homelab-vlan-segmentation
Segmenting home networks into VLANs for IoT, guest, trusted, and server traffic using UniFi, pfSense/OPNsense, and MikroTik — including switch trunk config, firewall rules, and wireless SSID mapping.
npx skills add mturac/everything-openai-codex --skill homelab-vlan-segmentation --agent codex
Same command for any agent — swap --agent for claude-code, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Homelab VLAN Segmentation How to split a home network into isolated VLANs so IoT devices, guests, and your main PCs cannot talk to each other. The most impactful security upgrade for a home network. All firewall rules shown here add isolation between segments — they do not remove existing protections. Apply changes in a maintenance window and verify connectivity between segments after each step before moving on. ## When to Use - Setting up VLANs on a home network for the first time - Isolating IoT devices (smart bulbs, cameras, TVs) from trusted devices - Creating a guest Wi-Fi network that cannot reach home devices - Explaining how VLANs work to someone unfamiliar with the concept - Configuring trunk ports, access ports, and SSID-to-VLAN mapping - Troubleshooting inter-VLAN routing or firewall rule issues on pfSense/OPNsense/UniFi ## How It Works ``` Without VLANs — flat network: All devices on 192.168.1.0/24 Smart TV (potential malware) → can reach your NAS, PCs, everything With VLANs: VLAN 10 — Trusted 192.168.10.0/24 (PCs, phones, laptops) VLAN 20 — IoT 192.168.20.0/24 (smart TV, bulbs, cameras) VLAN 30 — Servers 192.168.30.0/24 (NAS, Pi, VMs) VLAN 40 — Guest 192.168.40.0/24
- When to Use
- How It Works
- VLAN Design Template
- Examples
- UniFi Configuration
- Create Networks in UniFi Controller
- Map SSIDs to VLANs (UniFi)
- UniFi Firewall Rules (Traffic Rules)
- pfSense / OPNsense Configuration
- Create VLANs
- DHCP for Each VLAN
- Firewall Rules (pfSense/OPNsense)
- MikroTik Configuration
- Switch Trunk vs Access Ports
What does the homelab-vlan-segmentation skill do?
Segmenting home networks into VLANs for IoT, guest, trusted, and server traffic using UniFi, pfSense/OPNsense, and MikroTik — including switch trunk config, firewall rules, and wireless SSID mapping.
How do I install it?
Run `npx skills add mturac/everything-openai-codex --skill homelab-vlan-segmentation --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From mturac/everything-openai-codex, a repository with 84 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.