A VLAN (Virtual Local Area Network) enables network segmentation within a switch by dividing the network into smaller logical groups, improving performance and security while still under the management of the central switch. A SAN (Storage Area Network) is focused on providing access to consolidated, block-level storage, which is not directly related to traffic management or segmentation. A VPN (Virtual Private Network) extends a private network across a public network to provide remote users secure access to their network. Subnetting could be used for network segmentation but would not provide the ease of centralized management that a VLAN offers, thus VLAN is the best solution given the criteria mentioned.