How to connect a Playstation 3 (PS3) console to a UPnP Media Server over a site-to-site VPN?

Scenario/Question:

Site to Site VPN tunnel between two SonicWall units running SonicOS Enhanced firmware.

How do I connect a Playstation 3 (PS3) console to a UPnP Media Server across a site-to-site VPN?

Deployment Steps:

Step 1: Enable Multicast and configure Reception settings.
Step 2: Enable Multicast support on affected interfaces.
Step 3: Create UPnP Media Server Service Object.
Step 4: Create Rules for the custom service.
Step 5: Edit a VPN > Multicast Rule.
Step 6: Verify connectivity on the Playstation 3.

Ceveats:

1. If your Playstation 3 is already turned on, it may initially require a reboot or require that you toggle media server connectivity off, then on before it will discover the media server, or have the ability to connect to it.

2. Two known-working 3rd Party UPnP Media Servers are:

a. Windows: Nullsoft’s Winamp (with an additional plug-in)
b. Macintosh: Nullriver’s MediaLink

3. Some UPnP Media Servers may not be compatible.

4. Before following the steps outlined in this document, be sure to have a site-to-site VPN tunnel configured between two SonicWall devices running SonicOS Enhanced.

See: VPN: Configuring a Site to Site VPN Policy using Main Mode (Static IP address on both sites) in SonicOS Enhanced.

Procedure:

Step 1. Log into your SonicWall security appliance. Go to Firewall > Multicast. Enable the Enable Multicast option. Disable the Require IGMP Membership reports for multicast data forwarding option. Select the option Enable reception of all multicast addresses. Click Apply.

Step 2. Under Network > Interfaces, Edit the LAN interface. Click on the Advanced tab. Enable the Enable Multicast Support option. Click OK.

Step 3. Go to Firewall > Services. Click Add to create a new service. Configure the service as it appears below:

2. 1. Name: UPnP Media Services UDP1900 (or your own custom name)
   2. Protocol: UDP(17)
   3. Port Range: 1900-1900
   4. Sub Type: None

Step 4. Go to Firewall > Access Rules. Select VPN > Multicast. Create a rule with the following settings:

2. 1. Action: Allow
   2. From Zone: VPN
   3. To Zone: Multicast
   4. Service: UPnP Media Services UDP1900 (the service created in step 3)
   5. Source: Any
   6. Destination: Any
   7. Users Allowed: All

Step 5. Within Firewall > Access Rules, VPN > Multicast, find the IGMP Deny rule. Edit the rule. Set the Action to Allow. Click OK.

Setup is now complete on the SonicWall.

Step 6. Verify connectivity on the Playstation 3 by browsing through the Photo, Music, and Video menus. If the UPnP Media Server does not appear, use the Scan for Media Servers option to search for the server. Refer to the Caveats above for more information.

See Also:

 UTM VPN: Configuring a Site to Site VPN Policy using Main Mode (Static IP address on both sites) in SonicOS Enhanced.