Cannot access my Marantz M1 on a different network even with mDNS relay on
I have 2 networks managed by Firewalla, a secure and unsecure network. I block traffic from the unsecure network to the secure network and allow traffic from the secure to the unsecure network. I have mDNS relay on for both networks. I have a Marantz M1 streaming amp on the unsecure network and it does not show up as a network device on the secure network, hence I cannot control it from the secure network. If I have both my controller and the Marantz M1 on the same unsecure network, it works fine. I looked into the blocked traffic list and it shows nothing blocked from the unsecure network at that time I try to access the Marantz M1. ANyone have ideas what to do?
-
You need double check that Marantz unit has restrictions on talking to or receiving traffic from a none local network. (mDNS and SSDP are more of discovery, but after discovery, then network will happen, and that may be blocked, if these devices don't like foreign networks)
If what I said is true, you can try the VqLAN from AP7 (if you have the unit) that unit can microsegment without spliting the network up like VLAN
-
Not using port based segmentation. I have a very simple network setup to try to get away from complexities. I have 2 networks, a secure network and an unsecure network managed by rules in firewalla. Both have access to the internet. I block traffic from the unsecure network to the secure network. Have mDNS and SSDP turned on. That is about it. Another piece of info: on apple music, I can see the marantz M1 unlike my qobuz connect where I dont see it at all. That means the marantz can be discovered using airplay protocols, prob mDNS. But when I try to connect to it, I get an error that it cannot be connected. I conclude that there must be some port that needs to be opened for that to work. Maybe I will start with apple music and try to get airplay to work across the 2 networks since there is more documentation on airplay. The Marantz M1 has airplay protocols enabled.
-
I found the issue. It was a rule. I had one rule for the unsecure network that allowed traffic from the secure to unsecure network, inbound only. I added another rule for the unsecure network to block traffic to the secure network, and that stopped all traffic to the secure network so my Marantz could not be seen. Once I removed that rule for the unsecure network, my marantz M1 worked. I then added a rule to my secure network to block incoming traffic from my unsecure network. That blocked normal traffic from my unsecure network to my secure network, but allowed the streaming initiated from the secure network to pass to the Marantz on the unsecure network. I dont quite understand why it made a difference which network I applied the rule to, since they in principle they do the same thing. I found this solution accidentally.
-
This is getting weirder and I do not understand. I did the above and the next day, I could not see the Marantz M1 from my secure network. So what I tried and it is repeatable is that the Marantz M1 evidently is in sleep mode. I woke it up by accessing the M1 from within the unsecure network. After it woke up, it showed up in the secure network and I could stream to it. So it seems there are 2 issues, waking it up and accessing it. So now I am not sure that the above changes to the rules made any difference at all
Please sign in to leave a comment.
Comments
8 comments