Hub vs. Switch vs. Router: What Each One Actually Does

A hub is the simplest of the three, and at this point it's mostly a museum piece. It works at the physical layer (Layer 1). When a frame arrives on one port, the hub repeats it out of every other port, whether or not the device there needs it.

That causes two problems. First, every device on the hub shares the same bandwidth and has to take turns. Only one can talk at a time, and when two try at once their transmissions collide and both have to resend. Second, every device sees everyone else's traffic, which is bad for privacy and security.

You won't find hubs for sale in any normal channel today, but old ones still turn up in closets. If you find one, replace it with a switch. It's one of the cheapest upgrades in networking.

A switch works at the data link layer (Layer 2). It learns which device lives on which port by reading the MAC address of each frame it receives and building a table. Once it knows where a device is, it sends traffic only to that port.

The practical results:

• Each port gets its own full-duplex connection, so devices can send and receive at the same time without colliding.
• A conversation between two computers doesn't eat bandwidth for the rest of the office.
• Devices don't see traffic that isn't meant for them. This isn't a security control on its own, but it's far better than a hub.

Unmanaged vs. managed switches

An unmanaged switch is plug-and-play with no settings at all. It's fine for a home or a small desk cluster.

A managed switch lets you configure it, and for a business that's where the value is. Managed switches support VLANs, which let you separate guest Wi-Fi, phones, cameras, and staff computers into their own segments on the same hardware. They also offer Power over Ethernet budgeting, port security, monitoring, and link aggregation. If your business has more than a handful of people, managed switching is usually worth it.

Layer 3 switches

Some switches can also route between VLANs internally. These "Layer 3 switches" blur the line between the categories and are common in the core of larger networks. They route between internal segments very quickly, but they don't replace the router or firewall at the edge of your network.

A router works at the network layer (Layer 3) and makes decisions based on IP addresses. A switch connects devices within a network. A router connects different networks to each other. The most familiar example is your office LAN talking to the internet.

At the edge of a small business network, the router typically also handles:

• NAT (network address translation), which lets many internal devices share one public IP address.
• DHCP, which hands out IP addresses to devices as they join.
• Firewall rules, which control what traffic is allowed in and out.
• VPN connections for remote staff or to link branch offices.

In business networks, that edge role is often filled by a dedicated firewall appliance that routes as well. When it's configured properly, that's a much stronger setup than a consumer router doing everything.

The "router" in most homes and many small offices is really several devices in one case: a modem, a router, a small switch, and a Wi-Fi access point. It works, but it puts every function on one piece of hardware you don't fully control, often with firmware updated on the ISP's schedule. Many businesses set the ISP device to bridge mode and let their own firewall handle routing and security. Hardware origin matters too. We covered the federal scrutiny of one popular consumer brand in U.S. considers a ban on TP-Link routers.

In a typical small office, traffic flows like this: the internet connection lands on the router or firewall; the firewall connects to a core switch; the core switch feeds access switches in each closet or area; and computers, phones, printers, and wireless access points plug into those. Each device has one job, and when something fails, it's much easier to see which piece broke.

Can a switch replace a router?

Not for internet access. A regular switch can't route between your network and the internet or do NAT. A Layer 3 switch can route between internal VLANs, but you still need a router or firewall at the edge.

Is a hub the same as an unmanaged switch?

No. Both are plug-and-play, but a hub repeats every frame to every port, while an unmanaged switch learns where devices are and delivers traffic only where it's needed.

Do I need a managed switch for a small office?

If you want to separate guest Wi-Fi, VoIP phones, or cameras from staff devices, yes. VLANs need a managed switch. For a few computers on one desk, an unmanaged switch is fine.

Why is my network slow when everything is plugged into one switch?

Common causes include a daisy chain of cheap switches, a single uplink carrying everyone's traffic, a failing cable, or a hub hiding somewhere in the chain. A quick network assessment usually finds it.

Picking hardware is the easy part. Deciding where the segments go, how the closets connect, and what happens when one piece fails is the part that pays off for years. Our network design team plans and builds office networks that are easy to support. If your closet is a mystery, let's map it together.