Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Discovery across vlans

    Scheduled Pinned Locked Moved General pfSense Questions
    64 Posts 6 Posters 18.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mtk @stephenw10
      last edited by

      @stephenw10 said in Discovery across vlans:

      I assume 192.168.20.102 was the IP of the phone at that point?

      Yes

      If you entered the IP if the amp and there was two way traffic between them it's hard to say why it wouldn't show as available.

      As Derelict says there may well be some installation instructions for operating across subnets. It's not that unusual.

      Steve

      And yet, nowhere to be found... 😑

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by Derelict

        Return the product? We are probably not going to be able to reverse-engineer whatever they are doing here.

        If there was documentation on what they needed to have done we could probably make pfSense do that, but this guessing game is pretty futile.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • jahonixJ
          jahonix
          last edited by

          Which Marantz receiver do you have?

          M 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by stephenw10

            It looks like it relies on UPnP/DLNA which won't work across subnets, for auto discovery at least:

            You can also try to manually enter the IP address of the Marantz unit in the app and try to connect then to the unit. If this works, your network configuration may block some UPnP ports necessary for browsing through media servers, detecting units, etc. We then recommend to check again if there is some device in your network environment (access point, repeater, router) that does not forward UPnP commands.

            There are some 3rd party apps you could try.

            Steve

            1 Reply Last reply Reply Quote 0
            • M
              mtk @jahonix
              last edited by

              @jahonix said in Discovery across vlans:

              Which Marantz receiver do you have?

              NR1504

              @stephenw10 said in Discovery across vlans:

              It looks like it relies on UPnP/DLNA which won't work across subnets, for auto discovery at least:

              You can also try to manually enter the IP address of the Marantz unit in the app and try to connect then to the unit. If this works, your network configuration may block some UPnP ports necessary for browsing through media servers, detecting units, etc. We then recommend to check again if there is some device in your network environment (access point, repeater, router) that does not forward UPnP commands.

              There are some 3rd party apps you could try.

              Steve

              Manually adding the IP to the Marantz APP also doesn't work, and that is actually the only way I see some sort of traffic from my phone to the Marantz.

              I have a Mikrotik switch between the Wireless AP (which my phone connects to) and the Marantz (which is connected via LAN).
              Might it be that it's blocked there somehow?

              jahonixJ 1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                Again, reverse engineering this issue without documentation as to what it is doing is probably not going to happen here. Maybe someone who has the same gear and got it working will chime in.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • jahonixJ
                  jahonix @mtk
                  last edited by

                  @mtk Reading the online help system from Denon/Marantz I only found the obvious:

                  • Did you update/upgrade the receiver's firmware to latest available?
                  • Do you use a currently supported app (Marantz Consolette is 32bit and therefore incompatible from iOS11 onwards).

                  Marantz 64bit Apps are:

                  Marantz Remote App
                  Marantz HiFi Remote App
                  Marantz 2016 AVR Remote App
                  
                  Audyssey MultEQ Editor App
                  
                  HEOS App
                  

                  But I also read: make sure all devices are on the same network which means Denon/Marantz support will not help with your setup either.

                  M 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by johnpoz

                    To be honest take your money elsewhere for such things. Why do these companies not get it that the age of flat networks in the home are at a end with the age of IOT and the need to segment devices with questionable security practices you can not just put everything on one flat network anymore.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    jahonixJ 1 Reply Last reply Reply Quote 0
                    • jahonixJ
                      jahonix @johnpoz
                      last edited by jahonix

                      @johnpoz 99,9% of all Denon/Marantz users don't even know something like that exists (let alone what to use it for). They are happy as long as their network with the el-cheapo telco-AIO-router is working at all.

                      That's called a consumer. 🤷

                      1 Reply Last reply Reply Quote 0
                      • M
                        mtk @jahonix
                        last edited by mtk

                        @jahonix said in Discovery across vlans:

                        @mtk Reading the online help system from Denon/Marantz I only found the obvious:

                        • Did you update/upgrade the receiver's firmware to latest available?

                        yes

                        • Do you use a currently supported app (Marantz Consolette is 32bit and therefore incompatible from iOS11 onwards).

                        Marantz 64bit Apps are:

                        Marantz Remote App
                        Marantz HiFi Remote App
                        Marantz 2016 AVR Remote App
                        
                        Audyssey MultEQ Editor App
                        
                        HEOS App
                        

                        I'm using Marantz Remote App on both iOS and Android and there is a equivalent Denon App that is exactly the same just diferent (darker) theme, and supports the Marantz.
                        Both were working "ok" before I made the split into VLANs.

                        But I also read: make sure all devices are on the same network which means Denon/Marantz support will not help with your setup either.

                        @johnpoz said in Discovery across vlans:

                        To be honest take your money elsewhere for such things. Why do these companies not get it that the age of flat networks in the home are at a end with the age of IOT and the need to segment devices with questionable security practices you can not just put everything on one flat network anymore.

                        well, I agree, but I'm not planning to buy a new receiver just to solve that...

                        @jahonix said in Discovery across vlans:

                        @johnpoz 99,9% of all Denon/Marantz users don't even know something like that exists (let alone what to use it for). They are happy as long as their network with the el-cheapo telco-AIO-router is working at all.

                        That's called a consumer. 🤷

                        well, I do... and I'm trying to solve it on the network level, because I agree that Marantz was never good in technical support (specially non-audio related stuff)
                        But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

                        BTW, all this still doesn't explain the inconsistent behaviour with Spotify Connect - working from the Macbooc and iPhone, but not the Android unless the Marantz is already playing (then I see it on my Android Spotify app)

                        jahonixJ 1 Reply Last reply Reply Quote 0
                        • jahonixJ
                          jahonix @mtk
                          last edited by jahonix

                          @mtk said in Discovery across vlans:

                          But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

                          Even though I do system integrations I do not know of such devices. Unless, maybe, they cost a fortune.
                          But to be fair, my work is primarily in the commercial and not the residential market.

                          JKnottJ 1 Reply Last reply Reply Quote 0
                          • JKnottJ
                            JKnott @jahonix
                            last edited by

                            @jahonix said in Discovery across vlans:

                            @mtk said in Discovery across vlans:

                            But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

                            Even though I do system integrations I do not know of such devices. Unless, maybe, they cost a fortune.
                            But to be fair, my work is primarily in the commercial and not the residential market.

                            FWIW, I have a Yamaha A/V receiver that can be controlled by an Android app on my tablet or phone. However, it uses multicast, which is not normally passed by routers. So, I can control the receiver when I'm at home, but not elsewhere. I also wouldn't expect it to work on my test LAN that's on a different subnet.

                            PfSense running on Qotom mini PC
                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                            UniFi AC-Lite access point

                            I haven't lost my mind. It's around here...somewhere...

                            M 1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by stephenw10

                              To be fair they at least allow you enter an IP manually which is more than many other similar apps.

                              Curious that it still doesn't work even then.

                              You might be able to do something with IGMP proxy here but it's status with VLANs is not certain AFAIK.
                              It's marked solved but some people are still seeing issues. Might be user error though.
                              https://redmine.pfsense.org/issues/6099

                              Steve

                              1 Reply Last reply Reply Quote 0
                              • M
                                mtk @JKnott
                                last edited by

                                @jknott said in Discovery across vlans:

                                @jahonix said in Discovery across vlans:

                                @mtk said in Discovery across vlans:

                                But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

                                Even though I do system integrations I do not know of such devices. Unless, maybe, they cost a fortune.
                                But to be fair, my work is primarily in the commercial and not the residential market.

                                FWIW, I have a Yamaha A/V receiver that can be controlled by an Android app on my tablet or phone. However, it uses multicast, which is not normally passed by routers. So, I can control the receiver when I'm at home, but not elsewhere. I also wouldn't expect it to work on my test LAN that's on a different subnet.

                                I'm not trying to access it from anywhere but my network, but yes expecting it to work from a different subnet.

                                @stephenw10 said in Discovery across vlans:

                                To be fair they at least allow you enter an IP manually which is more than many other similar apps.

                                Curious that it still doesn't work even then.

                                Let me repeat that - there are 2 issues probably (but not necessarily) related:

                                • The Marantz App, does allow manual IP, but still cannot access the device (and also does not discover it automagically) - all attempts posted above (i.e packet capture) where done when trying to access the Marantz from the app, by its static ip.
                                • Spotify Connect on the same Marantz, is not discovered by the Spotify app on my Android phone, but is from the Macbook or iPhone app!

                                You might be able to do something with IGMP proxy here but it's status with VLANs is not certain AFAIK.
                                It's marked solved but some people are still seeing issues. Might be user error though.
                                https://redmine.pfsense.org/issues/6099

                                Steve

                                This doesn't seem to work either, no matter what/how I set the up/downstreams.

                                JKnottJ 1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  Does your marantz allow you to put in a gateway? If not and you can put in the IP of the device you could source nat your traffic so the marantz thinks its being access from local IP, ie your pfsense IP in this subnet.

                                  This is how you can access IP camera's for example that do not allow for a gateway. If the device is designed to only work on local network and not have any sort of internet access then it has no need for gateway.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  M 1 Reply Last reply Reply Quote 0
                                  • M
                                    mtk @johnpoz
                                    last edited by

                                    @johnpoz said in Discovery across vlans:

                                    Does your marantz allow you to put in a gateway? If not and you can put in the IP of the device you could source nat your traffic so the marantz thinks its being access from local IP, ie your pfsense IP in this subnet.

                                    This is how you can access IP camera's for example that do not allow for a gateway. If the device is designed to only work on local network and not have any sort of internet access then it has no need for gateway.

                                    0_1527707241691_178b0fe6-1b5d-4a2b-b47f-6e4869bb19fc-image.png

                                    1 Reply Last reply Reply Quote 0
                                    • DerelictD
                                      Derelict LAYER 8 Netgate
                                      last edited by Derelict

                                      Do you need something in the port there? Or that's probably for the proxy. nevermind.

                                      Chattanooga, Tennessee, USA
                                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                      M 1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Does IGMPproxy appear to start and run without errors when using VLAN interfaces?

                                        If you shutdown Avahi do the Mac and iOS Spotify clients also fail to find it?

                                        I would guess they are using mDNS and the Marantz app is using UPnP.

                                        Steve

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          mtk @Derelict
                                          last edited by

                                          @derelict said in Discovery across vlans:

                                          Do you need something in the port there? Or that's probably for the proxy. nevermind.

                                          👌

                                          @stephenw10 said in Discovery across vlans:

                                          Does IGMPproxy appear to start and run without errors when using VLAN interfaces?

                                          It depends on how it should be set up - I played with the settings too much so at the moment, no it doesn't.
                                          0_1527709002871_270243c2-d746-40bf-8df2-798005f71ae2-image.png

                                          If you shutdown Avahi do the Mac and iOS Spotify clients also fail to find it?

                                          Done & Macbook seem to still find it - Android still doesn't.

                                          I would guess they are using mDNS and the Marantz app is using UPnP.

                                          Steve

                                          1 Reply Last reply Reply Quote 0
                                          • JKnottJ
                                            JKnott @mtk
                                            last edited by

                                            @mtk said in Discovery across vlans:

                                            The Marantz App, does allow manual IP, but still cannot access the device

                                            As Johnpoz mentioned, if there's no gateway, it can't get past a router. Accessing devices on the local network is different from going through a router, as you're trying to do. If there's no gateway setting, that configurable IP address is used instead of automatic discovery.

                                            When working only on the local LAN, the IP addresses is used to determine the MAC address, by using ARP. The MAC address is then used for the actual communications beteen devices. If the device is on a different network, that's recognized by comparing the remote and local addresses, through the subnet mask, to see if they're on the same network. If not, the packets are sent via the gateway address. However, for this to work, both a subnet mask and gateway are needed. With the method Johnpoz is describing, pfSense is acting as a proxy to pass the packets to another subnet.

                                            PfSense running on Qotom mini PC
                                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                            UniFi AC-Lite access point

                                            I haven't lost my mind. It's around here...somewhere...

                                            M 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.