Tools · Chapter 7
Three-Zone Network Architecture
Which devices belong on which network segment, and what each zone may reach.
| Zone | Devices | Access rules |
|---|---|---|
| Main network | Laptops, phones, trusted devices | Full internet access, can communicate with each other |
| IoT network | Smart TVs, thermostats, cameras, speakers, appliances | Internet access only — cannot communicate with main network or each other |
| Guest network | Visitor devices, temporary connections | Internet access only — completely isolated from all other zones |
Reproduced verbatim from The Privacy Diet, Chapter 7 — “Three-Zone Network Architecture”. The book explains the reasoning behind each verdict.