Site-to-Site VPN still only sees devices on local site

I set up site-to-site VPN between two Firewalla Golds (both in router mode) using default values. I want to stream music from Emby server at VPN Server site 1 to a WiiM dlna device at Client site 2. See my picture below.

It sort of works. I can ping my emby server (at site 1) from site 2 using the LAN IP address. I can stream music from the server to the android table at site 2.

But I can not stream music from the emby server to the WiiM dlna device at client site 2. The emby server does not detect any devices at site 2.

When I use an IP Scanner on my laptop, I can only see site 1 devices at site 1 and only see site 2 devices at site 2. What I was expecting was to be able to see all devices from either site. I don't know if I have messed something up or my expectations are incorrect.

In summary ... I think the core issue is that I can ping my site 1 server from site 2, but my site 1 server can not discover my site 2 devices.

Any thoughts or suggestions?

Thanks,
Wallace

Firewalla

November 14, 2023 02:31

site-to-site VPN is a layer 3 VPN. Meaning devices on both sides are on different networks and is connected. So, if your music player depends on LAN discovery protocols, it will not work; you will have to manually address the device using their name or IP address. (discovery relies on multicast and multicast traffic can't go across site to site VPN)

Wallace Mann

November 14, 2023 04:10

Ah! That would explain it. Thanks for responding. I'll see what I can do about manually connecting the two.

Is there another approach that would allow discovery across sites?

November 14, 2023 17:04

The only way is to use layer 2 VPN; may be a bit more complex for consumer/small businesses to run

November 14, 2023 17:29

Yes, after your response I found the level 2 bridge option. But, agreed, I love that Firewalla is easy to use and I don't need more complexity in my life. Our primary use case is managing kids' internet access and that's working great.

Really appreciate the response. I could have spent a lot of time tilting at windmills on this.

Site-to-Site VPN still only sees devices on local site

Comments

Didn't find what you were looking for?