Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    LAN vs VLAN w/ unifi switch and UDM PRO

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    pfsense firewalunifivlan
    16 Posts 2 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mr.singh @johnpoz
      last edited by

      @johnpoz igmp snooping is enabled in UI controller, is there anything specific I need to do as well. On the IoT streaming VLAN there are only 2 devices to test. Laptop and nvidia shield.

      I also have the Switch Flex, but only AP is on it.

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @mr.singh
        last edited by johnpoz

        @mr-singh try turning off igmp snooping.. This might prevent discovery because it can limit who sees multicast unless the client joins the group, etc.

        So try turning it off, also their other multicast features - and see if that helps.

        turnoff.jpg

        Also anything that might be doing L2 isolation could cause you grief

        l2isolation.jpg

        You might want to check over on their forums for info - like I said pfsense has nothing to do with such communication

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        M 1 Reply Last reply Reply Quote 0
        • M
          mr.singh @johnpoz
          last edited by

          @johnpoz The issue I don't understand is:
          I created a VLAN 40 on both pfsense and unifi. DHCP setting works and I get the IP. No casting because when I search using chrome on the Win10 Laptop shield doesn't pop up. They both are on the same VLAN.

          In Unifi switch, I specifically change the port profile to that of the specific VLAN network.

          When the same devices are on "ALL" port profile, casting works both with wired and wireless clients with shield. So how is unifi blocking casting on VLAN ports

          M johnpozJ 2 Replies Last reply Reply Quote 0
          • M
            mr.singh @mr.singh
            last edited by

            This post is deleted!
            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @mr.singh
              last edited by

              @mr-singh said in LAN vs VLAN w/ unifi switch and UDM PRO:

              They both are on the same VLAN.

              Again that has zero to do with pfsense - zero! Pfsense has nothing to do to block traffic happening between devices on the same switch or via an AP..

              There is no way you could block multicast on an L2 network with pfsense even if you wanted to..

              Unless pfsense was bridge between segments of an L2.. Say something like this

              L2 --- interfaceA (pfsense bridge) ineterfaceB --- L2

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              M 1 Reply Last reply Reply Quote 0
              • M
                mr.singh @johnpoz
                last edited by

                @johnpoz Can DNS be an issue? My LAN interface has private 10.160.15.1/24 and IoT 11.160.30.1/24.

                By any ways can these conflicting with anything?
                I am also running pfblocker

                johnpozJ 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @mr.singh
                  last edited by johnpoz

                  @mr-singh if your trying to actually resolve something that doesn't resolve sure dns could be a problem.

                  Are you trying to access something via fully qualified domain name? host.domain.tld - if so does it resolve?

                  pfblocker has ZERO to do with some multicast discovery that happens on some L2 network.

                  I am not a fan of discovery stuff, but discovery protocols normally have nothing to do with dns, since that is not really discovery ;) They might send a mdns query, but that is on the L2 and all devices on the same L2 would see that traffic and pfsense has nothing to do with that.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    mr.singh @johnpoz
                    last edited by

                    @johnpoz I have a L3 unifi switch, but I am not using any of those features.

                    I was able to get a avahi reflector working on a rpi 4.

                    My desktop on the lan interface is able to see the entry via avahi browse but nothing pops in chrome

                    weird thing is my phone also on the LAN interface wifi(unifi ap) can see the chromecast device. But only my phone. Not any other wired or wirless devices like desktop and laptops

                    johnpozJ 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @mr.singh
                      last edited by

                      @mr-singh said in LAN vs VLAN w/ unifi switch and UDM PRO:

                      My desktop on the lan interface is able to see the entry via avahi browse but nothing pops in chrome

                      Well what ports are being used to actually cast? Those would have to be allowed, if a multicast stream wouldn't work - because avahi just allows for the discovery via mdns.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        mr.singh @johnpoz
                        last edited by

                        @johnpoz Since both my phone and desktop are on LAN and the phone can see the chromecast and cast to it and the desktop cannot.

                        doesn't that mean something is wrong somewhere?

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.