| Use | Description | Suggested VLAN | Color name | Swatch |
|---|---|---|---|---|
| Workstations | User endpoints: desktops, laptops, docks | 100 (splits 110 / 120 / 124) |
Black | |
| Workstationsalso acceptable | Blue, black, and white are ubiquitous and used interchangeably in the field — all three mean workstation | 100 | Blue | |
| Workstationsalso acceptable | Same use as above | 100 | White | |
| Carrier / demarc / untrusted | ISP handoff, modem/ONT to firewall WAN, DMZ segments — everything before or outside the firewall | 30–39 (WAN transit) |
Red | |
| Servers & hypervisors | Server and host NICs | 240–249 | Purple | |
| Transit / uplinks | Switch-to-switch and switch-to-router trunks | tagged trunks (native VLAN 1 unused) |
Yellow | |
| VoIP | Desk phones, PBX appliances | 180 | Green | |
| Infrastructure endpoints | Wireless APs, printers, cameras, IoT devices | 173 · 150–152 · 174 · 182 | Orange | |
| Out-of-band management | iLO / iDRAC / IPMI, switch management, UPS management | 175 (via 178 jumpbox) 171 · 172 |
Gray | |
| Fiber — any role | Jacket color states the fiber type per TIA-598 and is never repurposed for role — mark role with labels and colored boots | n/a | Per fiber type |