Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Smart TV - Mobile connection

    Scheduled Pinned Locked Moved General pfSense Questions
    24 Posts 6 Posters 5.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K Offline
      kipTry
      last edited by

      Hi,

      I have a samsung tv and I want to connect my mobile to the TV using the app Samsung Smart View, but this app doesn't find my tv. Both, the mobile and the tv are in the same network (AP WIFI).

      My setup is:
      Wan -> pfsense:
        - Lan
        - AP: 192.168.3.1/24 (an acces point)
          - AP Wifi: 192.168.4.1/24 (this a vlan)
          - AP wifi guess: 192.168.5.1/24 (another vlan)
        - DMZ

      In firewall rules:
      AP: It is empty
      AP wifi:
      ID  Proto  Source  Port  Destination  Port  Gateway  Queue  Schedule  Description
          IPv4*    *        *      *                  *        *              none                      Allow * (Testing)

      Also, I can ping the TV from my mobile without problems.

      What is the problem?.
      Thanks

      1 Reply Last reply Reply Quote 0
      • T Offline
        tim.mcmanus
        last edited by

        My quick guess is that the TV and your phone are using mDNS to find/communicate with one another.  Since your LAN and WiFI are on different subnets, they cannot find each other.  mDNS does not span subnets.

        1 Reply Last reply Reply Quote 0
        • K Offline
          kipTry
          last edited by

          The phone and the tv are connected to AP Wifi, so what matter Lan and wifi are on different subnets?.

          1 Reply Last reply Reply Quote 0
          • K Offline
            kipTry
            last edited by

            Any idea?

            1 Reply Last reply Reply Quote 0
            • MikeV7896M Offline
              MikeV7896
              last edited by

              Make sure your AP doesn't have some kind of Isolation feature. Some access points have an isolation feature to keep wireless devices from communicating with each other. Check your AP settings for this.

              The S in IOT stands for Security

              1 Reply Last reply Reply Quote 0
              • K Offline
                kipTry
                last edited by

                I don't see any kind of Isolation feature in the AP (TL-WA901ND). I think should be something stupid, but I have no idea.

                1 Reply Last reply Reply Quote 0
                • K Offline
                  kipTry
                  last edited by

                  I can't find the problem. I'm sure the problem is with pfsense because:

                  • I can ping from my mobile to the tv

                  • I created a "Wifi zone" with my phone and connected the tv and other mobile to that network. Everyting works without problem.

                  The firewall rules allow pass everything in that subnet (AP_Wifi).

                  Ideas?

                  1 Reply Last reply Reply Quote 0
                  • T Offline
                    tim.mcmanus
                    last edited by

                    If the TV and cell are on the same subnet, traffic will never pass through pfSense.

                    1 Reply Last reply Reply Quote 0
                    • K Offline
                      kipTry
                      last edited by

                      I don't understand that.

                      My mobile IP: 192.168.4.2
                      My tv IP: 192.168.4.3

                      All traffic between both devices must be configured at Firewall > rules > AP_Wifi (interface)

                      ??

                      1 Reply Last reply Reply Quote 0
                      • D Offline
                        divsys
                        last edited by

                        As Tim suggested, since both devices are on 192.168.4.0/24 they don't need to talk to pfSense to talk to each other.

                        The traffic should be handled through the switch (and/or WAP) that has all the devices connected.

                        There's a thought - how have you cabled/WiFi'd these things together?
                        Can you do up a simple network diagram w/Ip's so we can see how this is all layed out?

                        -jfp

                        1 Reply Last reply Reply Quote 0
                        • K Offline
                          kipTry
                          last edited by

                          Here a network diagram: http://postimg.org/image/i2kp9qsjj/

                          TV and mobile are connected to AP_WIFI (vlan 10).

                          The AP is a TP-LINK Model No. TL-WA901ND.

                          Interfaces:
                            - Lan
                            - AP: 192.168.3.1/24 (an acces point)
                              - AP Wifi: 192.168.4.1/24 (this a vlan)
                              - AP wifi guess: 192.168.5.1/24 (another vlan)
                            - DMZ

                          Firewall rules for AP: Empty
                          Firewall rules for AP_Wifi: Allow *

                          Thanks so much.

                          1 Reply Last reply Reply Quote 0
                          • T Offline
                            tim.mcmanus
                            last edited by

                            @kipTry:

                            I don't understand that.

                            My mobile IP: 192.168.4.2
                            My tv IP: 192.168.4.3

                            All traffic between both devices must be configured at Firewall > rules > AP_Wifi (interface)

                            ??

                            Firewall rules affect traffic going between interfaces/subnets.  If the devices are on the same subnet/interface, the traffic will never pass through pfSense for those rules to affect it.

                            1 Reply Last reply Reply Quote 0
                            • D Offline
                              divsys
                              last edited by

                              Interfaces:
                                - Lan
                                - AP: 192.168.3.1/24 (an acces point)
                                  - AP Wifi: 192.168.4.1/24 (this a vlan)
                                  - AP wifi guess: 192.168.5.1/24 (another vlan)
                                - DMZ

                              From this and your initial diagram, I'm guessing your pfSense box has 4 physical Nics WAN,LAN,AP, and DMZ is that correct?

                              One thing that was not clear in your diagram is whether or not  you have any switches attached to the pfSense box directly.
                              Do you connect your LAN computer and your DMZ server directly to pfSense?
                              Similarly is your TP-Link WAP connected directly to the AP NIC?
                              You also don't show your TV, I'm guessing it's attached via WiFi to the TP-Link directly?

                              If so, then the VLAN setup and the 192.168.4.0/24 & 192.168.5.0/24 DHCP must be handled by the TP-Link, pfSense is not involved at all.
                              Similarly routing issues between devices are handled by TP-Link not pfSense, it will never see that traffic.

                              -jfp

                              1 Reply Last reply Reply Quote 0
                              • K Offline
                                kipTry
                                last edited by

                                I thought the traffic always goes to pfsense. So, if I want to deny traffic between 192.168.4.10 and 192.168.4.11?.

                                Yes, my pfsense has 4 physical Nics: wan, lan, ap and dmz.

                                I'm not using switches, so:
                                NIC 1: Internet (Interface WAN)
                                NIC 2: Cable to my PC1 (Interface LAN)
                                NIC 3: Cable to my server (Interface DMZ)
                                NIC 4: Cable to tp-link (interface AP): I have multi-ssid, each one in a differente vlan (interface AP_WIFI and interface AP_WIFI_GUESS).

                                So, I have 5 interfaces.

                                Mobile and tv are connected to AP_WIFI (tp-link).

                                The DHCP in TP-LINK is disabled and it is handled by pfsense.

                                So, the problem must be in PFSENSE > Services > DHCP Server > AP_WIFI or in TP-LINK. What could it be? Maybe the VLAN?

                                Thanks so much!!

                                1 Reply Last reply Reply Quote 0
                                • A Offline
                                  ashima LAYER 8
                                  last edited by

                                  I think in your pfsense box you need to create vlans.

                                  For NIC 4 create two vlan - One with vlan id 10 (AP_WIFI) with ip 192.168.4.1
                                                                              Second with vlan id ??? (AP_WIFI_GUESS)  with ip 192.168.5.1

                                  Create firewall rules accordingly.

                                  In DHCP server for AP_Wifi , set the Gateway as 192.168.4.1
                                  and for AP_Wifi_Guess, set the Gateway as 192.168.5.1

                                  Let me know if you have any doubts.

                                  Good Luck,
                                  Ashima

                                  1 Reply Last reply Reply Quote 0
                                  • D Offline
                                    divsys
                                    last edited by

                                    I thought the traffic always goes to pfsense. So, if I want to deny traffic between 192.168.4.10 and 192.168.4.11?.

                                    Traffic goes through pfSense when it's between NICs. LAN<->WAN, LAN<->AP, AP<->WAN, etc.
                                    Everything else is handled by switches attached to the NICs.

                                    In your case you only have a single device tied to each NIC except the AP which has a wireless switch, your TP-Link.
                                    There's no need for the TP-Link to ask pfSense anything about 192.168.4.10 <-> 192.168.4.11, it knows the MAC addresses of the devices and their wireless links.
                                    So traffic goes through TP-Link directly and pfSense has no chance to block/redirect/analyze at all.

                                    Can you post a screen shot of your NIC configurations?
                                    Also your DHCP Leases would be useful.

                                    I'd like to know how a device gets a 192.168.5.x address if there's no DHCP running on the TP-Link.

                                    -jfp

                                    1 Reply Last reply Reply Quote 0
                                    • K Offline
                                      kipTry
                                      last edited by

                                      Hi,

                                      Interfaces: http://postimg.org/image/u5cc35941/
                                      Interface AP_Wifi: http://postimg.org/image/wleivb7zh/
                                      DHCP Server for AP_WIFI: http://postimg.org/image/o7u4msus3/
                                      Mappings (dhcp server ap_wifi): http://postimg.org/image/wx0kltdt9/
                                      *AP_LinAP is AP_WIFI and AP_LinInvitados is AP_GUEST in the previous diagram.

                                      Both devices are connected to AP_LinAP.

                                      I remember that I have internet connection in tv and mobile and I can ping the tv from mobile. The problem is connecting the mobile to the tv using the app.
                                      Also, if I setup a wireless zone with my mobile, and I connect the tv and another mobile to that wifi, everything works, so TV and app is working properly.

                                      If the traffic never goes to pfsense, the problem must be in TP-LINK. But, the configuration in TP-LINK is very simple…

                                      Thanks

                                      1 Reply Last reply Reply Quote 0
                                      • D Offline
                                        divsys
                                        last edited by

                                        Can you post your "Status->DHCP Leases" page?

                                        -jfp

                                        1 Reply Last reply Reply Quote 0
                                        • K Offline
                                          kipTry
                                          last edited by

                                          DHCP Leases: http://postimg.org/image/sewvkn9kt/

                                          Right now the tv is off, for that it appears as offline.

                                          1 Reply Last reply Reply Quote 0
                                          • D Offline
                                            divsys
                                            last edited by

                                            That all looks Ok.

                                            If your TV is actually using the address assigned by pfSense (can you check the config on the TV menu?) and your phone is doing the same (again, check it) then the TP-Link is the only thing between that traffic.

                                            It might be worthwhile moving the TV or your phone to the 192.168.5.x subnet, then you could log the traffic from one to the other through pfSense.
                                            Unfortunately, it's entirely possible that your TV or your phone won't like it if they're on different subnets.
                                            Can't hurt to try though.

                                            Other than that, get a different WAP (even a single SSID one) to try and prove the TV can work with your phone in this setup.

                                            -jfp

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.