Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VLAN cannot ping is gateway!

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    36 Posts 3 Posters 4.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Snoopyski @johnpoz
      last edited by

      @johnpoz Only VLAN5 works not VLAN9 very strange.

      So I can only ping IP set on VLAN5 and of curse my LAN IP

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @Snoopyski
        last edited by johnpoz

        @snoopyski

        So from my edited example... Your saying you can ping from some 192.168.1.x device you can ping 192.168.1.1, 192.168.5.1 but not 192.168.9.1

        And what exactly is the mask on this device in your lan? lets for example see the output of ipconfig on this device in your lan. And lets see the interface you setup on vlan 5 on pfsense.

        example here is my lan device

        mylan.jpg

        What specific interface do you have these setup on? This is on a switch port I take it on your 7100 - lets see that config.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

        1 Reply Last reply Reply Quote 0
        • S
          Snoopyski @johnpoz
          last edited by

          @johnpoz In your example :

          From my LAN ping :

          192.168.1.1 = OK, Hosts = OK
          192.168.9.1 = OK, Hosts = Failed (no access to anything on this VLAN)
          192.168.5.1 = OK, Hosts = OK

          S johnpozJ 2 Replies Last reply Reply Quote 0
          • S
            Snoopyski @Snoopyski
            last edited by

            @snoopyski All of this works before I changed the old Sonicwall for a Netgate 7100-U1

            8b75adf0-406c-4fb6-bcd7-a0758260d4d3-image.png

            9ec92fd3-4dd7-47cf-b77d-d3fe294e44de-image.png

            S 1 Reply Last reply Reply Quote 0
            • S
              Snoopyski @Snoopyski
              last edited by

              This post is deleted!
              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @Snoopyski
                last edited by johnpoz

                @snoopyski said in VLAN cannot ping is gateway!:

                192.168.9.1 = OK, Hosts = Failed (no access to anything on this VLAN)

                So you can ping pfsense IP on vlan 9 from lan.. But you can not ping hosts on this vlan.

                So sniff on vlan 9 interface.. Get a running ping going from your lan to 192.168.9.x do you see the ping go out??

                This is 10 second test...

                Can pfsense ping this 192.168.9.x IP from the ping in the gui?

                edit:
                why do you have all your interfaces assigned to lagg0 ? This is the uplink of the soc.. You should not have interfaces assigned to that..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                S 1 Reply Last reply Reply Quote 0
                • S
                  Snoopyski @johnpoz
                  last edited by

                  @johnpoz No pfsense cannot ping 192.168.9.1 and other hosts

                  johnpozJ 2 Replies Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @Snoopyski
                    last edited by

                    @snoopyski see my edit... Why do you have interfaces assigned to your lagg which only contains the uplink to the soc..

                    That sure doesn't seem right to me.. Calling @stephenw10

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                    S 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @Snoopyski
                      last edited by

                      @snoopyski said in VLAN cannot ping is gateway!:

                      No pfsense cannot ping 192.168.9.1 and other hosts

                      But your saying devices from lan can ping 9.1?

                      But pfsense both from cmd line and from gui can not ping its own IP address?

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                      S 1 Reply Last reply Reply Quote 0
                      • S
                        Snoopyski @johnpoz
                        last edited by

                        @johnpoz said in VLAN cannot ping is gateway!:

                        @snoopyski said in VLAN cannot ping is gateway!:

                        No pfsense cannot ping 192.168.9.1 and other hosts

                        But your saying devices from lan can ping 9.1?

                        No devices on LAN cannot ping hosts on 9.1

                        But pfsense both from cmd line and from gui can not ping its own IP address?

                        From the cmd (shell) I can ping its own IP 192.168.9.1 but not from GUI if the source is LAN, if the source is WAN I can ping 192.168.9.1

                        johnpozJ 1 Reply Last reply Reply Quote 0
                        • S
                          Snoopyski @johnpoz
                          last edited by

                          @johnpoz said in VLAN cannot ping is gateway!:

                          @snoopyski see my edit... Why do you have interfaces assigned to your lagg which only contains the uplink to the soc..

                          That sure doesn't seem right to me.. Calling @stephenw10

                          It's the Netgate default setup out of the box! What's wrong?

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @Snoopyski
                            last edited by

                            @snoopyski said in VLAN cannot ping is gateway!:

                            but not from GUI if the source is LAN, if the source is WAN I can ping 192.168.9.1

                            That makes no sense at all.. Other than a mask issue..

                            Can you post your routing table please.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                            S 1 Reply Last reply Reply Quote 0
                            • S
                              Snoopyski @johnpoz
                              last edited by

                              @johnpoz Don't put WAN IP for security reasons ;-) :

                              6d8718b3-a8f1-439b-8353-1d24b71b4cca-image.png

                              88c3e6c6-7235-4ff3-aa33-805acff9783d-image.png

                              All WAN route addresses is on lagg0.4090

                              1 Reply Last reply Reply Quote 0
                              • S
                                selmoandrei @Snoopyski
                                last edited by

                                @snoopyski said in VLAN cannot ping is gateway!:

                                Hello everyone,

                                I have 2 VLAN :

                                VLAN9 and VLAN5

                                Same settings, VLAN9 in the Netgate "Diagnostics ping" section cannot ping itself the VLAN9 gateway from VLAN9 source BUT works fine for the VLAN5 for itself

                                So the result is :

                                LAN cannot reach VLAN9 devices and VLAN9 cannot reach LAN devices

                                PS : Of course, my rules ares open for my test

                                Any Idea ? The device is Netgate 7100U

                                Best regards

                                In that VLAN, did you create something in the "System/Routing/Gateways" menu?
                                When I was starting with Pfsense, I went through a similar error, but my mistake was that I didn't need to create a gateway for each vlan, because the IP you define in it will be your gateway.
                                If you created it, just go and disable the Gateway from the vlan and everything will work.

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.