Example Concept: VLANs operate at Layer 2 of the OSI model and allow network administrators to create separate broadcast domains on a switch. By assigning ports to different VLANs, traffic is isolated between these groups, which can only communicate with each other through a Layer 3 device like a router or a Layer 3 switch. This isolation enhances security by preventing devices in one VLAN from directly accessing devices in another VLAN, unless explicitly allowed through routing or firewall rules.