Uso de VLANs para segurança, segmentação de domínios de broadcast e desempenho da rede

Abstract

Local area networks, by themselves, are usually not effective in terms of segmentation, security, and performance. Virtual Local Area Network (VLANs) segment the local network, making the network divided into multiple broadcast domains, bringing security and performance. This segmentation is done through switch configurations. VLANs aim to increase network performance by decreasing overall traffic. For this to happen, multiple virtual networks are created, making the local network segmented into multiple subnets. The side effect of this setting is increased security as a whole since each subnet will be on its own VLAN, separating resources and users. The ways to implement VLANs will depend on the purpose of the network administrator and the topology employed. The most common deployment configurations are with port targeting or Media Access Control (MAC) address targeting. Users and resources that are in a more static topology fall into port targeting mode. Users and features that require greater mobility fall into MAC address segmentation mode. In both situations, the configuration modes aim to segment the network, bringing greater performance and security.