Multi-LAN Multi-VLAN access problem
-
Hi!
Hope all is great, happy new year
I installed pfsense on a physical machine with 4 NICs, with the specification below:
re0 -> LAN , 192.168.10.0/24
re1 -> Camera, 192.168.1.0/24
re2 -> 2 VLANs : VLAN400 (Bridged for PPPoE), VLAN 500 (192.168.2.0/30)
re3 -> 2 VLANs : VLAN400 (Bridged for PPPoE), VLAN 500 (192.168.3.0/30)
I'm using point-to-point wireless for accessing internet in which there are two separate wireless from separate ISPs on re2 and re3, I've configured the wireless access points in which I'm able to have PPPoE connection and access to internet on VLAN 400s both working perfect in both load balance and failover scenarios , and I've set local IP addresses on VLAN500s to access my wireless aps.
Firewall is configured to let LAN access to everything, the problem is I can access to Camera subnet without any problem but when it comes to VLAN500s it doesn't work while I'm able to ping and SSH within the pfsense.Strange thing is in pfsense ping tool I can ping Cam devices when source address is LAN but when it comes to ping VLAN devices when the source is LAN it doesnt work.
Also Port Forward to VLAN doesn't work too.
TL;DR : Access from LAN to other physical interfaces are working but from LAN to VLANs doesn't work.
Thank you in advance.
-
@giyahban said in Multi-LAN Multi-VLAN access problem:
re2 -> 2 VLANs : VLAN400 (Bridged for PPPoE), VLAN 500 (192.168.2.0/30)
re3 -> 2 VLANs : VLAN400 (Bridged for PPPoE), VLAN 500 (192.168.3.0/30)Is that a typo? Your running multiple vlans over the same interface that are bridged - but they use 2 different networks? looks like you have vlan 500 as both 2.0/30 and 3.0/30?
If your having problem talking to a network from lan which has any any rule.. Problem most likely lies in what your wanting to talk to.. No gateway, or gateway not pfsense?
-
@johnpoz
no I didn't clear this enough. My wireless ap (p2p isp) has two interfaces : ether and wlan there is vlan that carries data thorugh wlan I create vlan400 on ether and bridge them together (on ap) so I can have PPPoE connection on pfsense and it works very well. I just want to use vlan500 to communicate with my ap that's it.yeah I have vlan500 on both 2.0/30 and 3.0/30 but they are on different interfaces. Is it going to be a problem ?
Thank you!!!!!! That was the problem I forgot to set gateway on APs and scratching my head to find the problem in pfsense! Thanks again
-
@giyahban said in Multi-LAN Multi-VLAN access problem:
vlan500 on both 2.0/30 and 3.0/30 but they are on different interfaces
If they are different networks I wouldn't be using the same vlan ID on them, especially if they share any infrastructure.. Not an issue if you use vlan ID X on switch A, and also use ID X on switch B, etc. if there is no communication ever between these switches..
But I wouldn't bridge 2 different L3 networks together using the same vlan ID..
If these are 2 different networks, why wouldn't use use different vlan IDs
