I'm not that network savvy, but this is what Gemini AI says:
" While Roon officially states that it does not support VLAN-separated environments and requires all components (Core, Remotes, and Outputs) to reside on the same Layer 2 broadcast domain, it
is technically possible to have Roon Ready devices on a different VLAN than the Core, but it requires advanced network configuration.
Key Considerations for VLAN Separation:
- Discovery Limitation: Roon relies heavily on UDP broadcast and multicast messages for device discovery, which do not normally cross subnet boundaries.
- Required Configuration: To make this work, your router/firewall must be configured to pass multicast traffic between VLANs, specifically by enabling an mDNS bridge/repeater (such as Avahi).
- Firewall Rules: You must ensure that necessary ports are opened between the VLANs, as Roon uses specific, high-frequency communication that can be blocked by restrictive VLAN security settings.
- Performance: While it can work, separating VLANs can sometimes result in "flaky" connections or failed device discovery (especially for remote controls).
Best Practice Recommendation:
For the most stable, "plug-and-play" experience, Roon recommends placing all Roon-related devices (Core, endpoints, and controllers) on the
same VLAN/subnet.
If you must separate them for security (e.g., IoT VLAN), ensure your network allows mDNS across the VLANs, but prepare for potential troubleshooting. "