To add greater security, the control network and bearer network can be assigned to different VLANs. At some, or all, points in the route, the devices in the control network and bearer network might be the same. For example, since an IP telephone connects to a single port in an Ethernet switch, both the control and bearer signals are carried over that port connection. In this case, the IP telephone and Ethernet port must be assigned to both the control network and bearer network VLANs. Likewise, when using Processor Ethernet for gateway connections on the Messaging Server, the server must be assigned to both VLANs.
However, Ethernet switch and router, ports can be assigned to a single VLAN, thereby providing separate routes between endpoints. In this way, the VLANs are separated, thereby enhancing the security on both network segments.
Note Seperation of the LAN may not be possible for some customers.