I'm moving into a new house next month. One of the projects is networking the whole place as it has none currently. It will include 3 switches (4 physical, but two will be stacked together), dual fiber 10G uplinks between switches, and dual Cat 6 (maybe 6a) to most rooms. The patch panels will be located in the basement along with the stacked switch. The switches support MAC-based-VLAn and Dot1x Port Authentication. I currently have RADIUS configured to do Dot1x user authentication on the switches. What's the best practice when it comes to VLANs in the house? I am going to have the follwing VLANs: 1 - Default (unused) 2 - Voice (VOIP) 3 - Cameras (POE IP) 4 - Guest (internet access only) 5 - Management 10 - Private (all my personal stuff) 20 - Roommate1 (his room's ports + any of his devices) 30 - Roommate2 (his room's ports + any of his devices) What's the best way going about making this a streamlined setup? It appears if I do MAC-Based-VLANs in the switches, I'll have to put each entry into each switch individually and this can get tedious and they may not be synced between them as devices come and go. Can I set up normal VLANs with tagged and untagged port memberships and default vlans on various ports for specific rooms, then add Dot1x Port Authentication on top of that? I can make Dot1x just look at the MAC and determine VLAN based on that, right? If it's an unknown device, then use captive portal to ask for login info and set up VLAN that way? I'm trying to learn alot here as I take on this personal project so some reading and how-to material would be appreciated. FYI, I am using all Netgear switches as that's what I have already.