I like the way they do VLANs. It's easy enough that it can be managed by people that don't understand all the low level terminology.