If you've ever wanted to stop your smart TV from scanning your entire home network or keep guests off your NAS, this walks you through proper VLAN segmentation with real firewall rules and switch configs. It covers UniFi, pfSense/OPNsense, and MikroTik with concrete examples like mapping SSIDs to VLANs, setting up trunk ports, and blocking RFC1918 traffic while still allowing IoT devices to hit your Pi-hole for DNS. The firewall rule ordering is especially good, it explicitly shows why the Pi-hole exception has to come before the blanket RFC1918 block. Best used when you're moving past a flat 192.168.1.0/24 network and need isolation without breaking everything.
npx -y skills add affaan-m/ecc --skill homelab-vlan-segmentation --agent claude-codeInstalls into .claude/skills of the current project.
Select a file.
juliusbrussee/caveman
mattpocock/skills
obra/superpowers
forrestchang/andrej-karpathy-skills
vercel-labs/skills