Axia College
There are many benefits of creating a Virtual Local Area Network such as decreased bandwidth consumption, increased security, and geographical separation which means users of a VLAN do not have to be in the same geographical location to share resources.
A plan to segment the network is that the network will be split into broadcast domains which will reduce network congestion and this will also add to security. The different segments of the network will be divided by group functions, the marketing group will have a segment, the engineering group will have a segment, operations will have their own segment, and the call center will have their own.
The plan to improve security is that each segment will be separated from the rest of the network, so access is restricted form the segment to segment. The best way to increase security is by controlling access to the individual segment by user groups based on the segments of networks. This will ensure that the engineering staff will have the access they need but also anyone else that needs it has access too. The same will apply for the other groups, providing security barriers around the data that needs to be protected.
A Port assigned based VLAN membership will be used to facilitate the ease of future reorganization of the physical layout of the network. This will allow the centralized administration of the network and the user of the network, so that if further relocation of office space is needed, a simple location of the user can be accomplished without regard to the network or the resources that are needed. This option will provide for a simpler administration that MAC addresses, user ID, or Network address VLAN membership when it comes to the placement and the changing the personnel assignment of the groups.
Using Layer 3 switch will provide a greater control if the network, VLAN, and user assignment in VLAN membership. Layer 2 switches could satisfy the requirements