Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    WOL packets across subnets?

    General pfSense Questions
    8
    34
    9.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jahonixJ
      jahonix @stephenw10
      last edited by

      @stephenw10 said in WOL packets across subnets?:

      Yeah FreeBSD doesn't do that AFAIK and hasn't for some time.
      ...
      It is late here and I lost an hour of sleep last night! ๐Ÿ˜‰

      Strange, I have it working this way, client uses is frequently with this video switcher.

      Don't worry about your sleep, same with me. Just 1 hour ahead... ๐Ÿ˜‰

      1 Reply Last reply Reply Quote 0
      • jahonixJ
        jahonix @JKnott
        last edited by

        @JKnott said in WOL packets across subnets?:

        @jahonix said in WOL packets across subnets?:

        The "Magic Packet" is sent on OSI L2, usually as UDP

        UDP is layer 4. IP is 3 and Ethernet, 2.

        Correct, I was wondering how long I could get away with writing it this way. ๐Ÿ˜‡
        I am using a UDP frame directed at the other subnet's broadcast address as mentioned before. No need to wireshark. And I'm not there often anymore.

        1 Reply Last reply Reply Quote 0
        • D
          dstarr3
          last edited by

          Welp, I guess the solution is just to put my WiFi on the same subnet as my LAN. I was hoping to keep them separated, just for the sake of organization, but it's just causing too many problems. Oh well!

          1 Reply Last reply Reply Quote 0
          • RicoR
            Rico LAYER 8 Rebel Alliance
            last edited by Rico

            I don't get the problem why you need some App when pfSense can do the job.
            Just create some User named "wol" or anything you want, give the privileges only to access Services > WOL
            pfSense_WOL-User.png
            Now when logging in with User "wol" you are redirected to Services > WOL without to need clicking anything in the WebGUI.
            Depending on your smartphone/browser you can even save the pfSense Login to your Homescreen and autologin User "wol".
            Now you have your selfmade pfSense WOL App and anything working...deal? โ˜บ

            -Rico

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              yup @Rico method is how I would do it if ever need such a thing... But just not a fan of wol at all... If you want to get to so something leave it on..

              Its just too much of a pain doing wol for a few devices... What cost you like 2 bucks a month to just leave them on..

              I could see if you in the enterprise and had 1000 machines going into standby at night and every now and then you wanted to wake them up to do updates or something..

              What exactly are you trying to wake up? While your there on the network with your phone? Just go click the button on it ;) Are you in a 15K square foot mansion and can not be bothered to walk from the west wing to the east? Have the butler go hit the space bar ;)

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

              J 1 Reply Last reply Reply Quote 0
              • J
                jeremym @johnpoz
                last edited by

                @johnpoz said in WOL packets across subnets?:

                yup @Rico method is how I would do it if ever need such a thing... But just not a fan of wol at all... If you want to get to so something leave it on..

                Its just too much of a pain doing wol for a few devices... What cost you like 2 bucks a month to just leave them on..

                I could see if you in the enterprise and had 1000 machines going into standby at night and every now and then you wanted to wake them up to do updates or something..

                What exactly are you trying to wake up? While your there on the network with your phone? Just go click the button on it ;) Are you in a 15K square foot mansion and can not be bothered to walk from the west wing to the east? Have the butler go hit the space bar ;)

                I'd personally like to find some kind of work around. I dont live in a mansion or anything either but id like to just say "Hey Siri, Goodnight" and my tv shuts off with everything else homekit shuts down. Maybe thats what he wants too? Simple automated convenance.

                I hate it when people do this to other people seeking help. Ridiculing them for something they want to do. I mean sure you could go find a remote and shut it off, you could also unplug the TV and put it away in a box or take it back to the store and buy a new one each time too. Theres lots of different things you could do but not all of them are smart or make sense to do but theres some more options to toss at him/her when they ask again.

                For me I am trying to find a way to do this too because I have my IoT devices on one subnet but would like to have homebridge send the WoL packet to my TV thats on my LAN subnet to shut it off when I say "Siri Goodnight". I dont have a mansion myself but I just want simplicity of automation and this WoL issue is the last hurdle to clear.

                JKnottJ 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by johnpoz

                  WOL does not work over subnet... Do you understand how WOL works? You send specific packet to the mac address (layer 2).. If you want to wake up something on another layer 2 network, then you need something on that other layer 2 to send the packet.

                  Now it is possible - but you need something that has access to both the sender and the receiver. And you have to tell the guy between (router) to wake up dest device. This router needs to know the mac address of this dest device.. static arp entry can help with that, etc.

                  Going to say this again - its not worth the hassle.. But sure go ahead and help them ;) You can always log into the pfsense web gui and if you have setup static arp, dhcp reservation for this device as example you can send the wol packet from there.. So sure there are work arounds - awaiting your code changes to pfsense to allow for such a thing...

                  Get with your homebridge forum on how to have it send wol to different devices on different subnets.. Is that not a standard feature where you can say Wake Up X? Sure alexa and stuff can send the wol messages to device - but they have to be in the same layer 2 network!!

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                  J 1 Reply Last reply Reply Quote 0
                  • J
                    jeremym @johnpoz
                    last edited by

                    @johnpoz said in WOL packets across subnets?:

                    WOL does not work over subnet... Do you understand how WOL works? You send specific packet to the mac address (layer 2).. If you want to wake up something on another layer 2 network, then you need something on that other layer 2 to send the packet.

                    Now it is possible - but you need something that has access to both the sender and the receiver. And you have to tell the guy between (router) to wake up dest device. This router needs to know the mac address of this dest device.. static arp entry can help with that, etc.

                    Going to say this again - its not worth the hassle.. But sure go ahead and help them ;) You can always log into the pfsense web gui and if you have setup static arp, dhcp reservation for this device as example you can send the wol packet from there.. So sure there are work arounds - awaiting your code changes to pfsense to allow for such a thing...

                    Get with your homebridge forum on how to have it send wol to different devices on different subnets.. Is that not a standard feature where you can say Wake Up X?

                    I guess you are too focused on being negative and not on what people are wanting to do. How you are a global moderator with that attitude I have no idea.

                    Either way how is homebridge going to fix this? Homebridge is simply a hub for IoT devices sitting on the subnet. It can't route packets as it can only send them out on the broadcast address of the subnet its on. This would need to be done at the router level, which in this case, is my pfsense gateway. As for code changes..if theres work arounds then that is fine. How about just supplying people the workarounds instead of trying to argue?

                    Here seems to be a workaround I am going to give this a try. This isnt an impossible task unless the BSD kernel blocks it from happening specifically which could be an answer you could supply. : https://forum.netgate.com/topic/30355/wake-on-wan/3

                    1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @jeremym
                      last edited by

                      @jeremym said in WOL packets across subnets?:

                      I'd personally like to find some kind of work around. I dont live in a mansion or anything either but id like to just say "Hey Siri, Goodnight" and my tv shuts off with everything else homekit shuts down. Maybe thats what he wants too? Simple automated convenance.

                      That's not the sort of thing WoL does. WoL stands for Wake on LAN, which is a method to turn a device on. There is no corresponding function to turn it off.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      J 1 Reply Last reply Reply Quote 0
                      • J
                        jeremym @JKnott
                        last edited by jeremym

                        @JKnott said in WOL packets across subnets?:

                        @jeremym said in WOL packets across subnets?:

                        I'd personally like to find some kind of work around. I dont live in a mansion or anything either but id like to just say "Hey Siri, Goodnight" and my tv shuts off with everything else homekit shuts down. Maybe thats what he wants too? Simple automated convenance.

                        That's not the sort of thing WoL does. WoL stands for Wake on LAN, which is a method to turn a device on. There is no corresponding function to turn it off.

                        Correct. What I am wanting to do is have the WoL packet sent to my TV to wake it up. According to the dev, the plugin then uses the Samsung API to manage commands after that such as power off. I didnt go into detail of how the exact plugin works because honestly I do not know other than the high level aspect I just typed here because its found on the wiki of the plugin.

                        So if I can get the WoL packet to reach the TV then the plugin will utilize the Samsung API to do the rest. Just need to wake it up.

                        However I do recall more detail I read a few months ago about how this plugin worked. It might have been in a GitHub bug someone opened and it was a reply from the dev. I think theres more "voodoo" to shutting it off than what I said above because honestly it should shut off after I manually power it on the way I have things configured now but it doesnt.

                        The quick backstory of my little project is this..I had everything on the same lan working great. I decided to make things a bit more secure and created a separate vlan for my IoT devices. I wanted to leave my Apple devices and my Samsung TV on my regular lan. So I created an alias for my homekit hub devices (Apple TVs and HomePods), installed Avahi for mdns retransmissions across subnets, gave my hubs static IPs based upon their Mac in my DHCP server on the gateway, and opened up firewall rules so the devices on the IoT vlan could communicate with only the homekit hub devices on my lan. They cannot reach anything else on my lan. I created rules in reverse as well so I had no restrictions depending on what device initiated the connection request. For the wifi devices I got a cheap Linksys wireless router and put dd-wrt on it so it was as secure as I could get it "Linksys firmware is really out of date for this old thing so decided dd-wrt release from dec of 2019 is best I can do".

                        All is working great except for this plugin. Which is what lead me here because I know what WoL is and I was hoping someone had a solution to get the packet to relay to the right subnet when homebridge sent it out.

                        Here is a link to the plugin so you can take a look if you are interested in it. Works great when on the same subnet :)
                        https://github.com/tavicu/homebridge-samsung-tizen/wiki

                        JKnottJ 1 Reply Last reply Reply Quote 0
                        • J
                          jewelrymaster Banned
                          last edited by

                          This post is deleted!
                          1 Reply Last reply Reply Quote 0
                          • JKnottJ
                            JKnott @jeremym
                            last edited by

                            @jeremym said in WOL packets across subnets?:

                            What I am wanting to do is have the WoL packet sent to my TV to wake it up.

                            Does your TV even support WoL?

                            PfSense running on Qotom mini PC
                            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                            UniFi AC-Lite access point

                            I haven't lost my mind. It's around here...somewhere...

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              If it's just one device then you should be able to add a static ARP entry for it and the appropriate port forward for whatever your application uses.
                              When I looked into this before I could see no way to allow forwarding directed broadcasts.

                              Steve

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Setup an internal proxy maybe? Such as: https://help.green-it-software.com/pdf/Raspberry%20Pi%20as%20WolProxy%201.0.3.pdf

                                Steve

                                JKnottJ 1 Reply Last reply Reply Quote 0
                                • JKnottJ
                                  JKnott @stephenw10
                                  last edited by

                                  @stephenw10

                                  It's certainly possible to set up a WoL relay agent.

                                  PfSense running on Qotom mini PC
                                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                  UniFi AC-Lite access point

                                  I haven't lost my mind. It's around here...somewhere...

                                  1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator
                                    last edited by johnpoz

                                    Just because you have something that will relay or forward (that device that has access to both L2s) doesn't mean its going to work with alexa or google home or homekit, etc. etc.

                                    Not without some major background work and setup most likely, and understanding the details of how your device you want to say wakeup X actually does that..

                                    My Alexa can turn on my TV, and off.. but I have my harmony remote in the same vlan as alexa, while my tv is in its own vlan. Both of these vlans are different than my other vlans. It would prob work without even... Since the harmony remote isn't in standby and the alexa should be able to talk to it over L3.

                                    But trying to find ways to move L2 data into another L2 is not the right approach.. Correct design of your L2s is better option from a security standpoint.. You need X to talk to Y via layer 2 - then put them in the same layer 2, its really that simple!!! Isolate that network from your other stuff..

                                    Do you trust alexa... do you trust your tv, do you trust your iot - well no that is why we isolate them.. But if X needs to talk to Y via layer 2 stuff.. The simple solution is just put them in the same L2 ;)

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.