Set up isolated IoT and work networks on one device using OPNsense, VLANs, and a managed switch.
Based on: STOP putting everything on ONE network!! by NetworkChuck
▶ Watch the source video on YouTube
What if the smart light bulb in your living room was the reason a hacker got into your laptop? It sounds far-fetched until you realize that every IoT device on your network — your smart fridge, your Ring camera, your Alexa — is a potential open door. You probably have no idea which one has an unpatched vulnerability right now, and neither does anyone else until it gets exploited.
Here's what makes this genuinely unsettling: it only takes one compromised device to give an attacker a foothold. From there, they can pivot to your family's computers, your work files, your passwords — everything on the same network. Some of those infected devices quietly join botnets. Others stream your cameras to strangers. The Truman Show reference sounds like a joke until it happens to you.
But here's the good news: you can fix this with hardware you may already own, free open-source software, and a process that NetworkChuck walks through step by step. In this video series, Chuck sets up a real home network for a real person using a mini PC firewall running OPNsense, a QNAP managed switch, and a Raspberry Pi running an AI agent. He isolates IoT devices into their own VLAN so they literally cannot reach the family's computers — even if they're plugged into the same switch.
NetworkChuck has built one of the most trusted networking education channels on YouTube, with a community of millions learning everything from basic subnetting to enterprise-grade security. He doesn't just explain the theory — he fumbles through real configurations, troubleshoots live failures, and shows you exactly what to do when things break. That hands-on honesty is why people actually learn from him.
This checklist distills everything from the video into a clean, ordered action plan. You'll know exactly which hardware to get, how to create VLANs in OPNsense, how to configure a managed switch with tagged and untagged ports, how to set up DHCP per network, and how to write firewall rules that actually block IoT devices from reaching your main network. Every specific setting, IP range, and configuration detail is captured so you never have to rewind the video again. Stop putting everything on one network — start here.
Every checklist item comes with actionable notes to guide you — things like "Don't forget to do this before you start," "Avoid this common mistake," or "Set a reminder for 30 days out." Nothing vague, just clear next steps.
+ 21 more action items inside...
Instant PDF download. Start taking action today.
✓ Instant download · ✓ PDF format · ✓ No subscription