VLAN Topology & Routing🔗
| VLAN | Purpose | Subnet | Notes |
|---|---|---|---|
| 10 | Management | 10.10.10.0/24 | pfSense GUI, Proxmox, admin |
| 20 | Servers | 10.10.20.0/24 | Core services + storage |
| 30 | Workstations | 10.10.30.0/24 | User devices |
| 40 | IoT/Guests | 10.10.40.0/24 | Isolated network |
| 50 | VPN Routed | 10.10.50.0/24 | Selective NordVPN via WG |
- Inter-VLAN routing controlled by pfSense.
- Only necessary east-west traffic allowed; strict default-deny rules.