Hopefully the below diagrams will be of use
Diagram 1
Diagram 2
Thoughts:
Diagram 1 is simple to setup and involves 2x wifi routers, wifi router 2 is in essence in double NAT, but should not cause any issues with kit on the main network gaining access to internet for updates etc, Remote dial in for main network would be tricky due to the double NAT, but as far as I am aware, this is not required for main network.
The main point here is that Home Assistant is placed in a DMZ from Wifi router 1 and thus enables both 2nd network and main network to access home assistant whilst still keeping main network separation form 2nd network.
Note: Alas, Putting Home Assistant in DMZ is not ideal and second network card maybe needed with dedicated IP and / or port forwarding rules applied to router, but minor points.
Diagram 2 is much more logical in architecture, but does require 3x VLANs to be configured and good switch cmd knowledge.
Good aspect of Diagram 2 is that if extra wifi device is required, they can be connected via VLAN assigned ports and easily adaptable.
VLAN 1 = Main Network
VLAN 2 = 2nd Network/Wifi
VLAN 3 = Home Assistant dedicated VLAN
As detailed previously, Main Network on 1st VLAN, second VLAN for 2nd Wifi and the create a third VLAN for the home assistant with a dedicated IP address and use a type of “permit any IP” to the IP address of home assistant
Attachments:
In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote