VLAN interface rule
-
Hi guys,
Can you explain to me this mistake :
I've a VLAN interface on my pfSense with an IP (1.0.0.1 for example), based on a physical ethernet (eth2 for example).
When I test a ping from my switch (IP 1.0.0.2 for example) using the VLAN to 10.0.0.1, pfSense blocks the traffic because no rules for eth2.
But a rule exists on VLAN interface in pfSense !
Why the packet isn't received directly by VLAN interface (the ICMP is tagged) ?
I'm using pfSense 2.3.2.
Thanks in advance
Regards,
-
How did you connect your VLAN on eth2 to your switch?
-
Well in your example your pinging the wrong IP ;) You state your IP is 1.0.0.1 but your pinging 10.0.0.1 heheheeh
So your switch has an svi in the vlan you connected eth2? You say its tagged.. How exactly did you validate the packet was tagged? So what is the configuration of the switch port you connected to eth2?
-
Hi,
Thanks for your reply.
How did you connect your VLAN on eth2 to your switch?
pfSense is a VM (ESXi 6.0) on a group port with VLAN 4095 (all VLAN accepted). Hypervisor is on VLAN 4095 too.
Hypervisor dont' manage VLAN only VM pfSense.
The VLAN is configured on pfSense.
Well in your example your pinging the wrong IP ;) You state your IP is 1.0.0.1 but your pinging 10.0.0.1 heheheeh
So your switch has an svi in the vlan you connected eth2? You say its tagged.. How exactly did you validate the packet was tagged? So what is the configuration of the switch port you connected to eth2?
Sorry, 1.0.0.1 is a bad entry… 10.0.0.1 is the address used :-)
On the switch, I send an ICMP on VLAN 10 only to 10.0.0.1, so packet if tagged VLAN 10 to 10.0.0.1.
Yes switch has a SVI on VLAN (juste for test, I will remove it later).
Regards,
