4 ms·
The IoT stuff also needs to communicate with other trusted machines (so that they can be controlled, e.g. turning on/off the lights or watching the videos from
by mook 7y ago
The IoT stuff also needs to communicate with other trusted machines (so that they can be controlled, e.g. turning on/off the lights or watching the videos from the cameras); putting them all on a vLAN would prevent that from working, too.
- mirimir 7y agoYou setup port forwarding in your router to allow that.
- clairity 7y agoyes, and it's a pain because the protocols and ports required are usually undocumented. so it's a lot of trial and error (like getting an appleTV talking to a tradfri gateway across the vlan boundary).
- Thriptic 7y agoJust set firewall policy to allow new / existing connections from your trusted machine to your untrusted ones and only existing connections from your untrusted machines to your trusted one. Granted, an average user will not be able to figure out how to do this and a standard private VLAN guest network is going to prevent this from working.