{"id":1207,"date":"2026-10-15T09:30:00","date_gmt":"2026-10-14T22:30:00","guid":{"rendered":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/"},"modified":"2026-11-03T20:55:57","modified_gmt":"2026-11-03T09:55:57","slug":"home-network-vlans-setup","status":"publish","type":"post","link":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/","title":{"rendered":"How Do You Set Up VLANs at Home? A Step-by-Step Example"},"content":{"rendered":"\n<p class=\"has-pale-cyan-blue-background-color has-background wp-block-paragraph\">A worked, step-by-step example of splitting a busy household network into five VLANs: trusted devices, a work laptop, smart-home gear, cameras and guests. It includes the subnet plan, the firewall rules between them and a check after every step so you know it worked.<\/p>\n\n\n\n<div class=\"wp-block-group has-background\" style=\"background-color:#f4f6f8;padding-top:28px;padding-right:32px;padding-bottom:28px;padding-left:32px\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-container-core-group-is-layout-40de7cf3 wp-block-group-is-layout-constrained\">\n\n<p class=\"wp-block-paragraph\"><strong>Networking guides \u00b7 VLANs<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><a href=\"https:\/\/catharsis.net.au\/blog\/what-is-a-vlan\/\" target=\"_blank\" rel=\"noreferrer noopener\">What Is a VLAN? VLANs Explained in Plain English<\/a><\/li>\n\n\n<li><strong>How Do You Set Up VLANs at Home? A Step-by-Step Example<\/strong> (you are here)<\/li>\n\n\n<li><a href=\"https:\/\/catharsis.net.au\/blog\/small-business-vlans-network-segmentation\/\" target=\"_blank\" rel=\"noreferrer noopener\">How Should a Small Business Use VLANs? A 25-Person Office Example<\/a><\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-size:16px\">Planning the addresses too? Use our <a href=\"https:\/\/catharsis.net.au\/blog\/subnet-mask-reference-table\/#calculator\" target=\"_blank\" rel=\"noreferrer noopener\">free subnet calculator<\/a>.<\/p>\n\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-group has-background\" style=\"background-color:#f4f6f8;padding-top:28px;padding-right:32px;padding-bottom:28px;padding-left:32px\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-container-core-group-is-layout-40de7cf3 wp-block-group-is-layout-constrained\">\n\n<h3 class=\"wp-block-heading\">TL;DR<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>You set up VLANs at home by creating a few separate networks on a VLAN-capable router, mapping each Wi-Fi network (SSID) and switch port to one of them, and writing firewall rules that decide what may talk to what.<\/li>\n\n\n<li>A sensible household plan has five VLANs: Trusted, Work, IoT\/smart home, Cameras and Guest, each with its own subnet.<\/li>\n\n\n<li>The VLANs only separate traffic. The firewall rules between them are what actually protect you.<\/li>\n\n\n<li>Casting to the TV from your phone usually breaks at first. An mDNS reflector between Trusted and IoT, plus a narrow allow rule, fixes it.<\/li>\n\n\n<li>Keep a wired rescue port on your trusted network the whole time, so a wrong rule never locks you out.<\/li>\n\n<\/ul>\n\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-group has-background\" style=\"background-color:#f4f6f8;padding-top:28px;padding-right:32px;padding-bottom:28px;padding-left:32px\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-container-core-group-is-layout-40de7cf3 wp-block-group-is-layout-constrained\">\n\n<h3 class=\"wp-block-heading\">In this post<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><a href=\"#who-lives-on-this-network\">Who lives on this network?<\/a><\/li>\n\n\n<li><a href=\"#what-equipment-do-you-need\">What equipment do you need?<\/a><\/li>\n\n\n<li><a href=\"#what-does-the-vlan-plan-look-like\">What does the VLAN plan look like?<\/a><\/li>\n\n\n<li><a href=\"#what-firewall-rules-go-between-the-vlans\">What firewall rules go between the VLANs?<\/a><\/li>\n\n\n<li><a href=\"#how-do-you-set-it-up-step-by-step\">How do you set it up, step by step?<\/a><\/li>\n\n\n<li><a href=\"#how-do-you-test-that-it-actually-works\">How do you test that it actually works?<\/a><\/li>\n\n\n<li><a href=\"#what-are-the-most-common-mistakes\">What are the most common mistakes?<\/a><\/li>\n\n\n<li><a href=\"#when-is-this-overkill\">When is this overkill?<\/a><\/li>\n\n\n<li><a href=\"#key-takeaways\">Key takeaways<\/a><\/li>\n\n<\/ul>\n\n<\/div><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">New to VLANs? Start with <a href=\"https:\/\/catharsis.net.au\/blog\/what-is-a-vlan\/\" target=\"_blank\" rel=\"noreferrer noopener\">What is a VLAN?<\/a>, then come back for the hands-on version.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"who-lives-on-this-network\">Who lives on this network?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Here&#8217;s a busy household:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Two adults and two teenagers with phones, laptops and a tablet.<\/li>\n\n\n<li>One adult works from home on a laptop issued by their employer, connecting to work through a VPN.<\/li>\n\n\n<li>A smart TV, two smart speakers and a streaming stick in the lounge and kitchen.<\/li>\n\n\n<li>Smart-home gear: a dozen smart plugs and bulbs, a robot vacuum, a video doorbell and a smart thermostat.<\/li>\n\n\n<li>Two security cameras covering the driveway and back door, recording to a small network video recorder (NVR) in the study.<\/li>\n\n\n<li>A games console in the teenagers&#8217; room.<\/li>\n\n\n<li>Guests: grandparents, friends and the occasional tradie who asks for the Wi-Fi password.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Today it all sits on one flat network, so a cheap smart plug with years-old firmware can see the work laptop, the family laptops and the camera recorder. If that plug is compromised, it&#8217;s a foothold inside the house. VLANs put each group in its own room, with a locked door between them.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-equipment-do-you-need\">What equipment do you need?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">You need three things that support VLANs, but not enterprise gear:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>A router or firewall that supports VLANs<\/strong>, with a DHCP server on each one and firewall rules between them. Many consumer mesh kits can&#8217;t do this. Look for &quot;802.1Q&quot; and &quot;inter-VLAN firewall rules&quot; in the specifications.<\/li>\n\n\n<li><strong>A managed switch with IEEE 802.1Q support<\/strong>, if you have more wired devices than router ports. An unmanaged switch can&#8217;t assign ports to VLANs, so it only suits a spot where every device on it belongs to the same VLAN.<\/li>\n\n\n<li><strong>Wi-Fi access points that can map an SSID to a VLAN.<\/strong> Each extra SSID costs a little airtime, so create only what you need.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Quick reminder: an <strong>access port<\/strong> carries one untagged VLAN to a device; a <strong>trunk port<\/strong> carries several tagged VLANs between network gear.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-does-the-vlan-plan-look-like\">What does the VLAN plan look like?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We&#8217;ve avoided 192.168.0.0\/24 and 192.168.1.0\/24, the defaults on most home routers, and stayed out of 10.x.x.x, which many workplaces use, so nothing clashes with the work laptop&#8217;s VPN. The VLAN number is the third octet. Our office example uses different IDs because it has different groups; VLAN numbers only mean something inside your own network.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\">\n<thead>\n<tr>\n<th>VLAN ID<\/th>\n<th>Name<\/th>\n<th>Subnet<\/th>\n<th>Gateway<\/th>\n<th>Who goes here<\/th>\n<th>Wi-Fi network<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>10<\/td>\n<td>Trusted<\/td>\n<td>192.168.10.0\/24<\/td>\n<td>192.168.10.1<\/td>\n<td>Family phones, laptops, tablet; network management<\/td>\n<td>WPA3-Personal<\/td>\n<\/tr>\n<tr>\n<td>20<\/td>\n<td>Work<\/td>\n<td>192.168.20.0\/24<\/td>\n<td>192.168.20.1<\/td>\n<td>The employer&#8217;s laptop (and a work phone if there is one)<\/td>\n<td>WPA3-Personal<\/td>\n<\/tr>\n<tr>\n<td>30<\/td>\n<td>IoT<\/td>\n<td>192.168.30.0\/24<\/td>\n<td>192.168.30.1<\/td>\n<td>Smart TV, speakers, streaming stick, plugs, bulbs, vacuum, thermostat, doorbell, games console<\/td>\n<td>WPA2-Personal, 2.4 GHz and 5 GHz<\/td>\n<\/tr>\n<tr>\n<td>40<\/td>\n<td>Cameras<\/td>\n<td>192.168.40.0\/24<\/td>\n<td>192.168.40.1<\/td>\n<td>Two cameras and the NVR (wired)<\/td>\n<td>None (wired only)<\/td>\n<\/tr>\n<tr>\n<td>50<\/td>\n<td>Guest<\/td>\n<td>192.168.50.0\/24<\/td>\n<td>192.168.50.1<\/td>\n<td>Visitors&#8217; phones and laptops<\/td>\n<td>WPA2\/WPA3 with client isolation<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">A \/24 gives 254 usable addresses, far more than needed, but it keeps the maths simple. To size subnets differently, use our <a href=\"https:\/\/catharsis.net.au\/blog\/subnet-mask-reference-table\/#calculator\" target=\"_blank\" rel=\"noreferrer noopener\">subnet calculator<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Network management stays on Trusted, with admin access allowed only from there; an office should give it a separate VLAN.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On the Wi-Fi column: use <strong>WPA3<\/strong> where you can, because it resists offline password-guessing far better than WPA2. The exception is <strong>IoT<\/strong>: many smart plugs, bulbs and older cameras only speak WPA2 on 2.4 GHz, and some older devices won&#8217;t join a WPA2\/WPA3 &quot;transition mode&quot; network. Plain WPA2 with a long random password avoids failed pairing, and the VLAN and firewall rules contain the weaker link.<\/p>\n\n\n\n<div class=\"wp-block-group has-pale-cyan-blue-background-color has-background\" style=\"padding-top:28px;padding-right:32px;padding-bottom:28px;padding-left:32px;margin-top:32px;margin-bottom:32px\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-container-core-group-is-layout-40de7cf3 wp-block-group-is-layout-constrained\">\n\n<p class=\"wp-block-paragraph\"><strong>Want VLANs set up properly the first time?<\/strong> We design, build and look after secure networks for Sydney businesses: VLANs and segmentation, firewall rules, Wi-Fi and remote access, documented so the next person understands it.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/catharsis.net.au\/network-services\/?utm_source=blog&amp;utm_medium=article&amp;utm_campaign=vlan-guides&amp;utm_content=home-network-vlans-setup-network\" target=\"_blank\" rel=\"noreferrer noopener\">Explore network services<\/a><\/div>\n\n<\/div>\n\n<\/div><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-firewall-rules-go-between-the-vlans\">What firewall rules go between the VLANs?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">VLANs stop devices hearing each other directly; the router decides what crosses. <strong>Deny everything between VLANs by default, then allow only what has a reason.<\/strong> Rules are read top to bottom and the first match wins, so order matters.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\">\n<thead>\n<tr>\n<th>#<\/th>\n<th>From<\/th>\n<th>To<\/th>\n<th>Action<\/th>\n<th>Why<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>1<\/td>\n<td>Any VLAN<\/td>\n<td>Any VLAN<\/td>\n<td>Allow established\/related<\/td>\n<td>Lets replies return for allowed conversations<\/td>\n<\/tr>\n<tr>\n<td>2<\/td>\n<td>All VLANs<\/td>\n<td>The router, DHCP and DNS only<\/td>\n<td>Allow<\/td>\n<td>Every device needs an address and name lookups<\/td>\n<\/tr>\n<tr>\n<td>3<\/td>\n<td>Trusted<\/td>\n<td>Router management (web and SSH admin)<\/td>\n<td>Allow<\/td>\n<td>Only Trusted may manage the network<\/td>\n<\/tr>\n<tr>\n<td>4<\/td>\n<td>Trusted<\/td>\n<td>IoT<\/td>\n<td>Allow<\/td>\n<td>Control the TV, speakers and smart-home devices from your phone<\/td>\n<\/tr>\n<tr>\n<td>5<\/td>\n<td>Trusted<\/td>\n<td>Cameras (NVR only)<\/td>\n<td>Allow<\/td>\n<td>View feeds and recordings<\/td>\n<\/tr>\n<tr>\n<td>6<\/td>\n<td>IoT (TV and speakers only)<\/td>\n<td>Trusted<\/td>\n<td>Allow specific ports, only if casting needs it<\/td>\n<td>Some casting and speaker systems connect back to the phone (see Step 8)<\/td>\n<\/tr>\n<tr>\n<td>7<\/td>\n<td>Cameras<\/td>\n<td>The router, time sync (NTP) only<\/td>\n<td>Allow<\/td>\n<td>Footage needs correct timestamps<\/td>\n<\/tr>\n<tr>\n<td>8<\/td>\n<td>Cameras<\/td>\n<td>Internet<\/td>\n<td>Deny<\/td>\n<td>Footage stays in the house<\/td>\n<\/tr>\n<tr>\n<td>9<\/td>\n<td>Any VLAN<\/td>\n<td>Any private range (192.168.0.0\/16, 10.0.0.0\/8, 172.16.0.0\/12)<\/td>\n<td>Deny<\/td>\n<td>Blocks every inter-VLAN path not allowed above<\/td>\n<\/tr>\n<tr>\n<td>10<\/td>\n<td>Trusted, Work, IoT, Guest<\/td>\n<td>Internet<\/td>\n<td>Allow<\/td>\n<td>Normal browsing, streaming, updates and the work VPN<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Three things worth noticing:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><strong>Work and Trusted can&#8217;t see each other.<\/strong> The work laptop gets internet and its VPN, nothing else. That protects the family from the work laptop and the employer from whatever the teenagers download. If it needs to print, add one narrow rule to the printer&#8217;s address.<\/li>\n\n\n<li><strong>Cameras have no internet.<\/strong> To view them away from home, connect over a VPN on your router, land on Trusted and view the NVR. That&#8217;s safer than opening a port. Some cameras are cloud-only; for those, allow only the destinations the manufacturer documents, or put them on IoT.<\/li>\n\n\n<li><strong>Guest is internet only.<\/strong> Rule 9 blocks the private ranges, and <strong>client isolation<\/strong> on the guest SSID stops guests seeing each other.<\/li>\n\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-do-you-set-it-up-step-by-step\">How do you set it up, step by step?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Do this on a quiet evening, not before a work deadline; re-pairing smart devices takes most of the time.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 1: Inventory every device and assign it a VLAN<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Write down every device in your router&#8217;s client list, how it connects and its VLAN. Rename anything called &quot;ESP_3A9F21&quot; once you&#8217;ve worked out what it is (unplugging things one at a time works).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Check:<\/strong> every device in the client list has a VLAN next to it, and you know which switch port each wired device uses.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 2: Back up the configuration and create a rescue path<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Export the current router, switch and access point configurations. Then pick one physical router port, label it &quot;RESCUE&quot;, and make sure it stays on the network you manage from. Plug in a laptop and leave it there until you finish.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Check:<\/strong> from the laptop on the rescue port you can log in to the router, the switch and the access point controller.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 3: Create the VLANs and their interfaces on the router<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">For each VLAN in the plan, create a VLAN interface with its ID, give it the gateway address (for example 192.168.30.1\/24 for IoT) and turn on a DHCP server with a pool such as .100 to .200. Hand out the router as the DNS server on each VLAN. Leave a block below .100 for fixed addresses such as the NVR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Check:<\/strong> the router shows five VLAN interfaces, each with the right gateway address and an active DHCP pool.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 4: Set up the switch trunks<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">On the managed switch:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Make the <strong>uplink to the router<\/strong> a trunk carrying VLANs 10 to 50 tagged.<\/li>\n\n\n<li>Make each <strong>access point port<\/strong> a trunk carrying VLANs 10, 20, 30 and 50 (the cameras are wired, so no VLAN 40). If your access points need their own management untagged, that native VLAN should end up as 10, never IoT or Guest.<\/li>\n\n\n<li><strong>Disable unused ports<\/strong>, or put them in an unused VLAN with no DHCP.<\/li>\n\n\n<li>Leave the ports your devices use alone for now; they move in Step 7.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Check:<\/strong> set a spare port to access VLAN 20, plug in a laptop and confirm it gets a 192.168.20.x address. Change the port to VLAN 40 and confirm 192.168.40.x, then disable it again.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 5: Create the new Wi-Fi networks<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Create three SSIDs: Trusted (VLAN 10), Work (20) and Guest (50), with the security modes from the plan and client isolation on Guest. Don&#8217;t create an IoT SSID yet; in Step 7 your old network becomes it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Check:<\/strong> join each SSID with a phone and confirm the address it receives: 192.168.10.x, 192.168.20.x and 192.168.50.x respectively.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 6: Add the firewall rules<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Enter the rules from the table in that order. Many routers add the established\/related rule automatically; check it&#8217;s at the top. If your router can&#8217;t act as a time server for rule 7, point the cameras at the NVR for time instead.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Check:<\/strong> from a phone on Guest, try to open the router&#8217;s admin page and ping 192.168.10.1. Both should fail, while websites load normally.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 7: Move the devices across, one group at a time<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>Cameras and NVR:<\/strong> switch their ports to VLAN 40 and give the NVR a fixed address (say 192.168.40.10) so rule 5 can point at it.<\/li>\n\n\n<li><strong>Work laptop:<\/strong> switch its desk port to VLAN 20, or join it to the Work SSID.<\/li>\n\n\n<li><strong>Family devices:<\/strong> join Trusted, then &quot;forget&quot; the old network on each one so it doesn&#8217;t drift back.<\/li>\n\n\n<li><strong>IoT last.<\/strong> Map your old SSID, keeping its name, password and security mode, to VLAN 30, turn off band steering on it, and switch the TV and console ports to VLAN 30. Most smart devices reconnect by themselves. If the old password was short or widely shared, set a long new one and accept some re-pairing. Re-pair stragglers with your phone temporarily on IoT; many setup apps need to share the device&#8217;s network.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">For the console, leave UPnP off if you can. If games complain about the NAT type, add the port forwards the console maker publishes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Check:<\/strong> every device shows as online in its app, and the router&#8217;s client list shows each one in the VLAN your Step 1 inventory says it should be in.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 8: Get casting and speaker control working again<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Phones find TVs and speakers using <strong>mDNS<\/strong> (multicast DNS, the &quot;find devices nearby&quot; protocol), and some devices also use <strong>SSDP<\/strong>. Both are multicast and stay inside one VLAN, so your phone on Trusted can no longer see the TV on IoT.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Turn on the router&#8217;s mDNS reflector (also called an mDNS repeater or proxy) only between Trusted and IoT. If your casting device also uses SSDP, look for an SSDP or UPnP discovery relay option. Discovery is only half of it; the stream itself is ordinary traffic, which rule 4 already allows.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the TV appears but playback fails, the device is probably connecting back to the phone. Add rule 6 for those device addresses and the ports the manufacturer documents, not all of IoT.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Check:<\/strong> from a phone on Trusted, cast a video to the TV and play music to both speakers. Then move the phone to Guest and confirm the TV and speakers are invisible.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Step 9: Tidy up and lock it down<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Change any default passwords on the router, switch, access points, cameras and NVR, and update their firmware.<\/li>\n\n\n<li>Move the rescue port, and any untagged access point management, to VLAN 10 and confirm you can still log in from it. Then empty the old default network (usually VLAN 1): no ports, no SSID. If your router won&#8217;t let you delete it, leaving it empty is enough.<\/li>\n\n\n<li>Save a fresh configuration backup and your plan table. Unplug the rescue laptop only after the tests below pass.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Check:<\/strong> you can log in to the router, switch and access points from a Trusted phone, and not from IoT or Guest.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-do-you-test-that-it-actually-works\">How do you test that it actually works?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Try to break what you just built, using a laptop so you can ping and open web pages.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>From Guest:<\/strong> websites load; 192.168.10.1, 192.168.30.1 and the NVR&#8217;s address don&#8217;t respond; a ping to a second guest phone&#8217;s address fails.<\/li>\n\n\n<li><strong>From IoT<\/strong> (join the IoT SSID briefly): internet works; you can&#8217;t reach anything on 192.168.10.x or 192.168.40.x, and the router admin page doesn&#8217;t load.<\/li>\n\n\n<li><strong>From Work:<\/strong> the employer VPN connects; you can&#8217;t reach the family laptops, the TV or the NVR.<\/li>\n\n\n<li><strong>On the NVR&#8217;s status page:<\/strong> no internet connection, but the correct time.<\/li>\n\n\n<li><strong>From Trusted:<\/strong> you can cast to the TV, control the smart plugs, view the cameras and reach the admin pages.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">If a test you expected to fail succeeds, look for an allow rule sitting above the deny rule that should have caught it.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-are-the-most-common-mistakes\">What are the most common mistakes?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Locking yourself out.<\/strong> A deny rule in the wrong place, or moving management, can cut you off mid-change. That&#8217;s what the rescue port is for. Never change the VLAN of the port or SSID you&#8217;re connected through.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Fixing casting by opening everything.<\/strong> It&#8217;s almost always discovery or a missing return path (Step 8). Allowing all IoT traffic into Trusted undoes most of the point.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A VLAN with no DHCP.<\/strong> Devices get a 169.254.x.x address and show &quot;no internet&quot;. Check the VLAN&#8217;s DHCP server is running.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Forgetting the VLAN on a trunk.<\/strong> Add VLAN 50 on the router but not on the switch uplink and access point ports, and guests connect but get nothing. Every VLAN must be tagged on every link between the router and the device.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Leaving router admin open to every VLAN.<\/strong> The router has an address in every VLAN, so its admin page is reachable from IoT and Guest unless your rules block it. Some routers handle traffic to the router itself in a separate &quot;input&quot; or &quot;to router&quot; rule set, so check there too.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Skipping the camera internet block.<\/strong> Cameras and video recorders with default passwords have been recruited into botnets such as Mirai, which scans the internet for them automatically. Cutting their internet access is one of the most worthwhile rules here.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"when-is-this-overkill\">When is this overkill?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For a couple with two phones, two laptops and a TV, a well-configured router and its built-in guest network cover most of the risk. VLANs earn their keep when you have:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>A work laptop or a home business on the same connection as the family.<\/li>\n\n\n<li>More than a handful of smart-home devices or any cameras.<\/li>\n\n\n<li>Teenagers, frequent guests or both.<\/li>\n\n\n<li>An interest in knowing exactly what&#8217;s on your network.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Our example household ticks all four. If you tick only one, the router&#8217;s guest network, with smart devices on it too, may be enough for now.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Running a small business from home or an office? The same thinking scales up to staff, servers, phones and CCTV: see <a href=\"https:\/\/catharsis.net.au\/blog\/small-business-vlans-network-segmentation\/\" target=\"_blank\" rel=\"noreferrer noopener\">How should a small business use VLANs?<\/a><\/p>\n\n\n\n<div class=\"wp-block-group has-pale-cyan-blue-background-color has-background\" style=\"padding-top:28px;padding-right:32px;padding-bottom:28px;padding-left:32px;margin-top:32px;margin-bottom:32px\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-container-core-group-is-layout-40de7cf3 wp-block-group-is-layout-constrained\">\n\n<p class=\"wp-block-paragraph\"><strong>Not sure how exposed your network is?<\/strong> Ask for a free security health check. We look at your setup and tell you, in plain English, what to fix first. Complimentary, at our discretion.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/catharsis.net.au\/contact-us\/?type=contact&amp;service=security-health-check&amp;utm_source=blog&amp;utm_medium=article&amp;utm_campaign=vlan-guides&amp;utm_content=home-network-vlans-setup-health-check\" target=\"_blank\" rel=\"noreferrer noopener\">Book a free health check<\/a><\/div>\n\n<\/div>\n\n<\/div><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"key-takeaways\">Key takeaways<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Five VLANs (Trusted, Work, IoT, Cameras, Guest) cover a typical busy household without becoming hard to manage.<\/li>\n\n\n<li>Default-deny firewall rules between VLANs do the protecting; the VLANs alone only separate traffic.<\/li>\n\n\n<li>Fix casting with an mDNS reflector between Trusted and IoT only, plus narrow return rules where a device needs them.<\/li>\n\n\n<li>Block the cameras from the internet and block router admin from every VLAN except Trusted.<\/li>\n\n\n<li>Keep a wired rescue port on your management network until every test passes.<\/li>\n\n<\/ul>\n\n\n\n<div class=\"wp-block-group has-light-green-cyan-background-color has-background\" style=\"padding-top:28px;padding-right:32px;padding-bottom:28px;padding-left:32px;margin-top:40px;margin-bottom:32px\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-container-core-group-is-layout-40de7cf3 wp-block-group-is-layout-constrained\">\n\n<h2 class=\"wp-block-heading\">Need help with your network?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Catharsis Cyber Security is a Sydney cyber security company. We design and secure business networks, test them the way an attacker would, and can look after them as part of managed IT.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/catharsis.net.au\/contact-us\/?type=contact&amp;service=network-services&amp;utm_source=blog&amp;utm_medium=article&amp;utm_campaign=vlan-guides&amp;utm_content=home-network-vlans-setup-contact\" target=\"_blank\" rel=\"noreferrer noopener\">Talk to us about your network<\/a><\/div>\n\n\n<div class=\"wp-block-button is-style-outline is-style-outline--1\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/catharsis.net.au\/network-services\/?utm_source=blog&amp;utm_medium=article&amp;utm_campaign=vlan-guides&amp;utm_content=home-network-vlans-setup-end-network\" target=\"_blank\" rel=\"noreferrer noopener\">Network services<\/a><\/div>\n\n\n<div class=\"wp-block-button is-style-outline is-style-outline--2\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/catharsis.net.au\/pentesting-services\/?utm_source=blog&amp;utm_medium=article&amp;utm_campaign=vlan-guides&amp;utm_content=home-network-vlans-setup-end-pentest\" target=\"_blank\" rel=\"noreferrer noopener\">Penetration testing<\/a><\/div>\n\n<\/div>\n\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-group has-background\" style=\"background-color:#f4f6f8;padding-top:28px;padding-right:32px;padding-bottom:28px;padding-left:32px\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-container-core-group-is-layout-40de7cf3 wp-block-group-is-layout-constrained\">\n\n<p class=\"wp-block-paragraph\"><strong>Keep reading<\/strong><\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n\n<div class=\"wp-block-button is-style-outline is-style-outline--3\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/catharsis.net.au\/blog\/what-is-a-vlan\/\" target=\"_blank\" rel=\"noreferrer noopener\">\u2190 What Is a VLAN? VLANs Explained in Plain English<\/a><\/div>\n\n\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/catharsis.net.au\/blog\/small-business-vlans-network-segmentation\/\" target=\"_blank\" rel=\"noreferrer noopener\">How Should a Small Business Use VLANs? A 25-Person Office Example \u2192<\/a><\/div>\n\n\n<div class=\"wp-block-button is-style-outline is-style-outline--4\"><a class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/catharsis.net.au\/blog\/subnet-mask-reference-table\/#calculator\" target=\"_blank\" rel=\"noreferrer noopener\">Subnet calculator<\/a><\/div>\n\n<\/div>\n\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>A worked, step-by-step example of splitting a busy household network into five VLANs: trusted devices, a work laptop, smart-home gear, cameras and guests. It includes the subnet plan, the firewall rules between them and a check after every step so you know it worked.<\/p>\n","protected":false},"author":2,"featured_media":1206,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,7],"tags":[138,135,136,129,134,137],"class_list":["post-1207","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber-security-explained","category-networking","tag-firewall-rules","tag-home-network","tag-iot-security","tag-network-segmentation","tag-vlan","tag-wi-fi"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How Do You Set Up VLANs at Home? A Step-by-Step Example - Catharsis | Blog<\/title>\n<meta name=\"description\" content=\"How do you set up VLANs at home? A worked example with a five-VLAN plan, firewall rules, Wi-Fi mapping and a check after every step.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How Do You Set Up VLANs at Home? A Step-by-Step Example - Catharsis | Blog\" \/>\n<meta property=\"og:description\" content=\"How do you set up VLANs at home? A worked example with a five-VLAN plan, firewall rules, Wi-Fi mapping and a check after every step.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/\" \/>\n<meta property=\"og:site_name\" content=\"Catharsis | Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-14T22:30:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-03T09:55:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/catharsis.net.au\/blog\/wp-content\/uploads\/2026\/11\/home-network-vlans-setup.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sajal Jain\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sajal Jain\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"14 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/\"},\"author\":{\"name\":\"Sajal Jain\",\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/#\\\/schema\\\/person\\\/f0826efb92a7aaf8d46b24715990e099\"},\"headline\":\"How Do You Set Up VLANs at Home? A Step-by-Step Example\",\"datePublished\":\"2026-10-14T22:30:00+00:00\",\"dateModified\":\"2026-11-03T09:55:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/\"},\"wordCount\":2872,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/home-network-vlans-setup.jpg\",\"keywords\":[\"firewall rules\",\"home network\",\"IoT security\",\"network segmentation\",\"VLAN\",\"Wi-Fi\"],\"articleSection\":[\"Cyber Security Explained\",\"Networking\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/\",\"url\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/\",\"name\":\"How Do You Set Up VLANs at Home? A Step-by-Step Example - Catharsis | Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/home-network-vlans-setup.jpg\",\"datePublished\":\"2026-10-14T22:30:00+00:00\",\"dateModified\":\"2026-11-03T09:55:57+00:00\",\"description\":\"How do you set up VLANs at home? A worked example with a five-VLAN plan, firewall rules, Wi-Fi mapping and a check after every step.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/#primaryimage\",\"url\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/home-network-vlans-setup.jpg\",\"contentUrl\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/home-network-vlans-setup.jpg\",\"width\":1280,\"height\":720,\"caption\":\"Home networking equipment on a shelf\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/home-network-vlans-setup\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How Do You Set Up VLANs at Home? A Step-by-Step Example\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/\",\"name\":\"Catharsis | Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/#organization\",\"name\":\"Catharsis | Blog\",\"url\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/catharsis_au.jpg\",\"contentUrl\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/catharsis_au.jpg\",\"width\":215,\"height\":60,\"caption\":\"Catharsis | Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/#\\\/schema\\\/person\\\/f0826efb92a7aaf8d46b24715990e099\",\"name\":\"Sajal Jain\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/Sajal-copy-96x96.jpg\",\"url\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/Sajal-copy-96x96.jpg\",\"contentUrl\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/Sajal-copy-96x96.jpg\",\"caption\":\"Sajal Jain\"},\"description\":\"Cyber Security Enthusiast | OSCP | CEH | CHFI | CNSS | Master of IT Security &amp; Master of IT Management\",\"url\":\"https:\\\/\\\/catharsis.net.au\\\/blog\\\/author\\\/sajal-jain\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How Do You Set Up VLANs at Home? A Step-by-Step Example - Catharsis | Blog","description":"How do you set up VLANs at home? A worked example with a five-VLAN plan, firewall rules, Wi-Fi mapping and a check after every step.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/","og_locale":"en_US","og_type":"article","og_title":"How Do You Set Up VLANs at Home? A Step-by-Step Example - Catharsis | Blog","og_description":"How do you set up VLANs at home? A worked example with a five-VLAN plan, firewall rules, Wi-Fi mapping and a check after every step.","og_url":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/","og_site_name":"Catharsis | Blog","article_published_time":"2026-10-14T22:30:00+00:00","article_modified_time":"2026-11-03T09:55:57+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/catharsis.net.au\/blog\/wp-content\/uploads\/2026\/11\/home-network-vlans-setup.jpg","type":"image\/jpeg"}],"author":"Sajal Jain","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Sajal Jain","Est. reading time":"14 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/#article","isPartOf":{"@id":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/"},"author":{"name":"Sajal Jain","@id":"https:\/\/catharsis.net.au\/blog\/#\/schema\/person\/f0826efb92a7aaf8d46b24715990e099"},"headline":"How Do You Set Up VLANs at Home? A Step-by-Step Example","datePublished":"2026-10-14T22:30:00+00:00","dateModified":"2026-11-03T09:55:57+00:00","mainEntityOfPage":{"@id":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/"},"wordCount":2872,"commentCount":0,"publisher":{"@id":"https:\/\/catharsis.net.au\/blog\/#organization"},"image":{"@id":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/#primaryimage"},"thumbnailUrl":"https:\/\/catharsis.net.au\/blog\/wp-content\/uploads\/2026\/11\/home-network-vlans-setup.jpg","keywords":["firewall rules","home network","IoT security","network segmentation","VLAN","Wi-Fi"],"articleSection":["Cyber Security Explained","Networking"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/","url":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/","name":"How Do You Set Up VLANs at Home? A Step-by-Step Example - Catharsis | Blog","isPartOf":{"@id":"https:\/\/catharsis.net.au\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/#primaryimage"},"image":{"@id":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/#primaryimage"},"thumbnailUrl":"https:\/\/catharsis.net.au\/blog\/wp-content\/uploads\/2026\/11\/home-network-vlans-setup.jpg","datePublished":"2026-10-14T22:30:00+00:00","dateModified":"2026-11-03T09:55:57+00:00","description":"How do you set up VLANs at home? A worked example with a five-VLAN plan, firewall rules, Wi-Fi mapping and a check after every step.","breadcrumb":{"@id":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/#primaryimage","url":"https:\/\/catharsis.net.au\/blog\/wp-content\/uploads\/2026\/11\/home-network-vlans-setup.jpg","contentUrl":"https:\/\/catharsis.net.au\/blog\/wp-content\/uploads\/2026\/11\/home-network-vlans-setup.jpg","width":1280,"height":720,"caption":"Home networking equipment on a shelf"},{"@type":"BreadcrumbList","@id":"https:\/\/catharsis.net.au\/blog\/home-network-vlans-setup\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/catharsis.net.au\/blog\/"},{"@type":"ListItem","position":2,"name":"How Do You Set Up VLANs at Home? A Step-by-Step Example"}]},{"@type":"WebSite","@id":"https:\/\/catharsis.net.au\/blog\/#website","url":"https:\/\/catharsis.net.au\/blog\/","name":"Catharsis | Blog","description":"","publisher":{"@id":"https:\/\/catharsis.net.au\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/catharsis.net.au\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/catharsis.net.au\/blog\/#organization","name":"Catharsis | Blog","url":"https:\/\/catharsis.net.au\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/catharsis.net.au\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/catharsis.net.au\/blog\/wp-content\/uploads\/2019\/01\/catharsis_au.jpg","contentUrl":"https:\/\/catharsis.net.au\/blog\/wp-content\/uploads\/2019\/01\/catharsis_au.jpg","width":215,"height":60,"caption":"Catharsis | Blog"},"image":{"@id":"https:\/\/catharsis.net.au\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/catharsis.net.au\/blog\/#\/schema\/person\/f0826efb92a7aaf8d46b24715990e099","name":"Sajal Jain","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/catharsis.net.au\/blog\/wp-content\/uploads\/2019\/01\/Sajal-copy-96x96.jpg","url":"https:\/\/catharsis.net.au\/blog\/wp-content\/uploads\/2019\/01\/Sajal-copy-96x96.jpg","contentUrl":"https:\/\/catharsis.net.au\/blog\/wp-content\/uploads\/2019\/01\/Sajal-copy-96x96.jpg","caption":"Sajal Jain"},"description":"Cyber Security Enthusiast | OSCP | CEH | CHFI | CNSS | Master of IT Security &amp; Master of IT Management","url":"https:\/\/catharsis.net.au\/blog\/author\/sajal-jain\/"}]}},"_links":{"self":[{"href":"https:\/\/catharsis.net.au\/blog\/wp-json\/wp\/v2\/posts\/1207","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/catharsis.net.au\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/catharsis.net.au\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/catharsis.net.au\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/catharsis.net.au\/blog\/wp-json\/wp\/v2\/comments?post=1207"}],"version-history":[{"count":1,"href":"https:\/\/catharsis.net.au\/blog\/wp-json\/wp\/v2\/posts\/1207\/revisions"}],"predecessor-version":[{"id":1228,"href":"https:\/\/catharsis.net.au\/blog\/wp-json\/wp\/v2\/posts\/1207\/revisions\/1228"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/catharsis.net.au\/blog\/wp-json\/wp\/v2\/media\/1206"}],"wp:attachment":[{"href":"https:\/\/catharsis.net.au\/blog\/wp-json\/wp\/v2\/media?parent=1207"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/catharsis.net.au\/blog\/wp-json\/wp\/v2\/categories?post=1207"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/catharsis.net.au\/blog\/wp-json\/wp\/v2\/tags?post=1207"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}