Understanding Layer 2 vs Layer 3 Switches, ARP, and VLANs

Layer 2 Switch

Layer 2 switches recognize MAC addresses in packets, forward frames based on those addresses, and maintain an internal MAC address table that maps each MAC address to a specific port. They do not follow routing algorithms.

Layer 3 Switch

Layer 3 switches forward packets based on the destination IP address, defining the next hop and following routing algorithms.

How Layer 2 Switches Learn MAC Addresses

If a Layer 2 switch does not follow routing algorithms, it learns the next‑hop MAC address by using ARP (Address Resolution Protocol).

ARP Operation

When PC1 wants to send a packet to PC2 for the first time, it knows PC2's IP address but not its MAC address. The switch broadcasts an ARP request (excluding the port where PC1 is connected). PC2 replies with its MAC address, and the switch records both MAC addresses in its table. Subsequent packets are forwarded directly based on the MAC table.

Collision and Broadcast Domains

In Layer 2 switching, simultaneous transmissions on the same link can cause collisions, requiring retransmission and degrading performance. A broadcast domain is the set of devices that receive a broadcast message; all devices on the same Ethernet segment share one broadcast domain, which can lead to broadcast storms as the network grows.

VLAN

Virtual LANs (VLANs) address collision and broadcast‑domain problems by logically separating networks. Two methods exist:

Physical segmentation: dividing the network into separate physical segments.

Logical segmentation: creating VLANs on switches.

VLANs provide flexibility and scalability, allowing devices to communicate as if they are on the same subnet regardless of physical location. Devices in the same VLAN share a broadcast domain, while different VLANs are isolated.

Access and Trunk Ports

An access port assigns a switch port to a single VLAN, allowing a host to communicate only within that VLAN. A trunk port carries traffic for multiple VLANs, enabling inter‑VLAN routing when paired with a Layer 3 switch.

Configuring a VLAN on a Cisco‑style Switch

Switch(config)# vlan 10
Switch(config-vlan)# exit
Switch(config)# interface fa0/1
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 10

Note: switchport access assigns a single VLAN to a port, while switchport trunk allows multiple VLANs.

Characteristics of Layer 2 Switches

Acts as a bridge, connecting end devices on a LAN.

Learns destination MAC addresses from its address table to forward frames.

Maintains a MAC address table for unique device identification.

Can segment a large LAN into multiple VLANs.

Improves performance by reducing broadcast traffic through VLANs.

Applications of Layer 2 Switches

Layer 2 switches enable efficient intra‑VLAN communication, allowing centralized servers to be accessed by distributed clients without additional latency, and facilitate internal communication within an organization without requiring internet connectivity.

Layer 3 Switch

When communication must cross different LANs or VLANs, a Layer 3 switch routes packets using IP addresses and subnet masks. It operates at OSI Layer 3, offering faster switching than traditional routers because it avoids extra hop processing.

Layer 3 switches support static and dynamic routing (e.g., RIP, OSPF), provide multi‑path routing, recognize IP flow information, enable QoS classification based on subnets or VLANs, and deliver high‑bandwidth links (often >10 Gbps) with secure data paths.

Layer 3 Switch Applications

Used in data centers and large campuses for inter‑VLAN routing.

Combined with multiple Layer 2 switches to support many users without additional bandwidth upgrades.

Provides 10 Gbps bandwidth for high‑performance workloads.

Offloads routing tasks from core routers in WAN scenarios.

Connects monitoring servers and NOC subsystems efficiently.

Inter‑VLAN Routing Example

In a university network, PCs in different VLANs (e.g., faculty and student VLANs) require communication. The Layer 2 switch uses its MAC table to locate the destination host, while the Layer 3 switch routes the packet based on IP address and subnet mask, enabling cross‑VLAN communication.

Summary

Key differences between Layer 2 and Layer 3 switches:

Operating layer: Layer 2 works at the Data Link layer; Layer 3 works at the Network layer, adding routing capabilities.

Principle: Layer 2 forwards frames based on MAC addresses; Layer 3 performs routing based on IP addresses before forwarding.

Function: Layer 2 cannot configure IP addresses; Layer 3 combines switching with routing, supporting multiple VLANs.

Use case: Layer 2 is typical for access and aggregation layers; Layer 3 is used in the core layer for inter‑VLAN routing.

Supported protocols: Layer 2 supports Physical and Data Link layer protocols; Layer 3 adds Network layer protocol support.