SustainedCloudWhat is a VLAN?
A VLAN (Virtual Local Area Network, standardized as IEEE 802.1Q) splits one physical network into several logically separated segments. Devices in different VLANs cannot reach each other unless a firewall explicitly allows it. It is the standard way to keep office PCs, servers, guest WiFi, production machines, cameras and VoIP phones apart without buying separate hardware for each.
Flat network
Every device reaches every other device. One compromised guest laptop reaches the servers.
Segmented with VLANs
Server
Office
Guests & IoT
Segments only talk through the firewall. An incident stays in its segment.
Why flat networks are a risk
In an unsegmented network, every device can talk to every other device. One compromised smart TV, guest laptop or outdated machine controller can reach your servers directly, and ransomware uses exactly this lateral freedom to spread. Most small-business networks still run flat, which is why attackers love them.
How segmentation works in practice
Segments are planned by trust level: servers, office clients, guests, machines, building technology, VoIP. Switch ports and WiFi SSIDs are tagged into their VLANs, and a firewall enforces which segment may talk to which. Done properly, users notice nothing, and an incident in one segment stays in that segment.
When you need it
When machines or devices run operating systems that no longer get patches, when guests and employees share your WiFi, when cyber insurers or auditors start asking about segmentation, or when NIS2 applies to you. In practice: almost every company above a handful of desks.
FAQ
Common questions.
Does a VLAN slow the network down?
No. Tagging adds no perceptible overhead; switches handle it in hardware. If anything, segmentation reduces broadcast noise and makes the network calmer.
Do we need new hardware for VLANs?
Usually not. Practically every business-grade switch, access point and firewall supports 802.1Q. The work is in the planning and clean migration, not in new boxes.
Book a free infrastructure assessment.
A no-commitment look at your setup. What's healthy, what's at risk, and what to fix first. Real answers, no pressure.