Homekit help request on Asuswrt-Merlin 3006.102.4 Beta 2

[Alfie J]

Hello everyone. I recently upgraded to Asuswrt-Merlin 3006.102.4 Beta 2. My IoT devices were on a separate subnet and wireless network using YazFi. The IoT devices cannot communicate with the Home app at all. As a troubleshooting step, I erased the router and reset everything from the start but the problem persists. I do recall that I had the option on YazFi to allow one-way communications to the guest network used for the IoT devices and I'm wondering if that's the piece I'm missing. I've tried searching through the forums and using iptables commands for similar circumstances without success. I'm wondering if anyone may know of the required set of iptables rules to simulate the YazFi behavior for allowing one-way communication. Needless to say, I'm open to any suggestions at this point as I definitely want to keep the devices separated.

Also, is anyone aware of tool that would extract the settings from a config backup that I have from before the upgrade? Being able to parse the backup may point in the direction of what I may be missing. I also have a backup of the jffs if that would be useful.

Thanks in advance for any help.

 

[bennor]

I'm wondering if anyone may know of the required set of iptables rules to simulate the YazFi behavior for allowing one-way communication

There are several discussions running on the 3006.102 firmware and trying to replicate certain YazFi features like one-way to guest using iptables. For example see my post and the discussion that followed from it at the following link:
https://www.snbforums.com/threads/t...st-network-pro-limitations.94438/#post-952345
There is some additional discussion that may be relevant in at this link:

Help with Avahi mDNS redirector, please

I'm trying to set up a mDNS reflector using avahi on Merlin 386.11 (RT-68U). My goal is to enable a WiiM device on a segregated IoT network (per https://www.snbforums.com/threads/mdns-repeater-with-guest-network-vlan.86503/) I finally realized that Avahi is enabled by default, and I tried...

www.snbforums.com

PS: And some further discussion at the follow post link (and those that follow) may also be relevant:
https://www.snbforums.com/threads/mdns-bonjour-multicast.86353/post-948183

 

[jksmurf]

snip

The IoT devices cannot communicate with the Home app at all.

Thanks in advance for any help.

You’ll probably see me pulling my virtual hair out in the posts just referenced by bennor.

It’s not fully resolved yet but having read hundreds of posts dating back ten years, and seen Home (HomeKit?) mentioned in some of them, I’d start by:

• adding the single avahi reflector back into the avahi daemon (see those posts for how), then
• open up communication between the VLANs using IPTABLEs, perhaps start with everything ie 0./24 to 0./24 and then if it works narrow it down to the specific addresses and subnets.

Good luck