A VLAN allows a network administrator to logically segment a local area network (LAN) to create multiple broadcast domains on a single physical switch. Devices placed in the same VLAN can communicate via broadcasts within that VLAN but broadcasts are restricted from other VLANs, increasing security. VLANs are commonly used when a network has over 200 devices, heavy broadcast traffic, or different user groups need isolation or access to the same applications across multiple switches. While subnetting a network provides some segmentation, VLANs allow devices in different physical locations and switches to remain on the same logical network without routing.