mDNS Service to support certain IoT devices on other VLANs/subnets

Comments: 46

• 09 Oct, '18
  Jason Bottjen

  To add -
  
  mDNS allows you to segregate IoT devices like a Chromecast onto an isolated VLAN/network, but still make use of those services from the more secure business/home VLANs.
  
  This is becoming an increasingly popular way to display presentations in businesses I frequent, versus the old way of emailing someone the presentation or using a USB thumb drive on a PC connected to the TV.

• 29 Nov, '18
  sharrisonUK

  I've come across a need for multicast discovery over VPN for gate entry access over a MPLS link between two sites so adding mVPN support would be a good as well

• 22 Jan, '19
  Mike Woods

  Agreed, an mDNS reflector would be very useful for my business.

• 17 Mar, '19
  Rob Dunham

  Untangle is built on Debian. Technically it already has Avahi. (Btw, you can always use the console to install or enable it.)

• 30 May, '19
  Nick Kuzmin

  Would very much like to see this as a configurable advanced option. Right now the best way seems to be a virtual machine, but that is more complicated then just setting it up on my untangle box. Ubiquiti does offer the configuration for one I know of as I have thought about adding a USG (their security/routing device) as well vs the VM to get what I want working across a couple vlans.

• 03 Jun, '19
  Adam

  This is required to operate a Sonos system where the Sonos speakers exist on one VLAN, and the controller app (iPhone or PC) resides on a separate VLAN. I run a VLAN for IOT devices and a separate VLAN for user devices (IOT VLAN much greater lock down). It's a deal breaker for me as I was going to buy a license (still in 14 day trial), it's otherwise a great product.

• 18 Jun, '19
  NarCico

  Definitely needed, as Untangle is often used at network Core, not edge (for home users).
  I tryed to install the service from SSH, but it is not possible as is non existent on untangle's repos.

• 20 Jun, '19
  James B Brouillette

  This is a requirement on my network . and IMHO on any modern network

• 25 Jun, '19
  Mitch

  I feel mDNS is now a default feature in most products. I would very much like Untangle to get this useful feature.

• 27 Jul, '19
  G

  Definitely a requirement, i’m amazed it’s not already there. Sadly its a dealbreaker from me too unless I can work out how to install Avahi via the console. Sonos control on VLAN’s is my issue.

• 03 Sep, '19
  B

  As a paid home untangle user with Sonos I want to be able to allow guest access to Sonos but nothing else.

• 22 Feb, '20
  san eras

  Definitely a requirement now a days, extremely important feature.

• 23 Feb, '20
  Tom

  I’d like to drop PFsense and come to untangle, but this is a must have home feature. I don’t trust IOT devices (amazon, ecobee, google, harmony, iRobot) (separate VLAN) but I need to be able to talk at them.

• 25 Feb, '20
  Matt

  I love Untangle's usability and would happily pay $50 a year to use this at home, but without the ability to support this in some form, it is currently a no-go in my environment. A super basic UI layer over Avahi or a way to install it ourselves would be plenty!

• 19 Mar, '20
  Buster Frith

  I subscribed before realizing this feature was missing. Luckily before I separated the devices that need this feature I realized it was missing. I would love for this to be implemented and not need to be installed through a console method.

• 03 Apr, '20
  Jacob

  Damn and blast, was looking to move over from pfsense.
  Please add this it was the only feature of pfsense which was actually easy to setup!

• 15 Apr, '20
  Todd Schlichter

  This has become a next gen feature that isn't optional

• 18 Apr, '20
  Martin

  This should really be native. Damn what a misser

• 05 May, '20
  Homeuser99

  Can we please get an update to when/if this will ever be added to untangle. It is a requirement for many and if it’s not on the road map for 2020 I will have to go back to using pfsense. I much prefer untangles UI and ease of use, but I need this feature for my home/business

• 06 May, '20
  Pf-convert

  Love untangle but really would like this feature. Without it most IoT devices fail to function unless on the trusted subnet.

• 16 May, '20
  Rune

  Is this in the pipeline?
  Seems like a must have - in order to have a secure home network

• 19 May, '20
  Don

  IOT is part of our world and I'm surprised UT does not have this important feature. People have been waiting for this since 2018 wow.

• 23 Jul, '20
  Noah y

  Need to get this feature in the works. Commercial enviornments have so many different devices on networks these days and VLAN's are a must. Need to be able to support specificaly Sonos through VLAN's in a easy way.

• 11 Aug, '20
  Bob K.

  mDNS is not my favorite, but I too find dealing with it in Untangle to be nightmare-ish - BUMP

• 14 Sep, '20
  Mike

  Bump, Sonos customer here, unhappy =(

• 03 Oct, '20
  Pieter

  WoW, wat a miss. Just installed and was ready to subscribe to your otherwise amazing product, but I guess I will have to go back to pfSense...

• 13 Oct, '20
  Kane Summers

  Yes, really need the function of "Avahi" ! I'm a home user, was ready to pull the plug on pfSense and go with the "Home Pro" version of Untangle. But, and that's a "BIG BUT" without the ability to use my home groups on all the Chrome cast devices throughout my home, I'll have to stay with pfSense. So Untangle, if you're really interested in the home market and like to get more folks moving from pfSense, you really need to implement this. BTW, I don't have a hate out for pfSense, I like Untangle

• 19 Oct, '20
  cdoublejj

  how does VLAN keep it's point of existing by separating traffic if you allow traffic to bleed over from vlan to another?

• 19 Nov, '20
  Iuri C.

  I'm a Ubiquit/Unifi user, all my infrastructure has their Unifi product line. However, I have made the decision to go for untangle (on a 5y Homepro license) because it gives me a lot more control and visibility over the traffic that goes in and out of my network.
  My previous firewall (if you can call it that) was a Ubiquiti USG which has the ability to make vlans talk between themselves on mDNS, this of course, allows other devices (especially the Apple ones) to talk to printers (Airprint) on different subnets and vlans.
  
  The fact that Untangle does not do this was an oversight on my part prior to purchase the license, as I would probably go for a UDMp, spend a little bit more money but I would have all the feature requirements for my home/office network.
  
  I've been trying to overcome this issue in multiple ways, but it seems that for me to get airprint working over multiple vlans, I would have to pay for another software.
  I would be a very happy customer if Untangle implemented mDNS

• 19 Nov, '20
  Mark Gilbert

  How is this not a feature with 858+ votes?

• 23 Nov, '20
  Michael

  Consumers would benefit from MDNS reflector like Avahi to support IOT on 1 vlan and be able to use printers, Sonos and other apple products that support.

• 07 Dec, '20
  Christian Holzer

  Coming from EdgeOS I really miss mDNS! Please add it!

• 08 Dec, '20
  Paul

  Lack of formal support for an mDNS reflector is a dealbreaker for many Untangle home users. Look at the upvotes for this request, and understand your user base. We are paying for the advanced capabilities that Untangle provides to better secure our home networks. Achieving that goal is probably the #1 reason why anyone would consider Untangle for their home network. Lack of formal support for an mDNS reflector essentially says to your security conscious home users: "Untangle isn't interested in helping you implement best practices with respect to IOT devices on your home network."
  
  Like it or not, many of the IOT products that are now present in our homes are utilizing multicast DNS as an essential part of their "seamless user experience". Failure to formally support this (unfortunately now essential) use case is a major issue for many home users.
  
  Untangle AT LEAST owes the community an answer on IF this feature is coming, and WHEN.

• 15 Dec, '20
  todd johnson

  I seriously doubt that this feature will ever be implemented as its been a requested feature for over two years.
  Too bad because I have been a nonprofit subscriber for years and will not be renewing my subscriptions again.
  This is due to the necessity to use multicast in an IPTV environment.

• 09 Jan
  Mitch

  Seriously why has this not been done yet? What's the magic number of upvotes you need? Paying customers have been asking for this since 2018?!?

• 19 Jan
  Wayne C

  Why is this still Under consideration with almost a 1000 upvotes?

• 18 Mar
  Daniel Carter

  Anyone aware of any movement on this suggestion yet?
  For home use it's a must really as internet-connected appliances use mDNS to advertise themselves to smartphones etc for control, for example: TVs/streaming sticks/washing machines/tumble dryers.
  Some feedback on this would be greatly appreciated. 🙂

• 10 Apr
  Falcon

  Cisco is implementing mDNS as its adoption goes beyond home usecases.
  
  Clearly the “it’s not a business requirement and it also carries multiple security concerns” no longer stands if THE networking company and largest security provider on the planet is moving in that direction

• 24 Apr
  TJ

  I recently dropped all my unifi gear and went fully to Untangle/MikroTik/Ruckus and am really disappointed this is not available. I'm trying to secure my network and segment all external systems from my core network. I just setup a vlan for my Sonos system and was looking at what ports needed to be forwarded when I ran into this snag. I even upgraded to Home Plus, this morning, for WireGuard so I don't have to run another system locally.

• 28 Apr
  Christian Holzer

  IoT is a hot topic that just keeps getting hotter. We NEED this feature in untangle!

• 01 Jun
  idscomm

  I am now testing and considering Untangle (coming from pfsense) ... This is a major step back not having mDNS supported. I agree that these days people isolate their networks more than ever therefore mDNS is a must.

• 03 Jul
  Ryan

  As with all the other users who require mDNS in a core network appliance, please include this in an upcoming release of Untangle

• 06 Jul
  TwatFc

  Give your balls a tug tit-fucker and just add it in as a selectable service. Then the corp-customers can just leave it disabled.

• 08 Jul
  technologiq

  I'm chiming in here because, after several years of enjoying Untangle, the lack of VLAN mDNS support is frustrating.
  
  I've read through pretty much all forum topics discussing mDNS and despite a clear desire from Untangle users to have it implemented, the developers choose not to.
  
  I find it interesting that the reason not to is because it's a security issue but uPNP is still implemented and with a few clicks within the untangle GUI you can compromise your system (incorrect port forwarding or access rules, WebGUI/ssh enabled to wan, etc). Heck, just inputting a compromised DNS server into your interface settings could introduce a whole host of issues.
  
  It would be great if Untangle would come out formally and say either 1) They refuse to implement it, ever 2) They don't know how to correctly implement it or 3) They've implemented it and use it at your own risk. Maybe even disable it on untangle appliances to further CYA.
  
  Just 2 cents from a 99.9% happy untangle user that just wants mD

• 30 Aug
  Raymond

  I am about to pull the trigger to move from Unifi USG to Untangle when I found out this problem with mDNS. In this modern day full of IoT devices, it is without question a must if we are segregating them to a VLAN for better security. At least make it available for the Home edition if it is a risk to corporate as that's where the most need is.

• 31 Aug
  Peter Campbell

  My subscription for home use runs out in November. I will be moving to PFSense once it ends as it does have mDNS support via a package.
  
  There is a Untangle supporter in the forums who talks about mDNS not being secure but Untangle allows full comms between VLANS by default so its a bit of an oxy moron.