{"id":259,"date":"2026-02-13T14:00:00","date_gmt":"2026-02-13T13:00:00","guid":{"rendered":"https:\/\/wiki.hamsti.pm\/?p=259"},"modified":"2026-02-28T21:31:54","modified_gmt":"2026-02-28T20:31:54","slug":"%f0%9f%8c%90-vlan-kurz-erklaert","status":"publish","type":"post","link":"https:\/\/wiki.hamsti.pm\/?p=259","title":{"rendered":"\ud83c\udf10 VLAN \u2013 Kurz erkl\u00e4rt"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>VLAN (Virtual Local Area Network)<\/strong> teilt <strong>ein einziges physisches Netzwerk<\/strong> in <strong>mehrere logische, voneinander unabh\u00e4ngige Teilnetze<\/strong> auf.<br>Ger\u00e4te werden nach <strong>Abteilungen, Funktionen oder Sicherheitsstufen<\/strong> gruppiert \u2013 <strong>ohne teure Neuverkabelung<\/strong> oder zus\u00e4tzliche Hardware.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Funktion:<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>1. Logische Segmentierung<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Physisch:<\/strong> Alle Ger\u00e4te h\u00e4ngen am selben Switch\/Kabel.<\/li>\n\n\n\n<li><strong>Logisch:<\/strong> Jede VLAN-ID (1-4094) bildet eine <strong>eigene Broadcast-Dom\u00e4ne<\/strong>.<a href=\"https:\/\/www.thomas-krenn.com\/de\/wiki\/VLAN_Grundlagen\" target=\"_blank\" rel=\"noreferrer noopener\"><\/a>\u200b<\/li>\n\n\n\n<li><strong>Traffic-Trennung:<\/strong> Ger\u00e4te in VLAN 10 &#8222;sehen&#8220; VLAN 20 nicht direkt.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2. Vorteile der Trennung<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>VLAN 10 = Vertrieb (PC, Drucker)  \nVLAN 20 = IT-Admin (Server, Management)  \nVLAN 99 = G\u00e4ste (Internet only)  \nVLAN 30 = IoT (Kameras, Smart Devices)<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Sicherheit:<\/strong> Arbeitsgruppen isoliert<\/li>\n\n\n\n<li><strong>Performance:<\/strong> Weniger Broadcast-Verkehr pro VLAN<\/li>\n\n\n\n<li><strong>Flexibilit\u00e4t:<\/strong> Ger\u00e4te per Port\/Switch-Port zu VLAN zuweisen<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>3. Broadcast-Dom\u00e4nen pro VLAN<\/strong><br>Jedes VLAN = <strong>separate Layer-2-Dom\u00e4ne<\/strong>. Broadcasts bleiben <strong>innerhalb VLANs<\/strong> \u2013 kein Flooding ins gesamte Netzwerk.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u2699\ufe0f <strong>Vorgehen (IEEE 802.1Q Tagging):<\/strong><\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>1\ufe0f\u20e3 Paket kommt am Switch-Port an  \n2\ufe0f\u20e3 Switch pr\u00fcft Port-VLAN-Zuweisung  \n3\ufe0f\u20e3 F\u00fcgt 4-Byte VLAN-Tag hinzu:  \n   \u2502 VLAN-ID (12 Bit)  \n   \u2502 Priority (3 Bit, QoS)  \n   \u2502 CFI (1 Bit, kompatibilit\u00e4t)  \n4\ufe0f\u20e3 Weiterleitung nur an Ports mitselber VLAN-ID  \n5\ufe0f\u20e3 Trunk-Ports transportieren ALLE VLANs (tagged)<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Switch-Filterlogik:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Port 5 (VLAN 10) \u2192 nur VLAN 10 Traffic  \nPort 6 (VLAN 20) \u2192 nur VLAN 20 Traffic  \nTrunk-Port \u2192 VLAN 10+20+99 Traffic (tagged)<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\ud83d\udd0c <strong>Einsatzbeispiele:<\/strong><\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Abteilung\/Funktion<\/th><th>VLAN-ID<\/th><th>Zweck<\/th><th>Zugriff<\/th><\/tr><\/thead><tbody><tr><td><strong>Vertrieb<\/strong><\/td><td>10<\/td><td>PC+Drucker<\/td><td>VLAN10+Internet<\/td><\/tr><tr><td><strong>IT-Admin<\/strong><\/td><td>20<\/td><td>Server+Management<\/td><td>Alle VLANs<\/td><\/tr><tr><td><strong>G\u00e4ste<\/strong><\/td><td>99<\/td><td>WLAN-Internet<\/td><td>Nur Internet<\/td><\/tr><tr><td><strong>IoT<\/strong><\/td><td>30<\/td><td>Kameras+Sensoren<\/td><td>VLAN30 only<\/td><\/tr><tr><td><strong>Management<\/strong><\/td><td>100<\/td><td>Switch\/SNMP<\/td><td>VLAN100 only<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Inter-VLAN-Routing:<\/strong> Layer-3-Switch oder Router-on-a-Stick f\u00fcr Kommunikation zwischen VLANs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Status:<\/strong> <strong>De-facto-Standard<\/strong> in allen Managed Switches (Cisco IOS, HP ProCurve, Ubiquiti UniFi, MikroTik).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ideal f\u00fcr:<\/strong> Mittelstand\/Enterprise ohne Netzwerkumbau, <strong>Drucker-Management<\/strong> (pro Abteilung VLAN), Gast-\/IoT-Sicherheit.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>VLAN (Virtual Local Area Network) teilt ein einziges physisches Netzwerk in mehrere logische, voneinander unabh\u00e4ngige Teilnetze auf.Ger\u00e4te werden nach Abteilungen, Funktionen oder Sicherheitsstufen gruppiert \u2013 ohne teure Neuverkabelung oder zus\u00e4tzliche Hardware. Funktion: 1. Logische Segmentierung 2. Vorteile der Trennung 3. Broadcast-Dom\u00e4nen pro VLANJedes VLAN = separate Layer-2-Dom\u00e4ne. Broadcasts bleiben innerhalb VLANs \u2013 kein Flooding ins [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":303,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[44],"tags":[19,34,20,33],"class_list":["post-259","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-fachbegriffe00","tag-netzwerk","tag-netzwerksegmentierung","tag-switch","tag-vlan"],"_links":{"self":[{"href":"https:\/\/wiki.hamsti.pm\/index.php?rest_route=\/wp\/v2\/posts\/259","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wiki.hamsti.pm\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wiki.hamsti.pm\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wiki.hamsti.pm\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wiki.hamsti.pm\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=259"}],"version-history":[{"count":2,"href":"https:\/\/wiki.hamsti.pm\/index.php?rest_route=\/wp\/v2\/posts\/259\/revisions"}],"predecessor-version":[{"id":264,"href":"https:\/\/wiki.hamsti.pm\/index.php?rest_route=\/wp\/v2\/posts\/259\/revisions\/264"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/wiki.hamsti.pm\/index.php?rest_route=\/wp\/v2\/media\/303"}],"wp:attachment":[{"href":"https:\/\/wiki.hamsti.pm\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=259"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wiki.hamsti.pm\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=259"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wiki.hamsti.pm\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=259"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}