Internet Key Exchange version 2 (IKEv2) was created by Microsoft and Cisco and is used in conjunction with IPSec for encryption and authentication. Its primary use is in mobile devices.

A site-to-site VPN configuration connects two networks, while a remote access VPN provides secure access to an enterprise network, such as an intranet, for remote workers.

Trunking between switches allows VLAN members to exist in different locations and still use all VLAN-assigned resources.

VLAN-aware end-point devices can assign various packets to different VLANs based on the applications used, allowing for user authentication and authorization.

Dynamic VLAN assignment assigns VLANs based on the authenticating user’s group membership, managed by services like RADIUS and a user directory.

VPN stands for Virtual Private Network, which allows secure transmission of information over public networks.

A LAN is commonly defined as a group of devices that are in the same broadcast domain. LAN = Local Area Network

Separating devices into different broadcast domains within a LAN can help in limiting the number of broadcasts and in managing the network more effectively.

Using separate switches for different broadcast domains can lead to duplicating effort and cost in managing the networks. Instead use a Vlan to separate them.