DHCP on VLAN

JustSumDad

@silence said in DHCP on VLAN:

want to know physically, h

The server has unused NIC's onboard, setup as per this guide:
https://www.youtube.com/watch?v=UCLWSAc3QrY

works great.

not in bridge mode, the fiber modem is in bridge mode, one nic is direct to the modem called WAN
Another port is direct to the switch bay, Called LAN.

So its doing NAT.

JustSumDad

@viragomann
I really belive it is passing VLAN tags, if I set a static IP on the wifi test client it does get access to the internet.
Only DHCP seems to be an issue.

@justsumdad said in DHCP on VLAN:

DHCP seems to be an issue.

please answer my previous question dhcp relay or dhcp server in pfsense ?

viragomann

@justsumdad
So the VLAN should work.

To investigate, sniff the traffic on the VLAN interface (Diagnostic > Packet capture).
Set a port filter:

67|68

to catch only DHCP packets.

Start the capture and connect a client to the VLAN. Then see what you get.

JustSumDad

@silence said in DHCP on VLAN:

@justsumdad said in DHCP on VLAN:

DHCP seems to be an issue.

please answer my previous question dhcp relay or dhcp server in pfsense ?

Sorry, pfSense is the DHCP server, there is no DHCP relay in the network at all.

The lan DHCP is takeing place in the Windows server.

The VLAN DHCP server is takeing place in pfSense.

JustSumDad

@viragomann said in DHCP on VLAN:

@justsumdad
So the VLAN should work.

To investigate, sniff the traffic on the VLAN interface (Diagnostic > Packet capture).
Set a port filter:
57|58
to catch only DHCP packets.

Start the capture and connect a client to the VLAN. Then see what you get.

Nothing, no packets appear. I did an ipconfig /renew on the laptop that is connected while the capture was on:

@justsumdad, configure a dhcp relay to your dhcp server in windows server?

Disable DHCP Server in pfsense.

viragomann

@justsumdad
Oh, sorry, I was wrong. We need port 67|68.
I'll correct it above.

JustSumDad

@silence
not sure how to tag a DHCP to a vlan in windows.
Will look into it, but if pfSense cant do it, I expect that would bring more issues into the mix.

JustSumDad

@viragomann said in DHCP on VLAN:

@justsumdad
Oh, sorry, I was wrong. We need port 67|68.
I'll correct it above.

I just got a nasty ph call from the boss, had to whip up a temp guest wifi from our backup ISP via a small USG I have in stock for satellite offices.
told to keep my paws off till after hours for now.

will pick this up another day :(

Thanx for the assist thus far everyone!

SteveITS

@justsumdad You could try setting up a PC on VLAN 30 with a static IP to verify it can ping the pfSense IP. That would at least verify communication.

@steveits said in DHCP on VLAN:

try setting up a PC on VLAN 30 with a static IP to verify it can ping the pfSense IP

Excuse me but if you can read above @JustSumDad He said he already did that.

@justsumdad said in DHCP on VLAN:

not sure how to tag a DHCP to a vlan in windows.

Pfsense if you can, I only suggested you since you have a dchp server that will handle all dhcp on your server.

But if you want to do the dhcp of the vlan in pfsense then you can do it, it just seems to me that you are misconfiguring your DHCP

bingo600

@steveits said in DHCP on VLAN:

@justsumdad You could try setting up a PC on VLAN 30 with a static IP to verify it can ping the pfSense IP. That would at least verify communication.

I concur with @SteveITS
Make a Vlan30 switchport , and connect a cabled PC to that port, to see if it gets a DHCP address.

The test done above seems to be made via WiFi , and could have other (yet unsolved pitfalls).

/Bingo

@bingo600 said in DHCP on VLAN:

Make a Vlan30 switchport , and connect a cabled PC to that port, to see if it gets a DHCP address.

wtf.... @bingo600 read comment from
@JustSumDad clearly your vlan works. your dhcp is not configured.

@justsumdad said in DHCP on VLAN:

I really belive it is passing VLAN tags, if I set a static IP on the wifi test client it does get access to the internet.

bingo600

@silence
Would you please behave ...
Seems like ie. DHCP Snooping is not in your mindset.

johnpoz

@justsumdad said in DHCP on VLAN:

I am running the pfSense virtualized.

And are you passing the tags to pfsense via 4095 set on your vswitch..You say your running vmware (esxi?)