Can't Ping with static IP address inter vlans

sousket · Aug 2, 2016, 9:55 AM

Hello,

i'm currently on setup with my lab, and i have a problem with routing multi VLAN.

I have a server on OVH (with ESXi), so i have my public IP, and i just adding a failover IP with PFsense.

On my PFsense, i have 3 VLANs :

LAN (just default LAN on 192.168.1.X).
VLAN10 (tag 10) : 10.0.10.20 - 200 with gateway 10.0.10.1 (but i don't have create a specific gateway on gateway menu). DHCP enable.
VLAN20 (tag 20) : 10.0.20.20 - 200 with gateway 10.0.20.1 (same as VLAN10). DHCP enable.

Firewall rules are : VLAN10 to any, and VLAN20 to any

On VLAN10, one DC : 10.0.10.20
ON VLAN20, one server : 10.0.20.20

On each i can ping from VLAN10 to VLAN20 when servers are on dynamics IP (and inversly).

The problem is that when i change IP on static on windows (with same IP as dynamics), i can't ping any servers.

from my DC (VLAN10), i can't ping my server on VLAN20 (and inversly).

No firewalls enable on servers.

Thx for your help !

viragomann · Aug 2, 2016, 12:01 PM

Have you also added the gateway to the host manually when changing to static IP?

sousket · Aug 2, 2016, 12:18 PM

when i change IP from dynamic to static yes, i add :

10.0.10.20
255.0.0.0
10.0.10.1

and DNS himself because it's DC / DNS server (127.0.0.1).

On my second server :

10.0.20.20
255.0.0.0
10.0.20.1

DNS : 10.0.10.20 (first server DC so).

But ping is KO on static IP. Only working with dynamics IP (and same IP).

Note : "Bypass firewall rules for traffic on the same interface" under System>Adv, Firewall/NAT is check.

viragomann · Aug 2, 2016, 12:58 PM

Your network mask is to large!
So both clients think the other IP is in its own subnet and don't direct packet to the gateway.

sousket · Aug 2, 2016, 1:21 PM

Ho sorry !!! Yes after modification it's ok now :) !

But now my problem is that on VLAN10 and VLAN20, i don't have internet access. When I ping 8.8.8.8 from my DC or the other one :

ping 8.8.8.8 :
Reply from 10.0.10.1: Destination host unreachable.

To resume i can't exit from VLAN10 / 20 gateway :(

viragomann · Aug 2, 2016, 1:29 PM

Maybe the outbound NAT isn't working properly.

I don't know if pfSense adds the outbound NAT rule correctly for vLANs or maybe your outbound NAT is set for manual rule generation. Check the rules in Firewall > NAT > Outbound.