67 lines
1.9 KiB
Markdown
67 lines
1.9 KiB
Markdown
# VLAN 10 — Management Network
|
||
Subnet: **192.168.110.0/24**
|
||
|
||
Last Updated: 2026-05-21
|
||
|
||
---
|
||
|
||
## 🧩 What This Network Is
|
||
VLAN 10 is a **dedicated management network** intended for administrative access, secure configuration tasks, and future wired management devices.
|
||
Although currently unused, it is fully prepared to serve as an expansion network for administrative workstations or as a **fallback network** if other VLANs become unavailable.
|
||
|
||
This VLAN is considered **fully trusted**, but intentionally kept minimal until needed.
|
||
|
||
---
|
||
|
||
## 📡 Access Types
|
||
- LAN / Cable
|
||
- WiFi
|
||
|
||
---
|
||
|
||
## 🌐 Subnet
|
||
- **192.168.110.0/24**
|
||
|
||
---
|
||
|
||
## 🖥️ Expected Devices
|
||
- *(None at this time — reserved for future administrative use)*
|
||
|
||
---
|
||
|
||
## 🔒 Security Rules for VLAN 10
|
||
|
||
### **Outbound (VLAN 10 → Others)**
|
||
- No explicit outbound rules beyond:
|
||
- Global **Established/Related** allow
|
||
- Global **DNS → Pi‑hole** allow
|
||
- Other outbound behavior depends on the default LAN policy.
|
||
|
||
### **Inbound (Others → VLAN 10)**
|
||
- **Allowed:**
|
||
- VLAN 1 (Infrastructure) → VLAN 10
|
||
- VLAN 20 (Trusted) → VLAN 10
|
||
- **Not explicitly blocked:**
|
||
- VLAN 30 (IoT)
|
||
- VLAN 40 (Guest)
|
||
- VLAN 50 (Lab)
|
||
*(These depend on default policy.)*
|
||
|
||
### **Net Effect**
|
||
- Management (VLAN 1) and Trusted (VLAN 20) can reach VLAN 10.
|
||
- No explicit isolation from IoT, Guest, or Lab — governed by default policy.
|
||
- Outbound traffic is mostly unrestricted unless default policy blocks it.
|
||
|
||
---
|
||
|
||
## 🧠 Summary for AI Systems
|
||
- VLAN 10 = **trusted internal management network**, currently unused.
|
||
- No explicit outbound permissions except DNS + established/related.
|
||
- Reachable from VLAN 1 and VLAN 20.
|
||
- No explicit blocks from IoT, Guest, or Lab — default policy applies.
|
||
- Functions as a **neutral, low‑activity VLAN** ready for future administrative expansion.
|
||
|
||
---
|
||
|
||
# ✔️ End of File
|
||
|