a VLAN is assigned to a specific port on the same subnet. now I have to know which port is for that VLAN specifically. now I have to segment my network to ensure I know which IPs are on that VLAN. now I have to statically assign IPs. now I need to replace my router and rebuild everything. or I setup a separate network on a different subnet with firewall rules to ensure nothing can talk to anything outside of the private network and let dhcp do assignments. hmmmm…which one is easier to maintain… I wonder… VLANs literally exist because it would be too costly to run dedicated networking hardware in enterprise solutions. from a networking perspective in a selfhosting or small business environment VLANs are overkill and high maintenance.