homelab-vlan-segmentation

Topics in the source

• Homelab VLAN Segmentation
• When to Use
• How It Works
• VLAN Design Template
• Examples
• UniFi Configuration
• Create Networks in UniFi Controller
• Map SSIDs to VLANs (UniFi)

How to split a home network into isolated VLANs so IoT devices, guests, and your main PCs cannot talk to each other. The most impactful security upgrade for a home network. All firewall rules shown here add isolation between segments — they do not remove existing protections. Apply changes in a maintenance window and verify connectivity between segments after each step before moving on. Setting up VLANs on a home network for the first time Isolating IoT devices (smart bulbs, cameras, TVs) from trusted devices Creating a guest Wi-Fi network that cannot reach home devices Explaining how VLANs work to someone unfamiliar with the concept Configuring trunk ports, access ports, and SSID-to-VLAN mapping Troubleshooting inter-VLAN routing or firewall rule issues on pfSense/OPNsense/UniFi Typical homelab with UniFi AP and managed switch: Start with 4 VLANs: Trusted, IoT, Servers, Guest — add more as needed Put Pi-hole in the Servers VLAN (192.168.30.x) Add a firewall rule allowing DNS (port 53) from all VLANs to the Pi-hole IP — before any RFC1918 block rule Test isolation after every rule change: from the IoT VLAN, try to ping a trusted device — it should fail Use a management VLAN for swi

This is an excerpt. Refer to the complete source and its current requirements.