3 ms·

Does anyone know a decent tutorial or explanation, how to "secure" one's network with IoT devices in it? For instance, all my lights are controlled using IKEA'

Does anyone know a decent tutorial or explanation, how to "secure" one's network with IoT devices in it? For instance, all my lights are controlled using IKEA's TRÅDFRI solution. Also, they are integrated into my own HomeAssistant instance (dockerized), which runs on my Unraid machine, which also hosts my data shares. Then we have FireTV's, Echo's, we have a Xiaomi vacuum robot, and so on. The FireTV should be able to access the data shares for playing back movies. Alexa can control our lights, too. I'm still struggeling to find a "one size fits all" solution.

dillonmckay 7y ago
VLANs would help, but you need routers and switches, and APs that support that. You would restrict/allow certain ports between VLANs, only allowing the port traffic you want.
- tomatocracy 7y ago
  And be careful with switches. You also (at least ideally) want switches which don't expose their own management interface to your isolated VLAN (usually this is called 'management VLAN' as a feature description). My experience is that of the consumer level 'Web managed' switches, only the dlink ones do this.
tinus_hn 7y ago
For starters, connect these devices only to a separate network, either physical or VLAN, to make sure they cannot directly reach the devices you manage yourself. Make sure the devices cannot see things in the physical world that you do not want to leak. Do not point a networked camera onto your sleeping room if you don’t want others to see inside. Then, take effort so the devices that need to reach the devices that contain your own data are only allowed access you choose. A set top box may need to read your movies but does not need write access. It does not need unfettered access to your home network. You may be able to grant it access your shares but not the internet. And buy reputable stuff, although the S in IoT is for security and that goes for all devices, some get more support and care than others.

dillonmckay 7y ago

VLANs would help, but you need routers and switches, and APs that support that. You would restrict/allow certain ports between VLANs, only allowing the port traffic you want.

tomatocracy 7y ago
And be careful with switches. You also (at least ideally) want switches which don't expose their own management interface to your isolated VLAN (usually this is called 'management VLAN' as a feature description). My experience is that of the consumer level 'Web managed' switches, only the dlink ones do this.

tinus_hn 7y ago

For starters, connect these devices only to a separate network, either physical or VLAN, to make sure they cannot directly reach the devices you manage yourself. Make sure the devices cannot see things in the physical world that you do not want to leak. Do not point a networked camera onto your sleeping room if you don’t want others to see inside. Then, take effort so the devices that need to reach the devices that contain your own data are only allowed access you choose. A set top box may need to read your movies but does not need write access. It does not need unfettered access to your home network. You may be able to grant it access your shares but not the internet. And buy reputable stuff, although the S in IoT is for security and that goes for all devices, some get more support and care than others.