Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Discovery across vlans

    Scheduled Pinned Locked Moved General pfSense Questions
    64 Posts 6 Posters 18.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by stephenw10

      It looks like it relies on UPnP/DLNA which won't work across subnets, for auto discovery at least:

      You can also try to manually enter the IP address of the Marantz unit in the app and try to connect then to the unit. If this works, your network configuration may block some UPnP ports necessary for browsing through media servers, detecting units, etc. We then recommend to check again if there is some device in your network environment (access point, repeater, router) that does not forward UPnP commands.

      There are some 3rd party apps you could try.

      Steve

      1 Reply Last reply Reply Quote 0
      • M
        mtk @jahonix
        last edited by

        @jahonix said in Discovery across vlans:

        Which Marantz receiver do you have?

        NR1504

        @stephenw10 said in Discovery across vlans:

        It looks like it relies on UPnP/DLNA which won't work across subnets, for auto discovery at least:

        You can also try to manually enter the IP address of the Marantz unit in the app and try to connect then to the unit. If this works, your network configuration may block some UPnP ports necessary for browsing through media servers, detecting units, etc. We then recommend to check again if there is some device in your network environment (access point, repeater, router) that does not forward UPnP commands.

        There are some 3rd party apps you could try.

        Steve

        Manually adding the IP to the Marantz APP also doesn't work, and that is actually the only way I see some sort of traffic from my phone to the Marantz.

        I have a Mikrotik switch between the Wireless AP (which my phone connects to) and the Marantz (which is connected via LAN).
        Might it be that it's blocked there somehow?

        jahonixJ 1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          Again, reverse engineering this issue without documentation as to what it is doing is probably not going to happen here. Maybe someone who has the same gear and got it working will chime in.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • jahonixJ
            jahonix @mtk
            last edited by

            @mtk Reading the online help system from Denon/Marantz I only found the obvious:

            • Did you update/upgrade the receiver's firmware to latest available?
            • Do you use a currently supported app (Marantz Consolette is 32bit and therefore incompatible from iOS11 onwards).

            Marantz 64bit Apps are:

            Marantz Remote App
            Marantz HiFi Remote App
            Marantz 2016 AVR Remote App
            
            Audyssey MultEQ Editor App
            
            HEOS App
            

            But I also read: make sure all devices are on the same network which means Denon/Marantz support will not help with your setup either.

            M 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by johnpoz

              To be honest take your money elsewhere for such things. Why do these companies not get it that the age of flat networks in the home are at a end with the age of IOT and the need to segment devices with questionable security practices you can not just put everything on one flat network anymore.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

              jahonixJ 1 Reply Last reply Reply Quote 0
              • jahonixJ
                jahonix @johnpoz
                last edited by jahonix

                @johnpoz 99,9% of all Denon/Marantz users don't even know something like that exists (let alone what to use it for). They are happy as long as their network with the el-cheapo telco-AIO-router is working at all.

                That's called a consumer. 🤷

                1 Reply Last reply Reply Quote 0
                • M
                  mtk @jahonix
                  last edited by mtk

                  @jahonix said in Discovery across vlans:

                  @mtk Reading the online help system from Denon/Marantz I only found the obvious:

                  • Did you update/upgrade the receiver's firmware to latest available?

                  yes

                  • Do you use a currently supported app (Marantz Consolette is 32bit and therefore incompatible from iOS11 onwards).

                  Marantz 64bit Apps are:

                  Marantz Remote App
                  Marantz HiFi Remote App
                  Marantz 2016 AVR Remote App
                  
                  Audyssey MultEQ Editor App
                  
                  HEOS App
                  

                  I'm using Marantz Remote App on both iOS and Android and there is a equivalent Denon App that is exactly the same just diferent (darker) theme, and supports the Marantz.
                  Both were working "ok" before I made the split into VLANs.

                  But I also read: make sure all devices are on the same network which means Denon/Marantz support will not help with your setup either.

                  @johnpoz said in Discovery across vlans:

                  To be honest take your money elsewhere for such things. Why do these companies not get it that the age of flat networks in the home are at a end with the age of IOT and the need to segment devices with questionable security practices you can not just put everything on one flat network anymore.

                  well, I agree, but I'm not planning to buy a new receiver just to solve that...

                  @jahonix said in Discovery across vlans:

                  @johnpoz 99,9% of all Denon/Marantz users don't even know something like that exists (let alone what to use it for). They are happy as long as their network with the el-cheapo telco-AIO-router is working at all.

                  That's called a consumer. 🤷

                  well, I do... and I'm trying to solve it on the network level, because I agree that Marantz was never good in technical support (specially non-audio related stuff)
                  But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

                  BTW, all this still doesn't explain the inconsistent behaviour with Spotify Connect - working from the Macbooc and iPhone, but not the Android unless the Marantz is already playing (then I see it on my Android Spotify app)

                  jahonixJ 1 Reply Last reply Reply Quote 0
                  • jahonixJ
                    jahonix @mtk
                    last edited by jahonix

                    @mtk said in Discovery across vlans:

                    But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

                    Even though I do system integrations I do not know of such devices. Unless, maybe, they cost a fortune.
                    But to be fair, my work is primarily in the commercial and not the residential market.

                    JKnottJ 1 Reply Last reply Reply Quote 0
                    • JKnottJ
                      JKnott @jahonix
                      last edited by

                      @jahonix said in Discovery across vlans:

                      @mtk said in Discovery across vlans:

                      But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

                      Even though I do system integrations I do not know of such devices. Unless, maybe, they cost a fortune.
                      But to be fair, my work is primarily in the commercial and not the residential market.

                      FWIW, I have a Yamaha A/V receiver that can be controlled by an Android app on my tablet or phone. However, it uses multicast, which is not normally passed by routers. So, I can control the receiver when I'm at home, but not elsewhere. I also wouldn't expect it to work on my test LAN that's on a different subnet.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      M 1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by stephenw10

                        To be fair they at least allow you enter an IP manually which is more than many other similar apps.

                        Curious that it still doesn't work even then.

                        You might be able to do something with IGMP proxy here but it's status with VLANs is not certain AFAIK.
                        It's marked solved but some people are still seeing issues. Might be user error though.
                        https://redmine.pfsense.org/issues/6099

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • M
                          mtk @JKnott
                          last edited by

                          @jknott said in Discovery across vlans:

                          @jahonix said in Discovery across vlans:

                          @mtk said in Discovery across vlans:

                          But @jahonix, I'm curious, do you know any receiver that doesn't (or won't) have similar issues?

                          Even though I do system integrations I do not know of such devices. Unless, maybe, they cost a fortune.
                          But to be fair, my work is primarily in the commercial and not the residential market.

                          FWIW, I have a Yamaha A/V receiver that can be controlled by an Android app on my tablet or phone. However, it uses multicast, which is not normally passed by routers. So, I can control the receiver when I'm at home, but not elsewhere. I also wouldn't expect it to work on my test LAN that's on a different subnet.

                          I'm not trying to access it from anywhere but my network, but yes expecting it to work from a different subnet.

                          @stephenw10 said in Discovery across vlans:

                          To be fair they at least allow you enter an IP manually which is more than many other similar apps.

                          Curious that it still doesn't work even then.

                          Let me repeat that - there are 2 issues probably (but not necessarily) related:

                          • The Marantz App, does allow manual IP, but still cannot access the device (and also does not discover it automagically) - all attempts posted above (i.e packet capture) where done when trying to access the Marantz from the app, by its static ip.
                          • Spotify Connect on the same Marantz, is not discovered by the Spotify app on my Android phone, but is from the Macbook or iPhone app!

                          You might be able to do something with IGMP proxy here but it's status with VLANs is not certain AFAIK.
                          It's marked solved but some people are still seeing issues. Might be user error though.
                          https://redmine.pfsense.org/issues/6099

                          Steve

                          This doesn't seem to work either, no matter what/how I set the up/downstreams.

                          JKnottJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            Does your marantz allow you to put in a gateway? If not and you can put in the IP of the device you could source nat your traffic so the marantz thinks its being access from local IP, ie your pfsense IP in this subnet.

                            This is how you can access IP camera's for example that do not allow for a gateway. If the device is designed to only work on local network and not have any sort of internet access then it has no need for gateway.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                            M 1 Reply Last reply Reply Quote 0
                            • M
                              mtk @johnpoz
                              last edited by

                              @johnpoz said in Discovery across vlans:

                              Does your marantz allow you to put in a gateway? If not and you can put in the IP of the device you could source nat your traffic so the marantz thinks its being access from local IP, ie your pfsense IP in this subnet.

                              This is how you can access IP camera's for example that do not allow for a gateway. If the device is designed to only work on local network and not have any sort of internet access then it has no need for gateway.

                              0_1527707241691_178b0fe6-1b5d-4a2b-b47f-6e4869bb19fc-image.png

                              1 Reply Last reply Reply Quote 0
                              • DerelictD
                                Derelict LAYER 8 Netgate
                                last edited by Derelict

                                Do you need something in the port there? Or that's probably for the proxy. nevermind.

                                Chattanooga, Tennessee, USA
                                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                M 1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  Does IGMPproxy appear to start and run without errors when using VLAN interfaces?

                                  If you shutdown Avahi do the Mac and iOS Spotify clients also fail to find it?

                                  I would guess they are using mDNS and the Marantz app is using UPnP.

                                  Steve

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    mtk @Derelict
                                    last edited by

                                    @derelict said in Discovery across vlans:

                                    Do you need something in the port there? Or that's probably for the proxy. nevermind.

                                    👌

                                    @stephenw10 said in Discovery across vlans:

                                    Does IGMPproxy appear to start and run without errors when using VLAN interfaces?

                                    It depends on how it should be set up - I played with the settings too much so at the moment, no it doesn't.
                                    0_1527709002871_270243c2-d746-40bf-8df2-798005f71ae2-image.png

                                    If you shutdown Avahi do the Mac and iOS Spotify clients also fail to find it?

                                    Done & Macbook seem to still find it - Android still doesn't.

                                    I would guess they are using mDNS and the Marantz app is using UPnP.

                                    Steve

                                    1 Reply Last reply Reply Quote 0
                                    • JKnottJ
                                      JKnott @mtk
                                      last edited by

                                      @mtk said in Discovery across vlans:

                                      The Marantz App, does allow manual IP, but still cannot access the device

                                      As Johnpoz mentioned, if there's no gateway, it can't get past a router. Accessing devices on the local network is different from going through a router, as you're trying to do. If there's no gateway setting, that configurable IP address is used instead of automatic discovery.

                                      When working only on the local LAN, the IP addresses is used to determine the MAC address, by using ARP. The MAC address is then used for the actual communications beteen devices. If the device is on a different network, that's recognized by comparing the remote and local addresses, through the subnet mask, to see if they're on the same network. If not, the packets are sent via the gateway address. However, for this to work, both a subnet mask and gateway are needed. With the method Johnpoz is describing, pfSense is acting as a proxy to pass the packets to another subnet.

                                      PfSense running on Qotom mini PC
                                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                      UniFi AC-Lite access point

                                      I haven't lost my mind. It's around here...somewhere...

                                      M 1 Reply Last reply Reply Quote 0
                                      • M
                                        mtk @JKnott
                                        last edited by

                                        @jknott said in Discovery across vlans:

                                        @mtk said in Discovery across vlans:

                                        The Marantz App, does allow manual IP, but still cannot access the device

                                        As Johnpoz mentioned, if there's no gateway, it can't get past a router. Accessing devices on the local network is different from going through a router, as you're trying to do. If there's no gateway setting, that configurable IP address is used instead of automatic discovery.

                                        When working only on the local LAN, the IP addresses is used to determine the MAC address, by using ARP. The MAC address is then used for the actual communications beteen devices. If the device is on a different network, that's recognized by comparing the remote and local addresses, through the subnet mask, to see if they're on the same network. If not, the packets are sent via the gateway address. However, for this to work, both a subnet mask and gateway are needed. With the method Johnpoz is describing, pfSense is acting as a proxy to pass the packets to another subnet.

                                        Did you see the image I provided, with the IP & gateway & mask?

                                        JKnottJ 1 Reply Last reply Reply Quote 0
                                        • JKnottJ
                                          JKnott @mtk
                                          last edited by

                                          @mtk said in Discovery across vlans:

                                          Did you see the image I provided, with the IP & gateway & mask?

                                          Are those on the receiver or Android/iPhone apps? If the receiver then that's for Internet access for updates, etc., not remote control. That's how my Yamaha is set up. Those apps will require a gateway and subnet mask, if they are on a different subnet. That's in addition to multicast being used. Unless specifically configured or managed with IGMP, multicast packets are not passed by a router.

                                          PfSense running on Qotom mini PC
                                          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                          UniFi AC-Lite access point

                                          I haven't lost my mind. It's around here...somewhere...

                                          M 1 Reply Last reply Reply Quote 0
                                          • M
                                            mtk @JKnott
                                            last edited by

                                            @jknott said in Discovery across vlans:

                                            Are those on the receiver or Android/iPhone apps? If the receiver then that's for Internet access for updates, etc., not remote control. That's how my Yamaha is set up. Those apps will require a gateway and subnet mask, if they are on a different subnet. That's in addition to multicast being used. Unless specifically configured or managed with IGMP, multicast packets are not passed by a router.

                                            Those settings are on the Receiver (web management page) itself, and they set the internet access as well as the local device IP.

                                            The Marantz (Android or iPhone) app, doesn't have the option to set a gateway, just the IP of the device you wish to connect to.

                                            JKnottJ 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.