Question in the title. Feel free to include details, like what networks have wifi, what kinds of devices are on what, etc etc.
Right now I have 4 VLANs, each with a separate wifi SSID:
- Base - servers, workstation, and any trusted devices
- Business - work laptop, dock, and phone - enforces network and device isolation - lighter adblocking settings, so that work programs and services aren’t nerfed
- Isolated - visiting friends and family use this one - again, enforces network and device isolation
- Security - for cameras, doorbell, and other security devices - strongest security settings, isolation, and no direct internet access
Looking forward to hearing what others are doing, to see if I can improve my setup.
At a minimum, I always do trusted, guest, and iot. I used to do “family” but, honestly everyone just ended up on iot because it was easier to control everything from their phones. Management is done from trusted. My current setup also includes DMZ and DC vlans for the homelab. I added a gaming vlan for one gaming PC the other day and moved that machine to it since games always have a bunch of port forwarding needs.