VLANs segment physical switches into multiple virtual switches to separate traffic even if devices are connected to the same switch. VLANs can span multiple switches and some form of routing is needed like a router or layer 3 switch to connect VLANs and allow traffic between them. VLANs provide a way to virtually separate networks for security and management purposes on the same physical switch infrastructure.