AWS Cloud Practitioner Study Notes · Part 20

Network Types: PAN, LAN, WLAN, CAN, MAN, and WAN

AWS Cloud Practitioner study notes comparing network types by scope, ownership, latency, and their relationship to VPCs and global connectivity.

Network types are commonly grouped by geographic coverage and purpose. A Bluetooth connection between a phone and earbuds is very different from a company network connecting offices across several countries, even though both move data between devices.

This is Part 20 of the AWS Cloud Practitioner Study Notes series. The most useful AWS connection is to think of a VPC as a logically isolated virtual network with LAN-like characteristics, while Internet, Direct Connect, VPN, and multi-Region designs are parts of wider WAN connectivity.

Network types at a glance

TypeFull nameTypical coverageExample
PANPersonal Area NetworkA few metres around one personBluetooth earbuds
LANLocal Area NetworkHome, office, or buildingOffice Ethernet network
WLANWireless Local Area NetworkHome, office, or buildingWi-Fi network
CANCampus Area NetworkSeveral buildings in one campusUniversity network
MANMetropolitan Area NetworkA city or metropolitan areaCity-wide ISP backbone
WANWide Area NetworkCountry, continent, or worldwideThe Internet

The boundaries are useful for learning, but they are not always rigid. A network can combine several types, and the same organisation may use LANs inside buildings, a campus network between buildings, and a WAN to connect distant offices.

1. PAN — Personal Area Network

A Personal Area Network is the smallest network type. It connects devices close to one person, usually over a range of roughly one to ten metres.

Examples include:

  • Bluetooth keyboard connected to a tablet
  • Wireless earbuds connected to a phone
  • Smartwatch connected to a phone
  • Phone hotspot connecting a nearby laptop
  • USB-connected personal devices

The key idea is personal devices and very short range. Bluetooth is the most familiar example.

2. LAN — Local Area Network

A Local Area Network connects devices within a limited location such as a home, office, classroom, or small building. It is commonly owned and managed by one person or organisation.

Examples include:

  • Office computers and printers
  • A home router connecting laptops and smart devices
  • A school computer laboratory
  • Servers and workstations inside one building

LANs usually provide high bandwidth and low latency because devices are relatively close together and the network is under local control. Ethernet switches, routers, and network cables are common LAN components.

Think: “Which devices need to communicate inside this local site?”

3. WLAN — Wireless Local Area Network

A Wireless Local Area Network is a LAN that uses wireless radio communication, usually Wi-Fi, instead of requiring Ethernet cables for every client device. WLAN is therefore a specialised form of LAN, not a completely separate geographic scale.

Examples include:

  • Home Wi-Fi
  • Office wireless access points
  • Coffee-shop Wi-Fi
  • Airport or hotel Wi-Fi

The IEEE 802.11 family defines the main Wi-Fi standards. A WLAN still needs network infrastructure such as access points, switches, routers, and security controls. Wireless does not automatically mean public or insecure; an organisation can operate a private, authenticated WLAN.

4. CAN — Campus Area Network

A Campus Area Network connects multiple LANs across a nearby group of buildings controlled by one organisation. The campus might be a university, hospital, industrial site, or corporate office park.

Examples include:

  • A university connecting lecture halls, libraries, and laboratories
  • A hospital connecting separate buildings and clinical systems
  • A company connecting offices across one business campus

A CAN is larger than a building LAN but smaller than a city-wide MAN. It may use fibre links between buildings while each building continues to operate its own LAN or WLAN.

5. MAN — Metropolitan Area Network

A Metropolitan Area Network spans a city or metropolitan area. It connects sites that are farther apart than a typical campus but still within one urban region.

Examples include:

  • An ISP’s city-wide access or backbone network
  • A municipal government network
  • Public transport systems connecting stations and control centres
  • A business network connecting offices across one city

MANs are often operated by telecommunications providers, governments, or large organisations. They can connect multiple LANs or CANs across a city.

6. WAN — Wide Area Network

A Wide Area Network connects networks across large geographic distances, such as between cities, countries, or continents. WAN traffic may travel through carrier networks, private circuits, VPN tunnels, the Internet, or cloud-provider backbone infrastructure.

Examples include:

  • The public Internet
  • A company connecting Malaysia, Singapore, and United States offices
  • A bank connecting branches across a country
  • A hybrid environment connecting on-premises data centres to AWS

WANs usually involve multiple networks and providers. Compared with a local network, long-distance communication generally introduces more latency and operational complexity, although bandwidth and latency vary widely by design.

Think: “How do separate sites communicate over a large distance?”

LAN versus WAN

CharacteristicLANWAN
Geographic scopeHome, office, or buildingCities, countries, or worldwide
Typical latencyLowVaries; often higher over long distances
OwnershipUsually one organisation or householdOften several providers and networks
Common technologiesEthernet, switches, Wi-FiInternet, carrier circuits, VPN, Direct Connect
ExampleOffice networkCompany network connecting global branches

“WAN is slower than LAN” is a useful beginner shortcut, but not a universal rule. A modern private WAN can have high bandwidth, while a congested local Wi-Fi network can perform poorly. Distance, path, congestion, and technology determine actual performance.

How AWS relates to network types

AWS services do not literally carry a PAN, LAN, CAN, MAN, or WAN label. These categories are useful analogies for understanding scope:

AWS concept or serviceUseful network comparisonWhy
Amazon VPCLAN-like virtual networkA VPC is a logically isolated virtual network where you define IP ranges, subnets, routes, and gateways.
Subnet and Availability ZoneLocal segment within a VPCA subnet is an IP address range inside a VPC and belongs to one Availability Zone.
Internet GatewayVPC-to-Internet connectionIt provides a path between a VPC and the Internet when routing and addressing are configured correctly.
AWS Direct ConnectDedicated WAN connectivityIt establishes a dedicated network connection between an on-premises network and AWS.
AWS Site-to-Site VPNEncrypted WAN connectivityIt creates an IPsec VPN connection between a VPC and a remote or on-premises network.
AWS RegionsSeparate geographic infrastructure locationsA Region is a geographic area; Regions are designed to be isolated from one another.
AWS global networkProvider backbone used by AWS servicesAWS operates global infrastructure and networking, but customers still configure the connectivity and routing their workloads require.

The VPC analogy is helpful, but do not conclude that a VPC is exactly the same as a physical office LAN. A VPC is virtual, Region-scoped, and controlled through AWS networking constructs such as CIDR ranges, route tables, gateways, security groups, and network ACLs.

A simple hybrid-cloud example

Imagine a company with an office in Kuala Lumpur and workloads in an AWS VPC:

  1. Employee laptops connect to the office WLAN.
  2. The WLAN and wired office network form part of the office LAN.
  3. The company uses Direct Connect or Site-to-Site VPN for connectivity between the office and AWS.
  4. The VPC provides the isolated virtual network for the AWS workloads.
  5. VPC route tables and security controls determine which traffic can reach the workloads.

The local WLAN and LAN solve local connectivity. Direct Connect or VPN provides the WAN path. The VPC provides the cloud-side virtual network. These are different scopes working together, not competing choices.

Cloud Practitioner exam notes

  • PAN: Personal devices, very short range, Bluetooth.
  • LAN: Local network inside a home, office, or building.
  • WLAN: A wireless LAN using Wi-Fi, commonly IEEE 802.11.
  • CAN: Multiple LANs across a campus, university, hospital, or business site.
  • MAN: Network covering a city or metropolitan area.
  • WAN: Networks connected across cities, countries, or the world.
  • VPC: A logically isolated virtual network in AWS; use it as a LAN-like comparison, not a literal physical LAN.
  • Direct Connect: Dedicated connectivity between on-premises networks and AWS.
  • Site-to-Site VPN: Encrypted IPsec connectivity between a VPC and a remote network.

When a question emphasises a home or office, think LAN or WLAN. When it emphasises multiple buildings, think CAN. A city-wide provider network suggests MAN. Branches in different countries, the Internet, or on-premises-to-cloud connectivity suggest WAN.

Final takeaway

Remember the network types by increasing scope:

PAN → LAN/WLAN → CAN → MAN → WAN

PAN connects personal devices. LAN and WLAN connect local devices. CAN connects nearby buildings. MAN spans a city. WAN connects distant networks. In AWS questions, map the idea carefully: VPCs are virtual, isolated networks with LAN-like scope, while VPN, Direct Connect, the Internet, and global cloud connectivity belong to the wider WAN conversation.

Sources

Back to the journal