The Best Practice for VLAN Segmentation

by Tracey Sandilands
Segmenting a VLAN blocks off sections from the general traffic for security.

Segmenting a VLAN blocks off sections from the general traffic for security. Images

A VLAN, or virtual local area network, works in the same way as a physical LAN with the exception that the hosts don't need to be located on the same physical network to be linked. Segmentation is the division of the network into groups, both for connecting specific groups with each other regardless of network affiliation, and for isolation of groups for security reasons. Using a best practices approach to segmentation makes it possible to maximize bandwidth use while securing sensitive data.


Segmentation according to security requirements is the most common best practice used. Devices existing within a closed group have a lower risk of penetration from external forces, particularly if they operate on secure servers with their own key infrastructure. This isolates the hosts from general traffic and ensures that only encrypted data with the correct access codes can enter the group or segment.

Traffic Patterns

The practice of segmentation according to traffic patterns is gaining popularity, and is now recognized as one of the best practices in the IT industry. Devices that send and receive information between each other frequently have high traffic levels, and allocating them individually to different groups makes it more difficult for the data to get through. Grouping the devices together, however, keeps the traffic flow within one segment, reducing congestion and time delays.

Traffic Types

The different types of traffic transmitting across networks occasionally cause delays for other types of traffic. For example, VOIP traffic is sensitive and vulnerable to disruption, and when it comes up against a solid block of data it may cause congestion. Best practices traditionally include making choices that increase efficiency, therefore segmentation according to the type of traffic helps improve functionality. Types of traffic include video files, print services, email, Internet browsing, shared applications and peer-to-peer traffic.

Geographic Grouping

Some networks have limited trunking abilities, and the need to transfer data across large physical distances reduces the speed and efficiency of the system. Grouping according to geographical location is the oldest solution to this problem, and one of the original best practices in segmentation. Devices in a specific location are grouped into a VLAN without external access, which helps increase security as well as improving network efficiency and data transfer speed.

Photo Credits

  • Images
Suggest an Article Correction