I am about to start a work at home position using a mac. I will be using my own personal internet to connect to their servers through their VPN.

I want to isolate my work PC from accessing my home PC internet use; is there an easy way to acheive this? From what I understand I can isolate my work PC from the network which will effectively hide my home PC's history, what would be the easiest way to do this?

  • 1
    You can effectively create two VLANs, but what makes you think that your work PC can access your home PCs browsing history?
    – user163495
    Jul 8, 2019 at 17:25
  • 2
    What's your threat model? Your work spying on your personal internet usage through the PC? Something on your home PC compromising your work PC?
    – anon
    Jul 8, 2019 at 19:02

3 Answers 3

  1. Buy a small OpenWRT router with a WAN ethernet port and LAN wifi and/or LAN ethernet port.

  2. Plug the WAN port of your OpenWRT router on your home network.

  3. Plug your work computer on the LAN port of your small OpenWRT router.

  4. Configure OpenWRT router's firewall with a strict ruleset allowing only internet access and denying every access to your LAN.

And that's it. This is basically the cheapest and simplest solution for a poor-man network isolation ;-) A manageable switch with VLAN support would be the ultimate solution, but the price isn't the same (a small OpenWRT router with dual ethernet and wifi will cost you about 20$).

  • What about just putting your work laptop on its own subnet?
    – xr280xr
    Oct 11, 2021 at 16:02
  • It depends on how you manage your subnet... if you have a firewall to filter trafic accross your subnets, then it does the work. The small router is a all-in-one and cheap answer: it provides a different subnet with firewalling embedded.
    – binarym
    Oct 18, 2021 at 8:22

You may find your home router/access point has this functionality built-in in the form of a Guest Wi-Fi network which is isolated from the rest of your LAN. Take a look at your router's documentation etc.


If you fear that people from your workspace will access your home PC, then VPN with the usual settings does not allow communication between your home network and your workplace's network. When you connect to your workplace with your VPN client, your home network becomes hidden for your computer and people from your workplace cannot access any computer from your home network. It works by design this way. Even if soembody could see your home PC from your workspace, they would not be able to access it unless you have a server application running on it. For example Windows file shares, FTP server, etc. are needed to see anything. And even if they can see these servers they need to guess their password. Ofc. it is possible to monitor traffic, especially if it is not encrypted, but it would be a little bit paranoid to think that your employer would break into your network and spy on you. But if you insist then many routers nowadays have guest network, so you can add your work PC to that and keep everything else on your local network.

  • My concern isn't so much with my employer breaking in but others with access to my employers network. Employees come and go and you don't know who might be up to no good.
    – xr280xr
    Oct 11, 2021 at 16:00

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .