A Virtual LAN (VLAN) segments one physical network into isolated logical networks on managed switches — for example, separating guest Wi‑Fi from accounting servers. Segmentation limits lateral movement if malware infects a laptop: an attacker on the guest VLAN should not reach point-of-sale or backup systems. VLANs are paired with firewall rules that control which segments may talk to each other. Plan VLANs around roles (corporate, VoIP, IoT/cameras, management) and document IP schemes. For multi-site Canadian businesses, consistent VLAN design simplifies troubleshooting and MSP remote support.
