---
title: Homelab network segmentation
slug: homelab-network-segmentation
author: Charis Nikolaidis
year: 2025
type: Homelab
tech: [VLANs, Firewall policy, IDS/IPS, VPN]
url: https://charisnikolaidis.com/projects/#homelab-network-segmentation
---

# Homelab network segmentation

A lab network segmented considerably more carefully than a home network needs to
be. Separate VLANs for servers, admin, IoT and guests, with firewall policy
between them so the smart plug can't reach anything that matters. Grew out of
Cisco Packet Tracer coursework and two years of networking. Specific hardware and
topology stay off the internet.

**Type:** Homelab · **Year:** 2025
**Stack:** VLANs, firewall policy, IDS/IPS, VPN

## What's inside

- VLAN isolation for servers, admin, IoT and guest.
- Firewall policies controlling traffic between segments.
- IDS/IPS and traffic logging.
- Grew out of Cisco Packet Tracer coursework and two years of network experience.
- The same instinct shows up in the cloud work: private endpoints instead of
  public databases, and egress through one known address rather than whatever the
  platform hands out.

## Related

- Profile: <https://charisnikolaidis.com/llms.txt>
- All projects: <https://charisnikolaidis.com/projects/>