Why VLANs Matter: Understanding Virtual LANs, Routing, and Network Basics

1. What is VLAN

VLAN stands for Virtual Local Area Network. A LAN can be a small home network or a large enterprise network. In this context, VLAN refers to a LAN that is segmented using a router, i.e., a broadcast domain.

Many people are confused about what a virtual LAN is and why it needs to be divided.

Example: a high school enrolls 800 freshmen. Managing them as a single class is chaotic, similar to a single broadcast domain where ARP requests flood all devices, wasting bandwidth and CPU.

By dividing the 800 students into 10 classes of 80, each class gets a class number, analogous to a VLAN ID. IP addresses correspond to student numbers. Devices in the same VLAN can communicate freely, while devices in different VLANs cannot without additional configuration.

Therefore, devices within the same VLAN can communicate; devices in different VLANs cannot communicate unless configured.

Inter‑VLAN communication requires a router with a single arm (single‑arm routing) or a layer‑3 switch.

2. Single‑Arm Routing and Layer‑3 Switch

To enable communication between different VLANs, routing functionality is required. The two methods are single‑arm routing and layer‑3 switching.

What is Single‑Arm Routing?

Single‑arm routing uses a regular layer‑2 switch plus a router to allow different VLANs to communicate.

What is a Layer‑3 Switch?

For small networks, single‑arm routing may suffice, but as inter‑VLAN traffic grows, the router can become a bottleneck.

A layer‑3 switch is essentially a switch with built‑in routing capabilities (OSI layer 3). It processes routing in hardware (ASIC), offering high‑speed routing and large internal bandwidth.

3. What is a Gateway

A gateway (also called a network inter‑connector or protocol converter) operates at the transport layer to connect networks that use different high‑level protocols.

Understanding the Gateway

Just as a door connects two rooms, a gateway is the “gate” that allows traffic to move from one network to another.

Gateway IP Address

The gateway is an IP address within a subnet that serves as the exit point for traffic destined for other networks. Typically the first or last usable IP in the subnet is used.

Example Network A: IP range 192.168.1.1‑192.168.1.254, subnet mask 255.255.255.0. Its gateway can be 192.168.1.1. Network B: IP range 192.168.2.1‑192.168.2.254, subnet mask 255.255.255.0. Its gateway can be 192.168.2.1.

How Does a Gateway Enable Communication?

Without a router, two separate networks cannot communicate even if they share a switch. When a host detects that a destination is outside its local subnet, it forwards the packet to its gateway, which then routes it to the destination network’s gateway, and finally to the target host.

What Is a Default Gateway?

A host may have multiple gateways, but the default gateway is the one used when no specific route is known. It is the primary gateway for outbound traffic.

4. What is DNS

DNS (Domain Name System) translates domain names into IP addresses.

When you type www.baidu.com, your computer queries a DNS server, which returns the corresponding IP address (e.g., 61.135.169.105), enabling the connection.

5. MAC Address

MAC (Media Access Control) address uniquely identifies a network interface card. Unlike IP addresses, which can change, the MAC address remains constant.

Think of an IP address as a temporary home address, while the MAC address is like a person’s immutable name.

6. Subnet Mask

A subnet mask distinguishes the network portion from the host portion of an IP address, similar to a list that groups people with the same surname.

For example, the subnet 192.168.1.0/24 has a mask of 255.255.255.0, while a larger subnet 192.168.0.0/16 uses 255.255.0.0, allowing devices to determine which network they belong to.