They are both different.
The internal VIP is primarily to allow end users to sign-in (especially for one arm config and for deployments that have end users on both sides i.e the external DMZ and internal)
The VLAN and all virtual ports under VLAN are mainly to allow outgoing traffic (user traffic to backend resources) to be sourced via a specific VLAN interface.
