Separating the good devices from the bad

[dngray]

This one comes up a lot, along with other articles which describe reader's worries about various IoT devices.

We should do a blog article, perhaps with a tutorial on using something like opensense, pfsense or openwrt detailing VLAN separation.

Main features we would want to describe:

• A guest WLAN (visitors) and a secure WLAN (with household residents)
• A VLAN for crappy IoT or dated devices (many of these don't receive regular updates) a user might not trust these devices and want to isolate them from their network
• A null routed VLAN for devices that don't require internet access, or maybe have very specific firewall rules.
• Possibly throw in a VPN routing for a particular VLAN if we can do that.

It could take some tips from these articles) I wrote years ago. Obviously something less fragile (less moving parts) is what we'd be going towards.