ATP 200: Multicast and broadcast routing across VLANs to enable media sharing protocols.

mocr · January 2021

I have created several segments (VLANS) in my network to increase security of my home network. One VLAN is for computers and mobile phones, another VLAN is for data servers (e.g. NAS), another VLAN is for media players (e.g. TVs, SONOS audio players or printers) and another VLAN for IOT devices like Philips Hue. Unfortunately standard applications like SONOS app or Spotify connect or Apple Print / AirPrint or DLNA or Chromecast or Philips Hue are not working in this network design. What I was able to investigate is that the multicast / broadcast protocols like Bonjour, UPNP, DLNA uses protocol TTL parameter set to 1 and cannot be routed across different VLANS (the packet is discarded by the router).

Do you have any suggestion how to resolve this issue or is it a new "Feature request" for ATP / USG product family?

Still I am not sure that only TTL parameter increase resolves this scenarion.

Thanks for help,

Radek

Zyxel_Jeff · January 2021

Hi @mocr

Thank you for your reply.

We don’t support certain scenario currently and will put this suggestion into idea for further evaluation.

mocr · January 2021

Hi,

Is it possible somehow to track this in the "idea" backlog and somehow support the resolution / implementation? I believe this scenario is valid for SMBs when BYOD is supported and also for consumers who have bought this equipment to increase their home IT security.

Thanks a lot for your help.

Radek Moc

mocr · February 2021

https://community.zyxel.com/en/profile/Zyxel_Jeff,

As I am still searching the information how to resolve the problem I found out that something called mDNS reflector should resolve that.

Some info is here https://github.com/Gandem/bonjour-reflector and here https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-new-features/networking-features/bonjour-reflector-for-network-segmentation.html and also here https://www.vivitek.eu/Download/Documents/Enabling_iOS_Mirroring_in_a_Multiple-subnet_Environment.pdf.

Can you consider implementing such feature directly into ATP firmware as that would be best addition to IGMP proxy functionality and (probably) definitely would resolve this issue?

Thanks a lot for your answer.

Radek

Daniel_Habazin · April 2021

+1 for this feature request, the need has come up to isolate several sonos speakers on a separate vlan

mocr · December 2021

https://community.zyxel.com/en/profile/Zyxel_Jeff,

As I am still searching the information how to resolve the problem I found out that something called mDNS reflector should resolve that.

Some info is here https://github.com/Gandem/bonjour-reflector and here https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-new-features/networking-features/bonjour-reflector-for-network-segmentation.html and also here https://www.vivitek.eu/Download/Documents/Enabling_iOS_Mirroring_in_a_Multiple-subnet_Environment.pdf.

Can you consider implementing such feature directly into ATP firmware as that would be best addition to IGMP proxy functionality and (probably) definitely would resolbe this issue.

Thanks for your answer.

Radek

mocr · July 2022

Is somebody from Zyxel reading this thread? I would appreciate the information if this is being considered for implementation in future firmware updates.
Every company wants to support BYOD and without this functionality the employee experience will not be positive.
Please solve this problem for all of us.
Thanks,
Radek

jfoxwu · September 2022

+1 for this feature request. bumping it for visibility

FelixSchneider · November 2022

Hello,
regarding IGMP i would like to raise awareness to IGMPv3 for IPTV over the PPPoE feature, would likely also work for Multicast between VLANs.

https://community.zyxel.com/en/discussion/14730/support-igmpv3-over-pppoe-and-ssm-features#latest

Maybe there is some common ground...

RSaull · March 2023

Yes please . . . +1

baba · September 2023

Please, it's a very important feature

ATP 200: Multicast and broadcast routing across VLANs to enable media sharing protocols.

Active · Last Updated April 2021

Comments

Categories

Security Help Center