Claude MarketplacesSubmit
affaan-m avatar

Homelab Vlan Segmentation

affaan-m/ecc

If you've ever wanted to stop your smart TV from scanning your entire home network or keep guests off your NAS, this walks you through proper VLAN segmentation with real firewall rules and switch configs. It covers UniFi, pfSense/OPNsense, and MikroTik with concrete examples like mapping SSIDs to VLANs, setting up trunk ports, and blocking RFC1918 traffic while still allowing IoT devices to hit your Pi-hole for DNS. The firewall rule ordering is especially good, it explicitly shows why the Pi-hole exception has to come before the blanket RFC1918 block. Best used when you're moving past a flat 192.168.1.0/24 network and need isolation without breaking everything.

skills.sh installs
5.4K
GitHub stars
300.3K
last updated
Aug 21, 2026
View on GitHub

Install

$ npx -y skills add affaan-m/ecc --skill homelab-vlan-segmentation --agent claude-code

Installs into .claude/skills of the current project.

Files

Homelab VLAN Segmentation

How to split a home network into isolated VLANs so IoT devices, guests, and your main PCs cannot talk to each other. The most impactful security upgrade for a home network.

All firewall rules shown here add isolation between segments — they do not remove existing protections. Apply changes in a maintenance window and verify connectivity between segments after each step before moving on.

When to Use

  • Setting up VLANs on a home network for the first time
  • Isolating IoT devices (smart bulbs, cameras, TVs) from trusted devices
  • Creating a guest Wi-Fi network that cannot reach home devices
  • Explaining how VLANs work to someone unfamiliar with the concept
  • Configuring trunk ports, access ports, and SSID-to-VLAN mapping
  • Troubleshooting inter-VLAN routing or firewall rule issues on pfSense/OPNsense/UniFi

How It Works

Without VLANs — flat network:
  All devices on 192.168.1.0/24
  Smart TV (potential malware) → can reach your NAS, PCs, everything
SKILL.md on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/affaan-m/ecc
Categories
Backend & APIs, Marketing & SEO
First seen
Jul 14, 2026

More from affaan-m/ecc

All 263

Recommended

More Backend & APIs
1grafana avatarassistant-mcpgrafana/skillsConnect AI coding agents (Claude Code, Cursor, VS Code, OpenAI Codex) to Grafana Cloud via the `mcp-grafana` Model Context Protocol server. Installs the server 5.4Kskills.sh installs
2affaan-m avatarquarkus-tddaffaan-m/eccTest-driven development for Quarkus 3.x LTS using JUnit 5, Mockito, REST Assured, Camel testing, and JaCoCo. Use when adding features, fixing bugs, or refactori5.4Kskills.sh installs
3affaan-m avataruncloudaffaan-m/eccUse when managing an Uncloud cluster — deploying services, configuring Caddy ingress, adding static proxy routes for non-cluster devices, publishing ports, scal5.3Kskills.sh installs
4forcedotcom avatarexperience-ui-bundle-metadata-generateforcedotcom/sf-skillsUse this skill when adding a front-end React UI bundle to an existing project or configuring UI bundle metadata and config files. TRIGGER when: adding or scaffo5.3Kskills.sh installs
5jeffallan avatarshopify-expertjeffallan/claude-skillsBuilds and debugs Shopify themes (.liquid files, theme.json, sections), develops custom Shopify apps (shopify.app.toml, OAuth, webhooks), and implements Storefr5.3Kskills.sh installs
6recoupable avatarrecoup-platform-email-helperrecoupable/skillsSend an email via the Recoup API the reliable way — a Node helper that serializes the body correctly and fails loudly instead of sending an empty email. Use whe5.2Kskills.sh installs