Apple TV: audio streaming ok, but not found on network and no video streaming

jgeorg

Hello experts,

I'm writing this post in desperate hope of finding the root cause of my Apple TV Gen 3 not working correctly since I started segmenting my LAN using VLAN and fpSense as a router. This is how a portion of my network looks like now:

WAN: IP 192.168.179.64/24 (uplink to ISP)
LAN: 192.168.0.0/24
VLAN30: 10.0.30.0/24 (WIFI)
VLAN40: 10.0.40.0/24 (Entertainment)

pfSense is latest version (04/2017).

The VLAN interfaces are virtual ones created on the OPT1. There are more VLANs and the firewalling works perfectly for these (Guests, CCTV, server+clients), so I believe that my understanding of a basic router-on-a-stick setup is ok (so far).

VLAN30 is where all my WiFi clients are connected to. Im using three Apple Airport Express APs in the house. All members have the sufficient internet access, so the firewalling is ok here, too.

VLAN40 is where all my entertainment gears are connected (AppleTV, Yamaha AV Receiver, Blurayplayer, Flat - ALL connected via their LAN ports). These devices have access to stream audio from my home server and AppleTV streams content. I was also able to get the Yamaha Remote App working (to control your Bluray and Receiver with the phone).

Here are the things that are not working:

both the Apple Remote App and Yamaha Remote App are not discovering the devices in the network. For the Yamaha one I had to add the devices' IPs manually
the Airplay service of the Yamaha receiver cannot be found. It's not showing up on the iPhone as streaming target.
the AppleTV airplay service is found and audio can be streamed to it, but screensync from my iPad or waking up the AppleTV over the network is not working.

I've done a lot of research and tweaked the firewall rules to get this working, but I got stuck as the firewall is showing no more blocked traffic between these two VLANs.

To test if the firewall is the root cause I setup a rule to allow all traffic between these two VLANs. This did not solve the problem. That's what makes me believe the issue is located somewhere else. During my research I found a hint that AppleTV needs IPV6 activated, but I have no knowledge about IPV6.

I'm seeing lots of blocks from a local IPv6 address to IPv6 multicast address

like VLAN30_WIFI [fe80::cde:50f3:af3a:d140] [ff02::2] ICMPv6

So obviously I need to open this ports. What "local" IPV6 can I use?

Next, I read that pfSense should act as an IGMP proxy for these VLANs, but I don't know how to properly setup this. My knowledge about handling multicast networks is less than basic.

Has somebody managed to get this working? Could somebody point me to where I properly made a mistake? If necessary I could share screenshots of my firewall rules, but I don't want to spam the forum with my initial post.

Any help is highly appreciated,
Jens

jgeorg

@jgeorg:

Hello experts,

I'm writing this post in desperate hope of finding the root cause of my Apple TV Gen 3 not working correctly since I started segmenting my LAN using VLAN and fpSense as a router. This is how a portion of my network looks like now:

WAN: IP 192.168.179.64/24 (uplink to ISP)
LAN: 192.168.0.0/24
VLAN30: 10.0.30.0/24 (WIFI)
VLAN40: 10.0.40.0/24 (Entertainment)

pfSense is latest version (04/2017).

The VLAN interfaces are virtual ones created on the OPT1. There are more VLANs and the firewalling works perfectly for these (Guests, CCTV, server+clients), so I believe that my understanding of a basic router-on-a-stick setup is ok (so far).

VLAN30 is where all my WiFi clients are connected to. Im using three Apple Airport Express APs in the house. All members have the sufficient internet access, so the firewalling is ok here, too.

VLAN40 is where all my entertainment gears are connected (AppleTV, Yamaha AV Receiver, Blurayplayer, Flat - ALL connected via their LAN ports). These devices have access to stream audio from my home server and AppleTV streams content. I was also able to get the Yamaha Remote App working (to control your Bluray and Receiver with the phone).

Here are the things that are not working:

both the Apple Remote App and Yamaha Remote App are not discovering the devices in the network. For the Yamaha one I had to add the devices' IPs manually

the Airplay service of the Yamaha receiver cannot be found. It's not showing up on the iPhone as streaming target.

the AppleTV airplay service is found and audio can be streamed to it, but screensync from my iPad or waking up the AppleTV over the network is not working.

I've done a lot of research and tweaked the firewall rules to get this working, but I got stuck as the firewall is showing no more blocked traffic between these two VLANs.

To test if the firewall is the root cause I setup a rule to allow all traffic between these two VLANs. This did not solve the problem. That's what makes me believe the issue is located somewhere else. During my research I found a hint that AppleTV needs IPV6 activated, but I have no knowledge about IPV6.

I'm seeing lots of blocks from a local IPv6 address to IPv6 multicast address

like VLAN30_WIFI [fe80::cde:50f3:af3a:d140] [ff02::2] ICMPv6

So obviously I need to open this ports. What "local" IPV6 can I use?

Next, I read that pfSense should act as an IGMP proxy for these VLANs, but I don't know how to properly setup this. My knowledge about handling multicast networks is less than basic.

Has somebody managed to get this working? Could somebody point me to where I properly made a mistake? If necessary I could share screenshots of my firewall rules, but I don't want to spam the forum with my initial post.

Any help is highly appreciated,
Jens

All,

I was able to fix this. The Avahi package was missing. After installing and adding additional FW rules everything works now.

Jens

sinbox_pfs

Do you mind sharing the firewall rules you got to work? I’m in a similar situation.