Overview
Direct Answer
A Virtual Local Area Network (VLAN) is a logical subdivision of a physical network that groups devices into separate broadcast domains based on software configuration rather than physical location. Devices within a VLAN communicate as if directly connected, regardless of their physical position across switches or network infrastructure.
How It Works
VLANs operate by tagging network frames with VLAN identifiers (typically using IEEE 802.1Q protocol), allowing switches to route traffic based on membership rather than geography alone. Each VLAN maintains its own broadcast domain, meaning broadcast packets remain isolated within that logical network. Inter-VLAN communication requires routing through a Layer 3 device configured with interfaces for each VLAN.
Why It Matters
Organisations use VLANs to reduce broadcast traffic, improve security through network segmentation, and simplify network administration without requiring physical rewiring. They enable compliance with regulatory isolation requirements and reduce infrastructure costs by allowing flexible device placement independent of network topology.
Common Applications
Enterprise networks deploy VLANs to isolate guest networks from corporate systems, separate voice over IP traffic from data traffic, and segment departments for access control. Healthcare facilities use VLANs to comply with data protection requirements, whilst educational institutions separate student networks from administrative systems.
Key Considerations
VLAN implementation requires careful configuration to avoid broadcast storms and misrouted traffic; improper tagging or trunk port setup can degrade performance. Security depends on proper access control lists at routing boundaries, as VLANs alone do not prevent lateral movement if Layer 3 filtering is inadequate.
More in Networking & Communications
DNS
Protocols & StandardsDomain Name System — the hierarchical system that translates human-readable domain names into numerical IP addresses.
Network Latency
Protocols & StandardsThe time delay between sending and receiving data across a network, measured in milliseconds.
Subnet
Protocols & StandardsA logical subdivision of an IP network that improves security and performance by segmenting traffic.
HTTPS
Protocols & StandardsHTTP Secure — an encrypted version of HTTP using TLS for secure communication over the internet.
HTTP
Protocols & StandardsHypertext Transfer Protocol — the application-layer protocol for transmitting hypermedia documents on the World Wide Web.
BGP
Protocols & StandardsBorder Gateway Protocol — the routing protocol that manages how packets are routed across the internet between autonomous systems.
Mesh Network
Protocols & StandardsA network topology where each node relays data for the network, providing self-healing and redundant paths.
TCP/IP
Protocols & StandardsTransmission Control Protocol/Internet Protocol — the fundamental communication protocol suite powering the internet.