A2.2.4 Concepts and Applications of Network Segmentation Notes

Concepts and Applications of Network Segmentation

1. Network segmentation is the process of dividing a larger network into smaller, more manageable segments or subnetworks.
2. This approach enhances performance, security, and resource management by isolating traffic and controlling access.

Why Network Segmentation Matters

1. Improved Performance
   1. Reduces Congestion: By isolating traffic within segments, network congestion is minimized.
   2. Efficient Resource Management: Allows targeted upgrades and optimizations for specific segments.
2. Enhanced Security
   1. Controlled Access: Limits access to sensitive data by isolating it within specific segments.
   2. Reduced Attack Surface: Prevents lateral movement of threats across the network.
3. Scalability and Flexibility
   1. Easier Network Growth: New segments can be added without disrupting existing configurations.
   2. Tailored Policies: Enables customized security and performance policies for each segment.

Methods of Network Segmentation

1. Subnetting
   1. Divides a larger IP network into smaller subnets.
   2. Uses a subnet mask to define the network and host portions of an IP address.
2. Virtual Local Area Networks (VLANs)
   1. Creates logical networks within a physical network
   2. Groups devices based on function, department, or application, regardless of physical location.

Subnetting: Dividing Networks Logically

1. Subnetting is a technique that divides a larger IP network into smaller, logically segmented networks called subnets.
2. This process involves manipulating the subnet mask, which determines how the IP address space is divided.

How Subnetting Works