SN 783: IoT Isolation Strategies

TWiT Shows Security Now
23

Ubiquity has a Canadian store:
https://ca.store.ui.com

And I have had good results ordering from memory express
https://www.memoryexpress.com

1 Like
24

@PHolder @ScruffyDan Most of the items I ordered on Amazon.ca came from Mike’s Computer in Hamilton.

What I did not know until recently, about Ubiquiti, after I bought a router and a couple of switches, was they have 2 design philosophies. The X type hardware that uses a builtin web server for configuration, and the Unifi hardware, where you have a Unifi web server daemon running on a server, that is use to configure devices.

Had I know this, I may have made different choices which hardware I’d have purchased, since the APs are only Unifi.

2 Likes
26

If you are referring to the Unifi stuff, you still need the Unifi Network Manager server running in the network, the phone App connects through the cloud account to the Unifi NM for that network.

28

I’ve only ever set-up installations with multiple APs. But given the whole point of Unifi is central management of all network gear, I don’t see the point of buying a single AP, there are cheaper alternatives that are just as good, for single AP access and setting up dozens of APs individually is just crazy.

But you are correct, you can set up an individual AP using the phone app.

30

With a dozen IoT devices on a home network, adding the Ubiquiti EdgeRouter X then attaching two dedicated WiFi Access Points, one for IoT devices and one for computers, cell phones, printers, etc. was a good solution for me. The configuration allows control and monitoring of IoT devices from cell phone or computer. IoT devices have Internet connectivity but cannot see each other and are isolated from devices on protected network.

  1. Ethernet patch cable from Fiber Modem to port 1 on EdgeRouter X
  2. Ethernet patch cable from EdgeRouter X port 2 to TP-Link AC1750 for IoT devices.
  3. Ethernet patch cable from EdgeRouter X port 3 to NetGear Orbi for WiFi connected devices such as laptops, cell phones, etc. on protected network.
  4. Ethernet patch cable from EdgeRouter X port 4 to unmanaged 8-port switch with various hardwired devices such as printers and desktop computers on protected network.

Securing your network from IOT devices using the EdgeRouter X

1 Like