<![CDATA[Network security is a critical aspect in academic environments where multiple user groups with different access privileges coexist within the same infrastructure. Inadequate network segmentation between lecturers and students can increase the risk of unauthorized access, data leakage, and disruption of academic services. This study aims to implement Virtual Local Area Network (VLAN) as a mechanism to isolate academic networks between lecturers and students in order to enhance network security. The research adopts an experimental approach using Cisco Packet Tracer to design and simulate VLAN-based network segmentation. VLAN 10 is assigned to the student network, while VLAN 20 is assigned to the lecturer network, each configured with distinct IP address ranges. Connectivity testing is conducted using ICMP ping to evaluate communication within the same VLAN and across different VLANs. The results show that communication within the same VLAN operates successfully, whereas communication between different VLANs is blocked, indicating effective network isolation. Furthermore, the implementation of VLAN supports the principles of Confidentiality, Integrity, and Availability (CIA Triad) by protecting sensitive academic data, preventing unauthorized data manipulation, and maintaining network service availability for authorized users. These findings demonstrate that VLAN-based segmentation is an effective and scalable solution for securing academic networks in higher education institutions.]]>
