Home network to keep wife happy + VPN (TV 4k netflix) + reduce intranet downtime

coxhaus

If you are going to use 2 SSIDs for like 5GHz and 2.4GHz in the same VLAN or network they are going to use the same DHCP scope because they are in the same network. Any consumer router you buy will do this. If you want isolated traffic then you need separate VLANs.

I am not sure why you think you need IGMP Proxy in a switch. It is used in a large switch network to reduce the amount of broadcast traffic so you don't slow down a large network and you have 1 to many stream. I would think it would work in some form or Cisco would not advertise it.

ChefRayB

It's my lack of knowledge in network that made my assume that you can have IGMP Proxy at the switch level / across VLAN. It's the router responsibility. The switch uses IGMP Snooping only make things more efficient by not flooding multicast to all ports. I read about cisco PIM dense, PIM sparce mode but these are on the cisco routers.

This is why I might need 2 routers….

L2 Switch(vlans) <-> local router (IGMP Proxy) <-> Edge router (Pfsense) <-> cable modem <-> Internet

1st (local) router will route cross VLAN and take care of IGMP broadcast cross VLAN.
2nd (edge) router (Pfsense) takes care of just routing internet/firewall/other services.

coxhaus

I am no expert but I believe IGMP proxy is at layer 3 and it works in layer 3 switches. If you want layer 2 it IGMP snooping which also works in switches. So you can use either one depending on what kind of switch you are using.

But like I have said all along in your small network it may not make much of a difference. I understand wanting to use it as I want to run a routing protocol between my switch and router. A routing protocol is not needed by I want to use a routing protocol.

ChefRayB

I just don't want to deal with multicast protocols ( IGMP, PIM, SSDP). If I can get a router that does it, I prefer to spend $100 on a router than having to configure pfsense to get them all working (IGMP PRoxy Buggy, Avahi plugin, etc….)

It seems sonos uses SSDP https://forum.pfsense.org/index.php?topic=96160.0

I might have to decide keep everything in 1 subnet or like Johnpos suggested create the VLAN and move items one at the time, just deal with each issue clickly clickly. The only one I can't really ignore is Sonos because I have all my sound connected, hard to disregards and I want t control it from any subnet.

It's like the new logitech keyboards, they now support both bluetooth and wireless, they support up to 3 devices, you just press a button. I can now have 1 keyboard + mouse that I can use to type with laptop, Mobile Phone and Tablet ! It took a lot of years to get there....finally a keyboard+mouse combo worth buying ;)

coxhaus

If you don't want to use IGMP don't. Just let the multicast flood your network. Your network is so small I doubt you will notice a difference.

ChefRayB

multicast flood doesn't occur across VLAN…

coxhaus

So you are going to run multiple devices on different VLANs with the exact same video stream? If you run different video streams then you don't need IGMP. Please explain what you are doing?

ChefRayB

https://forum.pfsense.org/index.php?topic=132668.msg730018#msg730018

My goal was always to have a way to dynamically change SSIDs and have ip policy based rules on the NAT in pfsense to route my outbound internet through a different gateway and regardless which SSIDs I use, I can always access my Sonos. At first I though I can configure anything across VLAN but I was wrong, it seems Sonos doesn't work across VLAN and multicast routing across VLAN doesn't work.

Another alternative (Plan B) is trying to see if I can make everything work within 1 subnet but still have many SSIDs. In the other forum thread (See below) , a user suggested to me Bridge the 3 interfaces together and use the interface based rules at the NAT level. Something worth looking into. I know bridging is not great but it's for home….

Below is an example https://forum.pfsense.org/index.php?topic=132668.msg730018#msg730018

@ChefRayB:

I take my Tablet Select SSID A, go on website www.whatismyip.com and is says Canada, I go on netflix Canada.
I take the same Tablet, change to SSID B, go on website www.whatismyip.com and it says USA, I go on netflix USA, Hulu USA
I take the same table, change to SSID C, go on website www.whatismyip.com and it says UK, I go on netflix UK

Despite whichever SSID I select (A or B or C) I still wish to remain in the same subnet so that all my Synology NAS, Sonos, Wireless Printer, IP TV and all whatever protocol that usually works just within a subnet still works on my tablet regardless of which SSID.

I am aware of the work arounds:

use VLAN and either use IGMP Proxy, Avahi or stop using those home protocols ( clickely clickely )

Simply change the ip address manually on the tablet to a different range within the same subnet ( I can even write Android application that does that….I know...)

Simply use OpenVPN Android software directly on the tablet, create a OpenVPN directly from Tablet

coxhaus

All I want to know is the video for IGMP. What are you doing?

ChefRayB

For Video, Synology Streaming vial DLNA, sometimes the same video, sometimes different video.

In the future IP TV with google but I don't know yet how that will work out.

I am willing to forgot the DLNA streaming by not using anymore the TV App, I can use Nvidia Shield for client and use SMB/NFS mounts.

coxhaus

Just run multiple streams and forget the IGMP. I don't think what you are doing really warrants IGMP.

ChefRayB

Update:

qotom Q355G4 up & running (See my stats https://forum.pfsense.org/index.php?topic=128206.msg732331#msg732331 )
OpenVPN @ 100 Mbs speed
Internal LAN Network transfering @ 880 Mbs speed
ubiquiti Unify AP Lite working as AP @ 80 Mbs speed
using TP L2 Smart Switch with 2 VLAN (ISP, VPN)
Everything running under 1 subnet VLAN (ISP) so that everything works (e.g. Sonos)
2nd VLAN (VPN) will only be used when I really want to do something on VPN (e.g. Hulu geo-location blocked)
nVidia Shield and TV both streaming 4k via OpenVPN
Synology NAS, Sonos, VOIP, game console, camera, all working

Next step:

Install proxy, squid, squidGard, etc….
Figure out how to have dedicated 2.4ghz only and 5.0ghz only SSID ( it's a bit confusing in the ubiquiti software)

NogBadTheBad

@ChefRayB:

Figure out how to have dedicated 2.4ghz only and 5.0ghz only SSID ( it's a bit confusing in the ubiquiti software)

Is it ;)

You can only have 4 SSIDS, what are you trying to achieve by doing this.

Do you know you can force 5Ghz capable devices to connect at 5Ghz using band steering ?

Untitled.png_thumb

ChefRayB

I will research band steering this weekend.

I want SSID that only does 2.4ghz (far away from AP) and SSID only 5ghz when I am close to AP so that I quixkly connect and not have connectivity issues (conflicts)

I find 2.4ghz is sluggish sometimes and my sonos system and many people in my condo are 2.4ghz

GentleJoe

@ChefRayB:

I will research band steering this weekend.

I want SSID that only does 2.4ghz (far away from AP) and SSID only 5ghz when I am close to AP so that I quixkly connect and not have connectivity issues (conflicts)

I find 2.4ghz is sluggish sometimes and my sonos system and many people in my condo are 2.4ghz

What 2.4 Ghz channel did you set your SonosNet to be? Give it a dedicated channel, for example channel 1.
Then for your Unifi APs, use channel 6 or 11 (NO other) in HT20 width.

Only use band steering if you have tested all your clients are ok with it being enabled, it can cause some devices to never connect.

Using a single SSID is easy and simplifies things, use for mobile devices.

Then add a 5 Ghz only SSID.

You can up to four SSIDs per WLAN group, and perhaps 8 in a future update.

ChefRayB

@Gentle:

What 2.4 Ghz channel did you set your SonosNet to be? Give it a dedicated channel, for example channel 1.
Then for your Unifi APs, use channel 6 or 11 (NO other) in HT20 width.

I've converted all my Sonos devices over LAN. I use Power Over Ethernet for each Sonos device. The Sonos Android app goes through my unify AP into my LAN to control the sonos controller.

@Gentle:

Only use band steering if you have tested all your clients are ok with it being enabled, it can cause some devices to never connect.

Using a single SSID is easy and simplifies things, use for mobile devices.

Then add a 5 Ghz only SSID.

You can up to four SSIDs per WLAN group, and perhaps 8 in a future update.

I just started reading & learning about band steering. Need to understand how it works…. I am more old school... I like to select a SSID and be 100% sure it will never use 2.4 GHZ frequency. ( I have frequency analyser in my house....my next step would be reduce power to the minimum level)

I still don't know how to create a dedicated 2.4GHZ and dedicated 5GHZ. Do I go Setting - Wireless - 2G Data Rate Control keep and put each speed drop down to disabled and only keep 5G Data Rate Control?
I don't understand yet all those drop down ! :-[