- Divides a Single Broadcast domain into Multiple Broadcast domains.
- By default, all ports of the switch are in VLAN1.
- VLAN1 is known as Administrative VLAN or Management VLAN or Native VLAN
- Controls broadcast like ARP
- Provides hierarchical subnet usage
- VLAN provides Layer 2 Security
- VLAN configuration issues:
- A switch creates a broadcast domain.
- VLANs help manage broadcast domains.
- VLANs can be defined on port groups, users or protocols.
- LAN switches and network management software provide a mechanism to create VLANs
- VLANs help control the size of broadcast domains and localize traffic.
- VLANs are associated with individual networks.
- Devices in different VLANs cannot directly communicate without the intervention of a Layer 3 routing device.
VLAN RANGE
VLAN range is 1-4094
- 1-1001 are usable normal-range VLANs
- 1002-1005 are reserved for token ring
- 1006-4094 are extended-range VLANs
CONFIGURATION
VLAN Creation
Switch(config)# vlan
Switch(config-Vlan)# name
Switch(config-Vlan)# Exit
Access Port Configuration
ACCESS PORT = Switchport configured for only a single broadcast domain (VLAN).
Switch(config)# interface
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan
Verify using
Switch # show VLAN