https://blog.margrop.net/en/tag/%E5%AE%B6%E5%BA%AD%E7%BD%91%E7%BB%9C/ Recent content in 家庭网络 on Margrop Blog Hugo -- gohugo.io en-US Wed, 29 Jul 2026 09:00:00 +0800 https://blog.margrop.net/en/post/iot-vlan-guest-room/ Wed, 29 Jul 2026 09:00:00 +0800 https://blog.margrop.net/en/post/iot-vlan-guest-room/ <blockquote> <p><strong>The short version</strong></p> <p>Your bulbs, cameras, robot vacuum, TV, and smart speakers should not permanently share the same local network with your laptops, phones, and NAS. The practical answer is not to disconnect them from the Internet. Give them a separate “guest room”: a separate Wi-Fi name, a separate VLAN, a separate address range, and a firewall that opens only the doors they actually need.</p> <p>This gives you a useful boundary. If an IoT device misbehaves, the problem is less likely to spread to your main network. If an account or firmware is compromised, an attacker does not automatically receive a master key to the whole house.</p> </blockquote>