Allow IoT subnet to access one specific device on main subnet

Can I do something like this?

For context, all my IoT devices are currently connected to a separate router, and it's bi-directionally connected by pointing all traffic to that subnet to the routers IP in the main subnet.

I want to utilize the IoT subnet function in 4.9. However, my HAOS is running on a NAS in the main subnet and it can't be moved. HAOS has to be able access the IoT subnet. How do I point that traffic (since it's managed by the main router instead of a client on the main subnet)?

Much appreciated!

Hi,

Based on your description,if HAOS on the NAS needs to initiate access to devices in the IoT network.
You can try setting it up this way:

  1. Please assign a static DHCP address to the NAS/HAOS.
  2. Then go to Security → ACL → Add Rule and create the following rule:

    Destination Address: leave it blank to allow HAOS to reach all IoT devices, or specify one IoT device IP if only one device is required.

This allows only HAOS to initiate connections to the IoT network, while IoT devices remain unable to initiate access to the main LAN.

2 Likes

Thanks! I'll try it over the weekend!

Hi,

You’re welcome! Hope it works well for your setup.
If you run into any issues during the test, please feel free to let us know.