Layer 2 routing with Default Forward disabled?

Hi all,

This is my setup:

pfSense gateway (10.0.63.1) DHCP 10.0.63.100-200.
hAP AC (10.0.63.2)
SSIDs: 2.4g, 5g

I have one Chromecast on each SSID: ‘TV’ on 5g and ‘Home’ on 2.4g. They are both bridged on the hAP AC with a VLAN interface which then sends them to the pfSense box.

I want to have Default Forward disabled for the two wireless interfaces to ensure that all traffic goes via the pfSense firewall.

Although I can ping and establish normal TCP connections with other devices even with Default Forward disabled, which I believe is accomplished due to appropriate configuration of pfSense, multicast packets do not make it back over the originating wireless interface.

For example, if I browse the mDNS domain googlecast on the 5g SSID, I can only see ‘Home’. Vice versa on the 2.4g SSID, I can only see TV!

This seems to suggest that Default Forward is isolating multicast traffic from other peers, but I believe it should be being rebroadcast from the pfSense box. Is this not working because of the bridge configuration I described above? Any advice much appreciated, even if in generic terms due to the problem perhaps needing to be addressed on pfSense.

Hi,

Did you manage to resolve this issue?

How did you manage to make stations communicate to each other with Default Forward disabled?