Security practices applied to Virtual Local Area Networks to prevent unauthorized access between network segments and protect against VLAN hopping and other layer-2 attacks.