You need two separate firewalls - one for LOCAL and one for IN. They need to be bound to your IOT network interface (eth1), not your switch0.
See the kb article:
You need two separate firewalls - one for LOCAL and one for IN. They need to be bound to your IOT network interface (eth1), not your switch0.
See the kb article: