From 2021c50deb59118aaa8879da3c04788882a9ba16 Mon Sep 17 00:00:00 2001 From: Kaloyan Danchev Date: Wed, 28 Oct 2026 23:46:21 +0200 Subject: [PATCH] docs: add IoT miIO masquerade NAT rule MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Xiaomi miIO/MIoT devices silently ignore UDP packets from source IPs outside their subnet. Added SRCNAT masquerade rule documentation for VLAN 10 → VLAN 30 on UDP 54321, enabling HA local control of air purifiers and other Xiaomi WiFi devices. Co-Authored-By: Claude Opus 4.6 --- docs/01-NETWORK-MAP.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/01-NETWORK-MAP.md b/docs/01-NETWORK-MAP.md index 558bf3a..a59de4b 100644 --- a/docs/01-NETWORK-MAP.md +++ b/docs/01-NETWORK-MAP.md @@ -251,6 +251,14 @@ For complete device-to-VLAN mapping, see `06-VLAN-DEVICE-ASSIGNMENT.md`. | 62.73.120.142:80 | 192.168.10.20:8001 | Traefik HTTP | | 62.73.120.142:443 | 192.168.10.20:44301 | Traefik HTTPS | +### IoT miIO Masquerade (2026-10-28) + +Xiaomi miIO/MIoT devices reject UDP from source IPs outside their subnet. This SRCNAT rule masquerades VLAN 10 → VLAN 30 traffic on UDP 54321 so HA can control IoT WiFi devices locally. + +| Source | Destination | Action | +|--------|-------------|--------| +| 192.168.10.0/24 | 192.168.30.0/24:54321/udp | masquerade (to 192.168.30.1) | + ### AdGuard DNS (pending - not configured yet) | External Port | Destination | Service |