1

 Define Virtual local area network (VLAN).

 Explain the reason of segment LAN into many VLANs .

 Membership in a VLAN can be based on port numbers, MAC addresses, IP addresses,

IP multicast addresses, or a combination of these features

 A VLAN can be configured manually, automatically, or semiauatomatically.

 Advantages of VLAN are cost and time efficient, can reduce network traffic, and provide a
good measures of security.

 Define Virtual Private network (VPN).

 VPN Technology involves the simultaneous use of encryption/authentication and

tunneling to guarantee privacy.

 A common technique to encrypt and authenticate in VPNs is IP security.

2
 VLAN is a subnetwork or segment of a local area network configured by
software, not by physical wiring.

Why segment LAN into several VLAN?

 one reason for segmentation is to make broadcasting possible at the data

link layer. In other word, the stations in each segment form a group that
can be the receive of a broadcast message. The message can come from
some station in the group or from another station outside of the group.

 If a person move from one group to another, there is no need to change

the physical configuration while in LAN this require change the physical
configuration

3
VLAN1

VLAN2

VLAN3

4
 Backbone
Switch A switch Switch B

VLAN1

VLAN2

VLAN3

5
6
To achieve privacy, organization can use three strategies:-

7
8
Today, most organizations need to have privacy in intra- organization data exchange, but, at the
same time, they need to be connected to the global internet for data exchange with other
.organizations. One solution is the use of a hybrid network

Hybrid network allows anorganizations to have its own private internet and, at the
.same time, access to the global Internet

9
Both private and hybrid networks have a major drawback:Cost
. VPN allows organizations to use the global Internet for both purposes
VPN creates a network that isprivate but virtual. It is private because it guarantee privacy
inside the organization. It is visual because it does not use real private WAN the network is
.physically public but virtually private

10