jazzymc/infrastructure
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: add IoT miIO masquerade NAT rule

Browse Source 
Xiaomi miIO/MIoT devices silently ignore UDP packets from source IPs
outside their subnet. Added SRCNAT masquerade rule documentation for
VLAN 10 → VLAN 30 on UDP 54321, enabling HA local control of air
purifiers and other Xiaomi WiFi devices.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Kaloyan DanchevandClaude Opus 4.6 committed 2026-10-28 23:46:21 +02:00
1 parent 892c026ddd
commit 2021c50deb
1 file changed
+8
Download Patch File Download Diff File Expand all files Collapse all files
docs/01-NETWORK-MAP.md
+8
View File
@@ -251,6 +251,14 @@ For complete device-to-VLAN mapping, see `06-VLAN-DEVICE-ASSIGNMENT.md`.
| 62.73.120.142:80 | 192.168.10.20:8001 | Traefik HTTP | | 62.73.120.142:80 | 192.168.10.20:8001 | Traefik HTTP |
| 62.73.120.142:443 | 192.168.10.20:44301 | Traefik HTTPS | | 62.73.120.142:443 | 192.168.10.20:44301 | Traefik HTTPS |
### IoT miIO Masquerade (2026-10-28)
Xiaomi miIO/MIoT devices reject UDP from source IPs outside their subnet. This SRCNAT rule masquerades VLAN 10 → VLAN 30 traffic on UDP 54321 so HA can control IoT WiFi devices locally.
| Source | Destination | Action |
|--------|-------------|--------|
| 192.168.10.0/24 | 192.168.30.0/24:54321/udp | masquerade (to 192.168.30.1) |
### AdGuard DNS (pending - not configured yet) ### AdGuard DNS (pending - not configured yet)
| External Port | Destination | Service | | External Port | Destination | Service |