Forwarding console management pages to a single VLAN?
reddit / selfhosted

----------------------------------------------------------------------
AllTheModzAreCancer · 2023-12-03 08:00

I'm a total noob who has never even set up a VLAN before, so I'm
trying to wrap my head around a few concepts before I dive into
things.

I know that it is obviously going to be possible to forward my
firewall device's management page to a VLAN, but is it:

1. Possible to forward the management page of other devices, such as
my TrueNAS web GUI, to the same VLAN, and
2. Is doing so a security risk? (Can there be security concerns like
you might see if two VLANs share a single ethernet cable)

Another option may be for me to set up a VLAN on my TrueNAS server
itself (the settings allegedly allow this) and run it through one of
three unused ethernet ports on my server to a small switch (that my
firewall console management VLAN also runs to). However it seems like
I would be running the risk (if there were a major vulnerability in
TrueNAS) that this could compromise my entire firewall.

Whatever I do, I will be using an old, non-networked laptop as a
console. I am totally fine with managing them both separately
(unplugging from one and plugging into the other) but I just wanted to
see what my options were from a security standpoint first.

Not having the console management pages networked (so that I can
access away from home) sucks, but it seems to be the most secure
option.

----------------------------------------------------------------------
thekrautboy · 2023-12-03 10:07

/r/HomeNetworking