Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Discovery across vlans

    Scheduled Pinned Locked Moved General pfSense Questions
    64 Posts 6 Posters 20.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott @mtk
      last edited by

      @mtk said in Discovery across vlans:

      The Marantz App, does allow manual IP, but still cannot access the device

      As Johnpoz mentioned, if there's no gateway, it can't get past a router. Accessing devices on the local network is different from going through a router, as you're trying to do. If there's no gateway setting, that configurable IP address is used instead of automatic discovery.

      When working only on the local LAN, the IP addresses is used to determine the MAC address, by using ARP. The MAC address is then used for the actual communications beteen devices. If the device is on a different network, that's recognized by comparing the remote and local addresses, through the subnet mask, to see if they're on the same network. If not, the packets are sent via the gateway address. However, for this to work, both a subnet mask and gateway are needed. With the method Johnpoz is describing, pfSense is acting as a proxy to pass the packets to another subnet.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      M 1 Reply Last reply Reply Quote 0
      • M
        mtk @JKnott
        last edited by

        @jknott said in Discovery across vlans:

        @mtk said in Discovery across vlans:

        The Marantz App, does allow manual IP, but still cannot access the device

        As Johnpoz mentioned, if there's no gateway, it can't get past a router. Accessing devices on the local network is different from going through a router, as you're trying to do. If there's no gateway setting, that configurable IP address is used instead of automatic discovery.

        When working only on the local LAN, the IP addresses is used to determine the MAC address, by using ARP. The MAC address is then used for the actual communications beteen devices. If the device is on a different network, that's recognized by comparing the remote and local addresses, through the subnet mask, to see if they're on the same network. If not, the packets are sent via the gateway address. However, for this to work, both a subnet mask and gateway are needed. With the method Johnpoz is describing, pfSense is acting as a proxy to pass the packets to another subnet.

        Did you see the image I provided, with the IP & gateway & mask?

        JKnottJ 1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @mtk
          last edited by

          @mtk said in Discovery across vlans:

          Did you see the image I provided, with the IP & gateway & mask?

          Are those on the receiver or Android/iPhone apps? If the receiver then that's for Internet access for updates, etc., not remote control. That's how my Yamaha is set up. Those apps will require a gateway and subnet mask, if they are on a different subnet. That's in addition to multicast being used. Unless specifically configured or managed with IGMP, multicast packets are not passed by a router.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          M 1 Reply Last reply Reply Quote 0
          • M
            mtk @JKnott
            last edited by

            @jknott said in Discovery across vlans:

            Are those on the receiver or Android/iPhone apps? If the receiver then that's for Internet access for updates, etc., not remote control. That's how my Yamaha is set up. Those apps will require a gateway and subnet mask, if they are on a different subnet. That's in addition to multicast being used. Unless specifically configured or managed with IGMP, multicast packets are not passed by a router.

            Those settings are on the Receiver (web management page) itself, and they set the internet access as well as the local device IP.

            The Marantz (Android or iPhone) app, doesn't have the option to set a gateway, just the IP of the device you wish to connect to.

            JKnottJ 1 Reply Last reply Reply Quote 0
            • JKnottJ
              JKnott @mtk
              last edited by

              @mtk said in Discovery across vlans:

              @jknott said in Discovery across vlans:

              Are those on the receiver or Android/iPhone apps? If the receiver then that's for Internet access for updates, etc., not remote control. That's how my Yamaha is set up. Those apps will require a gateway and subnet mask, if they are on a different subnet. That's in addition to multicast being used. Unless specifically configured or managed with IGMP, multicast packets are not passed by a router.

              Those settings are on the Receiver (web management page) itself, and they set the internet access as well as the local device IP.

              The Marantz (Android or iPhone) app, doesn't have the option to set a gateway, just the IP of the device you wish to connect to.

              That's what I thought. The receiver needs a gateway & subnet mask to reach the Internet for updates and content, but not for the phone/tablet apps. Since the phone/tablet apps don't have a subnet mask and gateway, they cannot communicate beyond the router. As Johnpoz mentioned, pfSense would have to be configured to act as a proxy for the receiver. In that instance you'd need to manually configure the IP address on those devices.

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              M 1 Reply Last reply Reply Quote 0
              • M
                mtk @JKnott
                last edited by

                @jknott said in Discovery across vlans:

                @mtk said in Discovery across vlans:

                @jknott said in Discovery across vlans:

                Are those on the receiver or Android/iPhone apps? If the receiver then that's for Internet access for updates, etc., not remote control. That's how my Yamaha is set up. Those apps will require a gateway and subnet mask, if they are on a different subnet. That's in addition to multicast being used. Unless specifically configured or managed with IGMP, multicast packets are not passed by a router.

                Those settings are on the Receiver (web management page) itself, and they set the internet access as well as the local device IP.

                The Marantz (Android or iPhone) app, doesn't have the option to set a gateway, just the IP of the device you wish to connect to.

                That's what I thought. The receiver needs a gateway & subnet mask to reach the Internet for updates and content, but not for the phone/tablet apps. Since the phone/tablet apps don't have a subnet mask and gateway, they cannot communicate beyond the router. As Johnpoz mentioned, pfSense would have to be configured to act as a proxy for the receiver. In that instance you'd need to manually configure the IP address on those devices.

                Any hint how to do that?

                1 Reply Last reply Reply Quote 0
                • JKnottJ
                  JKnott
                  last edited by

                  I assume you'd have to set up port forwarding for the protocols used by those apps.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    mtk @JKnott
                    last edited by

                    @jknott said in Discovery across vlans:

                    I assume you'd have to set up port forwarding for the protocols used by those apps.

                    Port forward from where to where?
                    Traffic between VLAN is wide open (see screenshot above).

                    JKnottJ 1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @mtk
                      last edited by

                      @mtk said in Discovery across vlans:

                      @jknott said in Discovery across vlans:

                      I assume you'd have to set up port forwarding for the protocols used by those apps.

                      Port forward from where to where?
                      Traffic between VLAN is wide open (see screenshot above).

                      Find out what protocols/port numbers are used, then configure pfSense to forward them to the receiver. It's exactly the same thing as when you have to get past NAT to reach computers on your home network. You determine what has to be forwarded and where.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        mtk @JKnott
                        last edited by

                        @jknott said in Discovery across vlans:

                        @mtk said in Discovery across vlans:

                        @jknott said in Discovery across vlans:

                        I assume you'd have to set up port forwarding for the protocols used by those apps.

                        Port forward from where to where?
                        Traffic between VLAN is wide open (see screenshot above).

                        Find out what protocols/port numbers are used, then configure pfSense to forward them to the receiver. It's exactly the same thing as when you have to get past NAT to reach computers on your home network. You determine what has to be forwarded and where.

                        well, yes, but we still have the "thing" where it works for iPhone/Macbook (so it's probably open), but not for Android and there are no real blocked entries in the log...

                        JKnottJ 1 Reply Last reply Reply Quote 0
                        • JKnottJ
                          JKnott @mtk
                          last edited by

                          @mtk said in Discovery across vlans:

                          well, yes, but we still have the “thing” where it works for iPhone/Macbook (so it’s probably open), but not for Android and there are no real blocked entries in the log…

                          Does the app on those devices have settings for gateway and subnet mask? If not, I have no idea how they manage to work through a router.

                          PfSense running on Qotom mini PC
                          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                          UniFi AC-Lite access point

                          I haven't lost my mind. It's around here...somewhere...

                          M 1 Reply Last reply Reply Quote 0
                          • M
                            mtk @JKnott
                            last edited by

                            @jknott said in Discovery across vlans:

                            @mtk said in Discovery across vlans:

                            well, yes, but we still have the “thing” where it works for iPhone/Macbook (so it’s probably open), but not for Android and there are no real blocked entries in the log…

                            Does the app on those devices have settings for gateway and subnet mask? If not, I have no idea how they manage to work through a router.

                            The app is the Spotify (official) app and no, it doesn't even have IP settings - it just "finds" the Marantz.

                            jahonixJ 1 Reply Last reply Reply Quote 0
                            • jahonixJ
                              jahonix @mtk
                              last edited by

                              @mtk
                              May I suggest you ask spotify what differences there are between their working iOS app and their not working Android app in your scenario.

                              M 1 Reply Last reply Reply Quote 0
                              • M
                                mtk @jahonix
                                last edited by

                                @jahonix said in Discovery across vlans:

                                @mtk
                                May I suggest you ask spotify what differences there are between their working iOS app and their not working Android app in your scenario.

                                I'll do that, but in the meantime, is there any way to see what the iOS/MacOS are doing network-wise vs the Android?
                                I mean, they are probably initiating some sort of request to see "how is out there", right?

                                1 Reply Last reply Reply Quote 0
                                • JKnottJ
                                  JKnott
                                  last edited by

                                  @mtk said in Discovery across vlans:

                                  is there any way to see what the iOS/MacOS are doing network-wise vs the Android?

                                  You can use Packet Capture record the traffic and then download for viewing with Wireshark. If you have a managed switch, you can use Wireshark directly by configuring the switch for port mirroring.

                                  PfSense running on Qotom mini PC
                                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                  UniFi AC-Lite access point

                                  I haven't lost my mind. It's around here...somewhere...

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    You don't need to configure a subnet or gateway in the phone app for the same reason you need need one in your web browser. It just uses the hosts IP stack with whatever the default route is.

                                    Steve

                                    JKnottJ 1 Reply Last reply Reply Quote 0
                                    • JKnottJ
                                      JKnott @stephenw10
                                      last edited by

                                      @stephenw10 said in Discovery across vlans:

                                      ou don’t need to configure a subnet or gateway in the phone app for the same reason you need need one in your web browser. It just uses the hosts IP stack with whatever the default route is.

                                      Quite so. Not thinking straight. Not enough beer. ;)

                                      PfSense running on Qotom mini PC
                                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                      UniFi AC-Lite access point

                                      I haven't lost my mind. It's around here...somewhere...

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        ...or too many. Tough to stay o the Ballmer peak for any length of time. 😉

                                        @mtk If the amp has a webgui for configuring it I assume you can hit that from any device on any subnet?

                                        Steve

                                        M 1 Reply Last reply Reply Quote 0
                                        • M
                                          mtk @stephenw10
                                          last edited by

                                          @stephenw10 said in Discovery across vlans:

                                          ...or too many. Tough to stay o the Ballmer peak for any length of time. 😉

                                          @mtk If the amp has a webgui for configuring it I assume you can hit that from any device on any subnet?

                                          Steve

                                          Yes, I can access the Marantz webgui from all WIFI connected devices.

                                          1 Reply Last reply Reply Quote 0
                                          • M
                                            mtk
                                            last edited by

                                            @jahonix said in Discovery across vlans:

                                            HEOS App

                                            I just installed the Marantz 2016 AVR Remote which doesn't support my old Marantz, but I added its IP manually and actually got a message saying something like:
                                            NR1504 is not compatible with this app use the other
                                            so my Android DOES manage to see the Marantz after all...

                                            jahonixJ 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.