Overview
Network segmentation takes the divide-and-conquer approach to network management. When
done well, it increases both performance and security on a network. A network can be
segmented physically by creating multiple LANs or logically through the use of VLANs
(virtual LANs). Either way, the larger broadcast domain is divided into smaller segments, and
the IP address space is subdivided as well.
In this chapter, the student will learn about two important concepts that enable and support
network segmentation: subnets and virtual LANs (or VLANs). Fundamentally, a subnet
Chapter Objectives
After reading this chapter and completing the exercises, the student will be able to:
• Explain the purposes of network segmentation
• Calculate and implement subnets
• Explain how VLANs work and how they’re used
Teaching Tips
Network Segmentation
1. Discuss the three reasons why a network administrator might separate traffic:
a. enhance security
2. Explain that networks are commonly segmented according to one of the following
groupings:
3. Use Figure 8-1 to help students visualize the concept of network segmentation.