Also known as: network separation, guest network
A VLAN splits one physical network into several separated networks. Guests, staff, tills, cameras and TV then share the same cabling but can't reach one another.
That's both a security and a performance measure: an infected guest device can't reach your booking system, and TV traffic doesn't disrupt payment terminals.
Per VLAN you can also set bandwidth, filtering and access rules separately.
How we apply this
By default we separate guest wifi, the business network, TV and technical systems into separate VLANs with their own bandwidth agreements.