Communication between apple tvs and iphones on different vlans.

[DangerMc]

Hoping someone can shed some light on this for me.
I have an opnsense firewall connected to a brocade 7450 which again is linked to another 7450.
I have some Apple TVs spread out on the switches operating on VLAN 10.
Then I have my iphone connected to VLAN 20 (via WiFi on a R650s).
First issue was to enable the phone's remote app to discover the apple tvs, which I manage to fix by installing and configuring a mDNS repeater on the firewall. That package is set to repeat between the two vlans.
Now the phone discovers the apple tvs, but once I select one, it looks like it tries to start communicating with it, I get a spinning wheel logo, and then it just times out.

I've tried to add inter vlan access rules to :
allow source fe80:: to ff02 on port 5353 and
allow source vlan 10/vlan 20 to 244.0.0.251 on port 5353

However I've had no success with that.

Does anyone know what else I need to do in order to allow the apple tvs to communicate with the iPhone TV remote? Is there something I need to enable on the switches?

Thanks!

 

[Dillio]

I've had weird issues with certain sources doing the same thing even on the same vlan (cough, mlb.tv). Are you 100% it works when on the same vlan?

 

[DangerMc]

I've had weird issues with certain sources doing the same thing even on the same vlan (cough, mlb.tv). Are you 100% it works when on the same vlan?

That I haven't experience. Once the iphone is on the same Wifi that's on the same vlan as the apple tvs, I can detect and control without any issues. It is just when I change the vlan, that I am unable to control/talk to the apple tvs.

 

[mtg]

That I haven't experience. Once the iphone is on the same Wifi that's on the same vlan as the apple tvs, I can detect and control without any issues. It is just when I change the vlan, that I am unable to control/talk to the apple tvs.

Isn’t that the point of a VLAN? Unless you add an explicit route for the traffic between the iPhone's IP and the apple TV’s IP, there’s no route.

 

[DangerMc]

Isn’t that the point of a VLAN? Unless you add an explicit route for the traffic between the iPhone's IP and the apple TV’s IP, there’s no route.

Correct.
However, simply adding an "accept incoming connections from iphone(s) to apple tv(s)" rule, does not work. I'm not sure why not, but I'm suspecting there is some fancy apple "magic" in the way the iphone and apple tvs are communicating.

 

[DangerMc]

Dooohhh...
So, I got my source and destination mixed up in the firewall rules. Once I switched those, the iphone is able to talk to the apple tv....

 

[mtg]

Dooohhh...
So, I got my source and destination mixed up in the firewall rules. Once I switched those, the iphone is able to talk to the apple tv....

I’ve made that exact mistake haha