Subnet vs VLAN: Layer 3 IP Segmentation vs Layer 2 Port Segmentation
Overview A subnet and a VLAN both carve a large network into smaller, more manageable pieces, but they operate at different layers and are configured in different places. A subnet divides IP address space at Layer 3 based on address range and mask, independent of physical wiring, while a VLAN divides switch ports at Layer 2, creating separate broadcast domains on shared physical hardware. In most enterprise designs the two are paired one-to-one, but knowing which layer each governs matters for troubleshooting, security, and scaling. ...