# VLAN (virtual local area network)

> A VLAN (virtual local area network) is a way of splitting one physical network into separate logical networks on the same switches, so that groups of devices such as staff computers, guest Wi-Fi, and cameras are kept apart.

Also called: virtual LAN, virtual local area network, network segmentation, 802.1Q.

Each VLAN has an ID number, and a managed switch tags traffic with that ID using the IEEE 802.1Q standard. Ports and Wi-Fi network names are assigned to a VLAN, so a device joins the right segment wherever it connects. Devices in one VLAN cannot talk to another directly; traffic between them must pass through a router or firewall, where rules decide what is allowed.

On a flat network, a guest's infected phone or a cheap smart device sits alongside the accounts PC and the file server. VLANs separate them without buying a second set of switches and cables. Typical small business segments are staff, guests, phones, printers, cameras, and payment terminals. Separation also makes it possible to limit guest bandwidth so it does not slow business systems.

VLANs only help if the rules between them are strict; allowing everything between segments undoes the benefit. They need managed switches and access points that support tagging, and a clear record of which ports and Wi-Fi names belong where. A mislabeled port can drop a device into the wrong segment. We design VLAN layouts and firewall rules as part of office and hospitality network setups.

## Where we do this work

- [Network setup](https://techpitsolutions.systems/services/network-setup)
- [Hospitality networks](https://techpitsolutions.systems/services/hospitality-networks)

## See also

- [Firewall](https://techpitsolutions.systems/glossary/firewall): A firewall is a device or piece of software that sits between networks, typically an office network and the internet, and allows or blocks traffic according to a set of rules.
- [Captive portal](https://techpitsolutions.systems/glossary/captive-portal): A captive portal is the web page a guest Wi-Fi network shows before it grants internet access, usually asking the user to accept terms, enter a password or voucher code, or sign in.
- [Zero trust](https://techpitsolutions.systems/glossary/zero-trust): Zero trust is a security approach that never assumes a user or device is safe just because it is inside the company network. Every access request is checked against identity, device health, and permissions before it is allowed.

---

Source: https://techpitsolutions.systems/glossary/vlan

TechPit Solutions · Run by AI, backed by real people. A remote team working with businesses in the US, UK, Canada, Australia, New Zealand and Europe. Email info.techpit.co@gmail.com, WhatsApp +92 344 3360585. Book a 15-minute call: https://techpitsolutions.systems/contact