GCSE · Computer Science · AQA · Spec 8525

Four-layer TCP/IP model

Post a parcel and it's wrapped, labelled, then unwrapped at the other end. Data crossing a network does much the same, in a fixed order.

Computer Science · Networks

Follow one message down, then back up

Eight steps: four down the sender's stack, four back up the receiver's. All the addresses and numbers are made-up examples.

Before you press Next, guess: as the data goes down the stack, does it get bigger or smaller? Step through and check.

Message: We follow segment 2 of 3. Example values: sender IP 192.0.2.10, receiver IP 198.51.100.7, next node's MAC AA:BB:CC:00:11:22, port 6000.

Sender: application→Sender: transport→Sender: internet→Sender: link→Receiver: link→Receiver: internet→Receiver: transport→Receiver: application
Data now=DATAAdded here=Nothing to track yet. This is the data itselfLayer's job=Prepares the data for sending

Output

 

Step 1: Start at the top. The application layer is the one programs like web browsers use, and it prepares the data for sending. Right now it's just the data, with nothing wrapped round it.

1 / 8

Step through the trace — every value is the lesson’s, not run by the page.

Step 1 of 8: Start at the top. The application layer is the one programs like web browsers use, and it prepares the data for sending. Right now it's just the data, with nothing wrapped round it..

Computer Science · Networks

Which layer does each protocol work at?

Sort the nine protocols into the layer where each one operates.

Still to sort

Application (0)

The layer used by programs such as web browsers

Transport (0)

The layer that splits data into segments

Where the line is: Segments belong here. IP packets belong one layer down, at the internet layer.

Internet (0)

The layer that builds IP packets

Where the line is: Notice the name TCP/IP: only one of those two protocols works at this layer.

Link (0)

The layer that carries packets across each link

9 of 9 still to sort.

Different protocols operate at each layer. Commit to a layer for every protocol before you read why.

Predict, then check

Segments can arrive in a different order from the one they were sent in. Which header information gets the message back together?

The receiver has a pile of segments in the wrong order. Which header information lets it rebuild the message and know it has them all?

Two addresses, two jobs

IP addressvsMAC address

People swap these constantly. Ask yourself: is this about the final destination, or just the next node?

Focus

What it points to

IP address

The sender and the receiver, so the destination at the end of the journey

MAC address

The next node on the network

The insight

One names where the data is ultimately going. The other names only the very next stop.

Used to deliver data

IP address

Between different networks

MAC address

Between devices on the same local network

Layer and header

IP address

Internet layer, in the IP packet's header

MAC address

Link layer, in the link header

Computer Science · Networks

Which of these sounds like you?

A classmate is explaining the TCP/IP model to you and says one of the following. You're deciding which one to believe.

Which is closest to what you think right now?
How sure are you?

Computer Science · Networks

Now say it in your own words

Describe what happens to data as it passes down the TCP/IP stack when it is sent. [5 marks]

0 words · your answer stays on this page and is not sent anywhere.

WHAT YOU'VE LEARNED

A quick recap of today's lesson.

How a message gets wrapped on the way out and unwrapped, in reverse, on the way in.

What you need to know

  • The TCP/IP model is conceptual: four layers, each responsible for a different aspect of network communication.
  • The layers form a stack, top to bottom: application, transport, internet (sometimes called the network layer), link.
  • Have a goA classmate confidently writes the stack as application, link, internet, transport. Which two layers need to swap places?

    Link and transport. The stack is application, transport, internet, link.

    Link is the bottom layer, so it comes last, and transport sits directly under application.

  • Application layer: used by programs such as web browsers, it prepares data to send and decodes received data for the user.
  • Transport layer: splits data into segments, and each header carries a segment number, the total and the port number.
  • Have a goA message is split into 4 segments. What will the total in each segment's header say?

    4. Every segment's header carries the same total number of segments.

    The header holds the segment's own number and the total, and the total is for the whole message, not for that one segment.

  • Internet layer: packages segments into IP packets, each with the sender's and receiver's IP addresses so they can be routed.
  • Link layer: carries IP packets across each link, attaching a header that includes the next node's MAC address.
  • Sending is encapsulation: data passes down the stack and each layer adds extra information to help delivery.
  • Receiving is decapsulation: the process reverses, data goes back up the stack, and each layer takes off the information added.
  • Have a goThe receiving device's link layer has just removed its header. Which layer works on the data next?

    The internet layer.

    Receiving runs back up the stack, so the next layer above the link layer is the internet layer.

  • IP addresses deliver data between different networks, while MAC addresses deliver it between devices on the same local network.

The big picture

Data sent across a network is passed down a four-layer stack (application, transport, internet, link). Each layer adds the information needed to deliver it, which is called encapsulation. The receiving device reverses the process, removing that information layer by layer until the original data is left, which is called decapsulation.

Key points

1Application: prepares data for sending and decodes received data for the user. Protocols include HTTP, HTTPS, SMTP and IMAP.
2Transport: splits data into segments with a header (segment number, total, port number). Its protocols are TCP and UDP.
3Internet: builds IP packets with the sender's and receiver's IP addresses. IP operates here.
4Link: carries IP packets across each link, with a header that includes the next node's MAC address. Protocols include Ethernet and Wi-Fi.
5Sending = encapsulation, down the stack, each layer adding information. Receiving = decapsulation, back up in reverse, each layer removing it.

Worked example

Problem

A receiver strips three labels off a message, but they've been jumbled: "segment 1 of 4", "next node's MAC address" and "sender and receiver IP addresses". Match each label to the layer that added it, then put the labels in the order the receiver removes them.

⚠ Watch out

Picturing the layers as four devices, or running them top to bottom again at the receiving end. The layers are a conceptual stack: receiving goes link, internet, transport, application, and each layer removes what its counterpart added.

🧠

Memory hook

A Tall Igloo Leans: Application, Transport, Internet, Link, from the top down. Wrap on the way down, unwrap in reverse on the way up.

✓

Check yourself

Pick one header from the journey: the segment header, the IP header or the link header. Which layer adds it, what does it hold, and which layer takes it off when the data is received?

Flashcards

(13)
What kind of model is TCP/IP, and how many layers does it have?
A conceptual model with four layers. Each layer is responsible for a different aspect of network communication.
Name the four TCP/IP layers from top to bottom.
Application, transport, internet (sometimes called the network layer), link.
What does the application layer do?
It's the layer used by programs such as web browsers. It prepares data for sending and decodes received data into a meaningful form for the user.
What does the transport layer do to the data it gets from the application layer?
It splits the data into segments and gives each segment a header with the segment number, the total number of segments and the port number.
What does the internet layer do?
It packages segments from the transport layer into IP packets, each including the sender's and receiver's IP addresses.
What does the link layer do, and what is in its header?
It carries IP packets across each individual link. Its header includes the MAC address of the next node.
What is encapsulation?
Data passing down the stack when it is sent, with each layer adding extra information to help delivery.
What is decapsulation?
The reverse process on the receiving device: data goes back up the stack and each layer takes off the extra information that was added, revealing the original data.
Which protocols operate at the application layer?
HTTP, HTTPS, SMTP and IMAP are all application-layer protocols.
Which protocols operate at the transport layer?
TCP and UDP.
At which layer does IP operate?
The internet layer. IP stands for Internet Protocol.
Which layer do Ethernet and Wi-Fi belong to?
The link layer. The protocol used depends on the transmission technology.
Which layer uses IP addresses and which uses MAC addresses?
The internet layer uses IP addresses to deliver data between networks. The link layer uses MAC addresses to deliver data between devices on the same local network.

Tap any card to flip it, or use Study as deck to go through them one at a time. In the full lesson these run as a spaced-repetition deck — you rate each card Hard, Good or Easy and the tricky ones keep coming back until they stick.

Learning with Lightbulb is opening soon

You can use this lesson now. Join the waitlist and we'll let you know when the full Lightbulb experience is ready.

Keep me posted

More AQA GCSE Computer Science topics

See the full AQA Computer Science curriculum →

How this lesson was checked. This AQA GCSE Computer Science (specification 8525)lesson was published through Lightbulb Learning's human-designed editorial process — the educational standards, accuracy rules and publication checks it must pass were authored and approved by Philip Halpin. It passed subject-specific assessment, automated educational checks and technical publication verification before going live (publication checks completed 9 October 2026). Published pages are monitored, human spot-checking is ongoing across the lesson library, and anything found wrong is corrected or withdrawn. How our lessons are made and checked. Spotted a mistake? Email hello@lightbulblearning.co and we'll review it.