Overview
Networks come in different scopes, from a single room to the entire globe. Two fundamental categories are the LAN (Local Area Network) and the WAN (Wide Area Network). Knowing the difference frames how data travels and where security boundaries lie.
Learning objectives
- Define LAN and WAN.
- Compare them by size, ownership, and control.
- Understand how they connect to form the internet.
Core concept
- A LAN (Local Area Network) covers a small area — a home, office, or building. It is typically owned and controlled by one organization or person, uses fast local links, and connects nearby hosts.
- A WAN (Wide Area Network) spans large distances — cities, countries, continents — connecting many LANs. WANs usually rely on infrastructure owned by third parties (telecom/internet providers). The internet is the largest WAN of all.
Other terms fill the spectrum (e.g. MAN for a city-sized metropolitan network), but LAN and WAN are the core pair.
How it works
Hosts on a LAN communicate directly over local infrastructure (switches, Wi-Fi). To reach hosts outside the LAN, traffic passes through a router (often via a gateway) onto a WAN. So your data typically hops from your LAN, across one or more WANs (the internet), to the destination's LAN. Each transition between LAN and WAN is a natural place to enforce security controls.
Practical example
At home, your devices form a LAN connected by your Wi-Fi router. When you visit a website, your request leaves the LAN through the router, travels across the internet (a WAN) through many providers' networks, and arrives at the web server's LAN in a data centre. The reply retraces a path back. The router sits exactly at the LAN–WAN boundary, which is why it is where firewalls and NAT (later topics) live.
Cybersecurity relevance
The LAN/WAN boundary is a key security perimeter. Internal (LAN) traffic is often more trusted than external (WAN/internet) traffic, and firewalls typically guard the boundary. Understanding these zones underlies network segmentation and defense-in-depth design.
Common mistakes
- Assuming "internal" LAN traffic is automatically safe — attackers who get inside exploit that assumption.
- Confusing scope with speed — LANs are usually faster locally, but the defining difference is geographic scope and ownership, not raw speed.
Key takeaways
- A LAN covers a small, usually single-owner area; a WAN spans large distances across others' infrastructure.
- The internet is the largest WAN; routers connect LANs to WANs.
- The LAN–WAN boundary is a primary security perimeter where controls like firewalls apply.
Check your understanding
- Give one difference between a LAN and a WAN besides size.
- Why is the router at the LAN–WAN boundary a natural place to enforce security?