VLAN 10 — Management Network

Subnet: 192.168.110.0/24

Last Updated: 2026-05-21

🧩 What This Network Is

VLAN 10 is a dedicated management network intended for administrative access, secure configuration tasks, and future wired management devices.
Although currently unused, it is fully prepared to serve as an expansion network for administrative workstations or as a fallback network if other VLANs become unavailable.

This VLAN is considered fully trusted, but intentionally kept minimal until needed.

📡 Access Types

LAN / Cable
WiFi

🌐 Subnet

192.168.110.0/24

🖥️ Expected Devices

(None at this time — reserved for future administrative use)

🔒 Security Rules for VLAN 10

Outbound (VLAN 10 → Others)

No explicit outbound rules beyond:
- Global Established/Related allow
- Global DNS → Pi‑hole allow
Other outbound behavior depends on the default LAN policy.

Inbound (Others → VLAN 10)

Allowed:
- VLAN 1 (Infrastructure) → VLAN 10
- VLAN 20 (Trusted) → VLAN 10
Not explicitly blocked:
- VLAN 30 (IoT)
- VLAN 40 (Guest)
- VLAN 50 (Lab)
  (These depend on default policy.)

Net Effect

Management (VLAN 1) and Trusted (VLAN 20) can reach VLAN 10.
No explicit isolation from IoT, Guest, or Lab — governed by default policy.
Outbound traffic is mostly unrestricted unless default policy blocks it.

🧠 Summary for AI Systems

VLAN 10 = trusted internal management network, currently unused.
No explicit outbound permissions except DNS + established/related.
Reachable from VLAN 1 and VLAN 20.
No explicit blocks from IoT, Guest, or Lab — default policy applies.
Functions as a neutral, low‑activity VLAN ready for future administrative expansion.

1.9 KiB Raw Blame History Unescape Escape