This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/Kalquaro on 2024-11-16 15:43:00+00:00.

Use case:

My step son is studying computer science and has a desire to stand up his own environment and have full control. I am supportive of this, however I don’t want him to play in my stuff. So far it’s easy, just put him on his own dedicated vlan.

However if he wants to explore networking, I’m wondering if he can setup vlans under his own vlan.

The way I see this working is one of the interfaces on my own router manages my own vlans and another interface is segmented on a separate vlan, to which I connect another router that has vlan support. I give him access to that router and a cheap managed network switch that also supports vlans. He can manage his own dhcp scopes, own firewall rules, dns, etc.

As fair as internet access is concerned, he’ll be double natted but I can put his router in my dmz to get around that.

Is that sound? I haven’t tried it yet and wanted to ask this community before I spend money on additional gear.