Homelab Vlan Segmentation
If you've ever wanted to stop your smart TV from scanning your entire home network or keep guests off your NAS, this walks you through segmenting a homelab into VLANs with actual firewall rules and trunk configs. It covers UniFi, pfSense, OPNsense, and MikroTik with real examples like mapping SSIDs to VLANs and setting up access versus trunk ports. The firewall rules are explicit about blocking IoT from trusted segments while allowing exceptions for things like Pi-hole DNS. It's dense but practical, assuming you have a managed switch and router that supports VLANs. Best used when setting this up for the first time or troubleshooting why your Ring doorbell can suddenly reach your file server.
- skills.sh installs
- 1.6K
- GitHub stars
- 229.1K
- last updated
- Jul 14, 2026
Install
$ npx -y skills add affaan-m/everything-claude-code --skill homelab-vlan-segmentation --agent claude-codeInstalls into .claude/skills of the current project.
Files
Homelab VLAN Segmentation
How to split a home network into isolated VLANs so IoT devices, guests, and your main PCs cannot talk to each other. The most impactful security upgrade for a home network.
All firewall rules shown here add isolation between segments — they do not remove existing protections. Apply changes in a maintenance window and verify connectivity between segments after each step before moving on.
When to Use
- Setting up VLANs on a home network for the first time
- Isolating IoT devices (smart bulbs, cameras, TVs) from trusted devices
- Creating a guest Wi-Fi network that cannot reach home devices
- Explaining how VLANs work to someone unfamiliar with the concept
- Configuring trunk ports, access ports, and SSID-to-VLAN mapping
- Troubleshooting inter-VLAN routing or firewall rule issues on pfSense/OPNsense/UniFi
How It Works
Without VLANs — flat network:
All devices on 192.168.1.0/24
Smart TV (potential malware) → can reach your NAS, PCs, everything
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/affaan-m/everything-claude-code
- First seen
- Jun 3, 2026
More from affaan-m/everything-claude-code
All 256- Homelab Wireguard Vpn1.6K
- Mle Workflow1.6K
- Motion Foundations1.6K
- Motion Patterns1.6K
- Quarkus Patterns1.6K
- Quarkus Security1.6K
- Quarkus Tdd1.6K
- Quarkus Verification1.6K
- Skill Scout1.6K
- Uspto Database1.6K
- Prisma Patterns1.4K
- Blender Motion State Inspection1.3K
- Recsys Pipeline Architect1.3K
- Uncloud1.2K
- React Testing910
- React Performance903
- React Patterns893
- Frontend A11y870
- Marketing Campaign827
- Benchmark Optimization Loop826
- Latency Critical Systems818
- Parallel Execution Optimizer813
- Social Publisher806
- Data Throughput Accelerator805
Recommended
cavemanjuliusbrussee/cavemanUltra-compressed communication mode. Cuts output tokens 65% (measured) by speaking like caveman while keeping full technical accuracy. Supports intensity levels618.3Kskills.sh installs
improveshadcn/improveSurvey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on s40Kskills.sh installs
systematic-debuggingobra/superpowersUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes326.7Kskills.sh installs
karpathy-guidelinesforrestchang/andrej-karpathy-skillsBehavioral guidelines to reduce common LLM coding mistakes through explicit assumptions, simplicity, and verifiable success criteria.17.9Kskills.sh installs
find-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express int4.3Mskills.sh installs