Hello,

I would like to segment and isolate my home network, by making the main house and the basement suite "physically" unavailable to each other. I have ethernet ports in every room in the house, including the basement suite rooms. All the ports are connected to my SG1218MPE switch.

To state my goal clearly:

• The switch ports are interfaced like so:
  • Port 17 to the gateway/router
  • Port 15 to the main room in the suite
  • Ports 2-14,16,18 to the house (though only a few of them are actually connected)
• All devices should be able to communicate to the gateway, of course
• The devices from the house ports and the suite ports should not be able to communicate with each other at the ethernet layer. 
• This seems like a perfect job for VLANs.

A lot of the tplink online material is for setups that use the Omada controller, which I don't have.

But, basically, it seems like I should create 3 VLANs. One that has all ports as untagged ports, one that has the ports from the house, and one that has the ports (there is actually a single one) from the suite. In my case, port 17 leads to the gateway, port 15 is the connected port from the suite, and the rest are the house ports:

I know this is not enough.

With the setup as it is, devices on any port are able to communicate with devices from any other port. Which I think makes sense, because VLAN 1 covers all the ports.

I don't understand why the instructions I followed so far (which I can't find anymore, it was weeks ago!) had me add every port to VLAN 1. My basic understanding tells me each port needs to be able to communicate directly to the gateway (my ER7206 router is connected to port 17), and that's the role of VLAN 1. But the way it's configured, VLAN 1 allows every port in the house to communicate to each other.

Also, does my ER7206 router need to participate in this setup? On the switch, do I need to create one subnet for VLAN 2, and one for VLAN 3? Do I need to remove the subnet for VLAN 1? At the moment I only have the following:

There are obviously gaps in my understanding of what I need to do. Any pointers appreciated, and we can iterate from there.