Do I need to segment the network using vlan?

Question

network hardware

Good day!
Available: intranet segment, iron gateway routes traffic to other intranet segments, 300 machines, 50 servers, 20 ip phones, 20 ip cameras, 30 network printers, switches (managed), server shares (mail, file sharing, web server, etc.). All this business in one address space.
Question: does it make sense to divide the network into vlan? For example, divide by equipment, i.e. servers in one vlan, machines in another, phones in a third, etc.
If so, how will the machines see server or camera resources (+ resources of another intranet segment) if they are in different vlans?

Answer 1

Need. Set up intervlan routing on switches and go ahead. Drive all this through acl. If vlans are terminated on the router, then configure routing and firewall rules.

Answer 2

of course it has, at least for traffic control and traffic separation, as well as in the implementation of restrictions, if any.
At least separate the server network from the user network into different VLANs. Separately remove accounting or other departments, information from which should not be publicly available.
For IP cameras, I would also single out a separate vlan, since a lot of traffic is generated which, in general, has nothing to do on a common subnet.
In order for the resources of one vlan to be seen in another, configure routing (the first link in Google: https://easy-network.ru/27-urok-17.html)

Answer 3

Of course it has. Servers in one vlan, telephony in another, cameras in one more. If there are departments in the network that, by the nature of their activities, generate ridiculous traffic (developers, designers of electronic devices, programmers) - they, so as not to embarrass simple office hamsters, go to another one.