A VLAN (virtual LAN) divides one physical switch, or a group of switches, into several separate logical networks. Each VLAN is its own broadcast domain and normally its own IP subnet. Devices in different VLANs cannot communicate at Layer 2, even when they are plugged into the same switch; traffic between VLANs must go through a router or Layer 3 switch, where it can be controlled with access lists or a firewall.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.