HomeKit VLAN Guest WiFi setup for IOT Security on Peplink Balance One

[ckirch]

@soylentgreen

Add

The firewall rule defined in step 6 is IMHO too strict.
HomeKit hubs (like HomePod, AppleTV) need to be able to talk back to your untagged network.
Alternative suggestions are discussed here, too:

Default set of Firewall rules to start with?

I now tested some additional configurations and firewall rules. Finally, I found a good working solution with Homepods, Apple Watch and AppleTV located in VLAN and access from iPhones / iPADs in untagged LAN (including AirPlay). I will publish the new fw ruleset in the next days as best practice examples. I assume having bonjour routing enabled plus the mDNS fw rule leads to routing of mDNS over VLANS (mDNS reflector) on peplink routers (as it works for me). Tried some suggestions from: https…