VLAN
A network technology that partitions a single physical network infrastructure into multiple mutually isolated logical subnetworks through software configuration. VLANs are commonly used in enterprise and home networks for security isolation and traffic management.
Core Facts
Timeline (last 90 days)
网络分段指将大型网络划分成多个逻辑子网，使一个子网中的设备无法直接访问其他子网，从而限制攻击者的横向移动。
A VLAN is a technology that uses software configuration to partition mutually isolated logical subnets on the same physical network infrastructure, with devices on different VLANs unable to communicate directly by default.
The network is divided into three VLANs: a management network, a Homelab infrastructure network, and a segment dedicated to Kubernetes, with Proxmox using a single VLAN-aware bridge.
Blocking a TV from sending data to manufacturer servers via router firewall rules is an effective privacy protection solution.
In home data center setups, the principle of network micro-segmentation should be practiced by isolating the management network, service network, IoT device network, and client network from one another.
VLAN (IEEE 802.1Q standard) divides logically isolated subnets on the same physical network by inserting a 4-byte tag into Ethernet frames.
Isolating a smart TV in a separate VLAN prevents lateral penetration to other devices in the event of a compromise, and allows stricter outbound firewall rules to be applied.
Implementing VLAN isolation typically requires a router or switch that supports this feature; among consumer-grade products, the Ubiquiti UniFi series and some routers running OpenWrt firmware are capable of this.
All Facts (9)
Isolating a smart TV in a separate VLAN prevents lateral penetration to other devices in the event of a compromise, and allows stricter outbound firewall rules to be applied.
65%Unverified网络分段（Network Segmentation）可通过将IoT设备置于独立VLAN或访客网络中，有效遏制黑客通过入侵低安全性IoT设备渗透整个家庭网络的横向移动攻击
90%Unverified网络分段指将大型网络划分成多个逻辑子网，使一个子网中的设备无法直接访问其他子网，从而限制攻击者的横向移动。
50%UnverifiedA VLAN is a technology that uses software configuration to partition mutually isolated logical subnets on the same physical network infrastructure, with devices on different VLANs unable to communicate directly by default.
50%UnverifiedThe network is divided into three VLANs: a management network, a Homelab infrastructure network, and a segment dedicated to Kubernetes, with Proxmox using a single VLAN-aware bridge.
50%UnverifiedBlocking a TV from sending data to manufacturer servers via router firewall rules is an effective privacy protection solution.
50%UnverifiedVLAN (IEEE 802.1Q standard) divides logically isolated subnets on the same physical network by inserting a 4-byte tag into Ethernet frames.
50%UnverifiedIn home data center setups, the principle of network micro-segmentation should be practiced by isolating the management network, service network, IoT device network, and client network from one another.
50%UnverifiedImplementing VLAN isolation typically requires a router or switch that supports this feature; among consumer-grade products, the Ubiquiti UniFi series and some routers running OpenWrt firmware are capable of this.
50%