Switches handle local delivery within a network using MAC addresses, and VLANs let you logically separate that network for better performance and security.
How VLANs Segment a Switch
Access ports, tagged 802.1Q trunks and logical separation.
Tap or hover a part to learn more.
One VLAN each.
An access port belongs to a single VLAN and connects one end device (a PC, phone or printer). The device is unaware of VLANs — the switch handles membership.
Check your understanding
1. What carries multiple VLANs between switches?
2. How do devices in different VLANs communicate?
Keep learning
The core idea
- A switch learns which MAC address is on which port and forwards frames accordingly.
- All ports on a switch share a broadcast domain — unless you split it with VLANs.
- A VLAN is a logical network; devices in different VLANs can't talk without a router.
Why Networks Are Segmented
From one flat network to isolated zones with controlled crossings.
Tap or hover a part to learn more.
One big zone.
In a flat network every device sits in one broadcast domain. It's simple, but a single compromised device can reach everything — one breach spreads freely.
Check your understanding
1. What is the main security benefit of segmentation?
2. How is traffic between segments controlled?
Keep learning
How it works in practice
- Access ports carry one VLAN; trunk ports carry many (tagged with 802.1Q).
- VLANs separate, say, voice, staff and guest traffic on the same physical switches.
- Inter-VLAN routing (a router or L3 switch) connects VLANs when needed.
Common mistakes
- Confusing a switch (L2, MAC) with a router (L3, IP).
- Forgetting that VLANs need a router to communicate.
- Leaving all devices in one broadcast domain and wondering why it's noisy.
Why it matters for your career
Switching and VLANs are core CCNA topics and daily work for network engineers — expect scenario questions about segmentation and trunking.
Technical interview questions
- How does a switch decide where to send a frame?
- What is a broadcast domain?
- How do devices in different VLANs communicate?
Practice questions
- What addresses do switches use? (MAC addresses)
- What tags VLAN trunk traffic? (802.1Q)
- What's needed for inter-VLAN traffic? (A router / L3 switch)
Where this fits in your networking journey
This is one concept in the Networking Fundamentals path, which leads into CompTIA Network+ and Cisco CCNA. When this clicks, review IP Addressing & Subnetting and continue with Spanning Tree (STP).
Practise with Missiora
- AI Interview™ — rehearse networking interview questions with scored feedback.
- Career Coach™ — build a fundamentals → certification → job plan.
- Job Intelligence™ — see which networking skills real adverts demand.