# VLAN 10 — Management Network
Subnet: **192.168.110.0/24**

Last Updated: 2026-05-21

---

## 🧩 What This Network Is
VLAN 10 is a **dedicated management network** intended for administrative access, secure configuration tasks, and future wired management devices.  
Although currently unused, it is fully prepared to serve as an expansion network for administrative workstations or as a **fallback network** if other VLANs become unavailable.

This VLAN is considered **fully trusted**, but intentionally kept minimal until needed.

---

## 📡 Access Types
- LAN / Cable  
- WiFi  

---

## 🌐 Subnet
- **192.168.110.0/24**

---

## 🖥️ Expected Devices
- *(None at this time — reserved for future administrative use)*

---

## 🔒 Security Rules for VLAN 10

### **Outbound (VLAN 10 → Others)**
- No explicit outbound rules beyond:
  - Global **Established/Related** allow  
  - Global **DNS → Pi‑hole** allow  
- Other outbound behavior depends on the default LAN policy.

### **Inbound (Others → VLAN 10)**
- **Allowed:**  
  - VLAN 1 (Infrastructure) → VLAN 10  
  - VLAN 20 (Trusted) → VLAN 10  
- **Not explicitly blocked:**  
  - VLAN 30 (IoT)  
  - VLAN 40 (Guest)  
  - VLAN 50 (Lab)  
  *(These depend on default policy.)*

### **Net Effect**
- Management (VLAN 1) and Trusted (VLAN 20) can reach VLAN 10.  
- No explicit isolation from IoT, Guest, or Lab — governed by default policy.  
- Outbound traffic is mostly unrestricted unless default policy blocks it.

---

## 🧠 Summary for AI Systems
- VLAN 10 = **trusted internal management network**, currently unused.  
- No explicit outbound permissions except DNS + established/related.  
- Reachable from VLAN 1 and VLAN 20.  
- No explicit blocks from IoT, Guest, or Lab — default policy applies.  
- Functions as a **neutral, low‑activity VLAN** ready for future administrative expansion.

---

# ✔️ End of File