Allowing Roku TV (VLAN 80) to connect to Jellyfin Server (VLAN 99) questions

[ericarogers]

The title pretty much sums it up. What I would like to do is allow a couple of my TV's to access my Jellyfin server which is on a separate VLAN from the TV's. I am not sure what the best practice for this is because the Jellyfin server runs in a container on my TrueNas server, which lives on another VLAN within my network.

To narrow the question down a little bit and hopefully help focus the replies some, what I would really like to do, is isolate the IP's of the Roku TV as well as my Android TV (Sony Bravia) using firewall rules, so that only those 2 device IP's are allowed to access to the Jellyfin server VLAN if that makes any sense? I am not trying to open the Jellyfin server up to anything outside my LAN for now.

Is there a better way to go about this than trying to do it through firewall rules?

slope game

Thanks in advance!

[gnattu]

If you already have a router between these two IP range and is acting as the gateway between them in the routing table shouldn't a simple forward rule like iptables -A FORWARD -s <ROKU_TV_IP> -d <JELLYFIN_SERVER_IP> -j ACCEPT on the gateway be enough?