True to their name, VLANs are literally “virtual“ LANs—mini subLANs that, once configured, can exist and function logically as single, secure network segments, even though they may be part of a much larger physical LAN.

VLAN technology is ideal for enterprises with far-reaching networks. Instead of having to make expensive, time-consuming service calls, system administrators can configure or reconfigure workstations easily or set up secure network segments using simple point-and-click, drag-and-drop management utilities. VLANs provide a way to define dynamic new LAN pathways and create innovative virtual network segments that can range far beyond the traditional limits of geographically isolated workstation groups radiating from centralized hubs.

For instance, using VLAN switches, you can establish a secure VLAN made up of select devices located throughout your enterprise (managers’ workstations, for example) or any other device that you decide requires full access to the VLAN you’ve created.

According to Cisco, a VLAN is a switched network logically segmented by functions, project teams, or applications regardless of the physical location of users. You can assign each switch port to a different VLAN. Ports configured in the same VLAN share broadcasts; ports that don’t belong to the VLAN don’t share the data.

VLAN switches group users and ports logically across the enterprise—they don’t impose physical constraints like in a shared-hub architecture. In replacing shared hubs, VLAN switches remove the physical barriers imposed by each wiring closet.