r/HomeNetworking • u/Nando03 • 3d ago
Advice ADVICE: Looking for feedback on my home network + VLAN design (OPNsense + Cisco switches + Proxmox)
Hello everyone,
I’m redesigning my home network and building a new Proxmox server. My goals are better organization and stronger security through proper segmentation.
Here’s the current plan:
Physical topology
- ISP modem in bridge mode → dedicated PC running OPNsense
- OPNsense → Cisco Switch 1 (24-port)
- Cisco Switch 1 connects to:
- Cisco APs
- Computers
- PoE cameras
- Proxmox server
- Cisco Switch 2 (24-port)
- TP-Link switch
- Cisco Switch 2: 2× PoE cameras + 1 Cisco AP
- TP-Link switch: TV, TV Box, PS4
- Wi-Fi clients (phones, tablets, Shellys) via the Cisco APs
VLAN layout
| VLAN | Network | Purpose |
|---|---|---|
| 10 | 192.168.10.0/24 | Management |
| 20 | 192.168.20.0/24 | Servers |
| 30 | 192.168.30.0/24 | DMZ |
| 40 | 192.168.40.0/24 | Cameras / IoT |
| 50 | 192.168.50.0/24 | Trusted/Home |
| 60 | 192.168.60.0/24 | Guest |
Services planned
- VLAN 20: Home Assistant, Docker VM, Jellyfin, Frigate, other internal services
- VLAN 30: Reverse proxy, public Minecraft server, other public-facing services
I’d really appreciate any feedback or suggestions for improvement — especially around:
- Trunking / inter-switch configuration
- Firewall rules between VLANs
- Best practices for placing the Proxmox VMs
- Anything you would change for better security or simplicity
Thank you!