this post was submitted on 15 Nov 2023
0 points (50.0% liked)
Home Networking
198 readers
1 users here now
A community to help people learn, install, set up or troubleshoot their home network equipment and solutions.
Rules
- Please stay on topic.
- Please use the search function to look for keywords related to what you want to ask before posting since most common issues have been answered.
- No Ads. This community is for support and discussion. Ads and self promotion are not welcome here.
- No product reviews or announcements. If you have a question about a product, be specific about what you want to know.
- Be civil. Don't be a jerk. Not being a jerk is surprisingly easy.
- No URL shorteners. URL shorteners tend to hide the real use of a link. For this reason, please use normal links, even if they're long.
- No affiliate links.
- No gatekeeping. With profession shall come professionalism. Extend help without judging others for their ignorance. The same goes for downvoting of comments or posts for "stupid questions" or not being as knowledgeable as others.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Your diagram is fine, and a pretty standard "Advanced Home Network" we see around here.
Anything can be made to talk to anything across different VLANs by choosing to allow it on pfSense. If everything on one VLAN needs to talk to a server in another, you should evaluate if that server is in the right VLAN, or does it really belong with the others.
The big problem with VLANs in home environments is that you need to make so many exceptions just to get everything to work like you want. If you're trying to use VLANs as an extra step in security, how much security are you really getting with so many exceptions on pfSense?
Your layout and questions are not at all unusual, I guess I'm just always wondering if VLANs are being pushed too hard onto typical home users who will waste more time trying to tune them than any benefits they actually receive.
You're into tech, so it won't be a problem. I do suspect that you'll become lazy over time and just stick things in the main VLAN with broken promises to "fix it one day" as your personal time diminishes.