Isolating a Pentest Lab the Right Way: VLANs, Default Deny, and Proof
Challenge: run offensive security tools at home without any risk to the production LAN. Action: built an isolated Kali segment behind a dedicated VyOS
Kelly Truong
Network Security / SOC Analyst, open to fully remote roles
7 years of datacenter, NOC, and hosting infrastructure. CompTIA Security+. I build and run segmented networks, isolated pentest labs, and out-of-band management, and document all of it here.
Latest writeups
$ ls writeups/
Recovering a Dead Server BMC: From Wedged IPMI to CH341A Chip Flash
Challenge: a production server's BMC was bricked - no remote console, no out-of-band management, stuck boot. Action: pulled the socketed SPI
Building a Segmented Home Lab: Arista Switching + VyOS Routing
Challenge: a flat home network gives zero practice for enterprise security operations. Action: designed a multi-VLAN lab on Arista EOS with VyOS routing
whoami
Systems administrator with seven years across datacenter operations, NOC, and hosting infrastructure. Hands-on from server hardware through routing and switching, now focused on network security engineering.
CERTIFICATION CompTIA Security+ (ce)
- NETWORKING
- Arista EOS · VyOS · VLANs/SVIs · LACP · BGP fundamentals · WireGuard
- SYSTEMS
- Linux · Proxmox VE · Docker · virtualization · IPMI/BMC · firmware recovery
- SECURITY
- Network segmentation · default-deny policy · isolated pentest lab operations
- OPERATIONS
- NOC workflows · maintenance windows · NetBox · monitoring and watchdogs