Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Finally has the time to redo the router arrived! Got a question...

    Scheduled Pinned Locked Moved General pfSense Questions
    29 Posts 3 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      swemattias
      last edited by swemattias

      So I tried to set the SG-2100 up with the info I got mainly from this thread.
      I get no nothing when connecting to the different ports, What I mean with nothing is no DHCP package.
      I also tried to set LAN to 10.10.1.1/24, that only meant I wasn't able to use that series under the VLAN. I did switch the DHCP server off on LAN.
      And tried to use 10.10.1.2/24 on the Server VLAN. Error. So I sat LAN to 10.1.1.1/24, and Server VLAN to 10.10.1.1/24.

      Here are my setup:
      Assignments.png
      ports.png
      vlans.png

      What have I messed up?
      I should say that on one port 1 I want Server LAN on port 2 I want Client VLAN and Guest VLAN.
      That simple. Still I f*** up. Please help. :)

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        The Server VLAN should have worked on port 2. And the LAN should work with those settings.

        The Guest and Client VLANs need to tagged members of port 5 in the switch setup.

        The Client VLAN should be tagged on port 1 if that's connected to a switch there.

        Steve

        S 1 Reply Last reply Reply Quote 0
        • S
          swemattias @stephenw10
          last edited by swemattias

          @stephenw10 I tired to hook up my computer to every port, no DHCP packade from either of them.

          Could you please put down in writing how the VLANs config should look?

          My guess
          VLAN grp
          1 -- 1,5t
          2 -- 2t,5t
          3 -- 3t,5t

          Looks a bit to simple though....

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            As I understand it it should be:

            VLAN tag
            10 -- 2t,5t
            20 -- 1t,5t
            172 -- 3,5t
            

            That's based on what you wrote in the first post though. I have no idea what you're actually connecting to those ports! 😉

            Steve

            S 1 Reply Last reply Reply Quote 0
            • S
              swemattias @stephenw10
              last edited by

              @stephenw10 Both ports will have Unifi 8 ports connected to them, after that Server swtich will have 4 connections to the server, 2 to another server and 1 for iDrac.
              The other one till have APs, stuff more switches with more APs... :)

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                And port 3 (Guest) just has a client connected to it directly?

                That should work as long as the Unifi switches are correctly handling the trunked VLAN traffic.

                Steve

                S 1 Reply Last reply Reply Quote 0
                • S
                  swemattias @stephenw10
                  last edited by swemattias

                  @stephenw10 As I tried to say earlier, guest does not need a port, just to be a vlan.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Well you have put it untagged on port 3. Whatever is connected to that....

                    You have put each VLAN on a separate port which implies you are using separate switches for each subnet with no switches carrying more than one VLAN. Is that true?
                    Otherwise you have multiple links to one switch which is unnecessary.

                    Steve

                    S 1 Reply Last reply Reply Quote 0
                    • S
                      swemattias @stephenw10
                      last edited by swemattias

                      @stephenw10 I know, it is removed in my "new" config.

                      What I want is:
                      Port 1, Server VLAN
                      Port 2, Client and Guest VLAN

                      Both receiving switches Unifi Switch 8p and Unifi Switch 8 p POE 150W are VLAN aware.

                      vlans.png

                      The interfaces seems a little strange, or am I mistaken on that? I should say that I had my computer hooked up to port 1 when the image is taken.
                      interfaces.png

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by stephenw10

                        The interfaces look fine other than port 2 is not connected.

                        @swemattias said in Finally has the time to redo the router arrived! Got a question...:

                        What I want is:
                        Port 1, Server VLAN
                        Port 2, Client and Guest VLAN

                        Then you should have the switch as:

                        VLAN tag
                        10 -- 1t,5t
                        20 -- 2t,5t
                        172 -- 2t,5t
                        

                        And remove the 172 PVID from port3.

                        Steve

                        S 1 Reply Last reply Reply Quote 0
                        • S
                          swemattias @stephenw10
                          last edited by

                          @stephenw10 So fixed, the only small issue now is that I don't get an DHCP package when plugging in my computer, it does see that is has an connection but ultimately get an self assigned IP.
                          Ports part? Can it be something there? It still looks like earlier today.
                          Skärmavbild 2022-07-27 kl. 16.19.06.png

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Where are you plugging in your computer?

                            As long as you have the LAN assigned as mvneta1 directly still and have a dhcp server enabled on it a client connected to any of the LAN ports should work. Except port 3 if the PVID is still set to 172. It needs to be 1 for a client connection directly.

                            Steve

                            S 1 Reply Last reply Reply Quote 0
                            • S
                              swemattias @stephenw10
                              last edited by swemattias

                              @stephenw10 With an ethernet cable to port 1, 2 or 3. No DHCP on either port.

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Ok that should work on ports 1&2 (and 3 if you've reset the PVID).

                                Is LAN still assigned and enabled as mvneta1?

                                Is the dhcp server enabled on it?

                                Steve

                                S 1 Reply Last reply Reply Quote 0
                                • S
                                  swemattias @stephenw10
                                  last edited by swemattias

                                  @stephenw10 172 removed changed to 1.
                                  Here are some current screenshots of the setup. LAN 1 has a connection due to there is where my computer is.

                                  Skärmavbild 2022-07-27 kl. 17.02.22.png Skärmavbild 2022-07-27 kl. 17.02.13.png Skärmavbild 2022-07-27 kl. 17.02.06.png

                                  This is how all the DHCP servers look.
                                  Skärmavbild 2022-07-27 kl. 17.02.54.png

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    What about on LAN though? You are not connecting to the Client VLAN.

                                    S 1 Reply Last reply Reply Quote 0
                                    • S
                                      swemattias @stephenw10
                                      last edited by

                                      @stephenw10 What do you mean? LAN has no DHCP server, only a static IP. Can that be it?

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        No the LAN interface itself must be a static IP. But it must have a dhcp server enabled on it. Check the 'LAN' tab in Services > DHCP.

                                        Steve

                                        S 1 Reply Last reply Reply Quote 0
                                        • S
                                          swemattias @stephenw10
                                          last edited by swemattias

                                          @stephenw10 Ok done. Well two steps forward and one backwards.
                                          I do get an DHCP package, but it is the LANs DHCP package not the VLAN... Tried both ports same behavior.

                                          Also can I send VLAN10 on port 1 as well? I add To VLAN 20 1t,2t,5t?

                                          stephenw10S 1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Yes, you can trunk VLANs tagged out of whichever ports you need.

                                            S 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.