Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to avoid bridge?

    Scheduled Pinned Locked Moved General pfSense Questions
    14 Posts 4 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      gelcom
      last edited by

      Hi all, sorry for the noob question.

      I have an interface where I have my local network (LAN).
      I have another interface that serves a few VLANs to a Proxmox Server. Each VLAN is alocated to a specific VM.

      On one of these VLANs there is a Plex Server VM that I need to connect to my LAN.

      I created a bridge bonding Plex VLAN and LAN so my server can be part of my LAN.

      Is there a more efficient way of doing this without using the bridge?

      I need the VM to be in the same subnet of my LAN otherwise a few services won't work.

      kind regards

      1 Reply Last reply Reply Quote 0
      • AndyRHA
        AndyRH
        last edited by

        Just a thought, you can tell Plex what networks are local.
        Settings|Network|LAN Networks

        o||||o
        7100-1u

        1 Reply Last reply Reply Quote 0
        • G
          gelcom
          last edited by

          Thanks for the reply!

          I can but I can’t tell other devices where is Plex if it resides in another subnet… that’s the point in having them all in the same subnet.

          johnpozJ 1 Reply Last reply Reply Quote 0
          • AndyRHA
            AndyRH
            last edited by

            It just occurred to me because I had to add my subnet to stop Plex from crossing a VPN and treating it like a local address.

            o||||o
            7100-1u

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              You can use Plex completely remotely, across a VPN for example. You might not be able to 'discover' it unless it's in the same layer 2.

              You need a bridge to put it in the same layer 2 segment.

              The only alternative might be to use igmp proxy or pimd to enable hosts in another subnet to discover it. Neither is easy to configure though.

              Steve

              1 Reply Last reply Reply Quote 1
              • G
                gelcom
                last edited by

                Thanks! That’s what I tought. Will keep the bridge.

                Kind regards

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @gelcom
                  last edited by johnpoz

                  @gelcom said in How to avoid bridge?:

                  I can but I can’t tell other devices where is Plex if it resides in another subnet

                  What devices? My plex is not in the same vlan as any of my players..

                  Plex doesn't need to be discovered via L2 to be seen by the device. It gets local IP when you log into your plex account..

                  So I would be curious what device your using that can not see your plex local IP when you log into your account. I will be damn sure never to buy that stupid device ;) heheheh

                  If you want your VM (plex) to be on your lan - why would you not just put that vm on your lan? Why would you need to create a "bridge" on pfsense? Confused.. I can put a vm on any vlan on the network.. So curious how your doing it where you can't do that?

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  G 1 Reply Last reply Reply Quote 0
                  • G
                    gelcom @johnpoz
                    last edited by

                    @johnpoz said in How to avoid bridge?:

                    What devices? My plex is not in the same vlan as any of my players..
                    Plex doesn't need to be discovered via L2 to be seen by the device. It gets local IP when you log into your plex account..

                    I have problems with a few 5+ year old TVs that need DLNA service to be able to stream Plex and as far as I understand DLNA does not work on different subnets.

                    Besides I have a OpenELEC with Plex Addon that refuses to connect to Plex Server on different subnets

                    @johnpoz said in How to avoid bridge?:

                    If you want your VM (plex) to be on your lan - why would you not just put that vm on your lan? Why would you need to create a "bridge" on pfsense? Confused.. I can put a vm on any vlan on the network.. So curious how your doing it where you can't do that?

                    My pfSense box have 3 physical ports:
                    Port 1 is connected to WAN
                    Port 2 is connected to my ProxMox Server with several VLANs, one VLAN is management and each other VLAN is connected to a specific VM. One of these VMs is my Plex Server
                    Port 3 is connected to my WiFi router where resides my LAN, TVs, PCs, ...

                    As far as I understand if I want to be able to get this Plex VLAN in the same subnet of my LAN I need to bridge the 2 interfaces (LAN and Plex VLAN) as they reside in different physical cables, right?

                    Is there any other way of doing this?

                    kind regards

                    johnpozJ 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @gelcom
                      last edited by johnpoz

                      @gelcom said in How to avoid bridge?:

                      as they reside in different physical cables, right?

                      Why not just run your interfaces from pfsense into a smart switch (one that can do vlans).. Now you can put any vlan anywhere you want.. Doesn't matter if pfsense if they are physical different interfaces in pfsense or not.

                      You can use 2 uplinks from your switch to pfsense. 1 for lan, since only 1 network/vlan on that interface. And then another uplink for port2 where you run multiple vlans.

                      Now you can send any vlan you want to any port on the switch. So you could send your vlans and your lan too your VM host, and then put any VM on any of your networks/vlans. You can get a 8 port gig smart switch for like $40

                      Yeah DLNA is layer 2.. Just get a stick to use with old tv.. roku or firestick can be had for a few bucks.. Like $15 on the low end ;)

                      edit: BTW thanks for providing the info, you have fed my curiosity kat ;) And it is now happily purring in the corner..

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 1
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Yup, I would also be using a VLAN capable switch here.
                        Really the only good reason to use a bridge is so you can filter between devices in the same subnet.
                        A lesser reason is for convenience 😉
                        It should work though.

                        Steve

                        johnpozJ 1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator @stephenw10
                          last edited by

                          @stephenw10 said in How to avoid bridge?:

                          A lesser reason is for convenience

                          Which is rarely a valid reason.. Convenience is just another way of saying too lazy to do it the proper way ;)

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • G
                            gelcom
                            last edited by

                            Thanks guys! I have a Mikrotik CRS317 switch laying arround here with no use. I'll try to set it up.

                            Last time I took a try I had a bad time to get it work with my IPTV interface: on pfSense it works perfectly but not on the switch.

                            This was 1 year ago. I'll give it another shot.

                            kind regards

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @gelcom
                              last edited by johnpoz

                              @gelcom said in How to avoid bridge?:

                              CRS317

                              You have this? What sfps do you have in it?

                              https://mikrotik.com/product/crs317_1g_16s_rm

                              That's a pretty hefty switch - to be just sitting on a shelf ;)

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              G 1 Reply Last reply Reply Quote 0
                              • G
                                gelcom @johnpoz
                                last edited by stephenw10

                                @johnpoz said in How to avoid bridge?:

                                You have this? What sfps do you have in it?

                                I have a few SFP+ WDM12-R20/WDM13-R20 for fiber and S-RJ01 for RJ45 (pic above).

                                My main problem is that one of my pfSense interfaces comes from my IPTV router and goes to my TV boxes. I get IPTV signal on all devices.

                                On pfSense with option "Allow packets with IP options to pass." it goes perfectly fine but if I use my CRS317 instead I get no signal flowing from one SFP to another.... that's why I gave up on CRS switching...

                                IMG-6163.jpg

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.