Smart Home VLAN Segmentation (2D)

A smart home's real attack surface isn't the internet — it's the path a compromised smart-camera or bulb has to your laptop and phone once it's already inside your network. This 2D network map lays out three VLANs (Trusted, IoT, Guest) around a single gateway with a live firewall ACL between them: compromise a device and a real breadth-first search runs over the actual reachability graph — computed live from the same allow/deny rule real routers enforce — to determine exactly which other devices the attack can pivot into, animated wave by wave. Toggle segmentation off, or introduce a guest↔IoT bridge misconfiguration, and watch the BFS's reachable-device count jump from a handful to all nine — proof that a lack of network isolation turns one hacked device into a whole-home breach, and that a single well-placed rule (block IoT→Trusted) contains it.