Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Wireless with VLAN not allowing traffic

    Scheduled Pinned Locked Moved General pfSense Questions
    81 Posts 5 Posters 18.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @stephenw10
      last edited by

      @stephenw10 said in Wireless with VLAN not allowing traffic:

      It would be broken to everywhere for all layer 3 connections.

      exactly my thoughts.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @dridhas
        last edited by

        @dridhas
        Yep, but that doesn't rule out the AP. That's why you have to test both.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        D 1 Reply Last reply Reply Quote 0
        • D
          dridhas @JKnott
          last edited by

          @jknott said in Wireless with VLAN not allowing traffic:

          Yep, but that doesn't rule out the AP. That's why you have to test both

          im still hesitant the WAP could be the culprit as hardwired to the switch was the same scenario.

          ill need to check on the MTU because somewhere i saw there was a small difference between LAN and the VLAN i created

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @dridhas
            last edited by johnpoz

            @dridhas said in Wireless with VLAN not allowing traffic:

            i saw there was a small difference between LAN and the VLAN i created

            And why would that be? That makes no sense at all..

            With a normal 1500 mtu, the actual frame size of non tagged would be 1518, with tag your total frame size would go to 1522.. But there should be no where you have to adjust for that.. You should still be using 1500 for any interface mtu set be it pfsense be it client - and I highly doubt tplink allows for adjustment anyway..

            I just looked at my TL-SG108E, and there is no place to set anything about frame size or mtu.

            Are you thinking this

            MTU VLAN (Multi-Tenant Unit VLAN), that has zero to do with frame size or actual data mtu.. That just an example of their horrible choice of acronyms - heheh

            Did you mess with that?

            this.jpg

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            D 1 Reply Last reply Reply Quote 0
            • D
              dridhas @johnpoz
              last edited by

              @johnpoz nope... MTU VLAN is disabled on the switch, only 802.1Q VLAN is enabled.

              this is what i saw in pfsense related to the MTU
              af7bc8c4-4e06-463d-8147-1a64e57d2c60-image.png

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @dridhas
                last edited by

                @dridhas well that is not right..

                mtu.jpg

                Did you change it??

                here.jpg

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                D 1 Reply Last reply Reply Quote 0
                • D
                  dridhas @johnpoz
                  last edited by

                  @johnpoz originally this was set to blank, i just updated to 1500
                  and it still shows as 1496:
                  f2afb84d-26d7-4d45-b711-927c0f28a93e-image.png
                  85317b99-cedb-42ad-9dd8-9c82e88fe17c-image.png

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @dridhas
                    last edited by

                    @dridhas what interface is eu, from the mac that is a tp-link interface..

                    So they don't understand vlans at any level it seems ;)

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    D 1 Reply Last reply Reply Quote 0
                    • D
                      dridhas @johnpoz
                      last edited by

                      @johnpoz just remembered, this is a USB3.0 to LAN adapter on the machine hosting pfsense LAN connection.

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @dridhas
                        last edited by

                        @dridhas At this point I would just junk all that tplink shit to be honest..

                        But yeah mtu mismatch could cause you all kinds of weird issues..

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        D 1 Reply Last reply Reply Quote 0
                        • D
                          dridhas @johnpoz
                          last edited by

                          @johnpoz or get a new workstation that is capable of dual nics without USB adapters.

                          D 1 Reply Last reply Reply Quote 0
                          • D
                            dridhas @dridhas
                            last edited by dridhas

                            @dridhas just created a new VLAN under LAN and the MTU was set to 1496
                            i then updated the interface to use WAN and the MTU got to 1500

                            7666fad0-379f-4fcd-a69f-188a43d054b2-image.png

                            i have another adapter... ill swap them and report.

                            1 Reply Last reply Reply Quote 0
                            • D
                              dridhas
                              last edited by

                              @dridhas Just swapped them out and saw this:
                              0a59e895-0ef3-4aa4-86eb-60b6d32c4979-image.png

                              now the websites are accessible normally.

                              Only downside is that the USB-to-Ethernet adapter is 10/100 only... ๐Ÿ˜ฆ

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Aha! USB NICs strike again! ๐Ÿ™„

                                It could conceivably be some hardware off-loading issue. Check the output of ifconfig -vvvma and see what is enabled.

                                You probably only have VLANs on the LAN side though so one solution here could be to use em0 as LAN (with VLANs on it) and put the USB NIC as WAN.

                                Steve

                                johnpozJ 1 Reply Last reply Reply Quote 1
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator @stephenw10
                                  last edited by johnpoz

                                  @stephenw10 said in Wireless with VLAN not allowing traffic:

                                  solution here could be to use em0 as LAN (with VLANs on it) and put the USB NIC as WAN.

                                  Yup good idea..

                                  So you swapped out different usb nics and 1 that does it correct with a 1500 mtu, and the other changes the mtu to 1496.. Same maker? 1 only 10/100 and other gig?

                                  Advice - stay away from anything with the tplink name on it ;)

                                  Just at a complete loss why they would think mtu should be changed to 1496 because of a vlan?? Man they just don't get how vlans work at all.. ;)

                                  So running a lower mtu if same wouldn't be all that bad - but yeah 1500 on 1 side and 1496 on other interface on same network - going to be problematic for sure.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  D 1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Mmm, I'm not aware of any chipset that cannot do 1504B but it's conceivable. It might be using the generic cdce driver that doesn't assume anything about the hardware perhaps? The boot log would show that.
                                    Yeah setting everything to 1496 should also solve it but I would certainly try em0 as LAN first.

                                    Steve

                                    1 Reply Last reply Reply Quote 0
                                    • D
                                      dridhas @johnpoz
                                      last edited by

                                      @johnpoz i swapped out the cables and interfaces and got the same results... 1500 MTU on both interfaces.
                                      More than likely the TPLink USB adapter the one at fault.

                                      one thing that i saw is that the internet speed got throttled to 100 MB where before pfsense it was 300, not sure if this is normal, still good speed tho.

                                      JKnottJ 1 Reply Last reply Reply Quote 0
                                      • JKnottJ
                                        JKnott @dridhas
                                        last edited by

                                        @dridhas said in Wireless with VLAN not allowing traffic:

                                        TPLink

                                        The name for "quality" network gear! Yeah, right! ๐Ÿ˜‰

                                        PfSense running on Qotom mini PC
                                        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                                        UniFi AC-Lite access point

                                        I haven't lost my mind. It's around here...somewhere...

                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.