This layer includes LAN-based routers and layer 3 switches. This layer ensures that packets are properly routed between subnets and VLANs in the network. This layer is also called the Workgroup layer. Also responsible for routing, filtering interesting traffic and WAN access. Defines Broadcasts and Mulitcast domains.