Punch a hole from specific devices on guest network to device on home network?

Currently reading
Punch a hole from specific devices on guest network to device on home network?

DS212J, DS214play, DS216, DS216play, DS414, DS918+, RS816
  1. RT2600ac
  2. MR2200ac
Operating system
  1. Windows
Mobile operating system
  1. iOS
On the RT2600, I use the regular network 10.86.173.X for most of my devices, including my NAS units, and the guest network (192.168.2.X) for my IOT devices (doorbells, lamps, and, in particular, Echo Dots (Amazon "Alexa"). I do this for security reasons: I don't want a bunch of cheap IOT devices with questionable security on my main network.

That purpose is only accomplished if, in the guest network settings, I UNcheck "allow guests to access my local network".

So the Dots are unable to access audio station on my Synology NAS, and therefore can't use Audio Station.

The NAS running audio station has a fixed IP address on the regular network, and the Dots have fixed IP addresses on the guest network.

How can I punch a hole through the firewall (and do whatever else is necessary) so that the Dots can access just the particular NAS running audio station, and not other assets on the regular network? Does it make more sense to try to punch that specific hole, or does it make more sense to enable "allow guests to access my local network," but block (in the firewall) all inter-network communication except for what I specifically want to permit?

Either way, how would I do it?


Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Similar threads

From memory of setting up Safe Access: Safe Access intercepts DNS requests sent to the router and it...

Welcome to SynoForum.com!

SynoForum.com is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!

Trending threads