Firewall & VLAN config Documentation

[viclive79]

Summary

This would provide users with VLAN setups additional information to ensure they can configure the system using the preferred setup process.

Basic example

If you are connecting HA and Sat on different VLANs with isolation then the following steps might help you during setup.

1. identify the WIFI MAC address of your unit (currently no way do to this without having it connect to a network but I requested a feature that would display this info during setup)

2. Setup your network config to set a static IP for your new Sat

3. Setup Firewall rules to allow SAT to HA traffic on the Ports: Home assistant - 8123 & Music Assistant - 8097 (other services in future might need additional ports but this works for bulk of current capabilities)

4. Ensure network settings are in effect.

5. Proceed with the Phone setup method

This general method worked for me after I had network ready for new device to be added.

Motivation

Documentation to help others with similar setups.

[that1guy]

Thanks for this recommendation @viclive79. We'll get this done.

[that1guy]

I don't know all the rules and guidelines here and haven't had time to create all the networking environments to be sure what recommendations to make. If anyone can provide clear guidance here I'll gladly get this in documentation.

[FrankGiesecke]

@viclive79
It would be easier to use a separate WLAN to catch all satellites, wouldn't it?

I have such a setup. My HA instance is running within an isolated VLAN. A very strict configured firewall ensures, that only significant ports can be used by HA or its components. All devices that have to interact with HA are connected to this VLAN. My access points, all able to handle VLANs, span multiple SSIDs. One of them is dedicated to the HA VLAN. All satellites are connected to this SSID. So there is no need to configure the VLAN for the end devices.

This keeps things separated and save. And it reduces the complexity of end device configuration.

[funat120mph]

PR submitted: #165

The guide covers:

• Quick start for HA + Satellite on separate VLANs
• Recommended VLAN layout (Management, Trusted, IoT, Satellite, HA)
• Required firewall rules (ESPHome 6055, Wyoming 10050, HA 8123, Music Assistant 8097)
• mDNS reflector setup for UniFi, pfSense, OPNsense, MikroTik, EdgeRouter, and Linux
• Port reference table and troubleshooting guide
• pfSense step-by-step example

Based on the setup steps described in this issue.