📚 Network Fundamentals for IB CCEA Computer Science | IB CCEA 计算机：网络基础考点精讲
Computer networks form the backbone of modern communication, enabling devices to share data, resources, and services across the globe. For IB CCEA Computer Science students, a solid understanding of network fundamentals – from basic topologies and hardware to layered architectures and security – is essential for both examinations and real‑world problem‑solving. This article provides a comprehensive, exam‑focused breakdown of the key topics, presented in a clear bilingual format to support mastery of the syllabus.
计算机网络是现代通信的支柱，使设备能够在全球范围内共享数据和资源。对 IB CCEA 计算机科学的学生而言，扎实掌握网络基础——从基本拓扑结构、硬件设备到分层体系架构和安全防护——不仅关乎考试成绩，更是解决实际问题的基石。本文以考点为导向，采用清晰的双语讲解，为你系统梳理网络核心知识点。
1. What is a Computer Network? | 什么是计算机网络？
A computer network is a collection of two or more autonomous computing devices (hosts) interconnected by communication links and governed by a set of rules called protocols. The primary goals are resource sharing (files, printers, internet connections), communication (email, messaging, video calls), and distributed processing. Networks can be classified by scale, topology, transmission medium, and ownership.
计算机网络由两台或更多自主计算设备（主机）通过通信链路互连而成，并受一组称为协议的规则控制。其主要目标是资源共享（文件、打印机、互联网连接）、通信（电子邮件、即时消息、视频通话）和分布式处理。网络可按规模、拓扑结构、传输介质及所有权进行分类。
Every network requires at least a sender and a receiver, a transmission medium (wired or wireless), and a common communication protocol. Without protocol agreement on data format, address scheme, and error handling, meaningful information exchange is impossible.
每个网络至少需要一个发送方、一个接收方、一种传输介质（有线或无线）以及一套公共通信协议。若未就数据格式、寻址方案和差错处理达成协议，就无法实现有意义的信息交换。
2. Types of Networks: LAN, WAN, MAN | 网络类型：局域网、广域网、城域网
Local Area Networks (LANs) span a small geographical area – typically a single building or campus – and offer high data transfer rates (100 Mbps to 10 Gbps). They are usually privately owned and use technologies such as Ethernet and Wi‑Fi. A school computer lab or home network is a typical LAN.
局域网（LAN）覆盖较小地理区域——通常为单栋建筑或校园——并提供高数据传输速率（100 Mbps 至 10 Gbps）。LAN 通常为私有，使用以太网和 Wi‑Fi 等技术。学校机房或家庭网络就是典型的局域网。
Wide Area Networks (WANs) connect LANs over large distances – cities, countries, or continents – often relying on leased telecommunication lines, satellite links, or fibre optic cables. The internet is the largest WAN. WANs typically exhibit lower data rates than LANs and involve higher latency.
广域网（WAN）跨越城市、国家或洲际等长距离连接多个 LAN，常依赖于租用的电信线路、卫星链路或光纤。互联网是最大的 WAN。WAN 的数据速率通常低于 LAN，且延迟更高。
Metropolitan Area Networks (MANs) fill the gap between LAN and WAN, covering a city or region. They often use high‑speed fibre and Ethernet‑based metropolitan networks to connect businesses, governments, and ISPs within a metropolitan area.
城域网（MAN）填补了 LAN 与 WAN 之间的空白，覆盖一个城市或地区。它通常使用高速光纤和基于以太网的城域网络，将同一都市圈内的企业、政府机构和互联网服务提供商连接起来。
3. Network Topologies: Bus, Star, Mesh, Ring | 网络拓扑结构：总线型、星型、网状、环型
Topology defines the logical or physical layout of a network’s nodes and links. The bus topology uses a single backbone cable (the bus) to which all devices connect. It is simple and requires less cable, but a break in the backbone disables the entire segment and collisions increase with more nodes.
拓扑结构定义了网络中节点和链路的逻辑或物理布局。总线型拓扑使用一根主干缆线（总线）连接所有设备。其结构简单、线缆用量少，但主干一旦断裂整个网段将瘫痪，且节点数增多时冲突加剧。
Star topology connects every device to a central hub or switch via individual cables. Fault isolation is easy – a single cable failure affects only one device – but the central device represents a single point of failure. Star is the most common LAN topology today, especially with Ethernet switches.
星型拓扑通过独立线缆将每台设备连接到中央集线器或交换机。故障隔离容易——某根线缆故障仅影响单一设备——但中央设备构成单点故障。目前星型拓扑是以太网交换机中最常见的 LAN 拓扑。
Mesh topology provides multiple redundant paths between nodes; every node may be connected to every other node (full mesh) or to a subset (partial mesh). This offers the highest reliability and is used in backbone networks, but installation and maintenance are costly due to extensive cabling.
网状拓扑在节点间提供多条冗余路径；每个节点可与其他所有节点相连（全互连）或仅与部分节点相连（部分互连）。它提供最高可靠性，用于骨干网络，但线缆开销巨大，安装和维护成本高。
Ring topology links each device to exactly two neighbours, forming a closed loop. Data travels in one direction (or both in dual ring). A break in the ring can disrupt the entire network unless redundancy measures (e.g., dual counter‑rotating rings) are employed; token‑passing protocols were historically used in ring networks.
环型拓扑将每台设备恰好与两个邻居相连，形成闭合环路。数据沿单一方向（或在双环中双向）传输。环路中断会破坏整体网络，除非采用冗余措施（如双向旋转双环）；令牌传递协议曾在环网中广泛应用。
4. Network Hardware: Router, Switch, Hub, Bridge, Gateway | 网络硬件设备：路由器、交换机、集线器、网桥、网关
A hub operates at the physical layer (Layer 1) and simply repeats all incoming data to every port, creating a single collision domain. Hubs are largely obsolete due to inefficiency and security concerns.
集线器工作在物理层（第 1 层），仅将所有传入数据复制并转发至每个端口，形成单一冲突域。由于效率低、安全风险高，集线器已基本被淘汰。
A switch functions at the data link layer (Layer 2) and forwards frames based on MAC addresses. It learns the device by port association and creates dedicated, collision‑free segments. Managed switches also support VLANs for traffic isolation.
交换机在数据链路层（第 2 层）工作，根据 MAC 地址转发数据帧。它会学习设备-端口对应关系，并创建专用的无冲突网段。可管理交换机还支持 VLAN 以实现流量隔离。
A router operates at the network layer (Layer 3) and uses IP addresses to forward packets between different networks. Routers make forwarding decisions based on routing tables and protocols (RIP, OSPF, BGP) and can provide firewall and NAT services.
路由器工作在网络层（第 3 层），利用 IP 地址在不同网络间转发数据包。路由器依据路由表和路由协议（RIP、OSPF、BGP）作出转发决策，并可提供防火墙和 NAT 服务。
A bridge connects two similar network segments at Layer 2, filtering traffic by MAC address. It can reduce collisions by segmenting a busy network. A wireless access point bridges wireless devices to a wired LAN.
网桥在第 2 层连接两个相似网段，通过 MAC 地址过滤流量。它能通过分割繁忙网络来减少冲突。无线接入点则桥接无线设备至有线 LAN。
A gateway translates between different protocols or network architectures (e.g., converting between 4G and Wi‑Fi, or linking IPv4 and IPv6). Gateways operate across multiple layers of the OSI model.
网关在不同协议或网络体系结构之间进行转换（例如 4G 与 Wi‑Fi 之间的转换，或连接 IPv4 与 IPv6）。网关跨越 OSI 模型的多个层次运作。
5. The OSI Model | OSI参考模型
The Open Systems Interconnection (OSI) model is a conceptual seven‑layer framework that standardises communication functions. Each layer serves the layer above it and relies on the layer below, enabling modular protocol design and interoperability between vendors.
开放系统互连（OSI）模型是一个概念性的七层框架，它将通信功能标准化。每层为其上层提供服务并依赖下层，从而支持模块化协议设计和不同厂商间的互操作性。
The layers, from bottom to top, are: Physical (bit transmission, cabling, voltages), Data Link (framing, MAC addressing, error detection), Network (logical addressing and routing, e.g., IP), Transport (end‑to‑end reliability, segmentation, e.g., TCP/UDP), Session (dialogue control, synchronisation), Presentation (data translation, encryption, compression), and Application (user‑facing services, e.g., HTTP, SMTP, FTP).
从下至上的七层分别是：物理层（比特传输、线缆、电压）、数据链路层（成帧、MAC 寻址、差错检测）、网络层（逻辑寻址与路由，如 IP）、传输层（端到端可靠传输、分段，如 TCP/UDP）、会话层（对话控制、同步）、表示层（数据转换、加密、压缩）和应用层（面向用户的服务，如 HTTP、SMTP、FTP）。
Students are often asked to identify which layer a device or protocol belongs to. For example, a switch operates at Layer 2, a router at Layer 3, and HTTP resides at Layer 7. Understanding encapsulation (adding headers/trailers as data passes down the stack) is crucial.
学生常需判断某设备或协议属于哪一层。例如，交换机位于第 2 层，路由器位于第 3 层，HTTP 驻留在第 7 层。理解封装原理（数据沿协议栈向下传递时添加报头/报尾）至关重要。
6. The TCP/IP Model | TCP/IP协议栈
The TCP/IP suite, named after its two core protocols, is a four‑layer model that underpins the internet. Its layers are: Network Access (combines OSI Physical and Data Link), Internet (corresponds to OSI Network; handles IP, ICMP, ARP), Transport (same as OSI Transport; TCP and UDP), and Application (combines OSI Session, Presentation and Application).
TCP/IP 协议簇以其两个核心协议命名，是一个支撑互联网的四层模型。各层分别为：网络接入层（合并 OSI 物理层和数据链路层）、互联网层（对应 OSI 网络层；处理 IP、ICMP、ARP）、传输层（与 OSI 传输层相同；TCP 和 UDP）以及应用层（合并 OSI 会话层、表示层和应用层）。
TCP (Transmission Control Protocol) provides connection‑oriented, reliable delivery with error checking, flow control, and sequencing. It is used for web pages (HTTP), email (SMTP), and file transfers (FTP). UDP (User Datagram Protocol) is connectionless and faster, sacrificing reliability for speed – ideal for streaming, VoIP, and DNS queries.
TCP（传输控制协议）提供面向连接、可靠的交付，具有差错校验、流量控制和排序功能。它用于网页（HTTP）、电子邮件（SMTP）和文件传输（FTP）。UDP（用户数据报协议）是无连接的，速度更快，以牺牲可靠性换取速度——非常适合流媒体、VoIP 和 DNS 查询。
When comparing the two models, the TCP/IP stack is more practical and widely implemented, while the OSI model offers a more detailed, educational abstraction.
在比较两个模型时，TCP/IP 协议栈更实用且广为实施，而 OSI 模型则提供了更细致、更适合教学的抽象框架。
7. IP Addressing and Subnetting | IP地址与子网划分
An IP address (IPv4) is a 32‑bit logical identifier written in dotted‑decimal notation (e.g., 192.168.1.10). It comprises a network portion and a host portion, separated by the subnet mask. The same address structure is used in IPv6 with 128‑bit addresses written in hexadecimal.
IP 地址（IPv4）是一个 32 位的逻辑标识符，采用点分十进制表示（例如 192.168.1.10）。它由网络部分和主机部分组成，由子网掩码分隔。IPv6 使用 128 位地址，以十六进制书写，结构类似。
The subnet mask (e.g., 255.255.255.0) indicates which bits belong to the network. A logical bitwise AND between the IP address and the mask yields the network address. For example, 192.168.1.10/24 means the first 24 bits are the network prefix; the network address is 192.168.1.0, and host range is 192.168.1.1‑254 with broadcast 192.168.1.255.
子网掩码（例如 255.255.255.0）指示哪些位属于网络部分。IP 地址与掩码进行按位逻辑 AND 运算得到网络地址。例如，192.168.1.10/24 表示前 24 位为网络前缀；网络地址为 192.168.1.0，主机范围 192.168.1.1‑254，广播地址为 192.168.1.255。
Subnetting divides a larger network into smaller, more manageable sub‑networks, improving security and reducing broadcast traffic. It borrows host bits to create additional network bits. Given a required number of subnets or hosts, students must calculate new subnet masks, subnet IDs, and usable host ranges.
子网划分将较大网络分割为更小、更易管理的子网，以提高安全性并减少广播流量。它借用主机位以创建额外的网络位。给定所需子网数或主机数时，学生须计算新的子网掩码、子网 ID 和可用主机范围。
8. Common Network Protocols: HTTP, FTP, SMTP, DNS | 常见网络协议
These application‑layer protocols define how specific services operate over the internet. HTTP (Hypertext Transfer Protocol) is the foundation of the World Wide Web, using a request‑response model (usually over TCP port 80). HTTPS adds TLS/SSL encryption on port 443.
这些应用层协议定义了互联网上特定服务的运作方式。HTTP（超文本传输协议）是万维网的基础，采用请求‑响应模型（通常在 TCP 端口 80 上运行）。HTTPS 在端口 443 上增加 TLS/SSL 加密。
FTP (File Transfer Protocol) enables file uploads/downloads between a client and a server, using TCP ports 20 (data) and 21 (control). SMTP (Simple Mail Transfer Protocol) handles outgoing email transport, typically over port 25; it is complemented by POP3 (port 110) or IMAP (port 143) for receiving mail.
FTP（文件传输协议）支持客户端与服务器之间的文件上传/下载，使用 TCP 端口 20（数据）和 21（控制）。SMTP（简单邮件传输协议）处理外发邮件传输，通常经端口 25 运行；它由 POP3（端口 110）或 IMAP（端口 143）辅助完成邮件接收。
DNS (Domain Name System) translates human‑readable domain names (www.example.com) into IP addresses. It operates as a distributed, hierarchical database over UDP (and sometimes TCP) port 53. A DNS server resolves queries by recursively consulting root, TLD, and authoritative servers.
DNS（域名系统）将人类可读的域名（www.example.com）转换为 IP 地址。它作为一个分布式、分层数据库，通过 UDP（有时也使用 TCP）端口 53 运行。DNS 服务器通过递归查询根服务器、顶级域服务器和权威服务器来解析域名。
9. Network Security Basics: Firewalls, Encryption, Authentication | 网络安全基础：防火墙、加密、身份验证
Network security protects data and services from unauthorised access, misuse, or theft. A firewall monitors and filters incoming/outgoing traffic based on pre‑configured security rules. It can be a hardware appliance or software, and it may use packet filtering, stateful inspection, or proxy techniques.
网络安全旨在保护数据和服务免受未经授权的访问、滥用或窃取。防火墙根据预设安全规则监控并过滤进出流量。它可以是硬件设备或软件程序，并可采用包过滤、状态检测或代理技术。
Encryption transforms plaintext into ciphertext using an algorithm and a key, ensuring confidentiality. Symmetric encryption (e.g., AES) uses a single shared key; asymmetric encryption (e.g., RSA) uses a public/private key pair, enabling secure key exchange and digital signatures. TLS/SSL secures data in transit on the web.
加密使用算法和密钥将明文转换为密文，从而确保机密性。对称加密（如 AES）使用单一共享密钥；非对称加密（如 RSA）使用公钥/私钥对，实现安全的密钥交换和数字签名。TLS/SSL 保障 Web 数据传输的安全。
Authentication verifies the identity of a user or device. Common methods include password‑based login, biometric scans, multi‑factor authentication (MFA), and digital certificates. Combined with authorisation (access rights) and accounting (audit trails), it forms the AAA framework.
身份验证核实用户或设备的身份。常见方法包括基于密码的登录、生物特征扫描、多因素认证（MFA）和数字证书。身份验证与授权（访问权限）和记账（审计日志）相结合，构成 AAA 框架。
10. Client‑Server and Peer‑to‑Peer Models | 客户端-服务器与对等网络模型
The client‑server paradigm centralises resources on a powerful server, which provides services to multiple requesting clients. This model offers centralised management, easier backup, and robust security, but the server is a single point of failure and can become a bottleneck. Typical examples include web servers, email servers, and database servers.
客户端-服务器范式将资源集中在功能强大的服务器上，由服务器向多个发出请求的客户端提供服务。此模型便于集中管理、备份和强化安全，但服务器是单点故障，也可能成为瓶颈。典型例子包括 Web 服务器、邮件服务器和数据库服务器。
In a peer‑to‑peer (P2P) network, each node (peer) acts as both client and server, sharing resources directly with others. P2P networks are highly scalable and fault‑tolerant because there is no central dependency, but they present challenges in security, data consistency, and copyright enforcement. Examples include BitTorrent and blockchain nodes.
在对等（P2P）网络中，每个节点（对等体）同时充当客户端和服务器，直接与其他节点共享资源。P2P 网络具有高度可扩展性和容错能力，因为不存在中心依赖，但在安全、数据一致性和版权执行方面存在挑战。实例包括 BitTorrent 和区块链节点。
Hybrid models combine elements of both, often using central servers for indexing or authentication while using peer‑to‑peer data transfers (e.g., Skype originally, and some cloud‑assisted file sharing).
混合模型结合了两者的元素，通常使用中央服务器进行索引或身份验证，同时利用对等传输数据（例如最初的 Skype 以及某些云辅助文件共享服务）。
11. Wireless Networking: Wi‑Fi, Bluetooth | 无线网络技术
Wireless technologies eliminate physical cables by using electromagnetic waves. Wi‑Fi (IEEE 802.11 standards) operates mainly in the 2.4 GHz and 5 GHz bands, providing wireless LAN connectivity with ranges up to 100 metres indoors. Wi‑Fi security evolved from WEP to WPA, WPA2, and WPA3, with WPA2 using AES encryption being the current baseline.
无线技术利用电磁波取代物理线缆。Wi‑Fi（IEEE 802.11 标准）主要工作在 2.4 GHz 和 5 GHz 频段，提供室内最远约 100 米的无线局域网连接。Wi‑Fi 安全从 WEP 演进至 WPA、WPA2 和 WPA3，其中使用 AES 加密的 WPA2 是当前基本标准。
Bluetooth (IEEE 802.15.1) is designed for short‑range (typically 10 metres) personal area networks (PANs), connecting peripherals like headsets, keyboards, and wearables. Bluetooth Low Energy (BLE) allows tiny devices to run for years on a coin cell battery.
蓝牙（IEEE 802.15.1）专为短距离（通常 10 米）个人区域网（PAN）设计，用于连接耳机、键盘和可穿戴设备等外设。低功耗蓝牙（BLE）使微型设备靠纽扣电池即可运行数年。
Wireless networks face unique challenges: signal interference, limited spectrum, hidden node problems, and security vulnerabilities such as eavesdropping. CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance) is used to minimise collisions.
无线网络面临独特挑战：信号干扰、频谱有限、隐藏节点问题以及窃听等安全漏洞。系统使用 CSMA/CA（载波侦听多路访问/冲突避免）来尽量减少冲突。
12. Error Detection and Correction | 差错检测与纠正
Data can be corrupted during transmission due to noise, attenuation, or interference. Error detection techniques allow the receiver to detect (and sometimes correct) these errors. The simplest method is parity checking: a parity bit is added to make the number of 1s either even (even parity) or odd (odd parity). It can detect single‑bit errors but not correct them.
数据在传输过程中可能因噪声、衰减或干扰而损坏。差错检测技术使接收方能够检测（有时还能纠正）这些错误。最简单的办法是奇偶校验：添加一个奇偶校验位，使 1 的总数为偶数（偶校验）或奇数（奇校验）。它能检测单比特错误，但无法纠正错误。
Checksums involve summing data segments (often in a one’s complement method) and transmitting the result. The receiver repeats the calculation; a mismatch indicates an error. CRCs (Cyclic Redundancy Checks) treat data as a polynomial and divide it by a generator polynomial; the remainder is appended. CRCs catch burst errors efficiently and are used in Ethernet and storage systems.
校验和是将数据分段求和（常采用反码加法），并传输结果。接收方重复计算，结果不匹配则表明出错。循环冗余校验（CRC）将数据视为多项式，除以生成多项式，余数附加在数据后。CRC 能高效检测突发错误，广泛用于以太网和存储系统。
For error correction, Hamming codes insert multiple parity bits positioned to identify and correct single‑bit errors. Modern systems often combine detection with retransmission (ARQ – Automatic Repeat reQuest) where the receiver detects an error and requests a resend, rather than relying solely on forward error correction.
在纠错方面，汉明码插入多个奇偶校验位，其位置可识别并纠正单比特错误。现代系统常将检测与重传机制（ARQ——自动重传请求）结合，由接收方检测到错误后请求重发，而非单纯依赖前向纠错。
Published by TutorHao | Computer Science Revision Series | aleveler.com
更多咨询请联系16621398022（同微信）
屏轩国际教育cambridge primary/secondary checkpoint, cat4, ukiset,ukcat,igcse,alevel,PAT,STEP,MAT, ibdp,ap,ssat,sat,sat2课程辅导，国外大学本科硕士研究生博士课程论文辅导Cancel reply