VLAN Virtual LAN
Logical division of a physical network — guest Wi-Fi and office network can share a switch but stay isolated.
Standard: 802.1Q. Each VLAN gets a tag (1-4094). Requires a "managed switch" that supports VLAN configuration. Good for segmentation and security.