Skip to content

📘 08-01: Network Segmentation

Network Systems

Module 08: Subnets and VLANs

Home All Notes Practice Quiz

❓ What is Network Segmentation?

Network segmentation is the practice of dividing a network into smaller, isolated segments to improve security, performance, and manageability.

💡 Why Network Segmentation is Important

🔐 1. Enhanced Security

  • Limits the spread of attacks
  • Isolates sensitive systems

🔹 2. Improved Performance

  • Reduces network congestion
  • Improves traffic management

🔹 3. Better Management

  • Easier monitoring and control
  • Better policy enforcement

📌 Common Segmentation Techniques

🧮 1. Subnetting

  • Dividing a network into smaller IP ranges

🧱 2. VLAN (Virtual LAN)

  • Logical separation within a physical network

🧱 3. Firewalls

  • Control traffic between segments

🔹 4. Access Control Lists (ACLs)

  • Define allowed and blocked communication

📌 Common Segmentation Strategies

🔹 1. Geographic Segmentation

Dividing the network based on physical or geographic locations.

Example: - Network is segmented across different branches located in different cities or regions

🔹 2. Department-Based Segmentation

Separating the network according to organizational departments or functions.

Example: - Network is divided into segments for HR, Finance, and IT departments

🔹 3. Device-Type Segmentation

Grouping devices based on their type or role in the network.

Example: - Segment 1: Personal devices (laptops, phones) - Segment 2: IoT devices (smart TVs, smart bulbs)

💡 Key Idea

Instead of one large network:

➡️ Create multiple smaller, controlled network segments