← Consultant · Learner
Lesson 1 of 414 min

VLANs, trunks, and inter-VLAN (Virtual Local Area Network) routing

Why one switch behaves like many. 802.1Q tags, trunk ports, router-on-a-stick vs L3 switch.

Network switch with a bundle of ethernet cables
Photo by Brett Sayles on Pexels

A VLAN is a logical separation on a single physical switch. VLAN 10 (staff) and VLAN 20 (guests) can't see each other unless routed.

Trunks (802.1Q) carry many VLANs between switches by tagging frames. Access ports belong to one VLAN.

Diagram · Small-office network
InternetFirewallSwitchPCPCServerAPInternet → Firewall → Switch → Endpoints

To talk between VLANs you need a router, an L3 switch, or a firewall on a stick.

Key takeaways

Next: Wi-Fi that actually works →