---
id: gh-homelab-network-setup
name: "homelab-network-setup"
url: https://skills.yangsir.net/skill/gh-homelab-network-setup
author: affaan-m
domain: cloud-infra
tags: ["homelab", "network-design", "vlan", "ip-management", "infrastructure"]
install_count: 2400
rating: 4.30 (120 reviews)
github: https://github.com/affaan-m/everything-claude-code/tree/main/docs/ja-JP/skills/homelab-network-setup
---

# homelab-network-setup

> 此技能旨在帮助用户设计和设置家庭或小型实验室网络，涵盖网关、交换机、接入点选择、IP 地址规划、DHCP 和 DNS 配置，以及为未来的 VLAN、NAS 和 VPN 访问做好准备。它通过提供结构化的方法，避免常见的网络冲突和不稳定性，确保网络基础的稳健性和可扩展性，从而减少重复建设和故障排除时间。

**Stats**: 2,400 installs · 4.3/5 (120 reviews)

## Before / After 对比

### 家庭网络稳定性与扩展性提升

**Before**:

在没有这个技能之前，用户在手动配置家庭或小型实验室网络时，经常遇到IP地址冲突、双重NAT、Wi-Fi不稳定等问题，导致网络频繁中断，排查故障耗时耗力，且难以应对未来设备增加或功能扩展的需求。

**After**:

此技能提供了一套系统的网络设计和配置方案，帮助用户从一开始就建立稳定、可扩展的网络基础。它有效避免了常见配置错误，显著减少了网络故障的发生，并为未来的VLAN、NAS等高级功能预留了空间，大大降低了维护成本和重构风险。

| Metric | Before | After | Change |
|---|---|---|---|
| 网络故障排查时间 | 8小时 | 1小时 | -88% |

## Readme

# Homelab Network Setup

Use this skill to design a home or small-lab network that can grow without
needing a full rebuild.

## When to Use

- Planning a new home network or redesigning an ISP-router-only setup.
- Choosing gateway, switch, and access point roles.
- Designing IP ranges, DHCP scopes, static reservations, and DNS.
- Preparing for future VLANs, Pi-hole, NAS, lab servers, or VPN access.
- Troubleshooting a new network that has double NAT, unstable Wi-Fi, or changing
  server addresses.

## How It Works

Start by separating device roles:

```text
Internet
  |
Modem or ONT
  |
Gateway or router      NAT, firewall, DHCP, DNS, inter-VLAN routing
  |
Managed switch         wired clients, AP uplinks, optional VLAN trunks
  |
Access points          Wi-Fi only; ideally wired backhaul
Servers and NAS        stable addresses, DNS names, monitoring
Clients and IoT        DHCP pools, isolated later if VLANs are available
```

Pick a gateway that matches the operator, not just the feature checklist:

| Option | Best fit | Notes |
| --- | --- | --- |
| ISP router | Basic internet only | Limited control and often poor VLAN support |
| UniFi gateway | Managed home network | Good UI, ecosystem lock-in |
| OPNsense or pfSense | Flexible homelab | Strong VLAN, firewall, VPN, and DNS control |
| MikroTik | Advanced network users | Powerful, but easy to misconfigure |
| Linux router | Tinkerers | Document rollback before using as primary gateway |

## IP Plan

Avoid the most common default, `192.168.1.0/24`, when you expect to use VPNs.
It often conflicts with hotels, offices, and ISP routers.

```text
Example small homelab plan:

192.168.10.0/24  trusted clients
192.168.20.0/24  IoT and media devices
192.168.30.0/24  servers and NAS
192.168.40.0/24  guest Wi-Fi
192.168.99.0/24  network management

Gateway convention: .1
Infrastructure reservations: .2 through .49
Dynamic DHCP pool: .50 through .240
Spare room: .241 through .254
```

Use `home.arpa` for local names. It is reserved for home networks and avoids the
leakage/conflict problems of ad hoc names like `home.lan`.

```text
nas.home.arpa
pihole.home.arpa
gateway.home.arpa
switch-01.home.arpa
```

## DHCP And DNS

- Use DHCP reservations for anything you SSH into, bookmark, monitor, or expose
  as a service.
- Hand out the gateway as DNS until a local resolver is intentionally deployed.
- If using Pi-hole or another DNS filter, give it a reservation first, then point
  DHCP DNS options at that address.
- Keep a small static/reserved range per subnet so replacements do not collide
  with dynamic leases.

## Cabling And Wi-Fi

- Prefer wired AP backhaul over mesh when you can run Ethernet.
- Use a PoE switch for APs and cameras if the budget allows it.
- Label both ends of each cable and keep a simple port map.
- Put the gateway, switch, DNS server, and NAS on UPS power if outages are common.

## Examples

### Beginner Upgrade

Goal: Keep the ISP router but stabilize a small lab.

1. Set DHCP reservations for NAS, Pi, and any SSH hosts.
2. Move local names to `home.arpa`.
3. Disable duplicate DHCP servers on secondary routers or APs.
4. Wire the main AP instead of relying on wireless backhaul.

### VLAN-Ready Plan

Goal: Prepare for future segmentation without enabling it immediately.

1. Choose non-overlapping /24 ranges for trusted, IoT, servers, guest, and
   management.
2. Reserve .1 for the gateway and .2-.49 for infrastructure on every subnet.
3. Buy a gateway and switch that support VLANs and inter-VLAN firewall rules.
4. Document which SSIDs and switch ports will eventually map to each network.

## Anti-Patterns

- Double NAT without a reason or documentation.
- Using `192.168.1.0/24` when VPN access is planned.
- Dynamic addresses for NAS, Pi-hole, Home Assistant, or other service hosts.
- Consumer routers repurposed as APs while their DHCP servers are still enabled.
- Flat networks with cameras, smart plugs, laptops, and servers all sharing the
  same trust boundary.

## See Also

- Skill: `network-interface-health`
- Skill: `network-config-validation`


---
*Source: https://skills.yangsir.net/skill/gh-homelab-network-setup*
*Markdown mirror: https://skills.yangsir.net/api/skill/gh-homelab-network-setup/markdown*