Homelab on a Budget Part 3: Network Gear

When you need VLANs#

If you want segmentation (Users vs Lab vs IoT), you need:

• A router that supports VLANs (OpenWrt, OPNsense, pfSense)
• A managed switch with VLAN support
• An access point that supports multiple SSIDs + VLAN tagging

Without VLAN support, keep the network flat and simple.

VLAN decision matrix#

Example VLAN layout (small lab)#

Minimal config example (concept)#

• VLAN 10: 192.168.10.0/24 (lab)
• VLAN 20: 192.168.20.0/24 (users)
• VLAN 30: 192.168.30.0/24 (iot)

Buying tiers (what to purchase)#

Starter (flat network)

• ISP router
• 1GbE unmanaged switch (5-8 ports)
• Optional single access point

Practical (VLAN-ready)

• Mini PC router with 2.5GbE (OPNsense/pfSense)
• 2.5GbE managed switch (5-8 ports)
• 1 VLAN-capable access point

Comfortable (multi-zone)

• Dedicated router/firewall
• 2.5GbE or 10GbE managed switch
• 2+ access points for coverage
• Short patch cables or a small patch panel if you want clean wiring

NICs for homelab nodes#

• Built-in 2.5GbE is ideal
• USB NICs work but can be flaky under load
• If the node has PCIe, a real NIC is safer than USB

Simple layout that works#

• Router/firewall -> switch -> nodes
• Put storage and Kubernetes nodes on wired links
• Keep Wi-Fi for clients, not servers

Network checklist#

• Wired nodes use the switch, not WiFi
• Basic throughput tested with iperf3
• VLAN rules block IoT to Lab
• Router supports VLAN tagging

Example VLAN tagging (switch)#

Next up#

Part 4 will cover compute baseline and base OS choices.