VLAN Explained

VLAN stands for virtual local area network a VLAN is a local area network where the computers servers and other network devices are logically connected regardless of their physical location so even if these devices are scattered in different places it wouldn't matter because a VLAN can logically group them into separate virtual networks and the purpose of a VLAN is for improved security traffic management and to make a network simpler so as an example let's say you have a three-story office building and in this building you have computers that belong to certain departments that are mixed in with computers that belong to other departments on the same floor so the red computers represents the accounting department the blue computers represent the shipping department and the green computers represent the support department now as you can see all these computers from these different departments are all connected to a switch so they are all on one segment on a local area network or LAN so all the network broadcast traffic are mixed in with other departments so the departments are all seeing each other's network traffic now suppose as a network administrator you wanted to separate the network broadcast traffic from these departments from each other so that the accounting department doesn't see any traffic from support support doesn't see any traffic from shipping and so on now one way to solve this is to physically move the computers that belong to the same department and put them together such as putting them on the same floor and deploying extra network hardware and cabling but that could be a hassle and unnecessary work but there is an easier way to accomplish this and that is by creating VLANs by using VLANs on a VLAN capable switch you can logically create several virtual networks to separate network broadcast traffic so in this case we're going to create three VLANs for the three different departments so we're going to create a VLAN for the accounting department and then we'll create another VLAN for the support department and then we'll create one for the shipping department so now as the VLANs are implemented the traffic between the three departments are isolated so they won't see any traffic created from the other departments they will only see their own network traffic even though all the computers from the different departments share the same cabling and switch so in our example the VLANs were created on the switch and this is done by designating specific ports on the switch and assigning those ports to a specific VLAN so on the switch will create a VLAN for the support department so we'll plug all the computers that belong to the support department into those ports then we'll designate another set of ports on the switch and create another VLAN for the accounting department and finally we'll designate another set of ports on the switch for another VLAN for the shipping department and as you can see the network traffic is separated between the departments because of the VLANs so as stated before there are several different reasons for creating VLANs but one of the main reasons is for traffic management because as a local area network grows and more network devices are added the frequency of the broadcasts will also increase and the network will get heavily congested with data but by creating VLANs which divide up the network into smaller broadcast domains it will help alleviate the broadcast traffic