Guest Network Pro One way to client

[Amwjujo]

Hi,
I have recently flashed the latest Asus stock 3006 firmware on my GT-AX6000 router to play with it(mostly because wanted to see how vlans and guest network pro works with my IoT devices).
I am trying to make my Home Assistant server that runs on my main network to access my IoT devices on the Guest Network Pro, but not the other way around(One way to client as in YazFi script) but I don't know how to do it.
If I create a routing rule under lan and then I am trying to define firewall rules for outbound/inbound traffic, I discovered I can only do it for individual IP's and and not the entire subnet.

Is there a way to achieve this on 3006 firmware or it cannot be done.

Thank you.

 

[bbunge]

One way would be to create a VLAN (same VLAN as the guest network) on the network adapter of the home assistant server. It is possible but you will have to do research for your server. My NAS has two LAN ports and I was able to assign a VLAN to one LAN port so media devices (TV's) I put on a VLAN were able to access the DLNA on the NAS.

 

[Amwjujo]

Thank you for getting back.
That's interesting. I am running my HA on a proxmox server onna separate machine(laptop). Do you think I'll be able to achieve this by the method you pointed? If i assign to my HA container the same VLAN as my IoT network I assume I still need to create some sort of firewall rule in order that HA to see my main network?

 

[bbunge]

Thank you for getting back.
That's interesting. I am running my HA on a proxmox server onna separate machine(laptop). Do you think I'll be able to achieve this by the method you pointed? If i assign to my HA container the same VLAN as my IoT network I assume I still need to create some sort of firewall rule in order that HA to see my main network?

Firewall rules should not be needed. You do not need to assign a router LAN port to the VLAN. The container should have access to your "normal" LAN and the VLAN. In other words, the container LAN connection should have two IP addresses or two virtual network connectore (I may be all wet here as I do not have a use for containers). I have had experience with Linux servers assigning two IP addresses for different subnets to the same network interface. And it worked!

Edit: If I get a chance later today I will set up one of my RPI's with a home assistant and try to add a VLAN to the single network port.

 

[Amwjujo]

Thank you. Much appreciated.
I have been trying for the last hour or so to add another virtual network on my HA but i cannot do it(my learning curve here is quite steep the chatgpt i think it is going to log me out ) - I even managed to brick my entire proxmox server and had to restore.
Just to make sure I understood right: on the same ethernet connection on the machine where I run Proxmox => HA , I can define 2 virtual networks: vmbr0(existing one) and bmbr0.52(my iot one) and then have my HA communicating with both of them?