Enable one way connectivity from one VLAN to another

[hajar1]

Routers like Ubuiquiti allow devices on main VLAN to initiate connection with devices on IoT VLAN, but protect devices on main VLAN from IoT devices being able to connect to them. 

Unfortunately Network Isolation feature in Orbi Routers isolates all devices on VLAN so that no device outside VLAN can connect them. This is too limited and makes the feature of separating IoT devices into a separate IoT VLAN almost useless, because way too often devices on Default VLAN (e.g. Phone or Laptop) need to connect to IoT devices to be able to control them. The only way to achieve this is by disabling Network Isolation feature, which then completely negates the whole security value of IoT VLAN separation.

I am quite disappointed that an Orbi Pro range of routers does not have such a simple firewall rules definition capability. IoT VLAN is presented as a major security feature of the router that on the surface makes sense, but only when used in reality turns out to be totally unusable the way it is currently implemented in Orbi Pro Routers. I really hope a firmware update is released to correct this major flaw.

[FURRYe38]

Just FYI, the SXS Pro Series of Orbi has gone into EoL status. So no new features will be seen. Only if and when a security issues appears, NG maybe put forth FW to resolve any security issues. Good Luck. 

[hajar1]

Brilliant. I invested close to a 1000 Euros for Router and 4 satellites just last year and it is already EoL... Another nail in the coffin of me continuing as a NetGear customer in future. 

[ErwinL]

Hello @hajar1

We deeply apologize if your requirements was not met by Orbi Pro router. It is indeed a great feature if the router has it but unfortunately it was not included. Was your question addressed on this post? In this case could you give us feedback on the situation and accept the posts here as a solution to make it more visible to other users?

Thanks in advance!

Have lovely day,
Erwin
Netgear Team