Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Finally has the time to redo the router arrived! Got a question...

    Scheduled Pinned Locked Moved General pfSense Questions
    29 Posts 3 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      swemattias @stephenw10
      last edited by swemattias

      @stephenw10 As I tried to say earlier, guest does not need a port, just to be a vlan.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Well you have put it untagged on port 3. Whatever is connected to that....

        You have put each VLAN on a separate port which implies you are using separate switches for each subnet with no switches carrying more than one VLAN. Is that true?
        Otherwise you have multiple links to one switch which is unnecessary.

        Steve

        S 1 Reply Last reply Reply Quote 0
        • S
          swemattias @stephenw10
          last edited by swemattias

          @stephenw10 I know, it is removed in my "new" config.

          What I want is:
          Port 1, Server VLAN
          Port 2, Client and Guest VLAN

          Both receiving switches Unifi Switch 8p and Unifi Switch 8 p POE 150W are VLAN aware.

          vlans.png

          The interfaces seems a little strange, or am I mistaken on that? I should say that I had my computer hooked up to port 1 when the image is taken.
          interfaces.png

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by stephenw10

            The interfaces look fine other than port 2 is not connected.

            @swemattias said in Finally has the time to redo the router arrived! Got a question...:

            What I want is:
            Port 1, Server VLAN
            Port 2, Client and Guest VLAN

            Then you should have the switch as:

            VLAN tag
            10 -- 1t,5t
            20 -- 2t,5t
            172 -- 2t,5t
            

            And remove the 172 PVID from port3.

            Steve

            S 1 Reply Last reply Reply Quote 0
            • S
              swemattias @stephenw10
              last edited by

              @stephenw10 So fixed, the only small issue now is that I don't get an DHCP package when plugging in my computer, it does see that is has an connection but ultimately get an self assigned IP.
              Ports part? Can it be something there? It still looks like earlier today.
              Skärmavbild 2022-07-27 kl. 16.19.06.png

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Where are you plugging in your computer?

                As long as you have the LAN assigned as mvneta1 directly still and have a dhcp server enabled on it a client connected to any of the LAN ports should work. Except port 3 if the PVID is still set to 172. It needs to be 1 for a client connection directly.

                Steve

                S 1 Reply Last reply Reply Quote 0
                • S
                  swemattias @stephenw10
                  last edited by swemattias

                  @stephenw10 With an ethernet cable to port 1, 2 or 3. No DHCP on either port.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Ok that should work on ports 1&2 (and 3 if you've reset the PVID).

                    Is LAN still assigned and enabled as mvneta1?

                    Is the dhcp server enabled on it?

                    Steve

                    S 1 Reply Last reply Reply Quote 0
                    • S
                      swemattias @stephenw10
                      last edited by swemattias

                      @stephenw10 172 removed changed to 1.
                      Here are some current screenshots of the setup. LAN 1 has a connection due to there is where my computer is.

                      Skärmavbild 2022-07-27 kl. 17.02.22.png Skärmavbild 2022-07-27 kl. 17.02.13.png Skärmavbild 2022-07-27 kl. 17.02.06.png

                      This is how all the DHCP servers look.
                      Skärmavbild 2022-07-27 kl. 17.02.54.png

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        What about on LAN though? You are not connecting to the Client VLAN.

                        S 1 Reply Last reply Reply Quote 0
                        • S
                          swemattias @stephenw10
                          last edited by

                          @stephenw10 What do you mean? LAN has no DHCP server, only a static IP. Can that be it?

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            No the LAN interface itself must be a static IP. But it must have a dhcp server enabled on it. Check the 'LAN' tab in Services > DHCP.

                            Steve

                            S 1 Reply Last reply Reply Quote 0
                            • S
                              swemattias @stephenw10
                              last edited by swemattias

                              @stephenw10 Ok done. Well two steps forward and one backwards.
                              I do get an DHCP package, but it is the LANs DHCP package not the VLAN... Tried both ports same behavior.

                              Also can I send VLAN10 on port 1 as well? I add To VLAN 20 1t,2t,5t?

                              stephenw10S 1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Yes, you can trunk VLANs tagged out of whichever ports you need.

                                S 1 Reply Last reply Reply Quote 0
                                • S
                                  swemattias @stephenw10
                                  last edited by

                                  @stephenw10 Great, but how about the DHCP issue I am having now? I don't get VLAN package but LAN package...

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator @swemattias
                                    last edited by

                                    @swemattias said in Finally has the time to redo the router arrived! Got a question...:

                                    I do get an DHCP package, but it is the LANs DHCP package not the VLAN... Tried both ports same behavior.

                                    Ah, sorry missed that. That's the expected behaviour if you connect a client directly to the ports. The only way a client would get an IP from one of the VLAN subnets is if you configured the VLAN on it dircetly. Whilst usually possible that'#s almost never done on client.
                                    Those VLAN subnets would be available on ports on the downstream switches configured as access ports for the VLANs.

                                    Steve

                                    S 1 Reply Last reply Reply Quote 1
                                    • S
                                      swemattias @stephenw10
                                      last edited by

                                      @stephenw10 That was what I thought. Will try to hook up an VLAN aware switch and try that out.
                                      BTW Thank you so incredulity much @stephenw10 !

                                      1 Reply Last reply Reply Quote 1
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.