Home network segmented into VLANs — IoT devices, trusted clients, and guest traffic isolated on separate subnets with OpenWRT firewall rules between them.