Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top
What are virtual LANS. And why we need them?

As far as i have understood them when switches are been used to create broadcast domain between two different LANS. Then a switch could be used to connect both of the LANS. So they share the same broadcast domain. Because a switch forwards packets which are broadcasted to all of its interfaces.

Please elaborate more. Many many thanx in advance

share|improve this question

closed as not a real question by Sven, Chopper3, EEAA, Nils, Ward Jun 25 '12 at 0:15

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

Really?!? The whole of the internet is filled with a MASSIVE amount of information about VLANs and their possible uses - nothing that an answer on here could ever accurately or fully answer. Sounds like you should be doing better research for your homework. – Ben Lessani - Sonassi Jun 24 '12 at 14:35
up vote 7 down vote accepted

Virtual LANs are there to secure and segregate networks and overall make the network more manageable.


With a VLAN you can create a logical broadcast domain. This means the physical layout doesn't necessarily need to be the logical. For instance you might virtually have 3 servers attached in one VLAN. This would seem as if they were on the same switch. But physically they can be on 3 different switches.

This means that if you ever need to move the machines around physically, the logical design still can stay the same. This means you need to stress your routers less since there is no special route traversing necessary to get to the other machine.

secure and segregate networks

VLANs provide a certain level of security. If you have one switch to which all your machines are connected, but you do not want the other machines to reach each other, you can just use VLAN's to devide the network. In practice this might be that you use ports 1-5 for your critical server machines, ports 6-10 for employee PC's and 11-15 for a guest network. Each of them are put in a different VLAN and can't reach eachother even though they are physically on the same device.

Inter VLAN routing

Now what if you want to let some VLAN's talk to each other? Well then you need inter-vlan routing. This means you add a router (or use a level 3 switch) to provide this functionality. A common practice is to use a router on a stick:

enter image description here

You can see a trunk as an uplink, it can run between multiple switches/routers. A trunk is a special line over which a number of VLAN's run. You can have multiple trunks on once device.

(I come from a cisco background)

share|improve this answer
Thanx a lot for such a detailed answer – Luv Jun 24 '12 at 11:54
Remember VLAN's also break up a Broadcast Domain, which is pretty key too. – Dan Jun 24 '12 at 13:16

Not the answer you're looking for? Browse other questions tagged or ask your own question.