Homelab Academy / Modules
Independent application with evidence.
Module: Segmentation, Backup & Power
Activity type: Homework / independent application
Objective: Separate homelab devices into VLANs based on trust, function, and operational requirements
Create a second design on paper for a camera VLAN using a new non-overlapping subnet.
State whether cameras need DNS, NTP, or internet access
Name the exact management source, protocol, and destination port needed to administer cameras
Deny camera-initiated access to all internal zones
Identify which physical trunks, if any, must carry the new VLAN
No trunk may receive the camera VLAN solely because it is convenient.
Model removal of tagged management VLAN 10 from the hypervisor trunk.
Add a separate physical management access port to the written architecture
Assign that port to VLAN 10 with matching untagged VLAN and PVID
Change the hypervisor workload trunk to VLANs 20 and 30 only
Describe the migration order that avoids losing host management
The design must never leave the hypervisor unmanaged during the migration.
Extend the validator conceptually for a voice VLAN.
Reject duplicate VLAN IDs
Reject overlapping subnets
Require documented time and name-resolution services
Reject wildcard allow entries
Require unused ports to remain administratively down
Write the proposed assertions in plain language or Python without changing live network equipment.