A secure home network with VLANs is no longer only a lab topic. A 2.5 Gb/s Internet line, several Wi-Fi 6E or Wi-Fi 7 access points, cameras, smart TVs, work laptops and a small NAS can quickly become a flat network where every device can see everything else. That is convenient until one cheap IoT device, compromised camera or infected family laptop reaches your work machine or backup storage.
This guide uses a concrete scenario: a 200 m² home or small office with 2 adults working remotely, 1 NAS, 4 cameras, 2 access points, 25-40 client devices and a budget between $750 and $2,500. The goal is not a perfect enterprise design. The goal is a practical design you can buy, configure and verify.