Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Discovery across vlans

    Scheduled Pinned Locked Moved General pfSense Questions
    64 Posts 6 Posters 18.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jahonixJ
      jahonix @mtk
      last edited by

      @mtk Reading the online help system from Denon/Marantz I only found the obvious:

      • Did you update/upgrade the receiver's firmware to latest available?
      • Do you use a currently supported app (Marantz Consolette is 32bit and therefore incompatible from iOS11 onwards).

      Marantz 64bit Apps are:

      Marantz Remote App
      Marantz HiFi Remote App
      Marantz 2016 AVR Remote App
      
      Audyssey MultEQ Editor App
      
      HEOS App
      

      But I also read: make sure all devices are on the same network which means Denon/Marantz support will not help with your setup either.

      M 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by johnpoz

        To be honest take your money elsewhere for such things. Why do these companies not get it that the age of flat networks in the home are at a end with the age of IOT and the need to segment devices with questionable security practices you can not just put everything on one flat network anymore.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

        jahonixJ 1 Reply Last reply Reply Quote 0
        • jahonixJ
          jahonix @johnpoz
          last edited by jahonix

          @johnpoz 99,9% of all Denon/Marantz users don't even know something like that exists (let alone what to use it for). They are happy as long as their network with the el-cheapo telco-AIO-router is working at all.

          That's called a consumer. 🤷

          1 Reply Last reply Reply Quote 0
          • M
            mtk @jahonix
            last edited by mtk

            @jahonix said in Discovery across vlans:

            @mtk Reading the online help system from Denon/Marantz I only found the obvious:

            • Did you update/upgrade the receiver's firmware to latest available?

            yes

            • Do you use a currently supported app (Marantz Consolette is 32bit and therefore incompatible from iOS11 onwards).

            Marantz 64bit Apps are:

            Marantz Remote App
            Marantz HiFi Remote App
            Marantz 2016 AVR Remote App
            
            Audyssey MultEQ Editor App
            
            HEOS App
            

            I'm using Marantz Remote App on both iOS and Android and there is a equivalent Denon App that is exactly the same just diferent (darker) theme, and supports the Marantz.
            Both were working "ok" before I made the split into VLANs.

            But I also read: make sure all devices are on the same network which means Denon/Marantz support will not help with your setup either.

            @johnpoz said in Discovery across vlans:

            To be honest take your money elsewhere for such things. Why do these companies not get it that the age of flat networks in the home are at a end with the age of IOT and the need to segment devices with questionable security practices you can not just put everything on one flat network anymore.

            well, I agree, but I'm not planning to buy a new receiver just to solve that...

            @jahonix said in Discovery across vlans:

            @johnpoz 99,9% of all Denon/Marantz users don't even know something like that exists (let alone what to use it for). They are happy as long as their network with the el-cheapo telco-AIO-router is working at all.

            That's called a consumer. 🤷

            well, I do... and I'm trying to solve it on the network level, because I agree that Marantz was never good in technical support (specially non-audio related stuff)
            But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

            BTW, all this still doesn't explain the inconsistent behaviour with Spotify Connect - working from the Macbooc and iPhone, but not the Android unless the Marantz is already playing (then I see it on my Android Spotify app)

            jahonixJ 1 Reply Last reply Reply Quote 0
            • jahonixJ
              jahonix @mtk
              last edited by jahonix

              @mtk said in Discovery across vlans:

              But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

              Even though I do system integrations I do not know of such devices. Unless, maybe, they cost a fortune.
              But to be fair, my work is primarily in the commercial and not the residential market.

              JKnottJ 1 Reply Last reply Reply Quote 0
              • JKnottJ
                JKnott @jahonix
                last edited by

                @jahonix said in Discovery across vlans:

                @mtk said in Discovery across vlans:

                But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

                Even though I do system integrations I do not know of such devices. Unless, maybe, they cost a fortune.
                But to be fair, my work is primarily in the commercial and not the residential market.

                FWIW, I have a Yamaha A/V receiver that can be controlled by an Android app on my tablet or phone. However, it uses multicast, which is not normally passed by routers. So, I can control the receiver when I'm at home, but not elsewhere. I also wouldn't expect it to work on my test LAN that's on a different subnet.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                M 1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by stephenw10

                  To be fair they at least allow you enter an IP manually which is more than many other similar apps.

                  Curious that it still doesn't work even then.

                  You might be able to do something with IGMP proxy here but it's status with VLANs is not certain AFAIK.
                  It's marked solved but some people are still seeing issues. Might be user error though.
                  https://redmine.pfsense.org/issues/6099

                  Steve

                  1 Reply Last reply Reply Quote 0
                  • M
                    mtk @JKnott
                    last edited by

                    @jknott said in Discovery across vlans:

                    @jahonix said in Discovery across vlans:

                    @mtk said in Discovery across vlans:

                    But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

                    Even though I do system integrations I do not know of such devices. Unless, maybe, they cost a fortune.
                    But to be fair, my work is primarily in the commercial and not the residential market.

                    FWIW, I have a Yamaha A/V receiver that can be controlled by an Android app on my tablet or phone. However, it uses multicast, which is not normally passed by routers. So, I can control the receiver when I'm at home, but not elsewhere. I also wouldn't expect it to work on my test LAN that's on a different subnet.

                    I'm not trying to access it from anywhere but my network, but yes expecting it to work from a different subnet.

                    @stephenw10 said in Discovery across vlans:

                    To be fair they at least allow you enter an IP manually which is more than many other similar apps.

                    Curious that it still doesn't work even then.

                    Let me repeat that - there are 2 issues probably (but not necessarily) related:

                    • The Marantz App, does allow manual IP, but still cannot access the device (and also does not discover it automagically) - all attempts posted above (i.e packet capture) where done when trying to access the Marantz from the app, by its static ip.
                    • Spotify Connect on the same Marantz, is not discovered by the Spotify app on my Android phone, but is from the Macbook or iPhone app!

                    You might be able to do something with IGMP proxy here but it's status with VLANs is not certain AFAIK.
                    It's marked solved but some people are still seeing issues. Might be user error though.
                    https://redmine.pfsense.org/issues/6099

                    Steve

                    This doesn't seem to work either, no matter what/how I set the up/downstreams.

                    JKnottJ 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      Does your marantz allow you to put in a gateway? If not and you can put in the IP of the device you could source nat your traffic so the marantz thinks its being access from local IP, ie your pfsense IP in this subnet.

                      This is how you can access IP camera's for example that do not allow for a gateway. If the device is designed to only work on local network and not have any sort of internet access then it has no need for gateway.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        mtk @johnpoz
                        last edited by

                        @johnpoz said in Discovery across vlans:

                        Does your marantz allow you to put in a gateway? If not and you can put in the IP of the device you could source nat your traffic so the marantz thinks its being access from local IP, ie your pfsense IP in this subnet.

                        This is how you can access IP camera's for example that do not allow for a gateway. If the device is designed to only work on local network and not have any sort of internet access then it has no need for gateway.

                        0_1527707241691_178b0fe6-1b5d-4a2b-b47f-6e4869bb19fc-image.png

                        1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by Derelict

                          Do you need something in the port there? Or that's probably for the proxy. nevermind.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          M 1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Does IGMPproxy appear to start and run without errors when using VLAN interfaces?

                            If you shutdown Avahi do the Mac and iOS Spotify clients also fail to find it?

                            I would guess they are using mDNS and the Marantz app is using UPnP.

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • M
                              mtk @Derelict
                              last edited by

                              @derelict said in Discovery across vlans:

                              Do you need something in the port there? Or that's probably for the proxy. nevermind.

                              👌

                              @stephenw10 said in Discovery across vlans:

                              Does IGMPproxy appear to start and run without errors when using VLAN interfaces?

                              It depends on how it should be set up - I played with the settings too much so at the moment, no it doesn't.
                              0_1527709002871_270243c2-d746-40bf-8df2-798005f71ae2-image.png

                              If you shutdown Avahi do the Mac and iOS Spotify clients also fail to find it?

                              Done & Macbook seem to still find it - Android still doesn't.

                              I would guess they are using mDNS and the Marantz app is using UPnP.

                              Steve

                              1 Reply Last reply Reply Quote 0
                              • JKnottJ
                                JKnott @mtk
                                last edited by

                                @mtk said in Discovery across vlans:

                                The Marantz App, does allow manual IP, but still cannot access the device

                                As Johnpoz mentioned, if there's no gateway, it can't get past a router. Accessing devices on the local network is different from going through a router, as you're trying to do. If there's no gateway setting, that configurable IP address is used instead of automatic discovery.

                                When working only on the local LAN, the IP addresses is used to determine the MAC address, by using ARP. The MAC address is then used for the actual communications beteen devices. If the device is on a different network, that's recognized by comparing the remote and local addresses, through the subnet mask, to see if they're on the same network. If not, the packets are sent via the gateway address. However, for this to work, both a subnet mask and gateway are needed. With the method Johnpoz is describing, pfSense is acting as a proxy to pass the packets to another subnet.

                                PfSense running on Qotom mini PC
                                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                UniFi AC-Lite access point

                                I haven't lost my mind. It's around here...somewhere...

                                M 1 Reply Last reply Reply Quote 0
                                • M
                                  mtk @JKnott
                                  last edited by

                                  @jknott said in Discovery across vlans:

                                  @mtk said in Discovery across vlans:

                                  The Marantz App, does allow manual IP, but still cannot access the device

                                  As Johnpoz mentioned, if there's no gateway, it can't get past a router. Accessing devices on the local network is different from going through a router, as you're trying to do. If there's no gateway setting, that configurable IP address is used instead of automatic discovery.

                                  When working only on the local LAN, the IP addresses is used to determine the MAC address, by using ARP. The MAC address is then used for the actual communications beteen devices. If the device is on a different network, that's recognized by comparing the remote and local addresses, through the subnet mask, to see if they're on the same network. If not, the packets are sent via the gateway address. However, for this to work, both a subnet mask and gateway are needed. With the method Johnpoz is describing, pfSense is acting as a proxy to pass the packets to another subnet.

                                  Did you see the image I provided, with the IP & gateway & mask?

                                  JKnottJ 1 Reply Last reply Reply Quote 0
                                  • JKnottJ
                                    JKnott @mtk
                                    last edited by

                                    @mtk said in Discovery across vlans:

                                    Did you see the image I provided, with the IP & gateway & mask?

                                    Are those on the receiver or Android/iPhone apps? If the receiver then that's for Internet access for updates, etc., not remote control. That's how my Yamaha is set up. Those apps will require a gateway and subnet mask, if they are on a different subnet. That's in addition to multicast being used. Unless specifically configured or managed with IGMP, multicast packets are not passed by a router.

                                    PfSense running on Qotom mini PC
                                    i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                    UniFi AC-Lite access point

                                    I haven't lost my mind. It's around here...somewhere...

                                    M 1 Reply Last reply Reply Quote 0
                                    • M
                                      mtk @JKnott
                                      last edited by

                                      @jknott said in Discovery across vlans:

                                      Are those on the receiver or Android/iPhone apps? If the receiver then that's for Internet access for updates, etc., not remote control. That's how my Yamaha is set up. Those apps will require a gateway and subnet mask, if they are on a different subnet. That's in addition to multicast being used. Unless specifically configured or managed with IGMP, multicast packets are not passed by a router.

                                      Those settings are on the Receiver (web management page) itself, and they set the internet access as well as the local device IP.

                                      The Marantz (Android or iPhone) app, doesn't have the option to set a gateway, just the IP of the device you wish to connect to.

                                      JKnottJ 1 Reply Last reply Reply Quote 0
                                      • JKnottJ
                                        JKnott @mtk
                                        last edited by

                                        @mtk said in Discovery across vlans:

                                        @jknott said in Discovery across vlans:

                                        Are those on the receiver or Android/iPhone apps? If the receiver then that's for Internet access for updates, etc., not remote control. That's how my Yamaha is set up. Those apps will require a gateway and subnet mask, if they are on a different subnet. That's in addition to multicast being used. Unless specifically configured or managed with IGMP, multicast packets are not passed by a router.

                                        Those settings are on the Receiver (web management page) itself, and they set the internet access as well as the local device IP.

                                        The Marantz (Android or iPhone) app, doesn't have the option to set a gateway, just the IP of the device you wish to connect to.

                                        That's what I thought. The receiver needs a gateway & subnet mask to reach the Internet for updates and content, but not for the phone/tablet apps. Since the phone/tablet apps don't have a subnet mask and gateway, they cannot communicate beyond the router. As Johnpoz mentioned, pfSense would have to be configured to act as a proxy for the receiver. In that instance you'd need to manually configure the IP address on those devices.

                                        PfSense running on Qotom mini PC
                                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                        UniFi AC-Lite access point

                                        I haven't lost my mind. It's around here...somewhere...

                                        M 1 Reply Last reply Reply Quote 0
                                        • M
                                          mtk @JKnott
                                          last edited by

                                          @jknott said in Discovery across vlans:

                                          @mtk said in Discovery across vlans:

                                          @jknott said in Discovery across vlans:

                                          Are those on the receiver or Android/iPhone apps? If the receiver then that's for Internet access for updates, etc., not remote control. That's how my Yamaha is set up. Those apps will require a gateway and subnet mask, if they are on a different subnet. That's in addition to multicast being used. Unless specifically configured or managed with IGMP, multicast packets are not passed by a router.

                                          Those settings are on the Receiver (web management page) itself, and they set the internet access as well as the local device IP.

                                          The Marantz (Android or iPhone) app, doesn't have the option to set a gateway, just the IP of the device you wish to connect to.

                                          That's what I thought. The receiver needs a gateway & subnet mask to reach the Internet for updates and content, but not for the phone/tablet apps. Since the phone/tablet apps don't have a subnet mask and gateway, they cannot communicate beyond the router. As Johnpoz mentioned, pfSense would have to be configured to act as a proxy for the receiver. In that instance you'd need to manually configure the IP address on those devices.

                                          Any hint how to do that?

                                          1 Reply Last reply Reply Quote 0
                                          • JKnottJ
                                            JKnott
                                            last edited by

                                            I assume you'd have to set up port forwarding for the protocols used by those apps.

                                            PfSense running on Qotom mini PC
                                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                            UniFi AC-Lite access point

                                            I haven't lost my mind. It's around here...somewhere...

                                            M 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.