VLAN Planner
Design a practical VLAN and IPv4 segmentation plan for CCTV, office PCs, Wi-Fi, servers, management and other network groups. Enter each VLAN's ID, purpose and subnet to produce a clean deployment table.
VLAN Segments
VLAN Deployment Plan
| VLAN ID | Name | Purpose | Subnet | Gateway | DHCP Range | Usable Hosts | Notes |
|---|
Recommended Segmentation Pattern
| VLAN | Example name | Typical purpose | Example subnet |
|---|---|---|---|
| 10 | MGMT | Switches, APs, NVR management | 10.10.10.0/24 |
| 20 | CCTV | IP cameras and CCTV traffic | 10.10.20.0/24 |
| 30 | USERS | Office PCs and printers | 10.10.30.0/24 |
| 40 | WIFI | Staff wireless clients | 10.10.40.0/24 |
| 50 | GUEST | Guest / internet-only wireless | 10.10.50.0/24 |
| 60 | SERVERS | Servers and infrastructure services | 10.10.60.0/24 |
Design principle: VLANs provide Layer-2 segmentation. Communication between VLANs requires Layer-3 routing, and access should be controlled with ACLs/firewall policies as appropriate.
CCTV VLAN Design Notes
- Put cameras into a dedicated CCTV VLAN when the network design and equipment support it.
- Restrict camera-to-user and camera-to-internet traffic according to the actual security requirement.
- Keep NVR management access separate from general user access where practical.
- Use the VLSM Planner first when different VLANs need different subnet sizes.
- Document the gateway, DHCP scope, static camera range and management addresses before deployment.