Re: Placing our Squeezeboxes in a separate IoT network?

I have separate VLANs for...

    
- Squeezebox players and server(s) plus another Rpi running Kodi for
  home ripped movies/videos (all music and videos stored on one
  multimedia data NAS)
- iot things - smart speakers, switches, harmony remote, smart heating
  etc 
- Anything that connects to internet that I do not have control of in
  terms of software updates - Apple TV, Amazon Fire TV, Satellite Box,
  TV itself (these are all hardwired and do not use wifi) - for example,
  I've not seen a software update on my TV for years
- Guest Wifi
- Webserver (out there on it's own being one of the few devices with
  ports open to the internet)
- 
  
I actually have 7 VLANs setup but only use 6 at the moment - as well as
the above 5 there is a general VLAN, which standard home use devices
connect to, PC's laptops, phones, tablets, NAS and printer.

I don't allow any cross or inter VLAN traffic - kinda defeats the point
of having divided the network into VLANs I feel.

Things like using mobile App to remote control TV, I lose that
functionality because there is no wifi in the 3rd VLAN on the list, but
that's OK we use a Harmony Remote anyway and the App for that works on
any of my VLANs

If you want to control the Squeezeboxes (iPeng, Material or Standard
WebUI) then you have to connect your control device to the Squeezebox
Wifi.

Not going to list my kit but I use Draytek and Cisco

It's probably overkill, but was fun learning to set it all up, the
driving force(s) at the time I did it was the inability to update the
software packages in SSOTS  running LMS on my QNAP multimedia NAS and
the inability to upgrade the SB Radio for the WPA2 Kracks.
I also have lots of data (mainly photos) I wanted to keep as secure as
possible so separating that from risk areas seemed the right thing to
do.
I've since moved LMS from SSOTS/QNAP onto Rpi and piCorePlayer - which
I'd consider reasonably secure as it gets security updates regularly.
My data is now also secured using several offline backups.

Kev


------------------------------------------------------------------------
KeBul's Profile: http://forums.slimdevices.com/member.php?userid=32883
View this thread: http://forums.slimdevices.com/showthread.php?t=116703