Before you start
Come from Network Theory & Protocols first — this builds directly on OSI and subnetting.
CLUSTER 0.5
If Network Theory explained the rules, this cluster covers the physical and logical traffic control that actually moves data around a building or a datacenter.
Drag to rotate · click a node to jump to that topic
Think of it as: GPS for data, choosing the best path between networks
A router's entire job is deciding the best path for data to travel between different networks — your home network to your ISP, one office branch to another.
Think of it as: a switch connects devices in the same room; a VLAN pretends some of them are in different rooms
A switch physically connects devices on the same local network. A VLAN (Virtual LAN) logically separates that switch into isolated groups — so the marketing team's traffic never mixes with finance's, even on the same physical hardware.
Think of it as: knowing whether a problem is "in the room" or "between rooms"
Layer 2 (switching) handles devices talking directly to each other nearby. Layer 3 (routing) handles traffic crossing between different networks. Diagnosing network issues almost always starts with figuring out which layer the problem lives in.
Without VLANs, every device plugged into the same physical switches would be able to see and potentially reach every other device — a security and performance problem at any real scale. VLANs let a company use the same physical wiring while keeping departments, or guests, logically fenced off from each other.
REAL-WORLD SCENARIO
An office has one set of network switches serving three groups: staff, guests, and security cameras. VLANs keep them logically separate on the same hardware — a guest connecting to Wi-Fi can reach the internet but has no path to the internal file server or the camera system, even though the traffic runs over the same physical cables.