need assistance understanding security difference between rules for vlan or user groups

Follow

Ed

• April 02, 2021 21:14
• Edited

Hello. I have an orbi router which doesn't support vlan. My goal is to segregate my IOT devices.  I am running gold in router mode. If i created a vlan everything on the orbi would be on the same vlan segment, essentially making it impossible to really segregate anything since almost every device is wireless. 

If i create a firewalla group with devices for IOT, then create a firewall rule below,  will this provide the adequate protection that I want to segregate the IOT devices?  Will it cause any compatibility issues?  I have already read the help article on setting up vlans.  Thank you!

0

• 

  Patrick Hait

  • December 30, 2021 15:53
  • Edited

  I am trying the same exact thing, but I don't think this is doing anything.  (I too have read the help article!).  I am not running a vlan.  My whole network is 192.168.2.xxx .

  I've found that Google Home has a few open ports.  I've put my Google Homes in this IoT group, just as you have described.

  From my desktop, I run telnet 192.168.2.### 8009   (8009 is an open port).  I expect that the connection would not be successful, however, the connection is successful.

  Does anybody have any ideas?

  0

  Comment actions Permalink
• 

  Patrick Hait

  • December 30, 2021 15:53

  Looks like this can't be done with Groups. Must be on a different subnet.

  https://help.firewalla.com/hc/en-us/community/posts/360049860474-Local-Area-Network-Block-Rule?input_string=IoT%20Group%20Restrictions

   

  0

  Comment actions Permalink

Please sign in to leave a comment.