10

I have a bunch of IoT switches connected to my Wi-Fi.

I am aware of three possibilities to connect and control them.

  1. Through the Wi-Fi directly (like Samsung SmartThings does)
  2. Connect them to a personal VLAN and use them (seems more secure).
  3. Connect all the devices to a Raspberry Pi (or something similar) like a master and connect the devices to it.

Which one would be the safest (most secure for IOT) comparatively?

Are there any better solutions and how difficult would each one be?

10
  • 2
    What kind of switches do you have?
    – Helmar
    Feb 23, 2017 at 17:06
  • something of this kind. and ignore the alexa Feb 23, 2017 at 18:18
  • How do you plan to implement the VPN? Not sure I understand if what you're proposing is feasible... Feb 23, 2017 at 23:38
  • @SeanHoulihane VPN seems to be a bad idea. but my intention was to implement a VPN as small as a home network.(Once inside the house, you control everything) Feb 24, 2017 at 5:12
  • 1
    A VPN with a solid gateway might be a solution for enabling traffic from outside the local network, but don't assume it will do much to protect the local network and the devices from each other, since rogue (or simply buggy/misconfigured) code could use the network directly and poor code might accept traffic not part of the VPN. Feb 24, 2017 at 18:02

2 Answers 2

5

I think what you want is a VLAN, not a VPN. A VLAN can be used to isolate your IoT traffic from the rest of your networking devices.

A VLAN is a way of telling your networking equipment (your router) to treat certain wires to behave like they are a completely separate network, behind a firewall and dedicated to communicating in private. Some of the more expensive home networking routers can be set up this way, but setting it up complex, and will be different for each router.

You could put all the WiFi IoT devices on one VLAN, and set up your firewall so that your IoT network can't communicate with your home computing network. You would bridge the gap between the networks with your home automation hub. That way your smart phones and PCs could reach your hub to control the devices, without actually having to talk directly to the devices themselves.

1
  • 3
    Hard to tell if this answers the 'question', but it would be worth explaining how to set up a VLAN. Feb 25, 2017 at 9:52
8

John is on to a solution that should work. Another alternative is to run all your IoT devices on a WiFi guest account, and everything else on the main account/password. This is a simple way to separate your smart devices from your computer network. It's a less sophisticated method of security but a lot easier to implement.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.