68 lines
1.9 KiB
Markdown
68 lines
1.9 KiB
Markdown
|
# VLAN 10 — Management Network
|
|||
|
|
Subnet: **192.168.110.0/24**
|
|||
|
|
|
|||
|
|
Last Updated: 2026-05-21
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 🧩 What This Network Is
|
|||
|
|
VLAN 10 is a **dedicated management network** intended for administrative access, secure configuration tasks, and future wired management devices.
|
|||
|
|
Although currently unused, it is fully prepared to serve as an expansion network for administrative workstations or as a **fallback network** if other VLANs become unavailable.
|
|||
|
|
|
|||
|
|
This VLAN is considered **fully trusted**, but intentionally kept minimal until needed.
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 📡 Access Types
|
|||
|
|
- LAN / Cable
|
|||
|
|
- WiFi
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 🌐 Subnet
|
|||
|
|
- **192.168.110.0/24**
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 🖥️ Expected Devices
|
|||
|
|
- *(None at this time — reserved for future administrative use)*
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 🔒 Security Rules for VLAN 10
|
|||
|
|
|
|||
|
|
### **Outbound (VLAN 10 → Others)**
|
|||
|
|
- No explicit outbound rules beyond:
|
|||
|
|
- Global **Established/Related** allow
|
|||
|
|
- Global **DNS → Pi‑hole** allow
|
|||
|
|
- Other outbound behavior depends on the default LAN policy.
|
|||
|
|
|
|||
|
|
### **Inbound (Others → VLAN 10)**
|
|||
|
|
- **Allowed:**
|
|||
|
|
- VLAN 1 (Infrastructure) → VLAN 10
|
|||
|
|
- VLAN 20 (Trusted) → VLAN 10
|
|||
|
|
- **Not explicitly blocked:**
|
|||
|
|
- VLAN 30 (IoT)
|
|||
|
|
- VLAN 40 (Guest)
|
|||
|
|
- VLAN 50 (Lab)
|
|||
|
|
*(These depend on default policy.)*
|
|||
|
|
|
|||
|
|
### **Net Effect**
|
|||
|
|
- Management (VLAN 1) and Trusted (VLAN 20) can reach VLAN 10.
|
|||
|
|
- No explicit isolation from IoT, Guest, or Lab — governed by default policy.
|
|||
|
|
- Outbound traffic is mostly unrestricted unless default policy blocks it.
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## 🧠 Summary for AI Systems
|
|||
|
|
- VLAN 10 = **trusted internal management network**, currently unused.
|
|||
|
|
- No explicit outbound permissions except DNS + established/related.
|
|||
|
|
- Reachable from VLAN 1 and VLAN 20.
|
|||
|
|
- No explicit blocks from IoT, Guest, or Lab — default policy applies.
|
|||
|
|
- Functions as a **neutral, low‑activity VLAN** ready for future administrative expansion.
|
|||
|
|
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
# ✔️ End of File
|
|||
|
|
|