Module 12: Routing Between Networks

Industrial Networking Essentials | Cisco Networking Academy

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Module 12 Overview

Module Objective: Create a fully connected LAN

Topic Objective

12.1 The Need for Routing Explain the need for routing

Explain how routers use routing tables to make forwarding

12.2 The Routing Table
decisions

12.3 Create a LAN Build a fully connected network

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.0.1 Why Should I Take This Module?

• Learn the fundamental concepts and technologies that make modern networks
possible
• Explore topics including:
‒ Routing — how data is efficiently transmitted between networks
‒ Network segmentation — why and how networks are divided
‒ Local Area Networks (LANs) — how to create and manage them
• Discover the inner workings of routers and the importance of routing tables
• Learn how to create and manage LANs in both IT and industrial environments

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
 12.1 The Need for Routing
Explain the need for routing

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.1.1 Video — Dividing the Local Network
Key Concepts from the Video:
• As networks grow, it becomes necessary to divide a single large local network into multiple smaller network
segments
• Example: an enterprise with three departments — Network Management, Accounting, and Sales

Three Reasons to Divide a Network:

Reason Description

Broadcast containment Limit the amount of broadcast traffic across the network; create smaller broadcast domains

Prevent departments from accessing each other's devices, servers, and printers without
Security
authorization

When departments move to different buildings or floors, the network must be divided to
Geographical location
accommodate the physical separation

How Routers Enable Division:

• Inserting routers into the network diagram divides one large network into 3 separate networks
• Every router interface connects to and defines a separate network — both a separate broadcast domain AND a
separate IP network
© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.1.2 Now We Need Routing
Definition:
Routing = the process of identifying the best path to a destination across one or more networks

Why Routing Is Needed:

• Most situations require devices to connect beyond their local network
• When a source device sends a packet to a remote destination → the help of routers and routing is needed

What a Router Does:

• Router = a networking device that connects multiple Layer 3 (IP) networks; makes forwarding decisions based on the Layer
3 IP address (not the Layer 2 MAC address like a switch)

When a Router Is Used:

• When source and destination IP addresses are in different IP networks, a Layer 3 device, such as a router or Layer 3
switch, is required
• Example: Host on [Link] sending to [Link] → Layer 3 device required
• Router receives the message → de-encapsulates the Ethernet frame → reads the destination IP → re-encapsulates in a new
frame → forwards toward the destination

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
 12.2 The Routing Table
Explain how routers use routing tables to make forwarding decisions

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.2.1 The Default Gateway

Scenario 1 — Same Local Network: How the Host Knows the Router's MAC Address:

• If the destination is on the same subnet, the host uses • The host is given the router's IPv4 address via the default
ARP to learn the destination host’s MAC address. gateway configured in TCP/IP settings
• The Ethernet frame is sent directly to the destination • Default gateway = the router interface address on the same
host through the switch. local network as the host
• The default gateway is not used. • All hosts on the local network use the same default gateway
address to send messages to the router
• Host uses ARP to resolve the default gateway IPv4 address
to a MAC address
Scenario 2 — Remote Network: • That MAC address is placed in the Ethernet frame destined
for the remote network
• If the destination is on a different subnet, the host
sends the packet to its default gateway. Critical Rule:
• The IP packet keeps the remote destination IP address,
but the Ethernet frame uses the router interface’s MAC
If no default gateway is configured, or the wrong default
address as the destination MAC.
gateway is specied → messages to remote networks cannot
be delivered

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.2.2 Video — Router Packet Forwarding
Key Concepts from the Video:
• Host H1 ([Link]) wants to send a packet to [Link] (a different network)
• H1 knows the destination is on a dierent network → sends the packet to its default gateway (the
router)
• The router looks up [Link] in its routing table
• Finds that [Link] network is reachable via Fast Ethernet 0/2
• Router forwards the packet out Fast Ethernet 0/2 toward the destination
Broadcast Behavior:
• H1 also sends a packet to [Link] (broadcast address)
• The router receives the broadcast but does NOT forward it out to other networks

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.2.3 Video — Messages Within and Between Networks — Part 1
Scenario: Same-Network Communication (H1 → H2):
• H1 ([Link]) sends a packet to H2 ([Link])
• H1 uses its subnet mask to determine: both are on the same network ([Link])
• H1 can send directly — no default gateway needed
• H1 checks its ARP table for H2's MAC address (BB-BB)
• If unknown → sends an ARP request to get an ARP reply

H1 builds an Ethernet frame:

‒ Source MAC: AA-AA (H1's MAC)

‒ Destination MAC: BB-BB (H2's MAC)

• Frame is forwarded through the switch directly to H2

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.2.4 Video — Messages Within and Between Networks — Part 2

Scenario: Cross-Network Communication (H1 → H3):

• H1 ([Link]) sends a packet to H3 ([Link]) — a different network

• H1 determines destination is NOT on the same network → sends to default gateway (router at [Link])
• H1 checks ARP cache for the router's MAC address (11-11); if unknown → sends ARP request
• H1 builds Ethernet frame with destination MAC = router's MAC (11-11)

Router Processing:

• Router receives the frame → removes the Ethernet header (de-encapsulation)

• Router looks up [Link] in its routing table → nds it is on the [Link] network via Fast Ethernet 0/2
• Router checks its ARP cache for H3's MAC address (CC-CC)
• Router builds a new Ethernet frame:
‒ Source MAC: 22-22 (router's outgoing interface MAC)
‒ Destination MAC: CC-CC (H3's MAC)
• Frame is forwarded to H3 — which accepts it because both IP and MAC addresses match

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.2.5 Routing Table Entries
What Is a Routing Table?

Routing table = a table stored in a router containing the addresses of

networks and the best path to reach those networks

Key Facts:
• Routing tables primarily contain network prefixes, but they can also
contain host routes, such as /32 IPv4 routes, for specific destinations.
• Routers use the routing table to determine which interface to forward
a message out of
• If the router cannot determine where to forward a message → it will
drop the packet

Default Route:
Routing Table Entry Components:
• Default route = A default route is a route matching [Link]/0. It is used
Component Description
when no more specific route exists in the routing table. It may point to
a next-hop IP address, an exit interface, or both, depending on Type The connection type; C = directly connected
configuration.
Network The network address of the destination
• Usually connects to another router that can forward the packet toward
its final destination Port The interface used to forward packets to that network
© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.2.7 Static Routing — Overview and Comparison

Two Ways a Router Learns About Remote Networks: Static Routes — Key Facts:

• Manually (Static routes) — network administrator manually • Used in networks of all sizes
enters routes into the routing table • Used alongside dynamic routing protocols in most networks
• Dynamically — routes are automatically learned using a • NOT automatically updated — must be manually reconfigured
dynamic routing protocol every time the network topology changes
• The administrative distance (AD) of a static route is 1 → static
routes take precedence over all dynamically learned routes

Static vs. Dynamic Routing Comparison

Attribute Dynamic Routing Static Routing
Configuration Complexity Generally independent of network size Increases with network size
Topology Changes Automatically adapts Requires administrator intervention
Scaling Suitable for simple AND complex topologies Suitable for simple topologies
Dynamic routing requires protocol security,
Security filtering, and authentication.
Static routing provides explicit control

Resource Usage Uses CPU, memory, link bandwidth No extra resources needed
Predictability Route depends on current topology Route to destination is always the same
© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.2.7 Static Routing — Disadvantages and Three Primary Uses

Static Routing Disadvantages: Three Primary Uses of Static Routes:

• Time-consuming initial configuration and Use Description

maintenance
Ease of routing table maintenance in smaller
• Error-prone, especially in large networks 1. Smaller networks
networks not expected to grow significantly
• Requires administrator intervention to
Routing to and from stub networks (a network
maintain changing route information 2. Stub networks accessed by a single route, connected to only one
• Does not scale well with growing networks other router)
— maintenance becomes cumbersome Using a single default route to represent a path to
• Requires complete knowledge of the any network without a more specific match in the
3. Default route
routing table; send traffic to any destination beyond
whole network for proper implementation the next upstream router

Note: Static and dynamic routing are not mutually exclusive — most networks use a combination of both.

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.2.7 Static Routing — Default Static Routes

Default static route = a static route with [Link]/0 as the destination IPv4 address; matches all packets;
configuring this creates a Gateway of Last Resort
Rule:
All routes that identify a specific destination with a larger subnet mask take precedence over the default route

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.2.7 Static Routing —Summary Routes

Multiple static routes can be summarized into a single summary static route to reduce routing table
entries, IF:
• The destination networks are contiguous and can be summarized into a single network address
• All multiple static routes use the same exit interface or next-hop IP address

Example:
• R1 requires four separate static routes to reach [Link]/16 through [Link]/16
• Instead, one summary static route can be configured to cover all four networks

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
 12.3 Create a LAN
Build a fully connected network

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.3.1 Local Area Networks — Definition and Characteristics
LAN (Local Area Network) = a local network, or a group of interconnected local networks that are
under the same administrative control

LANs in Industrial Automation:

• Help maintain operational security, safety, and productivity in a
real-time, time-sensitive environment
• Allow unique industrial protocols to function and control the
industrial environment without outside network connectivity
jeopardizing operations
• Help businesses organize into specialized segments that
maximize productivity and efficiency
• Each LAN is often its own subnetwork with routing devices
connecting inter-LAN traffic

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.3.1 Local Area Networks — IT LAN vs. OT LAN Comparison
Purpose and Focus Responsibilities
IT LAN OT LAN IT Teams OT Teams

Front-end informational activities Back-end production; industrial

(email, finance, HR) operations Responsible for industrial
Maintain consistent policies; equipment and production output;
Connects, monitors, manages, protect sensitive data prioritize uptime, machinery
Prioritize data availability and and secures machinery and maintenance, worker safety
consistency equipment (robots, ICS, CNC
machines)

Device Characteristics Data Types

IT Devices OT Devices IT Networks OT Networks
• Use specialized industrial
protocols (open standards and
Monitoring, control, and
• Off-the-shelf vendor-specific) Information-related data;
supervisory data related to
• IT devices often have shorter • decades of lifetime; monitoring, managing, securing
machinery and production
refresh cycles, commonly • operate 24/7 applications
processes
around 3–5 years • installed in harsh/remote
• common OS (Windows, iOS, environments
Linux) • less frequent updates →
potential software
vulnerabilities
© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.3.2 Local and Remote Network Segments — All Devices in One
Segment
Overview:
• Within a LAN, hosts can be placed on a single local network OR divided between
multiple networks
• The choice depends on desired results for performance, security, and management

All Devices in One Local Segment:

• Devices can be seen by all other hosts → one broadcast domain; hosts use ARP to
find each other
• May be beneficial for simple network designs

Advantages of a Single Local Segment:

• Appropriate for simpler networks
• Less complexity and lower network cost
• Allows devices to be "seen" by other devices
• Faster data transfer — more direct communication
• Ease of device access

Disadvantages of a Single Local Segment:

• All hosts are in one broadcast domain → more trac on the segment → slower network
performance
• Harder to implement QoS
• Harder to implement security
© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.3.2 Local and Remote Network Segments — Devices on Remote
Segments
Hosts on Remote Segments:

• Placing additional hosts on a remote network decreases the impact

of traffic demands
• Hosts on different networks cannot communicate without routing
• Routers increase network configuration complexity and can
introduce latency between local networks

Advantages of Remote Segments:

• More appropriate for larger, more complex networks
• Splits up broadcast domains and decreases traffic
• Can improve performance on each segment
• Makes machines invisible to those on other local network segments
• Can provide increased security
• Can improve network organization

Disadvantages of Remote Segments:

• Requires the use of routing (distribution layer)
• Router can slow traffic between segments
• More complexity and expense (Requires a Layer 3 device, such as
a router, firewall, or Layer 3 switch.)
© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.3.2 Local and Remote Network Segments — Segmentation
Trade-offs
Advantages of Network Segmentation
Advantage Category Description
Enhanced Security — Reduced Attack Limits exposure of critical assets; each segment operates
Surface independently; minimizes breach impact
Improved Access Control — Granular Fine-grained access controls based on user roles, device types, or
Control applications
Efficient Incident Response — Easier
Smaller segments simplify incident investigation
Investigation
Performance Optimization — Reduced
Smaller broadcast domains → better performance
Broadcast Traffic

In OT environments, segmentation must be designed carefully so that routing, firewall policies, or

VLAN boundaries do not disrupt time-sensitive control traffic, vendor-supported communication
patterns, or safety-related systems.

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.3.3 Packet Tracer — Create a LAN

Activity Description:
Two versions available: Energy sector and Manufacturing sector — both teach the same skills in different contexts

Shared Objectives (Both Versions):

• Connect Network Devices and Hosts
• Configure Devices with IPv4 Addressing
• Verify the End Device Configuration and Connectivity
• Use Networking Commands to View Host Information

Energy Version Additional Objective: Manufacturing Version Additional Objective:

• Connect the Substation SmartGrid • Connect the Factory IT Network

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
12.3.4 Packet Tracer — Observe Traffic Flow in a Routed
Network
Activity Description:
Two versions available: Energy sector and Manufacturing sector — both teach the same skills in different contexts

Shared Objectives (Both Versions):

• Part 1: Observe Traffic Flow in an Unrouted LAN
• Part 2: Reconfigure the Network to Route Between LANs
• Part 3: Observe Traffic Flow in the Routed Network

Skills Practiced:
• Observing how traffic flows (or fails to flow) without routing
• Configuring routing to enable inter-LAN communication
• Comparing traffic behavior before and after adding a router
• Verifying end-to-end connectivity in a fully routed network

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Module 12 Summary — The Need for Routing and The
Routing Table
The Need for Routing (12.1): The Routing Table (12.2):

• As networks grow → divide into multiple smaller • Contains network addresses and best paths — not
networks based on: individual host addresses
‒ Broadcast containment — limit broadcasts to their • Updated dynamically (routing protocols) or manually
local domain (static routes)
‒ Security requirements — separate and protect • Default route ([Link]/0) = Gateway of Last Resort for
groups of computers unknown destinations
‒ Physical locations — interconnect geographically • To reach remote networks: hosts encapsulate packets
separated networks with the router's MAC address → send to default
‒ Logical grouping — group users by department, gateway
function, or resource needs • Static routing: manually configured; AD = 1 (takes
• Routers and Layer 3 switches connect multiple Layer precedence over dynamic routes); best for stub
3 (IP) networks; forward decisions based on networks and simple topologies
destination IP address (not MAC) • Summary static routes: multiple contiguous routes
• When source and destination network portions do summarized into one entry
NOT match → a router must be used • Static vs. dynamic: most networks use both

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
 Module 12 Complete

You have completed Module 12: Routing Between Networks

Module 13 — Transport Layer

© 2025 Cisco and/or its affiliates. All rights reserved. Cisco Confidential