This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Allow Apple Bonjour to be detected from other zone

Hello,

 

I have a situation where we installed a AP55c with a SSID in its own seperate zone so the wireless network could not reach the LAN network. However the need for this has changed, and now the client wants to be able to reach the lan from the wireless zone, So I setup a firewall rule that allow LAN to Wireless and visa versa.

 

How can I make bonjour working with this solution, without re-configuring the wireless to bind to AP LAN?



This thread was automatically locked due to age.
Parents Reply Children
  • I'm trying to setup a Bonjour Gateway (mDNS reflector) on an Raspberry Pi3 running Hassbian (essentially Raspbian). My network setup is:

    ISP Modem -> Sophos XG (Qotom device) -> Apple Airport Time Capsule

    My Apple Airport is setup with two subnets (VLANs), the default which is my local/private network and the "guest" network which uses VLAN 1003. Most of my devices are connected to the local/private network but a few devices such as my printer is connected to the guest network. The problem now is I obviously need a Bonjour Gateway so devices on my local/private network can see the printer on the guest network.

    I've found this guide that explains how to setup the Bonjour Gateway. My problem is you can't control any VLAN settings on the Apple Airport but I *think* this might work:

    1. Setup an interface bridge between my LAN port on the Sophos XG with another unused port. I would essentially be using this additional port on the Sophos XG as another network port for my private/local network.

    2. Plug my RPi3 into the unused and bridged port on the Sophos XG.

    3. Setup VLAN tags on the bridge interface per this Sophos KB article.

    However, the question I have is does the RPi3 have to be on the same network/subnet as the printer or can it be on my local network/subnet?

    I need to keep the RPi3 on my local network/subnet as it's running Home Automation software that connects to devices on the local network.