NetOps Toolkit

Networking 101

Jargon Decoder

Search 100+ networking terms explained in plain English — no experience required

TermPlain-English Definition
Access PortA switch port that belongs to a single VLAN. Devices connected here don't know anything about VLANs — the switch handles it all. Most end-device ports (PC, phone) are access ports.
ACL (Access Control List)A list of rules on a router or switch that permit or deny traffic. Think of it as a bouncer's list at the door — if your name is on it, you get in; if not, you're denied.
AddressA unique identifier for a device. MAC addresses are hardware addresses; IP addresses are logical addresses assigned by software/DHCP.
AP / WAPAccess Point or Wireless Access Point — the box on the ceiling that broadcasts Wi-Fi. Connects wireless devices to the wired network.
ARPAddress Resolution Protocol — how a device figures out the MAC address of another device when it only knows the IP address. "Who has 192.168.1.1? Tell me your MAC."
ASNAutonomous System Number — a unique ID given to organisations that run their own public routing (usually ISPs and big companies using BGP).
BackboneThe high-speed core of a network that carries the bulk of the traffic. Usually fiber-connected switches or routers in the data center.
BandwidthThe maximum amount of data a link can carry per second (e.g. 1 Gbps). Not the same as speed — it's more like the width of a pipe, not how fast the water flows.
BGPBorder Gateway Protocol — the routing protocol that runs the internet. Used between ISPs and large enterprises to exchange routing information between autonomous systems.
BroadcastA message sent to all devices on a network at once. Like shouting in a room instead of whispering to one person.
CDP / LLDPCisco Discovery Protocol / Link Layer Discovery Protocol — protocols that let network devices announce themselves to their neighbors. Useful for mapping what's connected to what.
CIDRClassless Inter-Domain Routing — a way to write IP addresses with their prefix length: e.g. 192.168.1.0/24. The /24 tells you how many bits are the network part.
CLICommand Line Interface — the text-based interface you use to configure routers and switches. No mouse, just typing commands.
Collision DomainThe group of devices that share a single network segment. Old hubs had one big collision domain; switches give each port its own, eliminating most collisions.
ConvergenceWhen all routers in a network agree on the best routes after a change (like a link going down). During convergence, traffic may be temporarily disrupted.
CRCCyclic Redundancy Check — a math checksum attached to Ethernet frames so the receiver can detect if bits got corrupted in transit. Bad CRCs usually mean a cable or NIC issue.
CSMA/CDHow old Ethernet shared a cable — devices listen before transmitting and back off if a collision happens. Mostly irrelevant now that switches give each device a full-duplex link.
Default GatewayThe router's IP address on your subnet. When your PC wants to reach something outside its own network, it sends traffic here first. Usually ends in .1 (e.g. 192.168.1.1).
DHCPDynamic Host Configuration Protocol — automatically gives IP addresses, subnet masks, gateways, and DNS servers to devices when they join the network. No manual config needed.
DMZDemilitarized Zone — a network segment that sits between the internet and your internal network, used for public-facing servers (web, email). Isolated so a compromise doesn't reach internal systems.
DNSDomain Name System — translates names like google.com into IP addresses. Like a phone book for the internet. Without it you'd need to memorise IPs for every website.
DuplexWhether a link can send and receive at the same time. Full-duplex = simultaneous send/receive (modern). Half-duplex = only one direction at a time (old hubs). Mismatched duplex causes errors.
EIGRPEnhanced Interior Gateway Routing Protocol — a Cisco proprietary routing protocol. Faster convergence than RIP, simpler than OSPF. Used inside enterprise networks.
EncapsulationWrapping data in headers at each OSI layer as it travels down the stack. Like putting a letter in an envelope, then that envelope in a box, then shipping the box.
EthernetThe most common wired networking standard. Uses frames with MAC addresses. Runs over copper (Cat5e/6/6a) or fiber cable. Speeds: 100 Mbps, 1 Gbps, 10 Gbps, 25 Gbps, 100 Gbps.
FailoverWhen a primary link or device fails and traffic automatically switches to a backup. Good network design always has a failover plan.
FirewallA device (or software) that enforces rules about what traffic is allowed in or out of a network. Can block ports, protocols, or specific IP addresses.
FrameA Layer 2 packet. Contains source/destination MAC addresses, data payload, and a CRC checksum. Switches work with frames.
Full MeshA network topology where every device connects directly to every other device. Very resilient but expensive — connections grow exponentially with device count.
GatewayUsually refers to the default gateway — the router interface on your subnet that forwards traffic to other networks. Sometimes used for application-layer gateways (API, email).
GREGeneric Routing Encapsulation — a tunneling protocol that wraps packets inside other packets to carry them over a network that wouldn't normally support them (e.g. non-IP traffic over IP).
HSRP / VRRPHot Standby Router Protocol / Virtual Router Redundancy Protocol — protocols that let two routers share a virtual IP as the default gateway. If one fails, the other takes over invisibly.
HubOld networking gear that broadcasts all traffic to every port. Replaced by switches, which are smarter. You'll mostly see hubs in museums now.
ICMPInternet Control Message Protocol — used by ping and traceroute. It's a diagnostic/control protocol, not for carrying user data. Firewalls often block it, which is why ping sometimes fails.
IDFIntermediate Distribution Frame — the wiring closet on each floor or wing of a building. Connects to the MDF (main distribution frame) in the data center.
InterfaceA physical or logical connection point on a device. A router port, a switch port, or a virtual interface (loopback, VLAN interface) are all interfaces.
IP AddressA unique logical address for a device on a network. IPv4: four numbers 0–255 separated by dots (e.g. 192.168.1.10). IPv6: eight groups of four hex digits (e.g. 2001:db8::1).
IPv4The most common version of IP addressing — 32-bit addresses written as four decimal numbers (e.g. 10.0.0.1). About 4.3 billion possible addresses.
IPv6The newer version — 128-bit addresses, allowing a virtually unlimited number. Written in hex groups separated by colons. Slowly replacing IPv4 but both coexist today.
ISPInternet Service Provider — the company that connects your organisation to the internet. Examples: AT&T, Comcast, Spectrum, Lumen.
JitterVariation in the delay of arriving packets. High jitter causes choppy audio/video in VoIP and video conferencing calls.
Jumbo FramesEthernet frames larger than the standard 1500-byte MTU, typically 9000 bytes. Used in storage networks (iSCSI, NFS) to reduce overhead. All devices on a path must support them.
LANLocal Area Network — the private network inside your building or campus. Switches connect devices on the LAN.
LatencyThe time it takes a packet to travel from source to destination. Measured in milliseconds (ms). Low latency is good — important for real-time traffic like voice and video.
Layer 2The Data Link layer of the OSI model — where switches and MAC addresses live. Concerned with getting frames between directly connected devices.
Layer 3The Network layer of the OSI model — where routers and IP addresses live. Concerned with routing packets between different networks.
LoopbackA virtual interface on a router or switch (e.g. Loopback0) used as a stable management address that is always up as long as the device is running.
MAC AddressMedia Access Control address — a hardware address burned into every NIC at the factory. Written as six pairs of hex digits: AA:BB:CC:DD:EE:FF. Switches use these to forward frames locally.
MDFMain Distribution Frame — the central wiring hub, usually in the data center or main comms room. All IDFs connect back here.
MTUMaximum Transmission Unit — the largest packet size a link can carry without fragmenting. Standard Ethernet MTU is 1500 bytes.
MulticastSending data to a specific group of devices simultaneously (not all, not one). Used for video streaming, IPTV, and routing protocol updates.
NATNetwork Address Translation — rewrites IP addresses on packets as they pass through a router. Most commonly used to let many private IPs share one public IP for internet access.
NICNetwork Interface Card — the hardware in your computer or server that connects to the network. Has a MAC address burned in at the factory.
NTPNetwork Time Protocol — keeps all devices on the network synchronised to the same time. Critical for logging, authentication (Kerberos), and certificates.
OSPFOpen Shortest Path First — a popular routing protocol that automatically finds the best paths between networks. Routers share a map of all links and calculate routes using Dijkstra's algorithm.
PacketA unit of data at Layer 3. Contains source and destination IP addresses plus the data payload. Routers move packets between networks.
PATPort Address Translation — a form of NAT where many internal IPs share one public IP by using different source port numbers. Also called NAT overload. Most home routers use this.
PingA basic test that sends an ICMP echo request to a device and waits for a reply. If you get replies, the path to that device is working. If not, there's a connectivity issue.
PoEPower over Ethernet — delivers electrical power alongside data over the same Ethernet cable. Used to power APs, IP phones, cameras, and small switches without a separate power supply.
Port (physical)The socket on a switch or router where you plug in a cable.
Port (logical)A number (0–65535) that identifies which application or service traffic belongs to. HTTP = port 80, HTTPS = 443, SSH = 22. The Port Lookup tool lists them all.
ProtocolA set of rules that defines how devices communicate. Like a language — both sides must speak the same protocol to understand each other. Examples: TCP, IP, HTTP, OSPF, SNMP.
QoSQuality of Service — policies that prioritise certain types of traffic (like voice and video) over others so they don't get delayed by bulk downloads.
RFC 1918The standard that defines private IP address ranges: 10.x.x.x, 172.16–31.x.x, and 192.168.x.x. These addresses are not routed on the public internet.
RJ-45The standard 8-pin connector on the end of an Ethernet cable. The plastic tab that breaks off if you're not careful.
RouteA path through the network to reach a destination. Routers store routes in a routing table and choose the best one for each packet.
RouterA Layer 3 device that moves packets between different IP networks. Looks at IP addresses to decide where to forward traffic.
SFPSmall Form-factor Pluggable — a hot-swappable module that goes into a switch or router to provide a specific type of connection (fiber, copper, 1G, 10G, etc.).
SNMPSimple Network Management Protocol — used by monitoring systems to query and get alerts from routers, switches, and servers. Versions: v1 (insecure), v2c (common), v3 (secure).
Spanning Tree (STP)A protocol that prevents network loops by blocking redundant paths. Without it, a loop would flood the network with traffic until it crashed.
SSHSecure Shell — encrypted remote access to the CLI of a router, switch, or server. Replaced Telnet, which sent passwords in plain text.
SubnetA logical subdivision of an IP network. Devices in the same subnet can communicate directly without going through a router. Splitting a big network into subnets improves security and performance.
SwitchA Layer 2 device that connects devices on the same network. Learns which MAC addresses are on which ports and forwards frames only to the correct port — unlike a hub.
TCPTransmission Control Protocol — ensures reliable delivery of data. Breaks data into segments, sends them, and retransmits any that are lost. Used by HTTP, SSH, FTP, email.
TelnetAn old, unencrypted remote access protocol. Everything including passwords is sent in plain text. Use SSH instead.
ThroughputThe actual amount of useful data transferred per second, after accounting for overhead and errors. Always less than the theoretical bandwidth of the link.
TracerouteA tool that shows every router (hop) between you and a destination and how long each hop takes. Great for pinpointing where a connection is slow or breaking.
Trunk PortA switch port that carries traffic for multiple VLANs simultaneously, tagged with 802.1Q headers. Used to connect switches together or connect a switch to a router.
UDPUser Datagram Protocol — fast, connectionless delivery of data. No guarantee of delivery or order. Used where speed matters more than perfection: DNS, VoIP, streaming, gaming.
UnicastA one-to-one transmission — one source sends to exactly one destination. The most common type of network traffic.
UplinkA port that connects a device "up" toward the core of the network. E.g. the port on an access switch that connects back to the distribution switch.
VLANVirtual LAN — a logical grouping of ports on a switch that behaves as if they were on a separate network. Separates traffic without needing separate physical hardware. E.g. VLAN 10 = Data, VLAN 20 = Voice.
VPNVirtual Private Network — creates an encrypted tunnel over the internet, making remote devices appear to be on the local network. Examples: IPsec, SSL/TLS, OpenVPN, WireGuard.
VRFVirtual Routing and Forwarding — multiple independent routing tables on one physical router. Like having separate routers inside one box. Used for network segmentation.
WANWide Area Network — the network beyond your building: internet, MPLS circuits, SD-WAN. Connects your LANs across distances.
Wildcard MaskThe inverse of a subnet mask used in ACLs and OSPF statements. 0 means "must match," 1 means "don't care." e.g. 0.0.0.255 matches any host in a /24 network.
Tip: Search any word you hear and don't understand. Missing a term? Check the Acronym Reference tool for abbreviations.