From Zero to Segmented: Installing pfSense CE the Right Way (With VLANs That Actually Teach You Networking)

Most home networks are flat.

One LAN. One WiFi. Everything trusts everything.

Your laptop can talk to your smart bulbs. Your TV can talk to your NAS. Your IoT camera can reach your workstation.

That’s not a lab. That’s a liability.

If you want a home lab that actually teaches real networking, segmentation, routing, firewall policy, and security boundaries, you need a real firewall.

Building the Foundation: Where a Real Home Lab Actually Begins

Key principle:

Terminate TLS at a single reverse proxy.
Expose one entry point.
Keep everything else internal.

That’s discipline.

The Real Reason to Do It This Way

This isn’t about running Plex on better hardware.

This is about understanding:

• How packets move
• How identity works
• How segmentation reduces risk
• How public DNS interacts with private services
• How virtualization abstracts hardware

You can buy ecosystems.