4 ms·
Yeah, kudos on you for thinking this through. I really like Private VLANs over vanilla separate LANs(Physical or via VLAN) because it prevents each client from
by vvanders 8y ago
Yeah, kudos on you for thinking this through.
I really like Private VLANs over vanilla separate LANs(Physical or via VLAN) because it prevents each client from talking to each other even when they're on the same LAN. From the IoT device's perspective all they can reach is your gateway(192.168.1.1 or whatever) and no other device. So their ability to pivot/snoop on other devices in the network is curtailed.
Sadly it requires hardware support to do right since it's essentially disabling all the switching that exists at the ARP/Switching layer and forcing the device to route through the gateway.
On the UniFi gear this is literally just a checkbox when you're setting up the LAN(guest network vs LAN/corp network) and they handle the rest.