2.1 Ethernet Framing and Physical Standards
Key Takeaways
An untagged Ethernet frame is ordinarily 64–1518 bytes, excluding preamble, SFD, and inter-frame gap.
A single VLAN tag adds four bytes to the maximum-size frame example.
The conventional SFD byte is 0xD5; its least-significant-bit-first transmitted pattern is 10101011.
The first octet’s I/G bit distinguishes individual/group addresses; U/L is a separate administration bit.
Full-duplex point-to-point Ethernet does not use CSMA/CD contention.
Ethernet Framing and Physical Standards
Ethernet is the ubiquitous foundational technology for Local Area Networks (LANs), Metropolitan Area Networks (MANs), and modern carrier transport backbones. Originally developed in the 1970s at Xerox PARC by Robert Metcalfe and standardized jointly by Digital Equipment Corporation, Intel, and Xerox (the DIX consortium), Ethernet has evolved from a 2.94 Mbps shared coaxial bus into a high-performance, full-duplex switched architecture scaling up to 400 Gbps and 800 Gbps optical transport. Understanding frame encapsulation, bit-level addressing conventions, and transmission modes is essential for service provider engineering on the Nokia 7750 Service Router (SR) platform.
Historical Evolution of Ethernet Physical Standards
The physical media and signaling techniques of Ethernet have progressed through several major milestones, gradually moving from shared collision-prone topologies to dedicated point-to-point switched links:
- 10BASE5 (Thicknet): IEEE 802.3 standard operating at 10 Mbps over thick 50-ohm coaxial cable up to 500 meters in length. Required vampire taps and external Attachment Unit Interfaces (AUIs).
- 10BASE2 (Thinnet): 10 Mbps over flexible RG-58 coaxial cable with BNC T-connectors up to 185 meters. While less costly, any physical break in the bus disrupted the entire network segment.
- 10BASE-T: Introduced star topology over Category 3 unshielded twisted pair (UTP) copper cabling with RJ-45 modular connectors up to 100 meters, connecting endpoints to a central multiport repeater (hub).
- 100BASE-TX (Fast Ethernet): IEEE 802.3u standard delivering 100 Mbps over Category 5 UTP using 4B5B block coding and MLT-3 signaling.
- 1000BASE-T / 1000BASE-SX / 1000BASE-LX (Gigabit Ethernet): IEEE 802.3z (fiber) and IEEE 802.3ab (copper). 1000BASE-T uses all four pairs of Cat5e/Cat6 cable simultaneously in full duplex. 1000BASE-SX operates over multimode fiber (850 nm) for short intra-datacenter runs, while 1000BASE-LX uses single-mode fiber (1310 nm) for standard single-mode reaches up to 5 km; extended-reach optics require separate specifications.
- High-speed Ethernet: Encoding, error correction, optics, fiber type, and reach depend on the selected PHY. Do not assume all speeds use one line code.
Frame Formats: Ethernet II (DIX) vs. IEEE 802.3
Two primary Ethernet framing formats exist in modern networks: Ethernet II (also called DIX Ethernet) and IEEE 802.3. While both formats share identical preamble, addressing, and checksum fields, they diverge fundamentally in how they identify the payload carried within the frame.
| Field Name | Ethernet II (DIX) | IEEE 802.3 (Original) | Purpose & Characteristics |
|---|---|---|---|
| Preamble | 7 Bytes | 7 Bytes | Alternating pattern of 1s and 0s (10101010...) for physical bit synchronization |
| SFD | 1 Byte | 1 Byte | Start Frame Delimiter (0xD5, transmitted least-significant bit first as 10101011); final two consecutive 11 bits signal frame start |
| Destination MAC | 6 Bytes | 6 Bytes | 48-bit hardware address of the intended receiving interface or group address |
| Source MAC | 6 Bytes | 6 Bytes | 48-bit hardware address of the transmitting physical network interface |
| Type / Length | EtherType (2 Bytes) | Length (2 Bytes) | Demarcation value: indicates EtherType; indicates byte length of payload |
| LLC / SNAP | Not present | 3 or 8 Bytes | 802.2 Logical Link Control header (DSAP/SSAP/Control) and SNAP header |
| Data / Payload | 46 to 1500 Bytes | Up to 1500 bytes MAC client data including LLC/SNAP | Network layer PDU (e.g., IPv4, IPv6, ARP); padded if payload is smaller than minimum size |
| FCS | 4 Bytes | 4 Bytes | Frame Check Sequence; 32-bit Cyclic Redundancy Check (CRC-32) covering MACs through Data |
The EtherType vs. Length Demarcation Threshold
To ensure interoperability on the same physical wire, the IEEE established a clean numerical boundary for the 2-byte field following the Source MAC address:
Values between 1501 and 1535 (inclusive) are undefined and treated as illegal/corrupt frames. Ethernet II uses the EtherType field to directly multiplex upper-layer protocols:
0x0800— Internet Protocol version 4 (IPv4)0x86DD— Internet Protocol version 6 (IPv6)0x0806— Address Resolution Protocol (ARP)0x8100— IEEE 802.1Q VLAN Tagged Frame0x8847— MPLS Unicast Label Stack0x8848— MPLS Multicast Label Stack0x88A8— IEEE 802.1ad Provider Bridging (QinQ outer Service-VLAN tag)
IEEE 802.3 LLC and SNAP Encapsulation
When the Type/Length field contains a value , the payload begins with an IEEE 802.2 Logical Link Control (LLC) header. Standard LLC headers include:
- DSAP (Destination Service Access Point): 1 byte identifying the receiving upper-layer process.
- SSAP (Source Service Access Point): 1 byte identifying the sending process.
- Control Field: 1 or 2 bytes indicating unnumbered or connection-oriented service (
0x03= Unnumbered Information).
Because 1-byte SAP fields offered limited protocol identifiers, the IEEE introduced the Subnetwork Access Protocol (SNAP) extension. When DSAP and SSAP are both set to 0xAA and Control is set to 0x03, an 802.2 SNAP header follows. The SNAP header consists of a 3-byte OUI (set to 0x000000 for standard protocols) and a 2-byte Protocol ID, which duplicates standard Ethernet II EtherType numbers. Today, IP traffic across Ethernet networks overwhelmingly utilizes native Ethernet II encapsulation due to its reduced overhead and direct hardware parsing efficiency.
Frame Size Boundaries, MTU, and Jumbo Frames
Ethernet specifications define strict upper and lower limits on frame sizes. Understanding these limits is critical when configuring Maximum Transmission Units (MTUs) across Nokia Service Routers.
The 64-Byte Minimum Frame Size and Slot Time
An untagged standard Ethernet frame has an absolute minimum legal size of 64 bytes (512 bits):
If an application generates an IP packet smaller than 46 bytes (for example, a 40-byte TCP ACK packet without payload: 20 bytes IPv4 header + 20 bytes TCP header), the Ethernet network interface card (NIC) must append 6 bytes of padding (0x00) to satisfy the 46-byte payload requirement.
Note
Why 64 Bytes? In half-duplex CSMA/CD networks, the minimum frame length is mathematically tied to the slot time (512 bit times at 10 Mbps = 51.2 microseconds). A transmitting station must remain active on the wire long enough for a collision signal from the farthest physical point of the network diameter to return before transmission concludes. Any frame shorter than 64 bytes is classified as a runt or collision fragment and is immediately discarded by receiving interfaces.
Physical Layer Overhead Exclusions
The physical layer elements—the 7-byte Preamble, the 1-byte SFD, and the 12-byte Inter-Packet Gap (IPG) (also called Inter-Frame Gap / IFG)—are hardware synchronization tools. They are never counted in the 64-byte minimum or 1518-byte maximum frame size calculations:
- Preamble & SFD (8 bytes): Allow receiving PHY transceivers to lock their phase-locked loops (PLLs) to the incoming bit clock.
- Inter-Packet Gap (12 bytes / 96 bit times): Provides a mandatory recovery delay between consecutive frame transmissions, allowing receiver circuitry to reset.
Maximum Frame Sizes, Tagged Frames, and Jumbo Frames
- Standard Untagged Frame (1518 Bytes): Calculated as 1500 bytes maximum Layer 3 payload (the standard IP MTU) + 14 bytes Layer 2 header (6 DMAC + 6 SMAC + 2 EtherType) + 4 bytes FCS.
- IEEE 802.1Q Tagged Frame (1522 Bytes): Insertion of a 4-byte 802.1Q VLAN header expands the maximum frame size to 1522 bytes without reducing the 1500-byte IP payload.
- QinQ / IEEE 802.1ad Double-Tagged Frame (1526 Bytes): Insertion of two 4-byte VLAN tags (outer Service-VLAN tag and inner Customer-VLAN tag) expands maximum size to 1526 bytes.
- Baby Giant Frames: Frames between 1519 and ~1600 bytes that carry VLAN tags, MPLS shim labels, or PPPoE encapsulation without exceeding typical switch buffer thresholds.
- Jumbo frames: Limits are implementation-specific. A value such as 9000 may describe IP MTU while a port limit counts different bytes. Check port, service, and tunnel definitions rather than treating 9216 as a universal maximum.
48-Bit MAC Addressing Architecture (EUI-48)
An Ethernet interface uses a link-layer Media Access Control (MAC) address, formally specified by the IEEE as an EUI-48 (Extended Unique Identifier 48-bit) address.
+---------------------------+---------------------------+
| 24 bits: OUI (Vendor) | 24 bits: NIC Extension |
+---------------------------+---------------------------+
| Byte 0 | Byte 1 | Byte 2 | Byte 3 | Byte 4 | Byte 5 |
+--------+--------+---------+--------+--------+---------+
|
+---> Bit 0 (b0, LSB): Individual (0) / Group (1)
+---> Bit 1 (b1): Universal (0) / Local (1)
A MAC address contains 48 bits (6 bytes), commonly written as twelve hexadecimal characters. In Nokia SR OS, MAC addresses are formatted in colon-delimited pairs (00:16:4d:11:22:33), whereas other platforms use hyphens (00-16-4D-11-22-33) or dotted-quads (0016.4d11.2233).
OUI and Vendor Assigned Components
- Organizationally Unique Identifier (OUI) (First 24 bits / 3 bytes): Assigned by the IEEE Registration Authority to hardware manufacturers for the applicable allocation; the hexadecimal values used here are illustrative.
- Network Interface Identifier (Last 24 bits / 3 bytes): Assigned uniquely by the manufacturing vendor to each physical network port.
The Control Bits: Individual/Group and Universal/Local
The two least significant bits of the first transmitted octet (Byte 0) serve crucial architectural control functions:
- Individual / Group (I/G) Bit (Bit 0 / LSB of Octet 0):
0= Individual (Unicast): Destination address corresponds to a single, unique network interface.1= Group (Multicast / Broadcast): Destination address corresponds to a multicast group or broadcast destination.
- Universal / Local (U/L) Bit (Bit 1 of Octet 0):
0= Universally Administered: The address uses the universal administration convention; operational uniqueness must still be maintained.1= Locally Administered: The address has been overridden or manually assigned by an administrator, hypervisor (e.g., VMware MAC pools), or other local assignment. A virtual address need not have U/L = 1; the standardized IPv4 VRRP address begins with 00.
Address Types and Special MAC Ranges
| MAC Category | I/G Bit | U/L Bit | Example Value | Description & Application |
|---|---|---|---|---|
| Unicast | 0 | 0 | 00:16:4d:ab:12:34 | Point-to-point delivery to a specific physical NIC |
| Broadcast | 1 | 1 | ff:ff:ff:ff:ff:ff | All 48 bits set to 1; processed by every device in the broadcast domain |
| IPv4 Multicast | 1 | 0 | 01:00:5e:00:00:01 | IANA range 01:00:5E:00:00:00 to 01:00:5E:7F:FF:FF (lower 23 bits map IP multicast) |
| IPv6 Multicast | 1 | 1 | 33:33:00:00:00:01 | RFC 2464 range 33:33:xx:xx:xx:xx; all IPv6 multicast packets map here |
| VRRP Virtual MAC | 0 | 0 | 00:00:5e:00:01:01 | Virtual Router Redundancy Protocol virtual router address (00:00:5E:00:01:<VRID>) |
Transmission Modes: Half-Duplex CSMA/CD vs. Full-Duplex
Ethernet interfaces operate in one of two physical transmission modes:
Half-Duplex Operation and CSMA/CD
In half-duplex mode, an interface shares a single physical communication channel for both transmitting and receiving data. Because simultaneous transmission causes signals to collide and corrupt data, stations must adhere to the Carrier Sense Multiple Access with Collision Detection (CSMA/CD) protocol:
- Carrier Sense: Before transmitting, the station monitors the medium to check for an existing electrical carrier signal. If the wire is busy, it defers transmission.
- Multiple Access: When the wire is detected idle for at least the Inter-Packet Gap (96 bit times), any station with data ready may begin transmitting.
- Collision Detection: While transmitting, the station continuously monitors its receiver circuitry. If two stations transmit simultaneously, their signals collide, resulting in an abnormal voltage level or differential signal pattern.
- Jam Signal: Upon detecting a collision, the station immediately aborts its frame and transmits a 32-bit jam signal. This ensures that all other transmitting stations detect the collision event.
- Truncated Binary Exponential Backoff: Each station calculates a random backoff delay before attempting retransmission:
Here, represents the collision attempt number. The station waits before sensing the carrier again. If an interface encounters 16 consecutive collisions for a single frame, the frame is aborted and dropped.
Full-Duplex Point-to-Point Operation
Full-duplex Ethernet eliminates shared media entirely. Using simultaneous transmit and receive channels, full duplex provides the following properties. Gigabit copper can use the same pairs in both directions with echo cancellation; separate pairs or fibers are not a universal requirement.
- Simultaneous Bidirectional Data Flow: Stations transmit and receive data concurrently at full line rate without contention.
- Zero Collisions: CSMA/CD contention does not apply to a point-to-point full-duplex link.
- CSMA/CD is Deactivated: Loopback sensing, collision detection circuitry, jam signals, and backoff algorithms are completely disabled.
- Doubled Aggregate Bandwidth: A 10 Gbps full-duplex link delivers 10 Gbps ingress and 10 Gbps egress concurrently (20 Gbps aggregate throughput).
Important
On modern service provider platforms like the Nokia 7750 SR, modern high-speed Ethernet ports use full-duplex mode; consult the particular port’s supported modes. Half-duplex CSMA/CD is legacy technology preserved primarily for backward compatibility with 10BASE-T/100BASE-TX hubs and foundational certification exams.
Primary technical reference
Specification or Nokia manual, checked October 20, 2026. Examples are teaching scenarios, not captured router execution.
In an Ethernet II (DIX) frame, which condition determines that the 2-byte field immediately following the Source MAC address represents an EtherType rather than a frame length?
The field contains a value of 0x0600 (1536 decimal) or greater.
The field contains a value of 1500 (0x05DC) or less.
The Start Frame Delimiter (SFD) byte terminates with binary 10 instead of 11.
The Individual/Group (I/G) bit of the Destination MAC address is set to 1.
What is the minimum legal frame size for an untagged standard Ethernet frame, and what historical constraint mandated this specification?
46 bytes, mandated by the maximum transmission unit of the IP layer
56 bytes, mandated by the clock synchronization requirement of the physical preamble
64 bytes, mandated by the 512-bit slot time required for collision detection in CSMA/CD
1518 bytes, mandated by the cyclic redundancy check polynomial length in the FCS
When analyzing a 48-bit MAC address (EUI-48), which bit designation identifies whether the address is an individual unicast address or a group multicast/broadcast address?
The Universal/Local (U/L) bit, located at bit 1 of the third octet
The Individual/Group (I/G) bit, located at bit 0 (least significant bit) of the first transmitted octet
The high-order bit of the fourth octet within the vendor-assigned NIC identifier
The parity bit embedded in the 32-bit Frame Check Sequence (FCS)
Sections you finish are checked off in the contents.