<mxfile host="app.diagrams.net" agent="IT Bible brand pack"><diagram id="segmented-network" name="segmented-network"><mxGraphModel dx="1250" dy="1020" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="1250" pageHeight="1020" math="0" shadow="0"><root><mxCell id="0"/><mxCell id="1" parent="0"/><mxCell id="t1" value="Segmented network (VLANs)" style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=top;whiteSpace=wrap;fontSize=26;fontColor=#0F2344;fontStyle=1;" vertex="1" parent="1"><mxGeometry x="40" y="28" width="700" height="36" as="geometry"/></mxCell><mxCell id="t2" value="Starter diagram. One firewall, one managed switch, four VLANs. Change the VLAN IDs and subnets to suit you." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=top;whiteSpace=wrap;fontSize=14;fontColor=#4E6A86;" vertex="1" parent="1"><mxGeometry x="40" y="66" width="1100" height="24" as="geometry"/></mxCell><mxCell id="inet" value="&lt;b&gt;Internet&lt;/b&gt;" style="ellipse;whiteSpace=wrap;html=1;fillColor=#FFFFFF;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="1"><mxGeometry x="545" y="110" width="160" height="64" as="geometry"/></mxCell><mxCell id="fw" value="&lt;b&gt;Router / firewall&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:12px&quot; color=&quot;#DCE6F5&quot;&gt;inter-VLAN rules live here&lt;/font&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#2E5B84;strokeColor=#0F2344;strokeWidth=2;fontColor=#FFFFFF;fontSize=14;" vertex="1" parent="1"><mxGeometry x="515" y="230" width="220" height="64" as="geometry"/></mxCell><mxCell id="sw" value="&lt;b&gt;Managed switch&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:12px&quot; color=&quot;#DCE6F5&quot;&gt;802.1Q trunk to the firewall&lt;/font&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#2E5B84;strokeColor=#0F2344;strokeWidth=2;fontColor=#FFFFFF;fontSize=14;" vertex="1" parent="1"><mxGeometry x="515" y="350" width="220" height="64" as="geometry"/></mxCell><mxCell id="trusted" value="&lt;b&gt;Trusted · VLAN 10&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:12px&quot; color=&quot;#4E6A86&quot;&gt;10.10.10.0/24&lt;/font&gt;" style="rounded=1;arcSize=5;whiteSpace=wrap;html=1;container=1;collapsible=0;verticalAlign=top;align=left;spacingLeft=14;spacingTop=6;fillColor=#2E5B84;fillOpacity=10;strokeColor=#2E5B84;strokeWidth=2;dashed=1;dashPattern=8 5;fontColor=#0F2344;fontSize=16;" vertex="1" parent="1"><mxGeometry x="40" y="500" width="270" height="300" as="geometry"/></mxCell><mxCell id="trusted0" value="&lt;b&gt;Desktop PC&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#E6EEF6;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="trusted"><mxGeometry x="25" y="78" width="220" height="52" as="geometry"/></mxCell><mxCell id="trusted1" value="&lt;b&gt;Laptop&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#E6EEF6;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="trusted"><mxGeometry x="25" y="148" width="220" height="52" as="geometry"/></mxCell><mxCell id="trusted2" value="&lt;b&gt;Phone&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#E6EEF6;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="trusted"><mxGeometry x="25" y="218" width="220" height="52" as="geometry"/></mxCell><mxCell id="servers" value="&lt;b&gt;Servers · VLAN 20&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:12px&quot; color=&quot;#4E6A86&quot;&gt;10.10.20.0/24&lt;/font&gt;" style="rounded=1;arcSize=5;whiteSpace=wrap;html=1;container=1;collapsible=0;verticalAlign=top;align=left;spacingLeft=14;spacingTop=6;fillColor=#2F6F7E;fillOpacity=10;strokeColor=#2F6F7E;strokeWidth=2;dashed=1;dashPattern=8 5;fontColor=#0F2344;fontSize=16;" vertex="1" parent="1"><mxGeometry x="340" y="500" width="270" height="300" as="geometry"/></mxCell><mxCell id="servers0" value="&lt;b&gt;Hypervisor&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#9DB8D0;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="servers"><mxGeometry x="25" y="78" width="220" height="52" as="geometry"/></mxCell><mxCell id="servers1" value="&lt;b&gt;NAS&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#9DB8D0;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="servers"><mxGeometry x="25" y="148" width="220" height="52" as="geometry"/></mxCell><mxCell id="servers2" value="&lt;b&gt;DNS / DHCP&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#9DB8D0;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="servers"><mxGeometry x="25" y="218" width="220" height="52" as="geometry"/></mxCell><mxCell id="iot" value="&lt;b&gt;IoT · VLAN 30&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:12px&quot; color=&quot;#4E6A86&quot;&gt;10.10.30.0/24&lt;/font&gt;" style="rounded=1;arcSize=5;whiteSpace=wrap;html=1;container=1;collapsible=0;verticalAlign=top;align=left;spacingLeft=14;spacingTop=6;fillColor=#C98A12;fillOpacity=10;strokeColor=#C98A12;strokeWidth=2;dashed=1;dashPattern=8 5;fontColor=#0F2344;fontSize=16;" vertex="1" parent="1"><mxGeometry x="640" y="500" width="270" height="300" as="geometry"/></mxCell><mxCell id="iot0" value="&lt;b&gt;Smart TV&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#E6EEF6;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="iot"><mxGeometry x="25" y="78" width="220" height="52" as="geometry"/></mxCell><mxCell id="iot1" value="&lt;b&gt;Camera&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#E6EEF6;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="iot"><mxGeometry x="25" y="148" width="220" height="52" as="geometry"/></mxCell><mxCell id="iot2" value="&lt;b&gt;Thermostat&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#E6EEF6;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="iot"><mxGeometry x="25" y="218" width="220" height="52" as="geometry"/></mxCell><mxCell id="guests" value="&lt;b&gt;Guests · VLAN 40&lt;/b&gt;&lt;br&gt;&lt;font style=&quot;font-size:12px&quot; color=&quot;#4E6A86&quot;&gt;10.10.40.0/24&lt;/font&gt;" style="rounded=1;arcSize=5;whiteSpace=wrap;html=1;container=1;collapsible=0;verticalAlign=top;align=left;spacingLeft=14;spacingTop=6;fillColor=#6A5A8C;fillOpacity=10;strokeColor=#6A5A8C;strokeWidth=2;dashed=1;dashPattern=8 5;fontColor=#0F2344;fontSize=16;" vertex="1" parent="1"><mxGeometry x="940" y="500" width="270" height="300" as="geometry"/></mxCell><mxCell id="guests0" value="&lt;b&gt;Guest Wi-Fi AP&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#E6EEF6;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="guests"><mxGeometry x="25" y="78" width="220" height="52" as="geometry"/></mxCell><mxCell id="guests1" value="&lt;b&gt;Visitor phone&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#E6EEF6;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="guests"><mxGeometry x="25" y="148" width="220" height="52" as="geometry"/></mxCell><mxCell id="guests2" value="&lt;b&gt;Visitor laptop&lt;/b&gt;" style="rounded=1;arcSize=12;whiteSpace=wrap;html=1;fillColor=#E6EEF6;strokeColor=#0F2344;strokeWidth=2;fontColor=#0F2344;fontSize=14;" vertex="1" parent="guests"><mxGeometry x="25" y="218" width="220" height="52" as="geometry"/></mxCell><mxCell id="rules" value="Suggested rules&lt;br&gt;Trusted: can reach everything.   Servers: internet out, reachable from Trusted.&lt;br&gt;IoT: internet only.   Guests: internet only, isolated from every other VLAN." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=top;whiteSpace=wrap;fontSize=15;fontColor=#0F2344;" vertex="1" parent="1"><mxGeometry x="40" y="850" width="1170" height="90" as="geometry"/></mxCell><mxCell id="rt" value="These are a starting point, not a standard. Write the rules in your firewall to match." style="text;html=1;strokeColor=none;fillColor=none;align=left;verticalAlign=top;whiteSpace=wrap;fontSize=13;fontColor=#4E6A86;" vertex="1" parent="1"><mxGeometry x="40" y="950" width="1100" height="24" as="geometry"/></mxCell><mxCell id="e0" value="" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;endArrow=none;startArrow=none;strokeColor=#0F2344;strokeWidth=2;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;fontColor=#4E6A86;fontStyle=1;labelBackgroundColor=#FFFFFF;" edge="1" parent="1" source="inet" target="fw"><mxGeometry relative="1" as="geometry"/></mxCell><mxCell id="e1" value="trunk" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;endArrow=none;startArrow=none;strokeColor=#0F2344;strokeWidth=2;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;fontColor=#4E6A86;fontStyle=1;labelBackgroundColor=#FFFFFF;" edge="1" parent="1" source="fw" target="sw"><mxGeometry relative="1" as="geometry"/></mxCell><mxCell id="e2" value="VLAN 10" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;endArrow=none;startArrow=none;strokeColor=#0F2344;strokeWidth=2;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;fontColor=#4E6A86;fontStyle=1;labelBackgroundColor=#FFFFFF;" edge="1" parent="1" source="sw" target="trusted"><mxGeometry relative="1" as="geometry"/></mxCell><mxCell id="e3" value="VLAN 20" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;endArrow=none;startArrow=none;strokeColor=#0F2344;strokeWidth=2;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;fontColor=#4E6A86;fontStyle=1;labelBackgroundColor=#FFFFFF;" edge="1" parent="1" source="sw" target="servers"><mxGeometry relative="1" as="geometry"/></mxCell><mxCell id="e4" value="VLAN 30" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;endArrow=none;startArrow=none;strokeColor=#0F2344;strokeWidth=2;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;fontColor=#4E6A86;fontStyle=1;labelBackgroundColor=#FFFFFF;" edge="1" parent="1" source="sw" target="iot"><mxGeometry relative="1" as="geometry"/></mxCell><mxCell id="e5" value="VLAN 40" style="edgeStyle=orthogonalEdgeStyle;rounded=0;html=1;endArrow=none;startArrow=none;strokeColor=#0F2344;strokeWidth=2;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;fontColor=#4E6A86;fontStyle=1;labelBackgroundColor=#FFFFFF;" edge="1" parent="1" source="sw" target="guests"><mxGeometry relative="1" as="geometry"/></mxCell></root></mxGraphModel></diagram></mxfile>