Home network segmentation #75
Labels
No Label
affects/hardware
affects/legal
affects/reproducibility
affects/security
affects/style
affects/usability
blocked by/release 21.05
blocked by/release 21.11
blocked by/release 22.05
blocked by/testing needed
blocked by/testing needed/fuuko
blocked by/testing needed/sayuri
blocked by/upstream
resolution
deferred
resolution
permanent workaround
resolution
upstream wontfix
resolution
wontfix
type
bug
type
chore
type
feature
type
new machine
type
question
type
regression
type
tracking
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: simon/nixos-config#75
Loading…
Reference in New Issue
There is no content yet.
Delete Branch "%!s(<nil>)"
Deleting a branch is permanent. Although the deleted branch may exist for a short time before cleaning up, in most cases it CANNOT be undone. Continue?
Currently, I only have one network at home. All devices are in it. I propose to split the network into multiple zones.
network
lan
/br-lan
10.80.1.0/24
,fd00:80:1::/64
Darknet
(change the PSK, as the current one is known on untrusted devices)management
/br-management
10.80.2.0/24
,fd00:80:2::/64
untrusted
/br-untrusted
10.80.3.0/24
,fd00:80:3::/64
Industriespionage
iot
/br-iot
10.80.4.0/24
,fd00:80:4::/64
Krepel
This requires activating VLAN on the switch and have it connect tagged VLAN 1 from the port connected to shinobu to the other ports untagged.
Firewall
QoS
enp1s0
TODO
TODO: