ATP 200: Multicast and broadcast routing across VLANs to enable media sharing protocols.

mocr

I have created several segments (VLANS) in my network to increase security of my home network. One VLAN is for computers and mobile phones, another VLAN is for data servers (e.g. NAS), another VLAN is for media players (e.g. TVs, SONOS audio players or printers) and another VLAN for IOT devices like Philips Hue. Unfortunately standard applications like SONOS app or Spotify connect or Apple Print / AirPrint or DLNA or Chromecast or Philips Hue are not working in this network design. What I was able to investigate is that the multicast / broadcast protocols like Bonjour, UPNP, DLNA uses protocol TTL parameter set to 1 and cannot be routed across different VLANS (the packet is discarded by the router).

Do you have any suggestion how to resolve this issue or is it  a new "Feature request" for ATP / USG product family?

Still I am not sure that only TTL parameter increase resolves this scenarion.

Thanks for help,

Radek

Zyxel_Jeff

Hi @mocr

 

Thank you for your reply.

We don’t support certain scenario currently and will put this suggestion into idea for further evaluation.

mocr

Hi,

Is it possible somehow to track this in the "idea" backlog and somehow support the resolution / implementation? I believe this scenario is valid for SMBs when BYOD is supported and also for consumers who have bought this equipment to increase their home IT security.

Thanks a lot for your help.

Radek Moc

mocr

https://community.zyxel.com/en/profile/Zyxel_Jeff,

As I am still searching the information how to resolve the problem I found out that something called mDNS reflector should resolve that.

Some info is here https://github.com/Gandem/bonjour-reflector and here https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-new-features/networking-features/bonjour-reflector-for-network-segmentation.html and also here https://www.vivitek.eu/Download/Documents/Enabling_iOS_Mirroring_in_a_Multiple-subnet_Environment.pdf.

Can you consider implementing such feature directly into ATP firmware as that would be best addition to IGMP proxy functionality and (probably) definitely would resolve this issue?

Thanks a lot for your answer.

Radek

Daniel_Habazin

+1 for this feature request, the need has come up to isolate several sonos speakers on a separate vlan

mocr

https://community.zyxel.com/en/profile/Zyxel_Jeff,

As I am still searching the information how to resolve the problem I found out that something called mDNS reflector should resolve that.

Some info is here https://github.com/Gandem/bonjour-reflector and here https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-new-features/networking-features/bonjour-reflector-for-network-segmentation.html and also here https://www.vivitek.eu/Download/Documents/Enabling_iOS_Mirroring_in_a_Multiple-subnet_Environment.pdf.

Can you consider implementing such feature directly into ATP firmware as that would be best addition to IGMP proxy functionality and (probably) definitely would resolbe this issue.

Thanks for your answer.

Radek

mocr

Is somebody from Zyxel reading this thread? I would appreciate the information if this is being considered for implementation in future firmware updates. 
Every company wants to support BYOD and without this functionality the employee experience will not be positive.
Please solve this problem for all of us.
Thanks,
Radek

jfoxwu

+1 for this feature request. bumping it for visibility

FelixSchneider

Hello,
regarding IGMP i would like to raise awareness to IGMPv3 for IPTV over the PPPoE feature, would likely also work for Multicast between VLANs.

https://community.zyxel.com/en/discussion/14730/support-igmpv3-over-pppoe-and-ssm-features#latest


Maybe there is some common ground...

RSaull

Yes please . . . +1

baba

Please, it's a very important feature