Hello,

I'm trying to use PIM to route Bonjour without success. All the examples I see are between 2 routers.

- Subnet1
- Subnet2
- PrinterSubnet

Subnet1 and Subnet2 should not communicate (well, I I have to allow multicast packets to go through for this to work, so be it, but not unicast)
Both should be able to access the multifunction in PrinterSubnet

As it is a multifunction, it cannot be added to the computers by IP address, Bonjour must be used.

Thanks

congratulations vortex multicast works ok

1 if you use different ports for different subnets in you routerboard, with independent switches or hubs to connect your pcs you can add in firewall drop multicast from printer subnet.

2 if you have a hub or switch interconnecting all subnets.. you are lost, the router does nothing.

if you case is 2, change the switch for a VLAN switch and make a VLAN by subnet to phisical isolate and add the vlans to router,
if with this solution the bonjour do the same mangle the packets ttl to 0 or do the same as 1

(or you can isolate only the printer lan with a independent switch linked to a empty port of mikrotik router)

I am not interested in isolating the printer, but in isolating Subnet1 and Subnet2 and allowing access to the multifunction to both.

I have kept on trying to get PIM working, and I manage to join multicast groups for both the computer and printer subnets, but it doesn't work. I looked at the firewall trace and I see quite a few 224.0.0.0/4 packets that get no reply. The status of all the IPMG groups is "exclude".

I first set the RP to one of subnet's router port, but now I set it to the gateway port, and it still doesn't work even if I add a 224.0.0.0/4 route to the gateway.
I tried opening the firewall for 224.0.0.0/4 too, but it doesn't help.

I never had to do stuff with a router before that required such network engineering knowledge.

It's a very interesting system. I am amazed at the power this offers for the money.

Thanks

as i see it, you have to set up RP inside printer subnet, since subnet1 and subned2 is allowed to communicate with printer subnet but not between themselves.

on both subnets make entries in RP to point to RP set up in printer subnet.

Note that for multicast to work you have to have both - IGMP and PIM working. Also, client devices should be able to reach RP router without any problems and rescrictions due to how PIM works.

Note 2: PIM essentially is UDP, no response is required on multicast packet, just some work has to be done on the receiving end if that is designated router, or PIM or IGMP join/leave is received.

Il already tried putting the RP on the PrinterSubnet router port, but it didn't work.

PIM and IGMP are enabled in all these subnets as per default.

I don't know if some routing or firewall rules must be added to the default.

The IGMP groups all show status = "exclude". I am not sure if this is OK.

Do I need to use IGMP proxy too?

I don't understand what you mean make RP entries "in both subnets". I just have the Mikrotik, and there's no subnet field when one creates an RP.

if you have routers there they have to have multicast package installed and enabled. and set /routing pim rp entry pointing to RP address. So if you have router in printer subnet, then set this as RP, and for other routers set up RP as well.

RouterOS by default is not accepting multicast packets, so they might be dropped silently as something that RouterOS is not working with.

There's no other equipment in between. All this stuff is connected directly to one 2011UAS-2HnD-IN router.

OK, I'm using 5.23. Maybe that has something to do.

Thanks

Hello,

So, I started again, by enabling PIM and IGMP in all these subnets, and setting the RP to the router port of PrinterSubnet (computer, printer directly attached, as always).

The printer does not appear in the computer mDNS cache, even after flushing.

I looked with Torch at the computer subnet bridge (this is where PIM and IGMP are enabled, not each port), and I see 224.0.0.0/4 source packets going to the bridge port, but I don't know if they are being output.

BTW, I'm using NAT, I don't know if that might have something to do.

Thanks