is wiim app even allow wiim devices on different vlan?

r2d2

Member
Joined
Jan 19, 2025
Messages
17
I was doing all sort of firewall rules and tcpdumps
Does the app actually allow user to manage wiim players it finds on different network?
It finds mine but blocks management with "On other networks" with only option to manage is "Forget"
 
I was doing all sort of firewall rules and tcpdumps
Does the app actually allow user to manage wiim players it finds on different network?
It finds mine but blocks management with "On other networks" with only option to manage is "Forget"
The interface between the WiiM Home App and the WiiM devices uses the Universal Plug and Play (UPnP) protocol for discovery and initial control and that is designed to work within a single local network (LAN) only.

So as long this protocol is used, the app will only work within the same lan.

I don't think that will ever change.

The "on other networks" message is because the device has been discovered before (and saved by the app) but are not seen on the current lan.
 
Last edited:
The interface between the WiiM Home App and the WiiM devices uses the Universal Plug and Play (UPnP) protocol for discovery and initial control and that is designed to work within a single local network (LAN) only.
It uses mDNS which does work across vlans if discovery broadcasts are relayed.

I currently have my Pro on the same vlan as I wanted to use the UPnP interface (which I haven't managed to get working across vlans), but management should work across vlans; I'll shift mine back shortly and test.

EDIT:
I moved the Pro back to my iOT vlan and it's still accessible from the WHA.
I'm using 'UDP Broadcast Relay' in OPNSense to enable discovery and firewall rules to allow the outbound (Home to iOT) connection.
 
Last edited:
It uses mDNS which does work across vlans if discovery broadcasts are relayed.

I currently have my Pro on the same vlan as I wanted to use the UPnP interface (which I haven't managed to get working across vlans), but management should work across vlans; I'll shift mine back shortly and test.

EDIT:
I moved the Pro back to my iOT vlan and it's still accessible from the WHA.
I'm using 'UDP Broadcast Relay' in OPNSense to enable discovery and firewall rules to allow the outbound (Home to iOT) connection.
Maybe the WiiM documentation is wrong then?

Enable UPnP: Ensure that Universal Plug and Play (UPnP) is enabled on your router. This feature facilitates the automatic discovery and configuration of network devices, thereby enhancing compatibility and connectivity.

From: https://faq.wiimhome.com/en/support...ooting-wiim-device-not-found-in-wiim-home-app

I don't see any references in WiiM documentation to mDNS. On the other hand it would be natural to use it, so you may be right.

To be able to communicate with another vlan it will however require that you can access it from the Internet and not just on your local router, except if you set up a bridge between the vlans.
 
Last edited:
Maybe the WiiM documentation is wrong then?

Enable UPnP: Ensure that Universal Plug and Play (UPnP) is enabled on your router. This feature facilitates the automatic discovery and configuration of network devices, thereby enhancing compatibility and connectivity.
I'm not even sure what that means at a router level; I assume it's referring to IGD rather than the UPnP protocol as a whole.

UPnP is certainly required for the UPnP interface, but I don't believe it's necessary for the management of a device, nor for non-UPnP playback e.g. Quboz/Tidal/Spotify connect e.t.c.

To be able to communicate with another local network it will however require that you can access it from the Internet and not just on your local router, except if you set up a bridge between the internal networks.
Not sure I follow. VLAN to VLAN is all local; no internet required.
I'm currently casting from a DLNA server on one VLAN to the Chromecast interface of my Pro on another.
 
I'm not even sure what that means at a router level; I assume it's referring to IGD rather than the UPnP protocol as a whole.

UPnP is certainly required for the UPnP interface, but I don't believe it's necessary for the management of a device, nor for non-UPnP playback e.g. Quboz/Tidal/Spotify connect e.t.c.


Not sure I follow. VLAN to VLAN is all local; no internet required.
I'm currently casting from a DLNA server on one VLAN to the Chromecast interface of my Pro on another.
Hmm. For Chromecast to work locally the same vlan is required.
Chromecast devices and the device you’re casting from must be on the same vlan for discovery and communication to work. mDNS traffic do not cross vlan boundaries by default.

If you want Chromecast to work across vlans, your router/switch must support multicast routing and be configured to forward mDNS traffic between VLANs.

Maybe you have this setup?
 
Doing that can be both a security risk and a performance issue. So be careful. This is not a normal setup.
How can it be less secure/performant than having the WiiM on the same VLAN? Obviously relaying the broadcasts is an overhead, but only marginal at best.
 
How can it be less secure/performant than having the WiiM on the same VLAN? Obviously relaying the broadcasts is an overhead, but only marginal at best.
If both vlans are local, there may not be any issues. In that case it will just work as one bigger network with all multicast requests going to both.

In that case it would be better to just merge the local networks into one.

Multiple vlans are usually for network isolation. So why having them if you open for cross lan communication?
 
Multiple vlans are usually for network isolation. So why having them if you open for cross lan communication?
Just relaying broadcasts doesn't allow communication, that's down to firewall rules. Whilst on my iOT VLAN WiiM can only respond to the WHA on my phone, so whilst it does present an attack vector it's very limited.
My Hikvision NVR on the other hand is much more restricted.
 
It uses mDNS which does work across vlans if discovery broadcasts are relayed.

I currently have my Pro on the same vlan as I wanted to use the UPnP interface (which I haven't managed to get working across vlans), but management should work across vlans; I'll shift mine back shortly and test.

EDIT:
I moved the Pro back to my iOT vlan and it's still accessible from the WHA.
I'm using 'UDP Broadcast Relay' in OPNSense to enable discovery and firewall rules to allow the outbound (Home to iOT) connection.
Interesting, I wasn't able to configure it, but I have older version of pfsense and I tried avahi for "reflection". I suspect it reflection part may be the problem, I see traffic across vlans and discovery works as well with `dns-sd -L "WiiM-AMP-xxx" _googlecast._tcp local`

@simbun could you document your setup? Firewall rules and plugin config for the broadcast. Interested to reproduce it.
 
@simbun could you document your setup? Firewall rules and plugin config for the broadcast. Interested to reproduce it.
I've just had a quick look, and apart from making sure my phone has access to the WiiM the only other rule I have is to allow mDNS into the router:
Interface IOT
Direction in
Protocol IPv4 UDP
Source IOT net
Port 5353
Destination IOT address
Dest Port 5353

Though I've just disabled this rule and it's still working!

UDP Broadcast Relay config:
Rule mDNS between HOME and IOT
Relay Port 5353
Interfaces HOME, IOT
Broadcast Address 224.0.0.251
Source Address 1.1.1.1
Instance ID 1
 
So it basically this reflection thing that makes it work? I guess the way it works app broadcast message, wiim replies with that _googlecast._tcp thing, that gets propagates/reflected/relayed whatever its called to iPhone's vlan.
And from there app resolves it correctly because it has network access.
did I get it right?
 
I was doing all sort of firewall rules and tcpdumps
Does the app actually allow user to manage wiim players it finds on different network?
It finds mine but blocks management with "On other networks" with only option to manage is "Forget"
I need to ask why you have the WiiM on another lan than your phone. Is it a Mesh network?

In that case you can change the mode of the Mesh from being a local sub network to just being access points on the main network.
 
I think that means it's a problem with discovery.
Have you tried another relay?
No, not yet. That was my thought, but I have so old pfsense that it will need packaged custom build. I basically don't want wiim force me to upgrade pfsense even though its past due upgrade
 
Back
Top