unauthorized access of a part of the network, and thus increases the security of the sensitive part of the network.
Different Ways of Network Segmentation
A network can be segmented using bridges, routers, and switches. Let’s understand how that can be done.
Network Segmentation using Bridges
Bridging (Fig on Page 1 of the article) is a technology using which two or more local area networks that use the same protocols, like Ethernet or token ring, can be aggregated together. A bridge monitors each message on a LAN. It passes the messages that are destined within the same LAN and forwards those that are destined for a different interconnected LAN.
Bridges learn which addresses are in which network and develop a table, using which it decides whether a message should be forwarded to a different interconnected LAN. They work in layer 2 of the OSI reference model.
Advantages of network segmentation using bridges
Bridges can segment traffic in a network and thereby reduce the traffic seen in each sub-network, improving network response time. Using its buffering capabilities, it can also compensate for the speed discrepancies of two different networks.
Network Segmentation using Routers

When we need to aggregate two or more networks that use different protocols, we can use routers. A router can interconnect two or more networks and enable communication between them.
Routers function in layer 3 of the OSI reference model. They look at the destination IP address of each network packet passing through them and consult a table to determine to which network it should be forwarded. Routers can also implement broadcast filters and logical firewalls.
Advantages of network segmentation using routers
There are a number of advantages of using routers in segmenting a network :
- Routers can interconnect two or more networks that use different protocols.
- Routers can control broadcasts within the network.
- Routers can filter inbound and outbound packets between LAN and WAN segments.
- Routers can fragment large packets into smaller pieces and send them across the network, while bridges discard those.








































0 Comments