Re: Placing our Squeezeboxes in a separate IoT network?

Thanks a lot Kev,
This is very helpful information to me :-)

Personally for me, I am also considering putting all my Fire TV sticks,
Chromecasts and smart TVs on my IoT network. There would be one problem
there, the Fire TV sticks use 4K streams frequently; those probably will
have trouble on the 2.4 GHz only IoT network. 

The main difference between yours and my setup is your LMS is on a
separate network segment, whereas my LMS is on my main network. Right
now I do not see a need for a separate always on device to run LMS
(since I already have an always on server). So I am looking for
information on which ports need to be opened from SB radios to the LMS
server.

In terms of security, yeah, these ports open would present some security
risk. Since at my day job, I deal with networking, firewalls and
servers, I am reasonably comfortable with firewall rules keeping stuff
"secure enough".


KeBul wrote: 
> I have separate VLANs for...
> 
> >   >   > 
  - Squeezebox players and server(s) plus another Rpi running Kodi for
  > home ripped movies/videos (all music and videos stored on one
  > multimedia data NAS)
  - iot things - smart speakers, switches, harmony remote, smart
  > heating etc 
  - Anything that connects to internet that I do not have control of
  > in terms of software updates - Apple TV, Amazon Fire TV, Satellite
  > Box, TV itself (these are all hardwired and do not use wifi) - for
  > example, I've not seen a software update on my TV for years
  - Guest Wifi
  - Webserver (out there on it's own being one of the few devices with
  > ports open to the internet)
  - 
  > > > 
> I actually have 7 VLANs setup but only use 6 at the moment - as well
> as the above 5 there is a general VLAN, which standard home use
> devices connect to, PC's laptops, phones, tablets, NAS and printer.
> 
> I don't allow any cross or inter VLAN traffic - kinda defeats the
> point of having divided the network into VLANs I feel.
> 
> Things like using mobile App to remote control TV, I lose that
> functionality because there is no wifi in the 3rd VLAN on the list,
> but that's OK we use a Harmony Remote anyway and the App for that
> works on any of my VLANs
> 
> If you want to control the Squeezeboxes (iPeng, Material or Standard
> WebUI) then you have to connect your control device to the Squeezebox
> Wifi.
> 
> Not going to list my kit but I use Draytek and Cisco
> 
> It's probably overkill, but was fun learning to set it all up, the
> driving force(s) at the time I did it was the inability to update the
> software packages in SSOTS  running LMS on my QNAP multimedia NAS and
> the inability to upgrade the SB Radio for the WPA2 Kracks.
> I also have lots of data (mainly photos) I wanted to keep as secure as
> possible so separating that from risk areas seemed the right thing to
> do.
> I've since moved LMS from SSOTS/QNAP onto Rpi and piCorePlayer - which
> I'd consider reasonably secure as it gets security updates regularly.
> My data is now also secured using several offline backups.
> 
> Kev


------------------------------------------------------------------------
rajdude's Profile: http://forums.slimdevices.com/member.php?userid=71085
View this thread: http://forums.slimdevices.com/showthread.php?t=116703