how can I make an AppleTV bypass airvpn in pfsense?

[icedearth1776 0]

Greetings.

 

I have an appletv on a vlan with airvpn and Netflix and Hulu services now don't work.  Is there a way to keep it on the same vlan so airplay doesn't break but have it go through the wan interface instead in pfsense? 

 

I was thinking DMZ but that still needs to be off the vpn in order for me to be able to achieve the desired result.

 

What are my options?

 

Thanks.

[go558a83nk 364]

https://airvpn.org/topic/17444-how-to-set-up-pfsense-23-for-airvpn/?p=61027

[icedearth1776 0]

Thanks - so I'm trying to create an outbound nat rule for just a single IP but unsure how to specify this in the gui.  

 

"Source" gives me three options - any, this firewall, and network.  I think Network would be appropriate but how do I specify a single IP?

[go558a83nk 364]

Thanks - so I'm trying to create an outbound nat rule for just a single IP but unsure how to specify this in the gui.  

 

"Source" gives me three options - any, this firewall, and network.  I think Network would be appropriate but how do I specify a single IP?

 

So, you've followed the guide but do not understand what things like "192.168.1.0/24" mean?  Because I know such IP ranges are in the guide.  Why would you follow a guide and not understand what you're being asked to do?

 

Look up CIDR notation.

[icedearth1776 0]

192.168.1.0/24 to me is a class C network encompassing all 254 useable IPs... I think what would be appropriate here is 192.168.1.x/24.

 

 

Sent from my iPhone using Tapatalk

[go558a83nk 364]

192.168.1.0/24 to me is a class C network encompassing all 254 useable IPs... I think what would be appropriate here is 192.168.1.x/24.

 

 

Sent from my iPhone using Tapatalk

 

Didn't you want to allow just the apple TV through?  That would be a /32 mask. 

[icedearth1776 0]

I'm sorry, I'm not grasping something here... just tried /32 and it didn't work.

 

May I ask if you could summarize the two rules? Something must be wrong.

 

I need one outbound Nat rule and one pass rule for the vlan interface correct?

[go558a83nk 364]

I'm sorry, I'm not grasping something here... just tried /32 and it didn't work.

 

May I ask if you could summarize the two rules? Something must be wrong.

 

I need one outbound Nat rule and one pass rule for the vlan interface correct?

 

Sounds like you have it.   <ip address of apple tv>/32 should work if you have NAT outbound and LAN outbound rules created that point that apple tv towards the WAN interface not VPN.

[icedearth1776 0]

Yep! Got it, thanks.

 

 

Sent from my iPhone using Tapatalk