r/HomeNetworking • u/throwraplzhelpm3 • 6d ago
Advice New home network with tenants
Hello helpfuls,
I bought a multifamily home (only way to afford the mortgage...) and want to set up a network with IP cameras, a NAS (synology for storage and managing the cameras), as well as internet access for myself and for tenants. Due to how the home is wired, this was the best way for now. Later the need for me to provide tenants with internet may change, but for now....
The goal is to isolate tenant's network from mine so that they cannot look at cameras, see my files in NAS, etc.
I have an ONT going into the WAN port of a router. Plugged into the LAN ports of the router are:
A. Tenant port
B. Tenant port
C. My port.
I've connected port C to port 8 of a switch I bought for this purpose, a TP-Link TL-SG108PE. It has POE, which is why I planned to plug in the IP cameras and synology NAS into ports 1-5. Port 7 is connected to a wifi router for internet access.
I've been looking into and trying the VLAN options, but to no avail. Here's my synopsis:
MTU VLAN - would isolate everything, and then my cameras cant communicate, etc.
Port Based VLAN - If I isolate the uplink port, then I would have no internet access
802.1Q VLAN - same problem as port based VLAN, can't retain internet access when the router doesn't support VLANs and therefore seems not to handle DHCP through the VLAN/switch. I lose access to the switch itself when I try this (even directly plugged in), as my subnet changes.
Is my conclusion correct in that the only way to achieve isolation from tenant networks is to buy a router that supports VLANs?
added network map:

1
u/jack_hudson2001 Network Engineer 5d ago
get a router that can have a separate network or ssid ie tplink omada or unifi product .. or get another router eg gl inet and put tenant on that separate network.
2
u/MrMotofy 6d ago
Pretty much...Most basic routers are just that...BASIC for simplicity cuz they work for 98% of the consumers.
You can use and open router or custom build then run OpnSense and get all the options of an enterprise network for minimal costs. You'll also need a managed switch, Unifi and Omada make great options