Guest vs IoT vs Device isolation

Guest vs IoT vs Device isolation

Guest vs IoT vs Device isolation
Guest vs IoT vs Device isolation
Monday
Model: Deco BE25  
Hardware Version:
Firmware Version: 1.0.11

I wanted to move all my IoT devices to the IoT dedicated network and use the Guest network for guests thereby isolating both of those networks from the main network..  however I want to add a home automation server to control all of the IoT devices and this will be a wired connection.  As I understand it, there is no was to add a wired device to either of these networks and a wired device can not see these networks.

 

i guess my only option is to make all IoT devices and the HA server part of the device isolation network, any comment.  
 

are there any security differences between the use of the IoT, Guest and device automation approaches?

 

any help would be appreciated as I have only just moved from Orbi to this platform for mesh WiFi 

  1      
  1      
#1
Options
3 Reply
Re:Guest vs IoT vs Device isolation
Tuesday

  @Trev-BE25 

Hi, welcome to the community.

The IOT Network is not isolated from the Main WiFi network. So if the HA server is wired to Deco, it could still communicate with the dedicated IoT network.

Both Main and IoT networks are still separate from the Guest network.

Best regards.

 

 

 

  0  
  0  
#2
Options
Re:Guest vs IoT vs Device isolation
Tuesday
Thanks for your response. So IoT devices and the main network are a common network. The Guest network is a segregated network and can't see the main network. If I want to protect the main network from IoT devices should I use the IoT network with the HA server and use device isolation for all the IoT devices and the wired HA server? It would make great sense to offer a dedicated and segmented IoT network option and allow Wired connections to the chosen network whether that be Main, Wired or IoT so you could manage true segmentation. Your documentation talks about wifi channel separation and convenience but it forgets to include the bigger concern of security that segmentation delivers.
  0  
  0  
#3
Options
Re:Guest vs IoT vs Device isolation
Yesterday

  @Trev-BE25 

Hi, Thanks for the update.

You are right and if you want to separate the HA server and IOT devices, the device isolation could be enabled.

 

It would be highly appreciated if you could post the following request here-Feature Request (Deco):

"It would make great sense to offer a dedicated and segmented IoT network option and allow Wired connections to the chosen network whether that be Main, Wired or IoT so you could manage true segmentation. "

 

I think it is an excellent idea and other users might want a similar feature.

Thank you and Merry Christmas!

 

  0  
  0  
#4
Options