VLANs (Virtual Local Area Networks) and Inter-VLAN Routing
are fundamental concepts in networking, especially for efficient network
segmentation and traffic management.
VLANs (Virtual Local Area Networks):
• Definition: VLANs are used to segment a single physical network into
multiple logical networks. Devices in the same VLAN behave as if they are
on the same physical network, even if they are geographically separated.
• Benefits:
1. Security: Devices in different VLANs cannot communicate with each
other unless explicitly allowed, providing a layer of security.
2. Traffic Management: Network traffic can be segmented to reduce
congestion and enhance performance.
3. Broadcast Control: VLANs limit the scope of broadcast traffic,
reducing unnecessary traffic on the network.
4. Network Organization: Allows logical groupings of devices (e.g., by
department) without needing physical re-cabling.
• Types:
1. Port-based VLAN: Assigns devices to VLANs based on the port they
are connected to on the switch.
2. MAC-based VLAN: Assigns VLANs based on the device’s MAC
address.
3. Protocol-based VLAN: Assigns VLANs based on the protocol used
(e.g., IP or IPX).
Inter-VLAN Routing:
• Definition: Inter-VLAN routing allows communication between devices in
different VLANs. Without inter-VLAN routing, devices in separate VLANs
cannot communicate.
• Methods of Inter-VLAN Routing:
1. Router-on-a-Stick:
▪ A router with a single physical interface configured with sub-
interfaces, one for each VLAN.
▪ Each sub-interface is assigned an IP address and linked to a
VLAN using 802.1Q (dot1q) tagging.
▪ Commonly used in smaller networks where the traffic between
VLANs is minimal.
2. Layer 3 Switches:
▪ Layer 3 switches combine the functionality of both a switch
and a router, allowing them to route traffic between VLANs
directly.
▪ They are more efficient than Router-on-a-Stick for larger
networks due to hardware-based routing, which offers higher
performance.
Key Concepts:
• VLAN Trunking: A VLAN trunk allows multiple VLANs to traverse a single
network link. Trunks are usually used between switches and routers and
require 802.1Q tagging to distinguish traffic from different VLANs.
• Default Gateway: For inter-VLAN routing, each VLAN requires a default
gateway (an IP address on the router or Layer 3 switch) to route traffic
outside its subnet.
Example:
• VLAN 10 (Accounting), VLAN 20 (HR), and VLAN 30 (IT) are configured on a
network switch. To allow communication between VLANs, a Layer 3 switch
or a router with sub-interfaces (Router-on-a-Stick) is configured to route
traffic between these VLANs.
VLAN Configuration Report
1. Introduction
This report provides an overview of the VLAN (Virtual Local Area Network)
configuration on the network devices. VLANs are used to segment network traffic,
improve performance, and enhance security by dividing the network into smaller,
isolated broadcast domains.
2. Network Overview
• Switch Model: [Insert Switch Model]
• Firmware Version: [Insert Firmware Version]
• Number of VLANs Configured: [Insert Number]
3. VLAN Details
VLAN
VLAN Name Ports Assigned IP Subnet Purpose
ID
Fa0/1, Fa0/2,
10 VLAN_Sales 192.168.10.0/24 Sales Department
Fa0/3
Fa0/4, Fa0/5, Marketing
20 VLAN_Marketing 192.168.20.0/24
Fa0/6 Department
Fa0/7, Fa0/8,
30 VLAN_IT 192.168.30.0/24 IT Department
Fa0/9
40 VLAN_Guest Fa0/10, Fa0/11 192.168.40.0/24 Guest Wi-Fi
