Separating Visitor and Staff Devices is a practical networking project for learners who know basic terminal use, interfaces, MAC addresses and IPv4 subnets. Prepare Maple Hall's wired network so visitors can read their programme and staff can use desk instructions while their broadcasts stay in separate local area network (LAN) groups.
Two Guided Labs teach access-port membership, Port VLAN ID (PVID), untagged endpoint delivery, and tagged forwarding across two switches. One independent Challenge combines those operations under a new VLAN plan to move a ticket desk into the staff group. Every unit starts with its own prepared network.
What You Will Learn
- Match device purpose to an access port's VLAN membership and PVID.
- Deliver untagged frames to ordinary endpoints while preserving working reference devices.
- Carry both groups over a shared tagged uplink with matching memberships at both ends.
- Correct a reassigned device's port while keeping its already prepared IP address.
- Combine complete business responses with actual Address Resolution Protocol (ARP) and 802.1Q observations to establish useful service and broadcast boundaries.
Who This Course Is For
This course is for learners beginning hands-on switched-network work after basic networking concepts.
Prerequisites: Basic terminal input, paths and tab switching; recognizing devices, interfaces, MAC and IP addresses, and same-subnet communication. No VLAN commands, vendor switch CLI, firewall or routing-protocol experience is required.
Learning environment: Each unit provides browser-accessible Linux switch consoles, client observation tools and a live service page. Isolated software switches and endpoints share one Linux kernel. No local hardware or software installation is needed. Runtime labels and output remain English; course and lab documents support nine languages.
Frequently Asked Questions
Is this about Wi-Fi or routing between VLANs?
No. The project configures temporary wired LAN groups, access ports and tagged uplinks. It does not configure Wi-Fi, inter-VLAN routing or complete adversarial security.
Will I have to change endpoint addresses?
No. Every endpoint already has its intended group's address. Your work changes the published switch-port relationships while preserving services and other devices.
How does the Challenge differ from the Guided Labs?
It changes the VLAN plan and asks you to combine the already practiced access-port and uplink operations independently. Completion is based on real forwarding, complete services and broadcast boundaries. Durations are author estimates including reading and ordinary mistakes, without beginner pilot timing.


