Advanced Smart Home Security - VLANs and Firewalls

Secure your smart home network and stop hackers by separating your smart IoT devices from your laptops and mobile phones using VLANs (Virtual Local Area Networks) and firewalls.

I show you smart home networking best practices which are recommended by computer security experts.

Links:

#ComputerSecurity #HomeAutomation #SmartHome

[davidtritsch]

This and the prior beginners guide you published are really important. Every person using home networks should watch and study both of these videos. I will be coming back to these two videos until my network is as protected as I can make it. Thanks again.

[jdez]

This was exactly what I was looking for. I don't want to give Sonos and other companies access to the same network as my computers and phones. Thank you!

[Poyo]

I soon have an exam about network security and such; this was a great resource! Thank you!

[CarlosRuiz-nxvm]

I'm starting to set up my new unifi network, and this video has been a great help, thank you.

[jonnysokkoatduckdotcom]

It seems you talk about things but not really how to do these things.

[jamegrabham]

Thanks for the info..very good video... I to use Unifi equipment....my question is, what VLAN should Homeassitant be on? The untrusted network along with all of the IOT devices? I am guessing that the cameras should be on the untrusted network as well (or a totally separate network)? Thanks in advance...

[AS-oslj]

Thanks for the video. I will implement VLANS soon.

[davidcollins]

Learning a lot from your videos! Might be a silly question but if your smart devices are blocked from accessing the internet, does that mean you can't control/monitor them when away from home and not directly on the network? E.g. look at security cameras when away on holiday?

[eskip]

Thanks voor de info. erg leuk filmpje. Ik wil pas begonnen met het vervangen van mijn bewegingssensors voor Smart producten. Ik had wel al 2 slimme tv's en een wasmachine, maar die heb ik zo lang mogelijk dom gehouden om de kat uit de boom te kijken. En inderdaad Het klopt allemaal wat je zegt. Het is zeer onaangenaam idee als de buren mee zitten te kijken terwijl ik naakt uit de douche stapt of met een partner ligt te cohabiteren. Maar na het instellen van alles kwam ik er pas achter dat ik er zonder internet echt niets aan heb. Ik gebruik al een aantal jaar alleen mijn mobiele internet. Dus ik sta nu in het donker mijn telefoon aan mijn Mikrotik router te koppelen om de verlichting aan te krijgen hahaha. Maar internet is onderweg en aangezien jij het al hebt opgebouwd hoop ik stiekem dat jij vast ergens een lijst van protocollen en poortnummers hebt gangbare domotica producten zodat ik die aan de uitsmijter kan geven Oftewel Firewall. Dan kan ik met mijn ouwe draytek router hier een apart netwerkje voor opzetten.

[panoshountis]

Great video, thank you! Just a clarification, if the router does not have enough ports to accommodate all wired devices, wouldn't a switch that supports VLAN's also be required?

[radul]

I haven't yet started to build my smart home, but I plan to do so in the near future as I want to move into a new house. Your channel is immensely supportive, as it makes some things look less daunting, as I have 0 experience with the smart home environment, but I have some basic programming skills. I'm also concerned about security, and even though Home Assistant is the more difficult route, as I understand, it's better to start on the correct path, and build my knowledge from there. So from what I understand from your video, if I install my HA on a raspberry pi 4, and add a zigbee sky connector to it, I must set it on the untrusted network on the VLAN, right? If I do it this way, can I then access the HA from my phone (which is on my trusted network)?

[DerekWalker]

Thanks for the very informative video, this is definitely my next step in securing my network.

[hnzcz]

If you have a Raspberry PI with a Home Assistant, I'd like to put it into the trusted network. But, can Home Assistant find later any new devices (using Bonjour eg. for HomeKit platform) automatically in both networks?

[nahtay]

I use a Deco router from TPLink that has an IoT network as well as a network. I segmented all my wireless IoT devices to that network but my Hue bridge is wired so is on my main. There are no separate VLANs however. Is this still secure?

[Pouyou-]

Would appletv be under trusted since you may display iPad videos on tv?

[bubbl_media]

Thank you so much for your Videos! Is there any video about your firewall rules? If not, have you planned one? Would be great!

[timmark]

Great video. Pls create a video with actual example with devices

[laveauxbazile]

i want to set up my home network, I need some help from you: I have a sonicfirewall TZ500, unifi security gateway and switch, how to wire them?

[richardefriend]

I have over 80 connected devices in my 'smart home''. Your one device at a time reconfiguring shouldn't take much more than a week's time to finish--but in the end, EVERY device needs to get through to the internet for firmware updates, and possibly much more. And every device needs to connect to my 'trusted' smart phones (many of which are just used as convenient remote controls or for quick internet access, with at least one per room) and computers. As such, I can't see how your suggestions would accomplish much in terms of added security for my setup.

[aliciawang-ug]

Thanks for the info and very nice explanation!!!