What is a VLAN?
A VLAN is a logical network segment that enables the separation of traffic within a physical network infrastructure. By assigning devices to different VLANs, traffic can be segmented between user groups, devices, or service classes—independent of physical location.
How does a VLAN work?
Traffic from a device is tagged with a specific VLAN ID according to the IEEE 802.1Q standard. Switches interpret these tags and ensure that only devices within the same VLAN can communicate with each other. This allows for logical separation without physically dividing the network.
Examples of VLAN Use Cases:
- Segmentation between internal users, guests, and IoT devices
- Dedicated traffic lanes for IP telephony (voice VLANs)
- Improved security in OT environments by isolating control systems