How to Isolate IoT Devices with VLANs on a Home Network

Summary

The video demonstrates isolating IoT devices on a home network with OPNsense VLANs, a managed switch, DHCP and firewall rules. It also features a sponsored Flare monitoring demo; Wi-Fi integration is deferred.

Key points

The tutorial recommends placing IoT devices on a separate VLAN to limit their access to trusted home networks if a device is compromised.
It configures VLANs in OPNsense and sets up a QNAP managed switch with untagged access ports and a tagged trunk port.
A VLAN interface needs its own IP address and DHCP configuration; the demonstration initially failed because DHCP was not listening on the new interface.
OPNsense blocks traffic by default. The demonstration allows the work network access, then blocks the IoT network from reaching other private networks.
The presenter reports successfully receiving an IP address on the new VLAN and testing that IoT devices could not reach the other networks.
Wi-Fi setup is not completed in this video and is deferred to a later episode.
In the sponsored Flare segment, the presenter showed dashboard findings of infostealer-infected devices associated with students and exposed credentials; these service findings were not independently verified in the video.

Article Details

Topics: [00:02] Risks of placing IoT devices on an unsegmented home network
[01:43] Creating VLANs in OPNsense
[04:07] Flare's sponsored infostealer and exposed-credential monitoring demo
[06:53] Configuring managed-switch VLAN ports and trunking
[10:23] Setting up VLAN interfaces, DHCP, and firewall rules
[14:53] Troubleshooting DHCP interface listening
[16:03] Restricting IoT network access to other private networks
[18:51] Wi-Fi plans and AI-agent access to the network equipment