
You are responsible for a lab network that carries management traffic, employee endpoints, and test equipment over the same switching fabric. A recent change caused devices from one segment to unexpectedly reach systems that should have stayed isolated, and the on-call engineer suspects the issue is related to how the switch ports were configured. You need to explain the underlying concept before deciding how to fix the segmentation.
What is a VLAN, and how would you use it to separate traffic on the same physical network while still allowing only the intended systems to communicate? As you answer, explain what you would check first if hosts that should be isolated can still talk to each other.