topic IoT-VLAN working? in Networking

IoT-VLAN working?

onklen — Mon, 02 Sep 2024 20:32:25 GMT

I bought a pair of BT10's for home use.

I set up the IoT network and placed my Chromecast and Samsung TV on it. I had expected the Chromecast to stop working as my phone should not be able to see it - but it can.

I then tried logging my notebook on to the IoT-network. From there I can still ping my smartphone, desktop-PC etc.

Shouldn't access between the different networks be blocked so even pinging would fail?

New to networking so I probably miss something... I also played with a Ubiquiti setup and there the VLANs are completely isolated...

Re: IoT-VLAN working?

jzchen — Mon, 02 Sep 2024 21:03:33 GMT

The initial setup with MLO and Legacy/IoT network SSID does not set up a VLAN because it is supposed to be segregated WiFi 7 devices on the MLO SSID and the Legacy devices on the other SSID, (ideally your primary/main SSID before). If you want a separate IoT device SSID go to Guest Network Pro, create this third one, which will enforce a VLAN, which prevents device access to the Legacy or MLO SSIDs.

Re: IoT-VLAN working?

onklen — Tue, 03 Sep 2024 07:08:51 GMT

Thanks Jzchen

I disabled MLO as I currently do not have a wifi 7 unit. Only 5, 6 and 6e.

Even though I click to isolate the subnet I can still ping it to/from it.

Is that not a problem or does that indicate, that potential compromised IoT-devices can talk to other networks?

What is the settings or features of the IoT-network then?

Re: IoT-VLAN working?

jzchen — Tue, 03 Sep 2024 11:38:05 GMT

My ASUS router also has MLO (and WiFi 7 disabled for 2.4, 5, and 6 GHz-1.) I only have 1 WiFi 7 phone and it isn't getting good speed from my two BE routers, (one is a TP-Link Deco).

I'm afraid I tried creating an IoT network a long time ago and didn't have any luck migrating IoTs over, so I just left them all connected to the main SSID. Since quite a few IoTs are printers in my case VLANs actually blocked ability to print. To me I guess that was enough security, or actually too much security...

There's an Access Point Isolated setting and I'm assuming that is the isolation setting you are referring to. I hope that is enough security for you, but to be honest I'm not a cyber security expert, (I am sorry I'm not sure I can help more).

Re: IoT-VLAN working?

onklen — Tue, 03 Sep 2024 12:35:18 GMT

Thank you

I was just trying to understand what the build in IoT-network actually does if it does not separate the devices from my main network...

Hopefully someone from ASUS can help.

Re: IoT-VLAN working?

JohnWilliams — Thu, 12 Sep 2024 08:11:41 GMT

Any update?

Re: IoT-VLAN working?

onklen — Thu, 12 Sep 2024 08:27:26 GMT

Hej John

Sorry no - kinda gave up. Wrote ASUS support which ask me to forward examples to another department... Never got around to it as I ran into other issues as well:

- 10gb wired backhaul crashes the system (1gb works fine)
- Wifi backhaul makes the system unstable - devices drop after 10 mins or so.

I still have a few days to return the system, so I am strongly leaning that way currently. It doesn't seem quite finished yet and without confirmation from ASUS that firmware will fix it I don't feel like taking the chance with something this expensive...