Your switch's management VLAN is sitting on the same network as your smart plug, and that's a massive security problem
This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).
Most home networks run as a single flat segment, putting smart home devices, NAS drives, and workstations on the same broadcast domain. VLAN segmentation is the highest-value configuration change most people skip. Key points: switch management interfaces default to VLAN 1 alongside everything else, meaning a compromised IoT device can reach the switch login page; moving management to a dedicated VLAN is the first priority. The main complexity trade-off is mDNS-based device discovery (AirPlay, Chromecast) breaking across VLANs, requiring an mDNS reflector. Despite the upfront configuration effort, segmentation is largely set-and-forget once implemented.
