Unable to mount Homekit & Apple TV hub due to errors not being on the same network

Networking & Firewalls
1

I have returned to pfsense as I have had newer fibre installed and now I can connect dire t to the providers ONT . This works great
Using a HP 620T with 4 1 g port s and 1 ethernet port on computer.
WAN- Lan – AP—Cameras unRaid/ HA. On computer port
AP SSID for my 5gz and 2.4IOT .
The issue I have is that i am unable to get the IOT devices to be discovered in HA/Home kit (IP xxx xxx 2 xxx100 as the devices on the IOT IP ( xxx xxx 5 xx15) and HA is on another IP. error indicates that th i ensure that the Homekit and devices shoud be on the same Wifi network.
Rules at the moment are basic Pass Allow all to get going.
Any advice would be helpful.

Thanks in advanc

2

You have to use the avahi package to allow the proper protocols to talk to each other on different VLAN’s.

3

AVAHI works as long as you only need mDNS across VLANs.
A more versatile and yet lighter solution is UDP Broadcast Relay, which works universally. I use it for mDNS, SSDP, CoAP, and LLMNR.

4

I agree with both @xMAXIMUSx and @xerxes. Depends on your environment and use case.

5

Thank you all for your replies , this is very much over my head , but i will look it up this to understand what this package does.

To see if it will solve my problem.

I may be back?

6

OK I can send you a config details for UDP Broadcast relay and mDNS:

Install the UDP Broadcast Relay package,

Create an instance, enable it and give it a Name, like “mDNS”

Select all VLANs that should see the mDNS traffic (Apple products use mDNS for the things you would like to achieve).

Spoof Source: Keep Original (default)

ID: 1

Destinaion port: 5353

Multicast group: 224.0.0.251

That is all you need in the package.

You also need to allow the traffic in the filter rules:

Allow UDP datagrams from any source IP from source port 535 to an alias containing all IP networks of the VLANs that should receive the traffic from THIS VLAN (to which the rule belongs), to dest port 5353.