DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Vigor 2865ac access control list!

  • arrudac30
  • Topic Author
  • Offline
  • New Member
  • New Member
More
12 May 2023 00:54 #102481 by arrudac30
Vigor 2865ac access control list! was created by arrudac30
Hi everyone.

I have created VLANS for my household envirenment, given that there are quite a few diferent equipment, like cctv, pc's, and IOT's.

Now, my IoT's, like for example my bedside table lenovo radio/alarm/clock. When I want to youtube music from my phone to this IoT device, I am having to, at the moment, to get out of the current wifi that my phone is connected to, and connect to the same VLAN (wireless) that my IoT device is on. Only then can I connect youtube music to that device.

Now, is there a way that I can creat an access control list to allow my mobile phone (mac binding IP, so always the same IP) and allow it to acess that IoT device (also mac binding)? I could always do inter-vlan routing but i'd rather limit the amount of devices that can communicate with each other.

I could do this about 10 years ago wheh I used to do Cisco, but on the command line, never on a UGI.

I am quite new to Draytek routers but so far I am loving it.

Any help would be much appreciated.

Thanks everyone.
Albert

Please Log in or Create an account to join the conversation.

More
12 May 2023 13:27 #102483 by piste basher
Replied by piste basher on topic Re: Vigor 2865ac access control list!
I don't think your Access Control approach can work because as far as the router is concerned there is no connection between the LANS.

Perhaps you could allow Inter-LAN routing but set a firewall rule to block everything but that one IP? I'm not sure at what "level" the firewall operates so I don't know how feasible this is but maybe worth a try?

Please Log in or Create an account to join the conversation.

  • arrudac30
  • Topic Author
  • Offline
  • New Member
  • New Member
More
12 May 2023 16:00 #102484 by arrudac30
Replied by arrudac30 on topic Re: Vigor 2865ac access control list!
Thank you. I will have a try. Thanks for you sugestion.

Please Log in or Create an account to join the conversation.

  • arrudac30
  • Topic Author
  • Offline
  • New Member
  • New Member
More
12 May 2023 17:11 #102486 by arrudac30
Replied by arrudac30 on topic Re: Vigor 2865ac access control list!
Hi.
After cross VLAN routing I can now ping the devices but they won't show on the mobile phone VLAN.

More so i can specify a rule on the firewall to allow traffic to passthrough from mobile (VLAN1) 192.168.1.4 to Alarm clock (VLAN3) 192.168.3.1, and the firewall diagnose will pick this up as either an established rule or default. I can even block it and the diagnose feature shows it working to that effect, yet I can't connect to any of them IoT devices as they won't show.

This is cracking me up but I'll keep pushing.

Thanks

Please Log in or Create an account to join the conversation.

  • arrudac30
  • Topic Author
  • Offline
  • New Member
  • New Member
More
12 May 2023 17:29 #102487 by arrudac30
Replied by arrudac30 on topic Re: Vigor 2865ac access control list!
Hi all.

I have just found this article. Will give it a go.

https://baihuqian.github.io/2020-12-13-secure-home-network-using-chromecast-across-vlans/

Thanks

Please Log in or Create an account to join the conversation.

  • arrudac30
  • Topic Author
  • Offline
  • New Member
  • New Member
More
31 May 2023 23:42 #102533 by arrudac30
Replied by arrudac30 on topic Re: Vigor 2865ac access control list!
Hi all.

I have done inter-lan routing and I can't still send music from my mobile phone (VLAN1) to my IoT (VLAN2).

Now I can ping the IoT device from VLAN1 PC no problem.

It still only works if my mobile phone is on the same VLAN as the IoT.

Any pointers much appreciated.

Thanks
Albert

Please Log in or Create an account to join the conversation.

Moderators: ChrisSami