Things seem to be working reasonably well for me now. Here's what I have:
(1) I'm using the 4.07 release instead of the 4.06 beta.
(2) I am using IP addresses on my private Ethernet subnet instead of hostnames or the subnet that goes to the wireless router.
(3) I have 4 machines: 3 Windows 11 and 1 Windows 10. The primary is Windows 11.
(4) I don't use Windows Firewall, but rather Norton 360. My firewall rules look like this:
Under Program Control I have defined a rule for each of these programs: MultiplicityConfig.exe, MPRDP64.exe, MulltiPLV64.exe, MultiSrv64.exe, Multipl2_64.exe, MP2control_64.exe.
Each of the program rules divides allowed traffic into 2 types: Multiplicity traffic on IP addresses 192.168.2.11-192.168.2.14 (where my machines are) and ports 30564-30569 on a private network. The other type of allowed traffic (called Internet) is any protocol, any port, and any IP address on a public network.
I also defined a Traffic rule that says that all traffic on ports 30564-30569 must be in the IP address range 192.168.2.11-192.168.2.14 (where my machines are).
This seems to work, but I am uncertain that it keeps all Multiplicity traffic on the private subnet as I am unsure that I understand how the firewall works well enough.