Security
Cheap smart gadgets get few updates and are the easiest way into a home network. On a flat network, one compromised plug can see every laptop and camera in the house.
With zones: a compromised gadget stays stuck in its own room.
Smart home guides
Planning a smart home network
Fifty devices on one ISP router is asking for trouble. How to give cameras, guests and gadgets their own space, and keep your home fast and secure.
The short version: not every device in your house deserves the same trust. Give phones and laptops one zone, smart devices another, cameras and locks a third, guests a fourth, and the hub a seat in the middle with deliberate access to the others. Each zone gets its own Wi-Fi name and rules about who can talk to whom. It needs proper equipment rather than an ISP router, but once it’s set up, you’ll barely notice it, except that everything works.
Why it matters
Reliability
A smart home can mean fifty or more connected devices. Most ISP routers were built for a few phones and a TV, so devices drop off and automations fire late.
With proper gear: access points and a gateway sized for the load.
Privacy
Many cameras and devices send data to overseas clouds by default. Your driveway footage doesn’t need to leave the house.
With zones: cameras record locally with no internet access at all.
Five zones for a typical home
This is the layout we build for most homes. Each zone is its own network, and the rules between them decide who can talk to whom. For the full detail, read The Seating Chart.
| Zone | What lives there | What it can reach | Wi-Fi name |
|---|---|---|---|
| Trusted VLAN 10 |
Phones, tablets, laptops, TVs, streaming boxes and consoles | Can start a conversation with any other zone, so your phone can open the hub’s app or a camera feed | Home |
| Cameras and locks VLAN 15 |
Security cameras, video doorbells, the NVR, smart locks | Nothing. Cameras record locally and have no internet access | None, wired or paired |
| Servers VLAN 20 |
Your smart home hub and NAS | Deliberately reaches cameras and smart devices, and answers your phone | None, wired |
| Guests VLAN 40 |
Visitors’ phones and laptops | Internet only, and not even each other | Home-Guest |
| Smart devices VLAN 50 |
Bulbs, plugs, sensors, robot vacuums, appliances, solar and energy gear, smart speakers | Internet only. Never your laptops or each other | Home-IoT |
The hub is the one deliberate exception. It sits in the servers zone with a connection into the smart device zone, so Matter, Thread and casting keep working while your personal devices stay protected.
Signs your network is holding you back
If any of these sound familiar, the network is usually the fix, not another gadget.
Devices keep dropping off
What you see: plugs and sensors going offline, automations that fire late or not at all.
Why: most ISP routers struggle once you pass a few dozen connected devices.
The fix: proper access points and a gateway built for the load.
Everything is on one network
What you see: one Wi-Fi name for phones, cameras, guests and gadgets.
Why: one compromised gadget can see every laptop and camera in the house.
The fix: separate zones with rules between them.
Cameras lag or need the cloud
What you see: buffering live views, missed clips, a subscription to see your own driveway.
Why: video floods busy Wi-Fi, and cloud cameras send footage offsite.
The fix: wired PoE cameras recording locally, with no internet access.
What a proper network needs
A gateway that understands zones
The gateway replaces your ISP router. It connects to the NBN, creates the zones and enforces the rules between them, which is the part ISP routers can’t do.
A managed PoE switch
One cable to each camera and access point carries both data and power. A managed switch keeps each device in the right zone, wired or not.
Access points, not a single router
Ceiling or wall access points in the right places give strong Wi-Fi in every room and broadcast a separate Wi-Fi name for each zone.
Frequently Asked Questions
What is a VLAN?
A VLAN is a virtual network: several separate networks running over the same switches and access points. Each one has its own Wi-Fi name, its own addresses and its own rules about who can talk to whom. It’s how one house can have a trusted network, a guest network and a smart device network without buying three sets of equipment.
Do I need to understand VLANs to use this?
No. Once it’s set up, you just see a few Wi-Fi names: one for your family, one for guests and one for smart devices. We build the zones and rules for you, and the only time you’ll notice them is when something stays safely where it belongs.
Can my ISP's modem router do this?
Usually not properly. Most ISP routers offer one main network and maybe a guest network, with no real rules between zones and limited capacity for dozens of devices. They’re fine for a few phones and a TV, not for a smart home with cameras and a hub.
Will separating devices slow my internet down?
No. If anything it helps, because chatty smart devices are kept on their own network and your phones and laptops get a cleaner connection. The equipment that handles zones properly is also faster than a typical ISP router.
Does this work with my NBN connection?
Yes. Your NBN connection stays exactly as it is. The new gateway connects to the NBN box in place of your ISP router, and everything behind it is organised into zones. We can set it up for any NBN technology, including fibre to the premises and HFC.
Won't Matter and Thread devices break if they're on a different network from the hub?
They can, if it’s done carelessly, because some smart home discovery doesn’t cross between networks. We give the hub a connection into the smart device zone as well, so Matter, Thread and casting keep working while your laptops and phones stay protected.
Want your network set up properly, once?
Tell us about your home, your NBN connection and what you want to connect. We’ll design the zones, supply the equipment and set it up, on our bench or on-site in Sydney and the Central Coast.