Shelly communication with different VLAN

Hi!

I have my network split with multiple VLANs.
I’m using a Mikrotik router with a Synology RT660AX as AP.
I have one VLAN for my HomeLab with HomeAssistant and other Domotic VLAN with Shelly devices on it.

I have added a Firewall rule to allow communications from HomeLab VLAN to Domotic VLAN.

With this rule I can add my shelly devices to HomeAssistant without problems, I can ping them and integration seems to be working well except with old Shelly devices.
Also with plus devices I’m having some eventual disconnect problems.

Also I cannot acces from HomeLab VLAN to Shelly configuration page and I didn’t found the type of traffic that maybe it’s being blocked since I can Ping shelly devices without problems with HomeLab VLAN.

With regards,

I used to have the same problem - with Shelly devices even on the same vlan when I did the below…

(I have since moved them all to their own vlan - still no issue)

Do you have outbound websockets and colot set up? Should be on all of your devices - each device will have only one of the below two settings -

On gen 1 devices:

  • Enable CoIoT with this value: CoIoT peer: ###.###.###.###:5683

On Gen 2 devices:

  • Enable Outbound WebSockets with this value: Enabled Default TLS: Server: ws://###.###.###.###:8123/api/shelly/ws

For both of the above, ###.###.###.### is the IP address of your home assistant instance.

Try that and let us know if it helps. It solved all of my Shelly connectivity issues.

What is that port? Does HA have this port exposed? I thought that HA only exposes admin port.
I have my HA in docker I suposse that I can change that port to another one in docker compose like the following

    ports:
      - '8123:8123/tcp'
      - '8123:5683/udp' # Or another different

Regarding Gen2 devices seems that the only problem in HA is random disconnects but it reconnects automatically, I cannot see any error or alert in HA.

But also I have another problem which I’m not sure is related with this… I can’t access shelly configuration page from different VLAN but I can ping them without problems. I have this problem with Gen1 and Gen2 devices.

With regards,