Problem: Have HEOS speakers and Denon/Marantz AVRs on isolated VLANs that won't show up in your HEOS app or AVR control apps? Tired of compromising network security just to get your audio devices working across VLANs?
Solution: I've created a comprehensive, tested solution that enables full HEOS and AVR functionality across VLANs while maintaining network security boundaries.
What This Guide Covers:- ✅ Complete Cross-VLAN Discovery - HEOS speakers visible from any VLAN
- ✅ Full AVR Control - Denon/Marantz AVRs work with dedicated control apps (not just HEOS app)
- ✅ Spotify Connect Support - Works seamlessly across network segments
- ✅ Security Maintained - Selective firewall rules, no compromised VLAN isolation
- ✅ Systematic Testing - Step-by-step verification procedures included
Technical Approach:- UDP Broadcast Relay for 4 critical protocols: SSDP (1900), mDNS (5353), HEOS (1400), and AVR Control (60006)
- Selective firewall rules allowing only necessary cross-VLAN communication
- Comprehensive troubleshooting and testing procedures
What You Get:- Ultimate Configuration Guide - Complete implementation from scratch
- Quick Reference Guide - Daily operations and troubleshooting
- Systematic Testing Procedures - Verify everything works correctly
- Real-World Tested - All configurations verified in actual deployments
Prerequisites:- OPNsense firewall (tested on recent versions)
- Basic understanding of VLANs and firewall rules
- HEOS-enabled devices (speakers, AVRs) on different network segments
This solution has been thoroughly tested in real environments and addresses the common issue where HEOS devices are discoverable but AVR control apps can't connect (the missing Port 60006 that most guides overlook).
Perfect for home labs, prosumer networks, or anyone who wants proper network segmentation without sacrificing device functionality.
Guide Link: Complete OPNsense HEOS/AVR Cross-VLAN Guide (https://github.com/hugo-brito/Guides/blob/main/HEOS-AVR-Cross-VLAN/OPNsense_HEOS_AVR_Ultimate_Guide.md)