Cross VLAN Traffic With a USG and Apple Airplay

Cross VLAN Traffic With a USG and Apple Airplay

Posted by Jeff Sloyer on Mon, Apr 1, 2019
In Tutorial,
Tags apple usg firewall unifi ubiquiti airplay


As a follow on from a previous post I discussed how I locked down VLAN’s from a IoT VLAN to my core data VLAN. In that post I described how I got my Sonos speakers and Sonos controller to work over locked down VLAN’s. I recently hooked up an old Apple Airport Express and music wouldn’t flow when I was on the data VLAN to the IoT VLAN where the Airport Express resided.


If you followed my previous blog post it talked about how to lock down communications from the IoT VLAN to the data VLAN and allow pinholes through for Sonos. To get things working for Apple Airplay it was actually pretty easy. First you need to make sure you have mDNS turned on. To check this do the following.

  1. Goto settings in your controller
  2. Goto the services tab on the left
  3. Click MDNS at the top
  4. Make sure the toggle is set to On
  5. Click apply changes

The next step is creating a single firewall rule. The rule that needs to be created is an allow rule that allows established/related traffic from your IoT VLAN (the VLAN that your Apple Airplay device is on) to the data VLAN (secure VLAN). See below for a screenshot.

This firewall rule should be created in the LAN_IN category.

usg screenshot from unifi

Note: As with other allow rules this rule MUST go before your deny rules.


comments powered by Disqus