diff --git a/kube/deploy/apps/home-assistant/app/multus.yaml b/kube/deploy/apps/home-assistant/app/multus.yaml
index 1dc69669..7a40194a 100644
--- a/kube/deploy/apps/home-assistant/app/multus.yaml
+++ b/kube/deploy/apps/home-assistant/app/multus.yaml
@@ -4,11 +4,40 @@ kind: NetworkAttachmentDefinition
 metadata:
   name: iot
   namespace: home-assistant
+  annotations:
+    description: VLAN tagging based on MAC handled by FortiSwitch NAC
 spec:
   config: |-
     {
       "cniVersion": "0.3.1",
       "name": "iot",
+      "plugins": [
+        {
+          "type": "bridge",
+          "bridge": "br0",
+          "capabilities": { "ips": true, "mac": true },
+          "ipam": {
+            "type": "static",
+            "routes": [
+              { "dst": "${IP_VLAN_IOT_CIDR}", "gw": "${IP_ROUTER_VLAN_IOT}" }
+            ]
+          }
+        }
+      ]
+    }
+---
+apiVersion: "k8s.cni.cncf.io/v1"
+kind: NetworkAttachmentDefinition
+metadata:
+  name: iot-macvlan
+  namespace: home-assistant
+  annotations:
+    description: Unused due to FortiSwitch NAC
+spec:
+  config: |-
+    {
+      "cniVersion": "0.3.1",
+      "name": "iot-macvlan",
       "plugins": [
         {
           "type": "macvlan",