WAN Explained: LAN, MAN, WAN and SD-WAN for the Network+ Exam

A wide area network connects networks across large geographic distances — between cities, countries, or continents. The definition every exam wants is short: a WAN spans a broad area and typically relies on infrastructure the organization does not own.

The defining characteristic of a WAN is not distance. It is that someone else owns the links.

That ownership point is what actually separates a WAN from a LAN. On a LAN you own the switches and the cable, so bandwidth is cheap and you control everything. On a WAN you lease capacity from a carrier, which makes bandwidth expensive, latency a fact of physics you cannot negotiate away, and availability something you buy in a contract rather than engineer yourself.

The Network Types by Scale

Type	Scope	Example
PAN — personal area network	A few metres	Bluetooth headset, Wi-Fi Direct
LAN — local area network	A building or floor	Office Ethernet and Wi-Fi
CAN — campus area network	Several adjacent buildings	A university or hospital site
MAN — metropolitan area network	A city	Municipal fibre linking council sites
WAN — wide area network	Cities, countries, continents	A company's branch network; the internet
SAN — storage area network	A data centre	Fibre Channel or iSCSI storage fabric
WLAN — wireless LAN	A building	Wi-Fi

Two cautions. The internet is the largest WAN, and questions sometimes use that to test whether you understand the definition rather than just the acronym. And SAN does not fit the geographic scale — it is categorized by purpose, which makes it the odd one out in a list that otherwise runs by size.

WAN Technologies

Leased lines — a dedicated point-to-point circuit such as a T1, T3, or modern Ethernet private line. Guaranteed bandwidth, predictable latency, expensive.

MPLS — Multiprotocol Label Switching. Carrier-provided, with quality-of-service guarantees and an SLA. It was the enterprise default for two decades and is being displaced by SD-WAN on cost.

Broadband internet with a site-to-site VPN over it. Cheap and quick to deploy; performance depends on the public internet.

SD-WAN — software-defined WAN. A controller manages multiple underlying links (MPLS, broadband, LTE or 5G) and steers traffic across them by application policy, failing over automatically. This is the current direction of travel, and it is examinable on N10-009.

Cellular — 4G/LTE and 5G, common as a backup link or for sites where fixed lines are impractical.

Satellite — reaches anywhere, but geostationary services carry severe latency, roughly 500 ms round trip. Low-earth-orbit constellations have cut that to something usable, which is a genuine recent change.

Metro Ethernet — carrier Ethernet across a metropolitan area, blurring the MAN and WAN boundary.

The Vocabulary of the Demarcation Point

Network+ tests the boundary terms, and they are easy marks.

• Demarcation point (demarc) — where the carrier's responsibility ends and yours begins. Faults on their side are their problem; on your side, yours.
• CPE — customer premises equipment, the gear on your side.
• CSU/DSU — legacy equipment terminating a digital circuit, still named in objectives.
• Smart jack or NID — the network interface device at the demarc, often with loopback testing capability.
• Last mile — the final connection from the carrier's infrastructure to your building, and usually the expensive, slow-to-provision part.

Why WANs Are Different to Design For

• Latency is physics. Light in fibre travels roughly 200,000 km per second, so a round trip across the Atlantic cannot be faster than about 60 ms no matter what you pay. Applications that chat back and forth perform badly over distance, which is why protocol design matters more on a WAN than a LAN.
• Bandwidth costs real money, which is why compression, caching, deduplication and WAN optimization exist.
• Links fail, so redundancy with diverse carriers and paths is standard for anything important.
• Traffic crosses networks you do not control, which is why encryption is assumed rather than optional.
• QoS matters because voice and video cannot tolerate the jitter that a saturated link produces.

Network+ (N10-009) Exam Tips

• Know all the network types by scope, and that the internet is a WAN.
• WANs use third-party infrastructure — the defining characteristic.
• Know the technologies: leased line, MPLS, broadband with VPN, SD-WAN, cellular, satellite, metro Ethernet.
• SD-WAN uses multiple links with policy-based steering. Expect it in a cost or resilience scenario.
• Know the demarc vocabulary: demarcation point, CPE, CSU/DSU, smart jack, last mile.
• Troubleshooting responsibility splits at the demarc.
• Satellite means high latency; a scenario mentioning a remote site with poor real-time performance is often pointing there.

Security+ and Cloud+ Angles

Security+ (SY0-701) focuses on encrypting WAN traffic, site-to-site VPNs, and the fact that carrier networks are outside your trust boundary.

Cloud+ (CV0-004) covers hybrid connectivity — Direct Connect, ExpressRoute and Cloud Interconnect as dedicated WAN links into a provider, and how SD-WAN integrates cloud regions as another site on the network.

Key Takeaways

• A WAN spans a wide geographic area and typically runs over carrier-owned infrastructure.
• The internet is the largest WAN.
• Know the hierarchy: PAN, LAN, CAN, MAN, WAN — with SAN categorized by purpose rather than size.
• SD-WAN combines multiple links with policy-based steering and is displacing MPLS.
• The demarcation point divides carrier responsibility from yours.
• Latency over distance is a physical limit, not a bandwidth problem.

Related reading: MAN and metro Ethernet · SDN · VXLAN