HomeKit VLAN Guest WiFi setup for IOT Security on Peplink Balance One

[soylentgreen]

In fact, looking at my setup, I do have an additional rule which called AllowAppleTV which lets the AppleTV device connect to anyting on the untagged LAN:

@stego

If the HomeKit hub is compromised then I guess this would put you at risk. But I trust Apple security a little but more than I do other third party IoT devices. At the very least, Apple will maintain its firmware for some time.

Agree - this is a somewhat increased security risk, so you may not want or need this rule.

Another thing to consider is that many apple devices support AWDL (Apple Wireless Direct Link) which enables two apple devices to communicate via an ad-hoc WiFi channel. I believe this allows two apple devices (say an AppleTV and a iPhone) to communicate over bluetooth, and then send data over WiFi without involving your router at all.