If your accounting department shares a VLAN with guest WiFi, guests can potentially sniff accounting traffic. By placing accounting on VLAN and guests on VLAN , traffic stays isolated at Layer . Even if a guest device gets compromised, it cannot see accounting broadcasts. You can then apply firewall rules at the router to control which VLANs can reach others.
##### ###### ##### ### # # ### # # ###### ## ## ## ## ## ## ## # # # # # ## ##### #### ##### # # # # # # # #### ## # ## ## ## ## # # # # # ## ## # ###### ## ### # ### # ######
$ curl repovive.com/roadmaps/network-design/switching-and-vlans/vlan-security-benefits
░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░░██████████████████████████████████████████████████████████████████████████████████████