A switch is a network device that operates primarily at Layer 2 of the OSI model, forwarding Ethernet frames between ports based on destination MAC addresses so that each port forms its own collision domain and multiple conversations can proceed at once on the same LAN; it learns where hosts reside by inspecting source MAC addresses and building a forwarding table, then sends known unicast traffic only to the correct port while flooding unknown unicast, broadcast and some multicast within the same VLAN, which is why VLANs are used to confine broadcast domains for performance and security; although its core function is at Layer 2, a modern switch touches other layers as well, since the physical interfaces and transceivers are Layer 1 components that provide media access, autonegotiation, duplex settings and Power over Ethernet, while many enterprise models are multilayer devices that perform Layer 3 inter-VLAN routing with static routes and dynamic protocols such as OSPF and EIGRP, and often add Layer 4 capabilities like access control that matches TCP or UDP ports and Quality of Service that prioritises delay sensitive traffic based on DSCP or 802.1p markings, with some platforms extending into limited Layer 7 awareness for application recognition and policy; stability at Layer 2 is maintained with loop prevention and link management features such as Spanning Tree, Link Aggregation and LLDP, and security is strengthened with 802.1X for port based authentication, MAC limiting, DHCP snooping and Dynamic ARP Inspection to reduce spoofing; hardware choices span unmanaged and smart switches for small sites through fully managed fixed systems and chassis or stackable models with redundant power, and interface options include copper RJ45 at 1G, 2.5G or higher and fibre using SFP or SFP+ and newer modules; when selecting a switch, consider switching capacity, forwarding rate, latency, buffer sizes, MAC and VLAN scale, PoE budgets, environmental limits and management, and in operation aim for full duplex links, intentional Spanning Tree root placement, pruning of unused VLANs on trunks and consistent documentation of port roles so that changes do not create loops or security gaps across the relevant layers.
