Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Two subnets on two interfaces

    DHCP and DNS
    4
    19
    2.1k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott
      last edited by

      Why do you have WiFi on a separate subnet?  I used to do that back in the days of WEP and it's poor security.  With WPA2, that's no longer an issue.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • chudakC
        chudak
        last edited by

        @JKnott:

        Why do you have WiFi on a separate subnet?  I used to do that back in the days of WEP and it's poor security.  With WPA2, that's no longer an issue.

        Well, you are right in general.  My initial thought was to physically isolate subnets, but more importantly learn different combinations, so I can understand better how to use pfSense :)

        1 Reply Last reply Reply Quote 0
        • awebsterA
          awebster
          last edited by

          You might need a firewall rule to allow to work.
          Try adding an allow from OPT1 to any rule.

          –A.

          1 Reply Last reply Reply Quote 0
          • chudakC
            chudak
            last edited by

            @awebster:

            You might need a firewall rule to allow to work.
            Try adding an allow from OPT1 to any rule.

            I actually already have it

            1 Reply Last reply Reply Quote 0
            • JKnottJ
              JKnott
              last edited by

              @chudak:

              @JKnott:

              Why do you have WiFi on a separate subnet?  I used to do that back in the days of WEP and it's poor security.  With WPA2, that's no longer an issue.

              Well, you are right in general.  My initial thought was to physically isolate subnets, but more importantly learn different combinations, so I can understand better how to use pfSense :)

              Back when I used a separate network for WiFi, I had it outside of my firewall and used a VPN to access my network.  You learn stuff that way.  But while I used it for security, in your case it's simply in the way.

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              1 Reply Last reply Reply Quote 0
              • awebsterA
                awebster
                last edited by

                Hmmm, it should be working;

                You can try running: avahi-browse -a -c from the CLI or the Diagnostics->Command Prompt
                It should list all devices and services that can be seen.  If you get no output, maybe avahi isn't running?

                –A.

                1 Reply Last reply Reply Quote 0
                • chudakC
                  chudak
                  last edited by

                  @awebster:

                  Hmmm, it should be working;

                  You can try running: avahi-browse -a -c from the CLI or the Diagnostics->Command Prompt
                  It should list all devices and services that can be seen.  If you get no output, maybe avahi isn't running?

                  hmm, I don't see devices https://paste2.org/0WY8YZa9

                  1 Reply Last reply Reply Quote 0
                  • chudakC
                    chudak
                    last edited by

                    @awebster:

                    Hmmm, it should be working;

                    You can try running: avahi-browse -a -c from the CLI or the Diagnostics->Command Prompt
                    It should list all devices and services that can be seen.  If you get no output, maybe avahi isn't running?

                    What is interesting that  avahi-resolve-host-name -a <roku_ip>resolves  the host!

                    hmm no clue  >:(</roku_ip>

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      Are you trying to use media player channel on the roku?  I have a roku, I just use plex channel to play all my videos - but have used the media player to play usb stuff connected to the roku.  I assume your trying to find some smb share?

                      Be happy to try and duplicate what your doing if had some more details.. I run multiple vlans on my network with roku's being on their own from the rest of my network.. I have 2 sticks and a roku 4.

                      Your trying to use this right
                      https://channelstore.roku.com/details/2213/roku-media-player

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                      1 Reply Last reply Reply Quote 0
                      • chudakC
                        chudak
                        last edited by

                        @johnpoz:

                        Are you trying to use media player channel on the roku?  I have a roku, I just use plex channel to play all my videos - but have used the media player to play usb stuff connected to the roku.  I assume your trying to find some smb share?

                        Be happy to try and duplicate what your doing if had some more details.. I run multiple vlans on my network with roku's being on their own from the rest of my network.. I have 2 sticks and a roku 4.

                        Your trying to use this right
                        https://channelstore.roku.com/details/2213/roku-media-player

                        Yes I am trying to use this channel.

                        The question is not "how to run videos", I use Plex too.
                        The question is "WTH it's not working?"  ;)

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          what is not working, you can not find your plex when is on a different segment?  Or your trying to use some other media server.. It supports plex, twonky, etc.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                          1 Reply Last reply Reply Quote 0
                          • chudakC
                            chudak
                            last edited by

                            @johnpoz:

                            what is not working, you can not find your plex when is on a different segment?  Or your trying to use some other media server.. It supports plex, twonky, etc.

                            When I try using media player it won't find my videos that are on LAN subnet.
                            Installed Avahi and still no love.  Wonder if Roku has some options to force it

                            1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator
                              last edited by

                              If you use plex why would you not just use the plex channel?  And then just point it at your plex IP with opening that 32400 port on your firewall from the segments you want to allow access from  This is how I do it, no issues.. from any of my wifi segments.  Other than guest - which does not have access.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                              1 Reply Last reply Reply Quote 0
                              • chudakC
                                chudak
                                last edited by

                                @johnpoz:

                                If you use plex why would you not just use the plex channel?  And then just point it at your plex IP with opening that 32400 port on your firewall from the segments you want to allow access from  This is how I do it, no issues.. from any of my wifi segments.  Other than guest - which does not have access.

                                I get it about Plex!  But it's not about Plex.

                                I just want to understand why media channel is not resolving other subnet host?

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  I am not sure what that media player uses, is using dlna or plex's gdm?

                                  Not sure why its not about plex ;)  Your wanting to watch your media from your plex are you not?  Across a subnet these discover protocols fail.  They are designed for your typical home network that is flat - one broadcast domain, ie 1 layer 2 network.. Trying to get it work is going to be PITA most of the time.

                                  The simple solution is to just go direct to the plex server IP or fqdn and open the 32400 between the segments you want to allow to access.  This takes all of 10 seconds to setup, and works all the time, every time ;)

                                  If you don't want to do that - then just put the plex on the same L2 that your devices you want to "discover" it are on.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.