Traffic Types and Encapsulation Flow
Key Takeaways
- Unicast, broadcast, multicast, and anycast describe different delivery patterns.
- Broadcast stays within a broadcast domain and is controlled by routers and VLAN boundaries.
- Multicast sends one stream to interested receivers and is common in efficient one-to-many designs.
- Encapsulation explains how application data becomes transport segments, IP packets, frames, and physical signals.
- Traffic type and encapsulation knowledge helps with VLAN, routing, wireless, and troubleshooting questions.
Traffic Delivery Types
Networks move traffic in different patterns. The delivery type affects addressing, switching, routing, bandwidth use, and troubleshooting scope.
| Traffic type | Pattern | Common examples | Important boundary |
|---|---|---|---|
| Unicast | One sender to one receiver | Web browsing, SSH, file transfer | Routed normally between networks |
| Broadcast | One sender to all hosts in local broadcast domain | ARP request, DHCP discovery | Does not cross routers by default |
| Multicast | One sender to subscribed receivers | Streaming, routing protocols, imaging, conferencing | Requires multicast-aware design when routed |
| Anycast | One address served by multiple nodes, nearest/best path wins | Public DNS, CDN-style services | Routing determines destination instance |
Broadcast Domains and VLANs
A VLAN is a Layer 2 broadcast domain. Hosts in the same VLAN receive each other's broadcasts. Hosts in different VLANs need a Layer 3 device or service for inter-VLAN communication.
| Design | Broadcast impact |
|---|---|
| One large flat LAN | Broadcasts reach many hosts and failures can have wide impact |
| Multiple VLANs | Broadcasts are contained within each VLAN |
| Router or Layer 3 switch between VLANs | Routes unicast traffic but does not forward normal broadcasts |
| DHCP relay | Helps DHCP cross a Layer 3 boundary in a controlled way |
Encapsulation Flow
When a client opens an HTTPS site, the data is wrapped for transport across the network.
| Step | Encapsulation action | Example information added |
|---|---|---|
| 1 | Application creates data | HTTP request inside TLS session |
| 2 | Transport adds TCP header | Source port, destination port 443, sequence data |
| 3 | Network adds IP header | Source IP, destination IP, TTL |
| 4 | Data link adds frame header/trailer | Source MAC, destination MAC, FCS |
| 5 | Physical transmits signals | Electrical, optical, or radio symbols |
On the receiving side, the process reverses. Each layer reads its header, validates what it needs, and passes the payload up.
Local Versus Remote Delivery
| Destination | Destination MAC in the frame | Destination IP in the packet |
|---|---|---|
| Same subnet | Receiver host MAC | Receiver host IP |
| Different subnet | Default gateway MAC | Final destination IP |
This distinction is high yield. For remote traffic, the frame changes at each hop, but the packet destination IP remains the final host unless NAT changes it.
Scenario: ARP and Remote Traffic
A client at 192.168.10.25 wants to reach a server at 192.168.50.20. The client determines the server is not local, so it sends the frame to the default gateway's MAC address. The IP packet still names 192.168.50.20 as the destination. The router removes the incoming frame, checks the packet, chooses a route, and builds a new outgoing frame for the next hop.
Common Exam Traps
| Trap | Better reasoning |
|---|---|
| Broadcasts cross routers automatically | Routers stop normal broadcasts; relay services can forward specific requests |
| MAC addresses identify end-to-end remote hosts | MAC addresses are local to each Layer 2 segment |
| Multicast is the same as broadcast | Multicast targets subscribed receivers, not every host |
| NAT changes every header | NAT changes addressing information as configured, but not the basic encapsulation model |
| VLANs are Layer 3 subnets by themselves | VLANs are Layer 2 segments often paired with IP subnets |
Traffic type plus encapsulation explains why a host can have a correct IP address but still fail because of ARP, VLAN, gateway, ACL, NAT, or routing behavior.
Which traffic type sends one stream to subscribed receivers rather than every host on the local network?
Order the encapsulation process for a client sending HTTPS traffic.
Arrange the items in the correct order
Which statements are correct? Select all that apply.
Select all that apply