gen-define-vlan-segmentation-and-give-one-short-worked-example-36b8

Define VLAN segmentation and give one short worked example.

# VLAN Segmentation **VLAN (Virtual Local Area Network) segmentation** is the practice of dividing a physical network into multiple logical networks to isolate traffic, improve security, and enhance network performance. Devices in different VLANs cannot communicate directly without a router, even if they're on the same physical switch. ## Worked Example **Scenario:** A small company wants to separate employee and guest traffic on their network. **Setup:** - **VLAN 10** (Employees): IP range 192.168.10.0/24 - **VLAN 20** (Guests): IP range 192.168.20.0/24 **Switch Configuration:** ``` Switch Port 1-10: VLAN 10 (Employee computers) Switch Port 11-15: VLAN 20 (Guest WiFi access point) ``` **Result:** - Employee computer (192.168.10.5) can communicate with other employees in VLAN 10 - Guest device (192.168.20.15) can only reach other guests in VLAN 20 - Guests **cannot** access employee resources directly - If controlled inter-VLAN communication is needed, traffic must pass through a router/firewall with appropriate access rules This segmentation protects sensitive employee data from potentially compromised guest devices while sharing the same physical network infrastructure.