VLAN (Virtual Local Area Network) Logical segmentation of a switch into multiple broadcast domains. Increases security, reduces broadcast traffic, and improves management. Each VLAN acts as a separate Layer 2 network (requires a router or Layer 3 switch for inter-VLAN communication). Access Port Belongs to a single VLAN . Carries untagged traffic . Used to connect end devices (PCs, printers, IP phones). Trunk Port Can carry multiple VLANs simultaneously. Frames are tagged with 802.1Q headers to identify VLANs. Commonly used between switches, or switch-to-router/switch-to-server links. Native VLAN On an 802.1Q trunk, the VLAN whose traffic is sent untagged . Default is VLAN 1 (but best practice: change it). Must be the same on both ends of a trunk to avoid VLAN mismatch issues . Quick Interview One-Liners: VLAN = logical segmentation. Access port = single VLAN, untagged. Trunk port = multiple VLANs, tagged. Native VLA...