r/HomeNetworking • u/Repulsive-Cucumber16 • 9h ago
My First DIY Home Network. Triplex with 3 Isolated Networks, VLANs, Firewall Rules, PoE & Wi-Fi 6!
Hey everyone!
Just wanted to share my DIY home networking setup that I’m pretty proud of! I’m definitely no IT professional, but I decided to tackle this project myself and learned a ton along the way. I still have some cable management and cleanup to do, but everything is up and running!
A little background:
My property is a triplex with two rental apartments in the main house and my owner-occupied apartment above the garage. My goal was to provide reliable, high-speed internet to all three units while keeping everyone’s networks private and separate.
Garage / My Apartment:
Rogers Xfinity 1.5 Gbps internet connection, with the modem/router located inside the grey enclosure in the garage.
TP-Link 5-port Gigabit switch.
Four hardwired Cat6 connections for my security camera NVR, office printer, Xbox, and outdoor TV on the deck.
My apartment uses the Rogers Xfinity Wi-Fi for wireless devices.
A Cat6 connection runs from the garage switch to the mechanical room in the main house.
Main House / Two Rental Apartments:
The incoming Cat6 connection feeds a TP-Link ER605 router.
The ER605 connects to an 8-port PoE switch that distributes the network throughout the building.
Two TP-Link Omada EAP650 Wi-Fi 6 access points, one dedicated to each apartment.
One apartment also has two hardwired Ethernet ports for tenants to use however they like.
Each apartment has its own dedicated Wi-Fi network and IP subnet.
Network Configuration, VLANs & Firewall Security:
This was by far the most challenging and rewarding part of the project!
I configured the ER605 router with separate VLANs, IP subnets, and six IPv4 firewall rules to isolate the rental networks from each other and protect my personal network.
Here’s how I configured the firewall rules:
Main Floor - Basement: Blocked
Basement - Main Floor: Blocked
Main Floor - Management LAN: Blocked
Basement - Management LAN: Blocked
Main Floor - Rogers Private Network: Blocked
Basement - Rogers Private Network: Blocked
I also created a custom IP group (ROGERS_PRIVATE_GROUP) covering 10.0.0.0/24, which is the subnet my personal Rogers network uses.
This was important to me because I didn’t want either rental apartment to have access to my personal devices, security camera NVR, printer, or anything else connected to my Rogers network.
My apartment operates directly on the Rogers network, while both rental apartments connect through the ER605 with their own VLANs and firewall restrictions.
I performed connectivity tests after configuring the rules. Attempts to reach the Rogers gateway from a rental network timed out, consistent with the firewall blocking access. I still have some additional testing to do to fully verify the management-network restrictions and isolation between all devices.
Network Performance:
The results have been fantastic so far!
I’m getting approximately 820mbps and 19ping across all apartments consistently using the EAP650 access point.
All three apartments share my Rogers Xfinity 1.5 Gbps connection, which costs me just $80 a month in Canada.
This was my first time doing anything this advanced with networking. I handled the Cat6 wiring, terminations, switches, access points, VLAN configuration, IP addressing, and firewall setup myself.
There were definitely some frustrating moments trying to get everything communicating properly while also keeping the networks separated, but I learned a lot throughout the process.
I know my cable management could use some work, and I’m sure there are things I could improve, but I’m really happy with how everything turned out!
My goal was to create something reliable, secure, and expandable without having to hire a professional networking company.
Would love to hear everyone’s thoughts, suggestions, or recommendations for improvements. Especially from those of you who work in networking professionally!

