Teori Dasar Virtual LAN (VLAN)

Summary

This video discusses the evolution of a small tech startup named ABCD, founded by a group of individuals. Initially, they set up a basic network using a switch to connect five computers and a printer. As the company grew, with more divisions and employees across multiple buildings, the network became more complex. The video explains the challenges of maintaining a single broadcast domain and how Virtual LANs (VLANs) were implemented to separate network traffic for better performance, security, and efficiency. VLANs enable logical segmentation of networks based on division, improving management and scalability.

Takeaways

• 💻 The video discusses a scenario where a group of people named A, B, C, and D start a tech company called ABCD with a small office and five employees.
• 🔗 Initially, they use a switch to connect all their computers and a printer for data sharing and resource access.
• 🏢 As the company grows, they expand to a larger office building with four floors and hire more employees, requiring a more complex network structure.
• 🌐 All employees are on the same network, which leads to broadcast domain issues, slowing down network performance and increasing security risks.
• ⚠️ The lack of network segmentation allows broadcasts from one division to affect others, leading to unnecessary data sharing and security vulnerabilities.
• 🔐 A virus or ransomware introduced in one division can spread across the entire network due to the shared network, emphasizing the need for better security measures.
• 📈 To solve this, the company decides to implement VLANs (Virtual Local Area Networks) to separate the networks of different divisions like finance, engineering, HR, and sales.
• 🖥️ Each VLAN corresponds to a specific division, and they set up switches for each floor to ensure that divisions only communicate within their VLANs.
• 🔄 The switches are connected using trunk ports, which allow multiple VLANs to pass through the same physical connection, optimizing network efficiency.
• 📶 VLAN tagging (802.1Q) is used to differentiate traffic between different VLANs, allowing for better management and security within the company’s network.

Q & A

What is the main objective of the team in the video?

The main objective of the team, named ABCD, is to build a tech company. Initially, they set up a simple network in a small office with just five employees.

What network topology did the team initially use for their small office?

The team initially used a simple network topology where all five computers and a printer were connected via a single switch.

What challenge did the company face as it grew and expanded to a four-story building?

As the company expanded, all employees across various divisions (Finance, HR, Technical, and Sales) were still on the same network, leading to performance issues and security concerns due to the single broadcast domain.

How did the single broadcast domain impact network performance?

The single broadcast domain meant that a broadcast sent by one user would be received by all users, even if it was irrelevant to them. This reduced network performance and created unnecessary traffic.

Why was security a concern with the initial network setup?

Because all divisions were on the same network, a security threat like a virus could easily spread to all computers, increasing the risk of a company-wide breach.

What solution did the company adopt to solve network performance and security issues?

The company decided to separate the network into distinct segments for each division (Finance, Technical, HR, and Sales) using multiple switches, effectively creating isolated networks for each group.

What challenge arose as the company added a second building?

Managing multiple switches across two buildings became difficult. The IT team faced challenges in maintaining the network, especially when some departments were spread across different floors or buildings.

How did the company resolve the issue of inefficient network management?

The company implemented VLANs (Virtual Local Area Networks) to create logical networks that grouped users based on their division, even though they were physically connected to the same switch.

What is the difference between a 'port access' and a 'port trunk' in the VLAN setup?

'Port access' refers to ports assigned to a specific VLAN (e.g., Finance or Technical), while 'port trunk' is used to connect switches and allows traffic from multiple VLANs to pass through.

What technology allows VLAN traffic to be distinguished when passing through trunk ports?

VLAN traffic is distinguished through trunk ports using the 802.1Q standard, which adds a tag to the data indicating the VLAN it belongs to, allowing multiple VLANs to share the same physical link.