✓ Free · Component 1 · 1.3.5 TCP/IP Suite
1.3.5a TCP/IP Protocol Suite and Layers
OCR H446 · A Level Computer Science · ~14 min read
Notes
Video
Slides
Worksheet
Quiz

Protocol Suites and Layered Models

A protocol is an agreed set of rules that define how devices communicate. A protocol suite is a collection of protocols that work together — each handling a different aspect of communication.

Networks use a layered model so that:

  • Each layer has a specific job and communicates with adjacent layers only
  • Changes to one layer do not affect others (abstraction)
  • Different manufacturers can build compatible equipment (standardisation)

The TCP/IP Model — Four Layers

The TCP/IP model (also called the Internet model) is the practical model used by the internet. It has 4 layers:

Layer (TCP/IP)OSI EquivalentFunctionKey Protocols
4. ApplicationApplication, Presentation, SessionProvides network services to applications. Handles data formatting, encryption at application level.HTTP, HTTPS, FTP, SMTP, IMAP, DNS, SSH, Telnet
3. TransportTransportEnd-to-end data delivery. Segmentation, flow control, error recovery, port numbers.TCP, UDP
2. Internet (Network)NetworkLogical addressing (IP), routing packets across networks.IP (IPv4, IPv6), ICMP, ARP
1. Network Access (Link)Data Link + PhysicalPhysical transmission on a specific medium. Frames, MAC addresses, hardware.Ethernet, Wi-Fi (802.11), PPP

The OSI Model — Seven Layers

The OSI model (Open Systems Interconnection) is a conceptual reference model with 7 layers. It is used for understanding and troubleshooting but TCP/IP is what's actually used.

LayerNameFunction
7ApplicationUser interface, network services to apps (HTTP, FTP, DNS)
6PresentationData formatting, encryption, compression (e.g. SSL/TLS)
5SessionOpens, maintains, closes sessions between applications
4TransportEnd-to-end delivery, segmentation, flow control (TCP, UDP)
3NetworkLogical addressing and routing (IP, ICMP)
2Data LinkFraming, MAC addressing, error detection (Ethernet, Wi-Fi)
1PhysicalTransmission of raw bits over physical medium (cables, signals)

Mnemonic: "All People Seem To Need Data Processing" (layers 7→1: Application, Presentation, Session, Transport, Network, Data Link, Physical).

Encapsulation and Decapsulation

As data moves down the layers (sender side), each layer adds its own header (and sometimes trailer) — this is called encapsulation. As data moves up the layers (receiver side), each layer removes its header — this is called decapsulation.

LayerData Unit (PDU)What's Added
ApplicationData / MessageApplication data
TransportSegment (TCP) / Datagram (UDP)Source & destination port numbers, sequence number (TCP)
Internet/NetworkPacketSource & destination IP addresses, TTL
Network Access/Data LinkFrameSource & destination MAC addresses, error check (CRC)
PhysicalBitsBits transmitted on medium

TCP vs UDP

Both are transport layer protocols but they serve different purposes:

TCP (Transmission Control Protocol)UDP (User Datagram Protocol)
ConnectionConnection-oriented (3-way handshake before data)Connectionless — sends without establishing connection
ReliabilityReliable — acknowledgements, retransmission of lost packetsUnreliable — no acknowledgements, no retransmission
OrderGuarantees in-order deliveryNo ordering guarantee
SpeedSlower (overhead of reliability mechanisms)Faster (minimal overhead)
Flow controlYes (window size)No
Use casesWeb (HTTP/S), email (SMTP), file transfer (FTP)Video streaming, VoIP, online gaming, DNS queries

TCP Three-Way Handshake

Before TCP transmits data, a connection is established:

  1. SYN: client sends SYN (synchronise) packet — "I want to connect"
  2. SYN-ACK: server responds with SYN-ACK — "OK, I'm ready"
  3. ACK: client sends ACK (acknowledge) — connection established, data can now flow

Port Numbers

Port numbers (0–65535) identify specific applications/services on a device. They allow multiple applications to share one IP address. Combined with an IP address, they form a socket.

PortProtocolUse
20/21FTPFile Transfer Protocol (data/control)
22SSHSecure Shell (remote access)
25SMTPSending email
53DNSDomain Name System queries
80HTTPWeb (unencrypted)
110POP3Receiving email (downloads to client)
143IMAPReceiving email (server-based access)
443HTTPSWeb (encrypted, TLS)
Exam tip: Know both the TCP/IP 4-layer model AND the OSI 7-layer model. Know which protocols belong at which layer (e.g. HTTP = application, TCP/UDP = transport, IP = network/internet, Ethernet = data link). Know the TCP three-way handshake: SYN → SYN-ACK → ACK.
Exam tip: Know the well-known port numbers — especially 80 (HTTP), 443 (HTTPS), 25 (SMTP), 53 (DNS), 22 (SSH), 20/21 (FTP), 143 (IMAP). These come up frequently in exam questions about network services.
⚠ Common Mistakes
  • Saying the TCP/IP model has 7 layers — it has 4. The OSI model has 7. For exam questions, state which model you are using.
  • Placing HTTP at the wrong layer — HTTP is at the Application layer of both models, not the transport layer. TCP (transport layer) carries the HTTP data.
  • Saying UDP is used for web browsing — web browsing uses TCP because reliability matters. UDP is for latency-sensitive real-time applications (video/audio streaming, VoIP, gaming) where occasional lost packets are acceptable.
✓ Notes completed!
Video coming soon
Click to advance · Arrow keys also work
Click slide or press arrow keys to navigate

Worksheet — 1.3.5a TCP/IP Suite & Layers

8 questions · 20 marks · instantly marked

Q1Name the four layers of the TCP/IP model (from top to bottom) and for each layer, state one protocol that operates at that layer.[4 marks]
✓ Mark scheme
Application — HTTP/HTTPS/FTP/SMTP/DNS/SSH [1]; Transport — TCP/UDP [1]; Internet (Network) — IP/IPv4/IPv6/ICMP [1]; Network Access (Link) — Ethernet/Wi-Fi/802.11/PPP [1].
Q2Explain the concept of encapsulation in networking. What happens to data as it moves down the TCP/IP layers at the sender?[4 marks]
✓ Mark scheme
Encapsulation is the process of each layer adding its own header (and sometimes trailer) to the data as it passes down the stack [1]; at the Transport layer, a TCP/UDP header is added (containing port numbers, sequence numbers) creating a segment [1]; at the Internet layer, an IP header is added (source/destination IP addresses, TTL) creating a packet [1]; at the Network Access layer, a frame header and trailer are added (source/destination MAC addresses, CRC) creating a frame that is then transmitted as bits [1].
Q3Compare TCP and UDP. For each, give one application that uses it and explain why that transport protocol is appropriate.[4 marks]
✓ Mark scheme
TCP: reliable, connection-oriented, guarantees delivery and order via acknowledgements and retransmission; example — web browsing (HTTP/S) — every piece of a web page must arrive correctly otherwise the page is broken/incomplete, so reliability is essential [2]. UDP: unreliable, connectionless, no acknowledgements or retransmission; example — video streaming / VoIP / online gaming — occasional packet loss is acceptable and retransmission would cause greater latency/lag; speed and low latency are more important than guaranteed delivery [2].
Q4Describe the TCP three-way handshake. Why is this process necessary before data transmission?[4 marks]
✓ Mark scheme
Step 1: client sends SYN (synchronise) packet to server — indicating desire to connect and starting sequence numbers [1]; Step 2: server replies with SYN-ACK — acknowledging the client's SYN and sending its own SYN [1]; Step 3: client sends ACK — acknowledging the server's SYN; connection is now established [1]. Purpose: establishes a reliable connection before data flows; both parties agree on sequence numbers for ordering; confirms both sides are ready and reachable before committing bandwidth to data transfer [1].
Q5State the port numbers for HTTP, HTTPS, SMTP, and DNS.[2 marks]
✓ Mark scheme
HTTP = 80 [0.5]; HTTPS = 443 [0.5]; SMTP = 25 [0.5]; DNS = 53 [0.5]. (Award 1 mark for any two correct, 2 marks for all four.)
Q6Why is a layered protocol model beneficial? Give two advantages.[2 marks]
✓ Mark scheme
Any two from: Abstraction — each layer has a specific role and only communicates with adjacent layers; changes to one layer don't require changes to others (e.g. upgrading from IPv4 to IPv6 doesn't require changes to application layer protocols) [1]; Standardisation — different manufacturers can build interoperable equipment as long as each layer conforms to the defined protocol [1]; Simplifies development — developers can focus on a single layer without needing to understand all layers [1]; Easier troubleshooting — problems can be isolated to specific layers [1].
Q7What is a socket in networking?[2 marks]
✓ Mark scheme
A socket is the combination of an IP address and a port number [1]; it uniquely identifies a specific application/service on a specific device — the IP address identifies the device on the network, and the port number identifies the particular application running on that device. Together they allow multiple simultaneous connections to/from the same device [1].
Q8At which layer of the OSI model does each of the following operate: (a) a router, (b) a switch, (c) a network interface card (NIC)?[2 marks]
✓ Mark scheme
(a) Router — Layer 3 (Network layer) — uses IP addresses to route packets between networks [1]. (b) Switch — Layer 2 (Data Link layer) — uses MAC addresses to forward frames within a network [1]. (c) NIC (Network Interface Card) — Layer 1 (Physical) and Layer 2 (Data Link) — handles bit transmission and MAC addressing. Award marks for reasonable answers (1 for a+b correct, 1 for c or full explanation).
Topic Quiz
1 of 15
You scored
out of 15
🎯

Mini Test — 1.3.5a TCP/IP Suite

  • 10 questions · 10 marks · 10 minutes
  • 5 MCQ + 5 short answer
Card 1 of 15
Click to reveal
🎉
Complete!
TermDefinition
← 1.3.4d Firewalls 1.3.5 TCP/IP Suite Next: 1.3.5b Application Protocols →