Why build a network in layers instead of one flat network where everything hangs off one switch or one VLAN?
Show the answer
Say this first
Layers give you smaller failure domains, predictable growth and simpler troubleshooting. A flat network is one broadcast and spanning tree domain, so one loop, storm or misbehaving NIC hurts everyone. With hierarchy and layer 3 boundaries a problem stays inside its block, routes can be summarized, and you grow by adding a block instead of redesigning.
Go deeper
What goes wrong in a flat network
- One broadcast domain. ARP, DHCP, mDNS and other broadcast or flooded traffic reach every host. Unknown unicast floods everywhere whenever a MAC entry ages out.
- One spanning tree. A loop anywhere becomes a storm everywhere. The tree grows with every switch you daisy chain.
- No natural place for policy. Without layer 3 boundaries there is nowhere to filter between groups.
- Hard to troubleshoot. Every problem could be anywhere.
What hierarchy gives you
- Failure domains. Layer 3 between blocks stops a storm or loop at the block edge.
- Scale by copying. A new building is one more distribution block built from the same template.
- Summarization. Each block gets a contiguous range advertised as one route. A flapping subnet inside the block does not cause recalculation across the network.
- Cost placement. Expensive features and fast links go where they are needed, not on every switch.
- Predictability. Deterministic paths make capacity planning and troubleshooting easier.
They will ask next
How big is too big for a single VLAN?
There is no hard limit. A common rule of thumb is a few hundred hosts, which is why a /24 per access VLAN is the usual default. The real limits are broadcast and multicast load and how far a fault can spread, not the number of addresses.
Traps
- Answering "because it is best practice". Give the reasons, failure domains and summarization first.
How did you do?Book 3.2 Switched EthernetBook 3.4 Routing