Clients on the LAN can connect to the internet and authorized external access can be permitted to the LAN. Routers and switches may even allow you to specify which VLANs are used by each port.