I have set my Roku 4K devices on an IOT VLAN, the devices work but the IOS app for Roku does not discover the players. I can connect manually by entering the IP. What firewall ports are needed for the trusted VLAN to discover the players
You will be hard pressed to find a list of all the ports, but 8060 is a must.
If you can, try and enable multicast/mDNS/SSDP passthrough/forwarding (if available).
I do have multicast enabled on the firewall. The port mentioned, is that TCP and which direction
Check out this forum poster's (sjjenkins) guide to IoT VLAN Settings Specific to Roku. Apparently he has written a few guides for different devices.
https://www.reddit.com/r/Ubiquiti/comments/gu3kcl/iot_vlan_settings_specific_to_roku/
Just in case his posting becomes unavailable at a later date, the IOS app specifics are as follows...
INBOUND: Allow Roku to send UDP traffic from any SRC port to DEST ports 6970-6971 & 9080 on any client on the Main LAN (6971 is for private listening).
His other rules for the Roku include the following...
OUTBOUND: Allow Roku to send TCP traffic from SRC port 8060 to any DEST port on any client on the Main LAN
OUTBOUND: Allow Roku to send UDP traffic from SRC ports 1900 & 8060 to any DEST port on any client on the Main LAN
INBOUND: Allow Roku to send TCP traffic from any SRC port to DEST ports 5150 & 9080 on any client on the Main LAN
INBOUND: Allow Roku to send UDP traffic from any SRC port to DEST ports 6970-6971 & 9080 on any client on the Main LAN
If you click on the link provided to you above, he has a link to a spreadsheet of all his different rules. Just for the sake of preserving the info, that info is also located at https://www.reddit.com/r/Ubiquiti/comments/glp6kp/compare_your_iot_vlan_firewall_rules_to_mine/
Hope that helps you a bit.
AvsGunnar
Thanks for the response. I had seen that link you provided, tried to decipher the rules and flow but it did not work. I did perform network captures on the Roku devices as well as the iPhone with the Roku app installed. I saw the TCP port 8060 for the following:
1. From Roku (IoT VLAN) to iPhone (LAN) source port 8060 to Any
2. From iPhone (LAN) to Roku (IoT VLA) source port 8060 to Any
I did not see any of the UDP ports from the Roku to VLAN or VLAN to Roku. I have mDNS (igmp proxy) enabled. It appears the Roku IOS app can only discover devices on the local LAN. If I connect manually to one of the two devices the connection is persistent.
Any other thoughts?
Just as an FYI, recent versions of the iOS Roku Remote app have had issues discovering or staying connected to Roku devices - you might consider rolling it back a version or two and trying again.