# VLAN

A Virtual LAN (VLAN) segments one physical network into isolated logical networks on managed switches — for example, separating guest Wi‑Fi from accounting servers.

Segmentation limits lateral movement if malware infects a laptop: an attacker on the guest VLAN should not reach point-of-sale or backup systems. VLANs are paired with firewall rules that control which segments may talk to each other.

Plan VLANs around roles (corporate, VoIP, IoT/cameras, management) and document IP schemes. For multi-site Canadian businesses, consistent VLAN design simplifies troubleshooting and MSP remote support.

## Related services
- [network](https://amensecurity.ca/en/services/network.md)
- [cybersecurity](https://amensecurity.ca/en/services/cybersecurity.md)

---
Source page: https://amensecurity.ca/en/glossary/vlan
Markdown version for AI agents · Amen Security
Email: info@amensecurity.ca
Phone: +1 (204) 514-3536