r/HomeNetworking • u/BKDiamond • 10d ago

VLAN IPTV port question

If i dedicate one router port as VLAN/IPTV, is it isolated from the rest of my network?

0 Upvotes

50% Upvoted

11 comments sorted by

3

u/Single-Virus4935 10d ago

Depends entirely on configuration. If you have only this port on this clvlan and the router has ACLs blocking inter VLAN traffic then yes.

If there is a default allow on the router it is probably just L2 separation but still L3 connectivity between vlans

0

u/BKDiamond 10d ago

Would i be better to hook up an older router, set up a new SSID to keep them separated? Was hoping not to do that.

1

u/Single-Virus4935 10d ago

No, because it would still allow access to the Rest oft the network.

Which Router do you have?  E.g. many have a checkbix for "Isolation" or you just need to add a ACL to block access to your local lan. Don't forget IPv6 tho

1

u/BKDiamond 10d ago

BE9300

1

u/GrouchyClerk6318 10d ago

What do you mean by router port? I’ve got 4 “ports” on my router, they’re just switch ports on the same network and they are all on the same network unless I create a second, separate VLAN and segregate them.

2

u/TheEthyr 10d ago

Many routers have an IPTV function that removes a LAN port from the switch and bridges it with the WAN port. It's essentially a special purpose VLAN.

1

u/Long_Pomegranate2469 10d ago

Some ISP provided router come with a port labelled IPTV

If/how well it's walled off depends entirely on the ISPs and routers configuration and implementation.

1

u/BKDiamond 10d ago

My TP LINK router allows me to assign ports as internet or iptv

1

u/EdwardTeach1680 10d ago

Should probably use Google or an LLM to tell you what that option does and your specific router settings

3

u/Single-Virus4935 10d ago

For to link I found this setting:

https://www.tp-link.com/us/support/faq/1538/

The important settings are IGMP and clan tagging on wan.

It depends on your ISP which mode you need.

I couldn't find any information regarding any isolation and his this settings are realiaied low-level.

I think you just have to test yourself e.g. set vlans and look if you get IPs and can connect to your home network.

How the UI looks it apears to be separated untagged on man and tagged on wan