MicroNugget: VLANs Explained | CBT Nuggets

Start learning cybersecurity with CBT Nuggets. courses.cbt.gg/security
In this video, CBT Nuggets trainer Keith Barker explains VLANs. Follow along to learn what a virtual local area network (VLAN) is, why we use them, and how to configure one. See first-hand how to create a VLAN and assign ports and IP addresses to it.
Imagine two offices separated by thousands of miles. In one office, you have computers and networks, printers and devices. In the other office is another high-speed connectivity network with PCs, printers, and servers.
LANs are defined by high-speed connectivity with geographically close devices. Those two offices and separate networks could be brought together by purchasing a Wide Area Network connection.
But maybe you have devices in the same geographic area but you want them on separate networks. Putting them all on the same switch effectively keeps them on the same network.
A virtual LAN lets you assign a certain number of ports on your switch and assign them to a specific VLAN. Anyone connected to those ports will be treated like they’re on a separate network.
It’s called a virtual LAN because we have one physical switch, but we’re carving it into different chunks. It’s a matter of keeping traffic logically separated.
See how to manually configure a switch to generate a VLAN, and how to assign ports and IP addresses properly.
0:15: Defining Virtual Local Area Network
1:00: When would you want to use a VLAN
3:55: Benefits of using a VLAN
4:45: The steps to creating a VLAN
5:10: Manually configuring a 3560 switch with a VLAN
6:20: Ensuring devices have compatible IP addresses
🌐 Download the Free Ultimate Networking Cert Guide: blog.cbt.gg/tg20
⬇️ 13-Week Study Plan: CCNA (200-301): blog.cbt.gg/zw67
Start learning with CBT Nuggets:
• Real-World VLAN Design and Implementation | courses.cbt.gg/b8z
• Building a Business Switched Network | courses.cbt.gg/ho3
• Intro to Networking | courses.cbt.gg/tuv
• Cisco CCNA (200-301) | courses.cbt.gg/h6s

[@KeithBarker]

Thanks for the kind words. Best wishes, Keith

[@jamiehatch4644]

I've watched alot of demonstration videos but this is the first i've commented on. I just wanted to say this is hands down the best and easiest to understand tutorial i have ever watched on the topic of VLANS. Thank you!

[@cbtnuggets]

Jamie Hatch Thanks for the comment/compliment!

[@rayalasantosh]

Just what I came to the comment section to say

[@alvarolacalle1326]

Same here!

[@theapricotbambino]

agreed!!

[@tarandeep017]

+1 to that

[@KeithBarker]

If VLAN200 clients need dhcp, and the dhcp server is in VLAN100, then we will need to use a DHCP relay agent, connected to VLAN200 to forward the requests to the DHCP server. Keith

[@JakeMcCredieEire09]

Thank you so much for this video, it takes my Network teacher an hour to explain this, and you explained it in 8 and a half minutes. Thank you ;)

[@KeithBarker]

Thanks for the kind feedback. It is appreciated. Best wishes, Keith

[@sushmar96]

Have been binge-watching CBT nuggets. You made it so simple to understand while still covering all the aspects. Thank you!

[@cbtnuggets]

Awesome, thank you Sushma! Glad that the videos have been helpful for you.

[@wwolfram33]

Love the sound effects specifically at 5:05 !

[@KeithBarker]

Thanks you for the feedback! Glad you enjoyed the video. Best wishes, Keith Barker

[@KeithBarker]

Thanks for the feedback! Keith

[@chillwithmikeofficial]

Wonderful video, Keith. Informative and well structured. Thanks a million.

[@akki95623]

Best video by CBT nuggets,,Thanks you very much Keith...u r a Gem of a person

[@jh852509]

This the first video that I finally grasped VLAN.

[@KeithBarker]

Thanks for the note! Glad you liked it. Keith

[@KeithBarker]

Great question. A layer 3 switch, also often referred to as a Multi-layer switch (MLS) can do the logical routing between VLANs, and in that case the switch is doubling as both a switch and router. You are right on the money.

[@bharatpahalwani8780]

Thanks a ton, you made it too simple to learn, yet covered all aspects :)

[@jackieee854]

Best explanation of VLAN by far. Great video!

[@KeithBarker]

Thanks for the idea. We have a new project we will be working on in the next couple months, and it will involve lots that. During that time, we'll create several Micro Nuggets on that topic. Thanks again, Keith.

[@bertaldihno1]

What a brilliant explanation. Thank you Keith

[@jasontran4193]

Thanks for the informative video. I appreciate the time and effort you have put into this. Keep up the great work.

[@jakepayne2985]

Keith, you have helped me ALMOST land a job in IT with no experience or education whatsoever. I’m very, very close. I want to thank you for all of this content. You make it so understandable, and I thank you. I’m almost 40 years old, changing from police officer to IT.

[@cbtnuggets]

We're honored to have you as a part of our learner community! Please do not hesitate to reach out if you have any questions. #CBTNlearner

[@hariravindranath]

thank you Keith.. really appreciate for taking time to reply..

[@avgar2980]

Extremely well made videos, informative and illustrative, well done!

[@chongweihong2028]

thank alot !!! the only 1 video make a clear explanation about vlan !! thank you !!

[@jeffcojd]

Keith Barker ROCKS!

[@nadzshahfj]

Thanks Keith. Super awesome explanation. Is it possible to request for a nugget showing how to route Layer 2 protocols (like DEC) on MPLS. Cheers

[@benv3595]

Finally, an explanation I could understand, thank you!

[@oladipogbolahan1612]

This is a great illustration. Thank you

[@jarell1092]

Very useful and easy to understand video! Thanks for this!

[@michaelstyler1606]

Great video. Easy to understand. Thank you.

[@langelihlemnguni8044]

One of the best videos cleared up alot

[@cbtnuggets]

Thanks for the feedback Langelihle Mnguni!

[@PerezTheDev]

Another great video Keith!

[@fj4371]

Thanks. Clear and to the point.

[@marky8509]

Simple yet informative. Keep it up. Thank you for making this video.

[@cbtnuggets]

We're so glad you enjoyed it! Thank you for learning with us.

[@hilalmehdi111]

clear everything about vlan. it helps me a lot . thanks :)

[@jakecompton0406]

This helped out big time! Thank you so much!

[@rajuhs3086]

Very good and simple explanation

[@SSKMotivationCR]

Great video, thank you! It helped me a lot.

[@richwillis8794]

This video is brilliant. Well done And thanks!

[@ellepluc7903]

A life saving video!!!!!!!!! Great Job!!

[@nando4070]

Great video!

[@djalsovec88]

Helpful. Nice work.

[@theendermeister]

Thanks for explaining it so well, you got through my thick skull :-)

[@vivekteega]

This was helpful! :)

[@TechEdge-101]

With a multi-layer switch, the switch itself can take care of the routing needs and process data a lot faster than if we were to route data to a third device, usually a router.

[@Kdoubleanoyla]

Fantastic!

[@fightbackmatix]

Yet another great MN :D Keep up the great work :D

[@SakshiKumari-lc5wb]

Still helping people after 8 years

[@jojoalberto9910]

you know what? I really don't get what my professor saying about VLAN, but bcoz of this video, DAMN. I know now =)

[@cbtnuggets]

jojo alberto We are glad you found this tutorial beneficial! Thanks for the feedback.

[@renanda2409]

Thanks a million, Super help

[@cbtnuggets]

Glad it helped!

[@rps7654]

thnku for the Nice info on VLAN

[@BluesOverdrive]

Nice, thank you!

[@DedyIsnandar]

Nice Explanations..

[@sofianesaal6417]

There’s no another easiest way than this 😀. Thanks a lot

[@ThePupidarko]

Excellent!!!

[@santoshsco]

Clearly explained !!

[@cbtnuggets]

Thank you, Santosh! Keith really knows his stuff.

[@arielsharon1453]

Hi Keith, Glad I caught you here. But my question it isn't in this video but on your CBT Nuggets CCNP Sec. Firewall 642-618, video #5 ACLs on the ASA. This is my 1st month as a member and I've been followed through your Nuggets using my own home lab. My question is particularly how do I setup to simulate outside internet? So I can do testing from outside network inbound to most trusted network inside. I connected via T/W cable at home. I really appreciated your help so I can continue w/video.

[@hariravindranath]

Hi Keith.. Thanks for the video was really insightful. I have a doubt, how will this work for scenarios where the employees are mobile. For instance, one sales person wants to work out of the accounting office. In that case, how would VLANs work as I m assuming that they would be connecting to one of the ports from the accounting office. Thanks.

[@KeithBarker]

Ok, see you there.

[@arielsharon1453]

Hi Keith - thanks so much for your replied. That will work just great my friend. I actually have some major questions like this one here for you so my level of understanding at least adequate. I'll see you in facebook - Thanks buddy.

[@mehdoush]

that was helpful :) thanks

[@gabriellialcala]

This video is very helpful to me because I don't know much about networking stuffs. I just wanted to ask if creating a VLAN needs an application on the computer. One thing, if you want to build a network, for example, the networks are separated in floors, do they need a switch at every floor? (So they'll be connected physically?) Thank you!

[@arunsundar09]

Really helpful

[@glenntembo2693]

Thank you

[@zake2255]

You're a king 👑

[@lottebirrenkoven8162]

helpful.thank you.

[@salemawadh1133]

Now i understand after 1000 of videos 😋

[@rohitgeralifechannelhealth3633]

Excellent

[@alisougouma1489]

Sir I have a question out of the this tutorial Which is How can configure two routers and 1 switch between them

[@edgoodman01]

Man this was very good i am a beginner in the Network world thanks

[@KeithBarker]

edgoodman01 You're welcome! Thanks for the feedback.

[@Flqmmable]

Hello, thank you very much for the video! I just have one question.. What is the point of separating networks via vlans when you can do so with subnetting? Therefore, broadcasts only are sent to each subnet. Thanks in advance. :)

[@jessechichi5609]

dude u r awesooooooome!!!!!!!!!!!!!!!!!

[@runrunsomethings5229]

Awesome.

[@nandhadev]

Good one.

[@KeithBarker]

When users connect using a VPN (connecting remotely) they will not be in the same VLAN or have the same IP addressing they would as if they were physically on the network. When using a VPN they are logically connecting to the VPN server/firewall/router, and that device is forwarding packets further into the network based on their routing/filtering policy.

[@dieubangmach9409]

how can I configure computer on different VLAN to communicate with each other ?HELP ME

[@j0kez87]

Nice Video :)

[@vairo-]

great!!!

[@polarispolaris5077]

Why cannot I configure my default switch on GNS3 2.2.3 ? Only routers are configurable. Any one has an idea? THanX

[@romeo1951]

this just made life so much easier lol

[@KeithBarker]

Romeo Patroni That's what we are here for! Thanks for the feedback.

[@kevinblakely4384]

Hello What CBT course is this video from? Thanks

[@dipakarsul3516]

If VLAN partitions at L2, why are the IP address ranges different for Sales and Accounting? Why does the Router have 2 Ip address (10.1.0.1 and 10.2.0.1) ? I mean the router is not like on 2 different L3 networks? I get confused when L3 stuff (eg router, subnetting) gets discussed when explaining VLAN , as I fail to understand what role L3 plays in case of VLAN.

[@jheather720]

I'm a savvy network guy so VLANs are child's play for me - but I must admit you explained that fantastically.

[@FuriouslyFurious]

so how do prevent outside internet traffic from reaching computers on vlan 2 and keep them restricted to vlan 1. but I want the PC on vlan1 to be able to communicate with the devices on vlan 2?

[@davidadams2395]

FuriouslyFurious Did you find an answer? I believe you need to config an acl. Look up Access Control List for VLANs. You could use port security for the interfaces in the other VLAN.

[@matiashuartamendia7977]

WHAT ABOUT TRUNK PORT?

[@wheatleytech2172]

What software are you using for this video??

[@cbtnuggets]

***** The CBT Nuggets trainers all use Wacom tablets and each trainer uses a different software. Unfortunately, we can not disclose this information.

[@FFxO]

inter-VLAN pls!

[@KeithBarker]

Hello Ariel- I am happy to know you are a subscriber, welcome aboard. Its one of the best investments a person can make in themselves. Lets do this, so that we can have an troubleshooting chat (not associated with this video), visit me on my facebook page "Keith Barker Networking", and there we can walk through the steps I use to connect to the live internet from the ASA in GNS3. Will that work for you? Keith

[@KutAnimus]

I watched this video but it's still unclear to me why you would use a VLAN to separate broadcast domains. Isn't that what the router is supposed to do? Also, I'm pretty confused with how you could separate broadcast domains (which are L3) on an L2 device such as the switch.

[@jeffcojd]

You use a VLAN to separate networks that you don't want communicating without an ACL. There could be confidential information on one subnet(accounting) that you don't want the sales team to see, thus the reason for a VLAN. It's no different than having 2 separate switches that plug into a router except with VLAN's you would only require one switch that plugs into a router, thus saving the company money on hardware, etc

[@FuriouslyFurious]

ok. actually my question sounded not well thought out. here's my real question. I have a PC that I want to dedicate as a host for a game server. I want to give certain people access to remote into the server, but I want them to stay off of my other devices.

[@DylanBogusz]

When you mean port 0/25? What exactly does that mean? Does that mean row 0 and column 25?

[@ericnyamu3599]

did you have a flu when dong this video ? lol

[@markkubat2440]

I am still struggling to understand why we use VLANs. If the purpose is to divide the network, why not just put them on different switches? That way you don't need to configure anything. Put accounting on switch 1, sales on switch 2, and then connect them to a router.

[@jeffcojd]

Well there's a very simple answer! Cost! Why buy multiple switches when you just need one? One switch with hundreds of VLAN's on it. The other purpose for VLAN's is security, you don't want the sales team to have access to the HR department or accounting department and VLAN's will prevent that.

[@TedTheAtheist]

It's called a router, pronounced "roo-ter".

[@Dun3Cat]

drittspill

[@DavidNitzscheBell]

Woah....you start out talking about Accounting in Las Vegas and Sales in Reno and connected via WAN. Then, you say both departments grew. Why does it matter that they grew? And if they're in different cities, how can they be on the same LAN? They can't. You need to improve the way you discuss this to be more logical and sequentially relevant.

[@markupton6084]

Ditched cbt nuggets. The voice is way to enthusiastic like this isn’t THAT exciting

[@KeithBarker]

Thanks for the kind words. Best wishes, Keith

[@KeithBarker]

Thanks for the idea. We have a new project we will be working on in the next couple months, and it will involve lots that. During that time, we'll create several Micro Nuggets on that topic. Thanks again, Keith.

[@FuriouslyFurious]

ok. actually my question sounded not well thought out. here's my real question. I have a PC that I want to dedicate as a host for a game server. I want to give certain people access to remote into the server, but I want them to stay off of my other devices.

[@jeffcojd]

You need a router with ACL's or a firewall. Assign that dedicated host an external IP, allow incoming traffic to it over very granular ports and deny the same source traffic to anything else