Deco Guest Network + Home Assistant OS (And Printers, Smart TV, etc)

Deco Guest Network + Home Assistant OS (And Printers, Smart TV, etc)

Deco Guest Network + Home Assistant OS (And Printers, Smart TV, etc)
Deco Guest Network + Home Assistant OS (And Printers, Smart TV, etc)
2023-09-16 22:21:18 - last edited 2023-09-17 20:52:20
Model: Deco XE75  
Hardware Version:
Firmware Version: 1.2.1

I just bought a Deco XE75 3pk mesh, and in the process of setup to replace an aging Google Wifi (pre Nest-Wifi) mesh network I'm hitting a wall.

 

On my Google Wifi, I keep all devices on a guest network labeled IoT. Under Guest Network settings, I am able to choose "Shared Devices" for services like printers, Home assistant,  Smart TVs, etc that need to be able to bridge the divide between networks as shown here:

 

 

https://i.imgur.com/Rdmdhs1.png

 

I can't demonstrate it in image form, but I'm able to scroll down that list and select any device on the main network.

 

On Deco, I see no such feature. The newer firmware has an IoT network toggle, but it apparently offers no isolation whatsoever between networks which completely defeats the purpose of an IoT network to me. Is there a setting I'm missing or a workaround that is commonplace/best practice to solve this exact issue of bridging a device across to guests?

  3      
  3      
#1
Options
4 Reply
Re:Deco Guest Network + Home Assistant OS (And Printers, Smart TV, etc)
2023-09-17 20:52:01 - last edited 2023-09-17 20:52:20

  @Smisc 

 

 

As best I can tell, this is how IoT Network currently works^. This current option offers essentially no security from IoT devices interacting with main network devices. If that cheap Tuya light switch I bought off ebay decides to start hitting my Network Attached Storage because it has a modified malicious firmware, I have no ability to stop it which is sort of the point of a separate IoT network.

 

 

 

This is what we really need, which is the ability for IoT devices to behave similarly to the Guest network mode, but without the ability to communicate amongst one another. Main, IoT, and Guest can all reach the internet, but only specific devices manually configured to be "Shared" can communicate with either IoT or Guest **from** Main. This allows printers, smart TVs, Home Assistant OS, etc to function properly while maintaining security so that IoT Device 1 (a Light Switch) can't reach IoT Device 2 (a 3D Printer) for example on its own network.

  3  
  3  
#2
Options
Re:Deco Guest Network + Home Assistant OS (And Printers, Smart TV, etc)
2023-09-18 08:07:47

  @Smisc can't you just select "Device Isolation" for each of the devices you want to be protected from?

 

  1  
  1  
#3
Options
Re:Deco Guest Network + Home Assistant OS (And Printers, Smart TV, etc)
2023-09-18 19:57:53

  @raven-au 

raven-au wrote

  @Smisc can't you just select "Device Isolation" for each of the devices you want to be protected from?

 

Based on the app description and documentation I can find, Device Isolation acts like an extra "Guest Network" option, in that all isolated devices can still access the internet. The isolated devices can also all communicate with each other freely which is less than ideal, but would totally be a viable/workable option for me **if** it were possible to have one isolated device still accessible from the home network. As it currently stands, Device Isolation is essentially "Guest Network 2" and doesn't fix the primary problem outlined above of needing to run Home Assistant OS from my main network for reverse proxy and forward authentication while reaching all my lightbulbs/switches/speakers/etc safely for example.

 

Effectively I want to be firewalled from these devices on a dedicated (ideally 2.4ghz) network, but one (or more) trusted device(s) should still be able to punch-through and act as intermediary. This also applies equally to more common devices than Home Assistant OS/Phillips Hue such as network Printers and Smart TVs that I want to allow guests to print/cast to.

  4  
  4  
#4
Options
Re:Deco Guest Network + Home Assistant OS (And Printers, Smart TV, etc)
2023-12-21 22:10:48

  @Smisc I have a similar problem.  I have several guests staying here for the holiday, and I put them all on the XE75's Guest network.  However, my one printer is on my main network, and I have no way to provide them access to it on the Guest network (without switching the printer's network connection also to Guest).  I've read online that many router company softwares provide this type of access for printers, but I don't see a way to do it on the Deco app.  Did you get any solution to this problem?

  0  
  0  
#5
Options

Information

Helpful: 3

Views: 750

Replies: 4

Tags