Business Automation Bulletin 95.10 / Published Bimonthly / October 1995


SEASON OF THE SWITCH

This Bulletin is the sixth in a series covering developments in computer technology and their value to business. Past issues discussed computers and their components (chips, RAM, monitors, etc.), printers and data storage systems, and started on the topic of networking. This installment continues on the topic of networking with a discussion of network structures, switching and routing. Future installments will continue with networking and go on to cover Internet connectivity, communications and computer/telephone integration.

LOCAL AREA NETWORK (LAN) STRUCTURES

The most widely used method of networking computers together within a single building or campus is called Ethernet. There's no need for most network users to understand in detail how Ethernet works, but it's useful to understand a few specifics. Ethernet transmits data about 1000 times as fast as a typical telephone line. However, unlike a telephone circuit (which is normally used for a single session, transmitting data between two computers), Ethernets typically connect dozens of computers, any one of which can send messages to any or all of the others.

One defining feature of Ethernet is that it doesn't limit when any of the connected computers can "talk". Because of this characteristic, it's always possible that some computer will start transmitting at the same time as another one. This usually doesn't cause a problem, though, because the Ethernet senses the conflict and tells both computers to wait a short, but random, period and try again. But, as the number of the computers on the Ethernet grows, there are more "data collisions", triggering more retransmissions and even more collisions. In a business environment, this usually occurs when there are 30 to 60 computers on the LAN (the exact number may be larger or smaller, depending on the computers' activity levels). Fortunately, there's a way to relieve this network overcrowding, as described below.

There's a second common LAN structure called Token Ring. It's a bit faster than Ethernet, but because the electronic components needed to use it are more expensive, it's less popular. Although Token Ring is designed to prevent "data collisions", it too can get overcrowded. However, the overcrowding can be resolved by breaking it up into pieces, much the same way as with Ethernet.

Relieving network overcrowding

The easiest way to fix overcrowding problems on a LAN is to break it up into pieces, called segments (for Ethernet LANs) or rings (for Token Ring). However, these segments have to be linked so that users connected to any one segment (or ring) can communicate with users on any other segment. And, for the sake of usability, this segmentation and these connections must be "invisible" to the network's users. The two devices most commonly used for this purpose are called "bridges" and "routers".

The difference between "bridges" and "routers" is that bridges (which are less expensive) broadcast all of the data message traffic around the network indiscriminately, while routers actually "route" it just to the segments it needs to pass through to reach its destination. This indiscriminate transmission isn't a problem in LANs with only two or three segments, but in larger LANs, bridges create unnecessary data traffic (i.e., by sending messages to segments where they're not needed). Thus, the more segments or rings in a network, the more benefit there is to connecting them with routers instead of bridges.

Using switching to reduce congestion

Switching is the newest technology for relieving LAN congestion. The term "switching" refers to the use of switches to move individual user computers from one LAN segment (or ring) to another. The switching electronics are usually part of a "hub" (i.e., a device that works like a "junction box" on the network, See Bulletin 95.7) or a router. Depending on how the LAN is cabled, the network can even be configured, through switching, so that every high activity user computer can have its own full-speed network segment connecting to the file server.

With the first generation of "switching hubs", which are now commonly available, network managers can move computers from segment to segment manually whenever a segment becomes too congested. Newer products that have just come to market within the last year (including both hubs and routers), allow LAN managers to do the switching via software from a PC at their desks rather than with manual switches. Eventually, the network electronics will do optimized segment switching "on the fly", based on parameters set by the network manager. However, that's still in the future.

WIDE AREA CONNECTIONS

Linking several LANs in different locations adds complexity and creates a potential problem with network speed. As mentioned previously, LANs transmit data about 1000 times as fast as normal telephone lines. However, since it's illegal to run network cables across a public right-of-way except under unusual circumstances, most LAN-to-LAN connections have to be done with telephone circuits. Wireless links (such as microwave) or other common carriers are sometimes used as well, but they're usually relatively slow and can be unreliable. In actuality, most wide area network linking is done with special digital telephone circuits that are five to ten times as fast as normal dial-up phone lines. But even this is still less than 2% of the speed of a typical LAN. The problem is that trying to link LANs with a telephone circuit is kind of like trying to connect fire hoses with a drinking straw.

Once again, however, segmentation is the answer. Each location has its own LAN, made up of one or more network segments. Remote bridges, like the local bridges described above, can be used to connect the segments (or rings), although "routers" are becoming much more common. The reason for this preference for routers is that space on the slow inter-network links is scarce and routers are "smart" enough to "know" which messages need to go across which links, and which ones don't. Thus, by "screening out" the unnecessary messages, they can keep the traffic on the slower communications links down to a minimum.

Internet connections

Another way to connect LANs remotely is via the Internet. In fact, the Internet is becoming an increasingly common medium for transmitting LAN to LAN electronic mail (E-mail). But there's a problem with using the Internet for LAN-to-LAN connections: its notorious lack of security. Any LAN connected directly to the Internet is susceptible to unauthorized Internet "hackers" logging on and electronically "impersonating" authorized users from one of the company's other LANs. Once logged on in this way, a hacker with the right skills and tools could gain virtually unlimited access to all the data on one or both of the connected LANs.

Internet security issues aren't as much of a concern for E-mailing as they are for wide area networking, though, because there's no remote log-on when it's transmitted or received. However, even E-mail users need to be cautious, as it is possible, although very unlikely, that an E-mail message would be intercepted. Thus, it's always wise to encrypt (i.e., scramble) any confidential message. The Guest Viewpoint column in Bulletin 95.3 discussed encryption briefly, and it will be covered in more detail in an upcoming Bulletin.

Firewalls

If you do decide to connect your LAN to the Internet, the best way to protect your data is to install a "security firewall". Firewalls are electronic "fences" that block unauthorized users from gaining access to your LAN. There's a range of different kinds of firewalls, starting, minimally, with a simple router (like those covered above) configured specially for firewall use. Firewalls can get considerably more sophisticated, too, ranging all the way to setting up a separate "buffer" network, with one or more special security servers sitting between your LAN and the Internet.

No firewall offers perfect security (there's no such thing) but, unless your LAN controls access to large amounts of cash or marketable securities, or you think you could be a target for espionage or terrorist activity, there's probably a firewall somewhere along the spectrum that can provide most companies with adequate protection at an affordable price.



Back to the top of this Bulletin
Back to the Business Automation home page

Mail to: brooks@bizauto.com with any questions or comments
Copyright © 1995 Business Automation Associates, Inc.