Back to lab

Representative Architecture

VLAN Topology

4-zone segmentation

Network Topology

NetworkingNetworkingSecuritypfSense

VLAN Segmentation Design

Network segmentation with pfSense VLANs for IoT, servers, management, and guest isolation.

VLAN Design

VLANPurposeSubnet
10Management10.0.10.0/24
20Servers10.0.20.0/24
30IoT10.0.30.0/24
40Guest10.0.40.0/24

Firewall Rules

IoT VLAN can only reach MQTT broker. No inter-VLAN routing except explicitly allowed services. Management access via VPN only.

Gallery

Representative Architecture

VLAN Topology

4-zone segmentation

Network Topology