VLAN. When does it make sense?

Question

Computer networks

Good afternoon. Here I want to clarify one question for myself ... From how many hosts in the office network does it make sense to fence VLAN? In all sorts of training videos, literally departments of 3-5 people are scattered around the wilans. But here's a real example - my job (I'm not a sysadmin). There are about 200 hosts (PCs + network printers) and all this works in one broadcast domain (conditionally 192.168.1.0/24). There are a couple of access switches on each floor, and in the server room, all this is connected to a core switch. And it works! In one wealan (vlan 1), in one broadcast domain.

Answer 1

Well, here's your example ..
answer yourself the questions
should users be able to access the control interfaces of switches?
Should managers' computers have direct access to accounting and management computers?
should there be uncontrolled access to servers (ports and protocols)
what will happen if a thread sets itself a static ip 192.168.1.1 or brings a thread to a home router with dhcp enabled?
Can you handle viruses exploiting smb vulnerabilities for example?

Answer 2

Vlan is needed when you need to:
Divide the switch into logical networks that are not connected (unexpectedly yes?) to each other.
When you need to transmit for some reason several networks through one cable.
You can build a network that is logically unrelated to physics.
For example, you have servers, switches, etc., which have management ports, and here it’s better to remove them into a separate network to which anyone will have access.
This is just a piece that came to mind after a night of work.

Answer 3

This makes sense if the network is divided into subnets, but if one organization has enough addresses, then there is no need to invent a bicycle. I have 188 addresses being distributed, the vlan is only for ip phones, and then for convenience, otherwise the tubes are wedged, so at least you know who to kick :)

Answer 4

I have a service point where there is only one computer for staff, but I made several VLANs - in one this computer and a wi-fi network for employees, in the other - CCTV cameras, in the third - a video broadcast network for TVs, etc.
Separation of networks does not depend on the number of computers.