络协议
Protocols are rules governing data communication. Below is a summary of essential protocols commonly referenced in IB and CIE syllabi.
协议是管理数据通信的规则。以下是IB和CIE大纲中常涉及的关键协议摘要。
| Protocol | Port(s) | Layer | Function |
|---|---|---|---|
| HTTP / HTTPS | 80, 443 | Application | Web page transfer; HTTPS adds TLS encryption |
| FTP | 20, 21 | Application | File transfer protocol |
| SMTP | 25 | Application | Sending emails |
| POP3 / IMAP | 110, 143 | Application | Retrieving emails from a server |
| DNS | 53 | Application | Resolves domain names to IP addresses |
| DHCP | 67, 68 | Application | Dynamic IP address assignment |
| TCP | N/A | Transport | Connection‑oriented, reliable delivery, e.g. for HTTP, email |
| UDP | N/A | Transport | Connectionless, fast, used for VoIP, streaming |
| IP | N/A | Network/Internet | Logical addressing and routing of packets |
协议是管理数据通信的规则集。上表总结了常考协议：HTTP/HTTPS（网页传输），FTP（文件传输），SMTP（发邮件），POP3/IMAP（收邮件），DNS（域名解析），DHCP（动态IP分配）。传输层中，TCP面向连接、可靠，适用于网页和邮件；UDP无连接、速度快，适用于语音和流媒体。IP在网络层实现逻辑寻址和路由。考生需熟记端口号、所在层次及典型应用场景。
6. IP Addressing and Subnetting | IP 地址与子网划分
An IPv4 address is a 32‑bit number typically expressed in dotted decimal notation, e.g. 192.168.1.10. It has two parts: network ID and host ID. The subnet mask (e.g. 255.255.255.0) distinguishes them. CIDR notation expresses the mask as a slash plus the number of contiguous 1 bits, e.g. /24. Thus 192.168.1.10/24 means the first 24 bits are the network part.
IPv4地址是一个32位数字，通常以点分十进制表示，例如192.168.1.10。它分为网络ID和主机ID两部分。子网掩码（如255.255.255.0）用于区分它们。CIDR表示法使用斜线加上连续1的位数，如/24。因此192.168.1.10/24表示前24位是网络部分。
Subnet mask 255.255.255.0 → binary: 11111111.11111111.11111111.00000000 → /24
子网划分允许将一个大的地址块分割成多个更小的子网。计算可用主机数时，公式为 2ⁿ⁻²（n为主机位数），减去网络地址和广播地址。例如，/24网络有8位主机位，可得 2⁸ – 2 = 254 台主机。IB和CIE可能要求考生从给定CIDR中推断网络地址、广播地址和主机范围。
Subnetting allows a large address block to be divided into smaller sub‑networks. The number of usable hosts is given by 2ⁿ – 2, where n is the number of host bits. For a /24 network, host bits = 8, so 2⁸ – 2 = 254 available hosts. Exam questions often ask students to calculate the network address, broadcast address, and host range from a given CIDR notation.
IPv6 addresses are 128 bits long, written as eight groups of four hexadecimal digits, separated by colons, e.g. 2001:0db8:85a3::8a2e:0370:7334. IPv6 was introduced to solve IPv4 address exhaustion and includes built‑in security and autoconfiguration features.
IPv6地址长度为128位，写作八组四位十六进制数字，用冒号分隔，例如2001:0db8:85a3::8a2e:0370:7334。引入IPv6是为了解决IPv4地址枯竭问题，并内置了安全性和自动配置功能。
7. Network Hardware Devices | 网络硬件设备
Various hardware components facilitate communication across networks. The key devices include: Network Interface Card (NIC) – provides the physical connection to the network, with a unique MAC address. Hub – a simple device that repeats signals to all ports; creates a single collision domain. Switch – operates at Data Link layer, forwards frames based on MAC addresses, and creates separate collision domains per port; more efficient than hubs. Router – works at Network layer, uses IP addresses to forward packets between different networks, connecting LANs to the Internet. Firewall – filters incoming and outgoing traffic based on security rules; can be hardware‑ or software‑based. Modem – modulates/demodulates signals for transmission over telephone or cable lines.
各种硬件组件促进了网络通信。关键设备包括：网络接口卡（NIC）——提供与网络的物理连接，拥有唯一的MAC地址。集线器——一个简单设备，将信号重复发送到所有端口；创建单个冲突域。交换机——工作在数据链路层，基于MAC地址转发帧，每个端口形成独立冲突域；比集线器高效。路由器——工作在网络层，使用IP地址在不同网络间转发数据包，将局域网连接到互联网。防火墙——根据安全规则过滤进出流量；可以是硬件或软件。调制解调器——调制/解调信号以便在电话或有线电视线路上传输。
Wireless Access Points (WAP) connect wireless devices to a wired network. Students should be able to explain the OSI/TCP‑IP layer at which each device operates, and discuss when a switch is preferred over a hub, or why a router is needed to connect to the Internet. Knowing the difference between a collision domain and a broadcast domain is essential for CIE and IB exams.
无线接入点（WAP）将无线设备连接到有线网络。学生应能解释每个设备工作在OSI/TCP‑IP的哪一层，并讨论何时比集线器更优选交换机，或为什么连接互联网需要路由器。理解冲突域与广播域的区别对CIE和IB考试至关重要。
8. Packet Switching and Data Transmission | 包交换与数据传输
Packet switching is the dominant method for data transmission in modern networks. Data is broken into small packets, each containing a header with source and destination addresses, sequence number, and error‑checking information. Packets are routed independently across the network and reassembled at the destination. This allows efficient use of bandwidth and does not require a dedicated circuit.
包交换是现代网络中数据传输的主要方法。数据被拆分成小数据包，每个包包含一个有源地址、目的地址、序列号和错误校验信息的首部。数据包在网络中独立路由，在目的地重新组装。这允许高效利用带宽，且不需要专用电路。
Circuit switching, in contrast, establishes a dedicated communication path for the entire conversation (e.g. traditional telephone networks). It guarantees constant bandwidth but is less efficient for bursty data traffic. IB/CIE syllabi contrast the two switching techniques, highlighting that the Internet uses packet switching while legacy telephony relied on circuit switching.
相比之下，电路交换为整个会话建立一个专用通信路径（例如传统电话网络）。它保证恒定的带宽，但对突发数据流量的效率较低。IB/CIE大纲对比这两种交换技术，强调互联网使用包交换，而传统电话依赖电路交换。
Key metrics include bandwidth (bits per second), latency (delay), jitter (variation in delay), and packet loss. Protocols like TCP add reliability through acknowledgements and retransmissions, while UDP sacrifices reliability for speed. Data transmission can be serial (one bit at a time) or parallel (multiple bits simultaneously), with serial becoming more common even for short distances due to fewer timing errors.
关键指标包括带宽（每秒比特数）、延迟（时延）、抖动（延迟变化）和丢包。像TCP这样的协议通过确认和重传来增加可靠性，而UDP牺牲可靠性以换取速度。数据传输可以是串行（一次一位）或并行（同时多位），由于时序误差更少，串行传输即使在短距离也变得更加常见。
9. Wireless Networking and Standards | 无线网络与标准
Wireless technologies free devices from physical cables. Wi‑Fi (based on IEEE 802.11 standards) operates mainly in the 2.4 GHz and 5 GHz bands. Common versions include 802.11n (Wi‑Fi 4), 802.11ac (Wi‑Fi 5), and 802.11ax (Wi‑Fi 6), each offering higher speeds and better efficiency. Bluetooth is a short‑range technology used for personal devices, typically within 10 m, operating in the 2.4 GHz band. Mobile networks (3G, 4G LTE, 5G) provide wide‑area wireless connectivity for smartphones; 5G offers significantly lower latency and higher throughput.
无线技术使设备摆脱了物理线缆。Wi‑Fi（基于IEEE 802.11标准）主要在2.4 GHz和5 GHz频段运行。常见版本包括802.11n（Wi‑Fi 4）、802.11ac（Wi‑Fi 5）和802.11ax（Wi‑Fi 6），每个版本都提供更高的速度和更好的效率。蓝牙是一种短距离技术，用于个人设备，通常在10米范围内，工作在2.4 GHz频段。移动网络（3G、4G LTE、5G）为智能手机提供广域无线连接；5G的延迟显著更低，吞吐量更高。
Security in wireless is critical. WPA2 (Wi‑Fi Protected Access 2) with AES encryption is the minimum recommended standard; WPA3 provides stronger protection against brute‑force attacks. Wireless networks use access points and can operate in infrastructure mode (all devices go through an AP) or ad‑hoc mode (peer‑to‑peer). IB and CIE often ask about factors affecting wireless performance such as interference, distance, physical obstacles, and the number of concurrent users.
无线安全至关重要。采用AES加密的WPA2是最低推荐标准；WPA3提供了更强的防暴力破解保护。无线网络使用接入点，可以工作于基础设施模式（所有设备通过AP通信）或自组网模式（点对点）。IB和CIE常问及影响无线性能的因素，如干扰、距离、物理障碍和并发用户数量。
10. Network Security Essentials | 网络安全基础
Network security protects data confidentiality, integrity, and availability. Threats include malware (viruses, worms, ransomware), phishing, denial‑of‑service (DoS) attacks, and man‑in‑the‑middle attacks. Key defences are: Encryption – using protocols like TLS/SSL to secure data in transit. Firewalls – filtering traffic based on rules. Authentication and passwords – verifying user identity; multi‑factor authentication adds extra layers. Anti‑malware software – detecting and removing malicious code. Regular updates and patches – closing known vulnerabilities. Virtual Private Networks (VPNs) – creating encrypted tunnels over public networks.
网络安全保护数据的机密性、完整性和可用性。威胁包括恶意软件（病毒、蠕虫、勒索软件）、网络钓鱼、拒绝服务（DoS）攻击和中间人攻击。核心防御措施有：加密——使用TLS/SSL等协议保护传输中的数据。防火墙——基于规则过滤流量。身份认证与密码——验证用户身份；多因素认证
Published by TutorHao | IB Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导Cancel reply