A VLAN (virtual LAN) splits one physical switch, or a group of switches, into separate Layer 2 networks. Each VLAN is its own broadcast domain and normally its own IP subnet. VLANs let you group users by role instead of location, limit how far broadcasts travel, and apply security between groups, because traffic between VLANs must pass through a router or Layer 3 switch where it can be filtered with ACLs (access control lists).
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.