Devices in different vlans - how to add them to Shelly app?

    • Autor

    Hi there,

    I have my shellys and other iot stuff in different vlans then my "trusted" network (desktops/laptops/phones).

    I have mDns enabled and forward uPnP and CoAP packets from the IoT lan to my trusted lan (also IGMP snooping on both vlans) but can't add them to app (not using cloud because i use MQTT to Home Assistant - that part uses routing so it works great).

    Is it possible to know how the App is searching the devices?

    Even if i had them by IP on the app it doesn't work!

    Note: using Ubiquit Dream Machine Pro.

    Thanks.

    Pedro.

    Connect your app intermittently to the IoT VLAN and add them, if you only need the Connection sometimes

    I’d stop forwarding all those packages and only access them via home assistant. Put HA on your IoT Vlan, so you don’t need to forward MQTT either. VLANs are rather pointless if your firewall looks like Swiss cheese ;)

    • Autor

    Thanks for your reply.

    I know what you're saying but those ports are also useful for services like youtube and airplay streaming. 3 or 4 ports doesn't seem to be a swiss chesse :-)

    CoAP i only routed to try adding shellys.

    I came here while trying to find an official statement about the ports the Shelly devices are using to connect to the Shelly cloud.

    I was able to add the Shelly2.5 device to the Shelly app in two steps, first while being connected to the Shelly own AP and later while being on the same IOT WLAN/VLAN via the menu/discovered devices. After successful addition the app seems to use the HTTP port to connect to the device.

    But it didn't want to connect to the cloud until I have opened some additional ports to my standard IOT rules (UDP53-DNS; TCP80-HTTP and TCP443-HTTPS).

    Below is the full list as I have it now.

    I had to open UDP123 (ntp) und TCP6011 + TCP6021. One can change to local time server via settings later.

    Der Inhalt kann nicht angezeigt werden, da Sie keine Berechtigung haben, diesen Inhalt zu sehen.

    Note: The DNS is not visible on this screenshot, it is way up on the list.

    Below is a communication I could see after Shelly2.5 restart.

    I have ignored the UDP5353 (multicast DNS) und UDP5683 (multicast CoAP) for now. You can read about the latter here https://github.com/alexryd/homebr…P-and-multicast

    Der Inhalt kann nicht angezeigt werden, da Sie keine Berechtigung haben, diesen Inhalt zu sehen.


    have fun ;)

    LH

    Einmal editiert, zuletzt von LubomirH (16. Dezember 2021 um 18:22)

  • Dieses Thema enthält einen weiteren Beitrag, der nur für registrierte Benutzer sichtbar ist.