This is what I do for my own LAN :
- Create VLAN Interfaces
Please note you should NOT configure a gateway on those!
Just the IP address and Subnet is enough
- Make sure all running services are bound only to the main non-VLAN Interface to avoid exposure of those in the wrong VLAN's.
- Add the additional VLAN interfaces to FTLDNS a.k.a. DNSmasq like so :
/etc/dnsmasq.d$ cat 101-my.settings
interface=eth0.10
interface=eth0.100
interface=eth0.254
And then restart FTLDNS ofcourse to make sure this actually works ![]()
Any Static IP using Clients or DHCP Server configuration would obviously need some adjusting too on the VLAN's you are using!