Sophos XG Homelab: The Resulting Architecture and Lessons Learned
The final design principles, migration approach, and lessons from building a segmented Sophos XG homelab.
Browse by term
The final design principles, migration approach, and lessons from building a segmented Sophos XG homelab.
A layer-by-layer method for diagnosing unreachable VLAN gateways, clients, and services.
Why a separate administration port makes VLAN migrations and recovery safer.
Turning HomeMatic, MQTT, Zigbee2MQTT, media, and IoT dependencies into explicit firewall flows.
Why connected routes are not permissions, and how to build readable inter-VLAN rules.
Separating infrastructure administration from ordinary client and IoT traffic.
Tagged, untagged, access, and trunk traffic explained through a Sophos XG homelab uplink.
How Sophos VLAN interfaces become gateways for segmented homelab networks.
A practical method for mapping trust zones to VLAN IDs and non-overlapping IPv4 subnets.
The goals, trust boundaries, and design principles behind a segmented Sophos XG homelab.