this post was submitted on 21 May 2024
10 points (100.0% liked)

homelab

6612 readers
1 users here now

founded 4 years ago
MODERATORS
 

I would like to create a VLAN that can access the internet but cannot access the rest of my network, with one exception. It should still be able to connect to my HomeAssistant server which isn't on the VLAN.

I have never set up a VLAN before so I am a bit lost. Does anybody have any good guides on how to set up something like this on a GL.iNet router? I am able to access the OpenWRT settings including interfaces, devices, etc. from LuCI.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 0 points 5 months ago* (last edited 5 months ago)

VLANs are layer 2, they don't really need things like a router to work and should be set up at the switch//layer 2 level and are not routable across the internet. Based on the specifications you've stated you want to make a DMZ which is a lot different and will require knowledge of IP subnets, access control lists, and wildcard masks. It's not much harder to do, but it is different than what your doing, you wouldn't use a hammer for a screw.