The following layers may or may not be on separate devices.
- The Core Layer-
- Literally the core of the network- If this has issues, everyone has issues.
- Dont do these-
- Never do anything to slow down traffic, no ACL's, no routing, don't implement packet filtering
- Don't support work group access
- Avoid expanding the core(adding more routers)- If performance is an issue upgrade
- Do these
- Design for high availability
- Design with speed in mind
- Select routing protocols with low convergence times
- Distribution layer-
- Sometimes referred to as the workgroup layer- Communicates between the access layer and the core.
- Key things handled at the distribution layer
- Routing
- Implementing tools(access lists), packet filtering and queuing
- Implementing security and network policies, including address translation and firewalls
- Redistributing between routing protocols, including static
- Routing between VLAN's and other workgroup support functions
- Defining broadcast and multicast domains
- Access Layer-
- Controls user and workstation access- sometimes refered to as the desktop layer
- Key functions
- Continued(From Distribution layer) use of access control and policies
- Creation of separate collision domains.
- Work group connectivity into the distribution layer
- Device connectivity
- Resilience and security services
- Advanced technology capabilities(Voice/Video)