VLANs & inter-VLAN (Virtual Local Area Network) routing
- ▸Access port = one VLAN, untagged. Trunk port = many VLANs, tagged (802.1Q).
- ▸Native VLAN should not be VLAN 1 in production.
- ▸Inter-VLAN routing on an L3 switch (SVI) or via firewall ('router on a stick').
- ▸Segment by trust: corp, IoT, guest, voice, mgmt.