Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Finally has the time to redo the router arrived! Got a question...

    Scheduled Pinned Locked Moved General pfSense Questions
    29 Posts 3 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      swemattias @stephenw10
      last edited by swemattias

      @stephenw10 I tired to hook up my computer to every port, no DHCP packade from either of them.

      Could you please put down in writing how the VLANs config should look?

      My guess
      VLAN grp
      1 -- 1,5t
      2 -- 2t,5t
      3 -- 3t,5t

      Looks a bit to simple though....

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        As I understand it it should be:

        VLAN tag
        10 -- 2t,5t
        20 -- 1t,5t
        172 -- 3,5t
        

        That's based on what you wrote in the first post though. I have no idea what you're actually connecting to those ports! 😉

        Steve

        S 1 Reply Last reply Reply Quote 0
        • S
          swemattias @stephenw10
          last edited by

          @stephenw10 Both ports will have Unifi 8 ports connected to them, after that Server swtich will have 4 connections to the server, 2 to another server and 1 for iDrac.
          The other one till have APs, stuff more switches with more APs... :)

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            And port 3 (Guest) just has a client connected to it directly?

            That should work as long as the Unifi switches are correctly handling the trunked VLAN traffic.

            Steve

            S 1 Reply Last reply Reply Quote 0
            • S
              swemattias @stephenw10
              last edited by swemattias

              @stephenw10 As I tried to say earlier, guest does not need a port, just to be a vlan.

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Well you have put it untagged on port 3. Whatever is connected to that....

                You have put each VLAN on a separate port which implies you are using separate switches for each subnet with no switches carrying more than one VLAN. Is that true?
                Otherwise you have multiple links to one switch which is unnecessary.

                Steve

                S 1 Reply Last reply Reply Quote 0
                • S
                  swemattias @stephenw10
                  last edited by swemattias

                  @stephenw10 I know, it is removed in my "new" config.

                  What I want is:
                  Port 1, Server VLAN
                  Port 2, Client and Guest VLAN

                  Both receiving switches Unifi Switch 8p and Unifi Switch 8 p POE 150W are VLAN aware.

                  vlans.png

                  The interfaces seems a little strange, or am I mistaken on that? I should say that I had my computer hooked up to port 1 when the image is taken.
                  interfaces.png

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by stephenw10

                    The interfaces look fine other than port 2 is not connected.

                    @swemattias said in Finally has the time to redo the router arrived! Got a question...:

                    What I want is:
                    Port 1, Server VLAN
                    Port 2, Client and Guest VLAN

                    Then you should have the switch as:

                    VLAN tag
                    10 -- 1t,5t
                    20 -- 2t,5t
                    172 -- 2t,5t
                    

                    And remove the 172 PVID from port3.

                    Steve

                    S 1 Reply Last reply Reply Quote 0
                    • S
                      swemattias @stephenw10
                      last edited by

                      @stephenw10 So fixed, the only small issue now is that I don't get an DHCP package when plugging in my computer, it does see that is has an connection but ultimately get an self assigned IP.
                      Ports part? Can it be something there? It still looks like earlier today.
                      Skärmavbild 2022-07-27 kl. 16.19.06.png

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Where are you plugging in your computer?

                        As long as you have the LAN assigned as mvneta1 directly still and have a dhcp server enabled on it a client connected to any of the LAN ports should work. Except port 3 if the PVID is still set to 172. It needs to be 1 for a client connection directly.

                        Steve

                        S 1 Reply Last reply Reply Quote 0
                        • S
                          swemattias @stephenw10
                          last edited by swemattias

                          @stephenw10 With an ethernet cable to port 1, 2 or 3. No DHCP on either port.

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Ok that should work on ports 1&2 (and 3 if you've reset the PVID).

                            Is LAN still assigned and enabled as mvneta1?

                            Is the dhcp server enabled on it?

                            Steve

                            S 1 Reply Last reply Reply Quote 0
                            • S
                              swemattias @stephenw10
                              last edited by swemattias

                              @stephenw10 172 removed changed to 1.
                              Here are some current screenshots of the setup. LAN 1 has a connection due to there is where my computer is.

                              Skärmavbild 2022-07-27 kl. 17.02.22.png Skärmavbild 2022-07-27 kl. 17.02.13.png Skärmavbild 2022-07-27 kl. 17.02.06.png

                              This is how all the DHCP servers look.
                              Skärmavbild 2022-07-27 kl. 17.02.54.png

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                What about on LAN though? You are not connecting to the Client VLAN.

                                S 1 Reply Last reply Reply Quote 0
                                • S
                                  swemattias @stephenw10
                                  last edited by

                                  @stephenw10 What do you mean? LAN has no DHCP server, only a static IP. Can that be it?

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    No the LAN interface itself must be a static IP. But it must have a dhcp server enabled on it. Check the 'LAN' tab in Services > DHCP.

                                    Steve

                                    S 1 Reply Last reply Reply Quote 0
                                    • S
                                      swemattias @stephenw10
                                      last edited by swemattias

                                      @stephenw10 Ok done. Well two steps forward and one backwards.
                                      I do get an DHCP package, but it is the LANs DHCP package not the VLAN... Tried both ports same behavior.

                                      Also can I send VLAN10 on port 1 as well? I add To VLAN 20 1t,2t,5t?

                                      stephenw10S 1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Yes, you can trunk VLANs tagged out of whichever ports you need.

                                        S 1 Reply Last reply Reply Quote 0
                                        • S
                                          swemattias @stephenw10
                                          last edited by

                                          @stephenw10 Great, but how about the DHCP issue I am having now? I don't get VLAN package but LAN package...

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator @swemattias
                                            last edited by

                                            @swemattias said in Finally has the time to redo the router arrived! Got a question...:

                                            I do get an DHCP package, but it is the LANs DHCP package not the VLAN... Tried both ports same behavior.

                                            Ah, sorry missed that. That's the expected behaviour if you connect a client directly to the ports. The only way a client would get an IP from one of the VLAN subnets is if you configured the VLAN on it dircetly. Whilst usually possible that'#s almost never done on client.
                                            Those VLAN subnets would be available on ports on the downstream switches configured as access ports for the VLANs.

                                            Steve

                                            S 1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.