Virtual Local Area Network—logical network segment created within physical network infrastructure.
A Virtual Local Area Network (VLAN) creates logical network segments within physical infrastructure, separating traffic without requiring separate physical networks. Devices on different VLANs can't communicate without routing through a firewall or router, enabling segmentation and access control. VLANs separate guest networks, departmental networks, and security zones. Proper VLAN implementation is fundamental to network segmentation.
Why It Matters
The DSC Perspective:
VLANs enable network segmentation without additional hardware. Implement VLANs to separate sensitive systems, guest access, and IoT devices from your main network.