3 ms·

VLANs (if using Ethernet) or separate wireless network with no access to the internet nor your LAN (LAN->TV is OK, TV->LAN is not) is the only way to go. Anythi

VLANs (if using Ethernet) or separate wireless network with no access to the internet nor your LAN (LAN->TV is OK, TV->LAN is not) is the only way to go. Anything else is a game of whack-a-mole that you're likely to lose.

HWR_14 5y ago
I have extra networking hardware. I wasn't aware I could have LAN->TV but not bidirectional communication. Is there a source you know of better than googling on how to achieve this, since you seem to imply it's different than searching about VLANs since it's wireless.
- Nextgrid 5y ago
  Technically you'd need bidirectional communication once a LAN->TV connection has been established. What I meant is to restrict connection establishment to only LAN->TV but not the other way around. In terms of configuring firewalls/etc, it really depends on your equipment, however in most cases there's already a catch-all rule to allow any established & related traffic so you only need to add a rule to allow the initial connection establishment from LAN->TV. > since you seem to imply it's different than searching about VLANs since it's wireless. When it comes to VLANs, the idea is that the Ethernet port of the TV should either be connected to a managed switch that will tag any incoming traffic on that port with a VLAN tag before sending it upstream to your router (so it can tell what it is, since at that point it'll be arriving via a port that also has trusted LAN traffic), or connect it directly to the router and have that router's port not be part of the LAN bridge. You don't have VLANs in wireless, instead you just create a new network - however the access point itself will need to either tag all traffic from said network with a VLAN tag (so again your upstream router can differentiate between that and trusted LAN traffic arriving over the same port), or if the AP is incapable of VLAN management then dedicate it to the TV network and connect it to a managed switch or dedicated port on the router as described above.
  - HWR_14 5y ago
    My naive solution was going to be to assign the non-internet devices a smaller subnet with a bad gateway, and have all the "bridging" devices have IP addresses in that subnet, but with the real subnet and gateway. I'm sure VLANs are superior, but if you could tell me what's dumb about my idea I would appreciate it. Meanwhile, do the VLANs allow the "enumerate devices" style multicast to come down from the regular LAN and be responded to?

HWR_14 5y ago

I have extra networking hardware. I wasn't aware I could have LAN->TV but not bidirectional communication. Is there a source you know of better than googling on how to achieve this, since you seem to imply it's different than searching about VLANs since it's wireless.

Nextgrid 5y ago
Technically you'd need bidirectional communication once a LAN->TV connection has been established. What I meant is to restrict connection establishment to only LAN->TV but not the other way around. In terms of configuring firewalls/etc, it really depends on your equipment, however in most cases there's already a catch-all rule to allow any established & related traffic so you only need to add a rule to allow the initial connection establishment from LAN->TV. > since you seem to imply it's different than searching about VLANs since it's wireless. When it comes to VLANs, the idea is that the Ethernet port of the TV should either be connected to a managed switch that will tag any incoming traffic on that port with a VLAN tag before sending it upstream to your router (so it can tell what it is, since at that point it'll be arriving via a port that also has trusted LAN traffic), or connect it directly to the router and have that router's port not be part of the LAN bridge. You don't have VLANs in wireless, instead you just create a new network - however the access point itself will need to either tag all traffic from said network with a VLAN tag (so again your upstream router can differentiate between that and trusted LAN traffic arriving over the same port), or if the AP is incapable of VLAN management then dedicate it to the TV network and connect it to a managed switch or dedicated port on the router as described above.
- HWR_14 5y ago
  My naive solution was going to be to assign the non-internet devices a smaller subnet with a bad gateway, and have all the "bridging" devices have IP addresses in that subnet, but with the real subnet and gateway. I'm sure VLANs are superior, but if you could tell me what's dumb about my idea I would appreciate it. Meanwhile, do the VLANs allow the "enumerate devices" style multicast to come down from the regular LAN and be responded to?