Secure Network Administrationadvanced
A network has two groups of hosts on one switch: Corporate LAN hosts using `192.168.10.0/24` and Server LAN hosts using `192.168.20.0/24`. Explain how assigning the groups to separate virtual local area networks (VLANs) changes broadcast handling, and identify what must be done correctly when configuring the switch.
Answer
Assign the Corporate LAN ports to one VLAN and the Server LAN ports to a different VLAN, giving each VLAN a unique number and name. Each VLAN forms a separate broadcast domain, so a broadcast such as an Address Resolution Protocol (ARP) request from one group is contained to ports in that VLAN rather than reaching the other group. The administrator must assign every switch port to the correct VLAN. VLAN separation controls Layer 2 broadcast scope; it does not by itself provide routing between the two networks.
Explanation
### The concept
A VLAN creates a logical broadcast domain on a switch. In this scenario, Corporate LAN ports can be assigned to one VLAN and Server LAN ports to another, matching the separate address ranges shown in the question. A broadcast from one VLAN is contained to that VLAN's ports, so an ARP request from a Corporate LAN host does not need to reach Server LAN hosts. Each VLAN should have a unique number and name, and the switch ports must be placed in the correct VLAN. VLAN separation addresses Layer 2 broadcast scope; the material does not say that VLAN assignment alone routes traffic between the two IP networks.
### What a good answer covers
- The two host groups are assigned to separate VLANs.
- Each VLAN forms a distinct broadcast domain.
- Broadcasts such as ARP requests stay within the relevant VLAN.
- VLANs need unique numbers and names, and ports must be assigned correctly.
- VLAN separation does not itself perform inter-network routing.
### Terms
- **VLAN**: Virtual Local Area Network. A logical grouping of switch ports into a separate broadcast domain.
- **LAN**: Local Area Network. A network serving devices in a local area or site.
- **ARP**: Address Resolution Protocol. It finds the MAC address associated with an IPv4 address on a local network.
- **MAC**: Media Access Control. The address used to deliver frames over a local link.
- **Switch**: A device that forwards local frames based on MAC addresses.
- **Broadcast domain**: The set of devices and ports that receive a Layer 2 broadcast.
- **IP**: Internet Protocol. The addressing system used to deliver packets across networks.
- **Layer 2**: The data-link layer, where local Ethernet frames are forwarded.
- **Routing**: Forwarding packets between networks using network-layer addresses.
### Remember
Put each group in the correct VLAN to contain its broadcasts; use routing when traffic must pass between networks.
Related Questions
- Which statement best describes the protection a Virtual Private Network (VPN) provides?(basic)
- A VPN that encrypts traffic also guarantees that the applications on both endpoints are safe.(basic)
- Explain why a split-tunnel design can reduce central inspection, and identify the traffic affected.(advanced)
- Select ALL protection goals a VPN can support directly through the mechanisms described in the course.(intermediate)
- Compare remote-access and site-to-site VPN designs, including their endpoints and a suitable example of each.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free