Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VLANs setup properly?

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    17 Posts 5 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • terry.cT
      terry.c @Jarhead
      last edited by

      This post is deleted!
      1 Reply Last reply Reply Quote 0
      • terry.cT
        terry.c @Jarhead
        last edited by terry.c

        @jarhead I tried a few configurations with the info you provided. here's what seems to be working, although VLAN30 laptop doesn't seem to be switching over at this time. I restarted the switch and laptop, checked all settings, pfsense, and switch a few times, all is the same. Not sure what's up with that... Any idea why LAN says there's activity even though nothing is routed there?
        20221003_231736.jpg

        20221003_231927.jpg

        J 1 Reply Last reply Reply Quote 0
        • J
          Jarhead @terry.c
          last edited by

          @terry-c I don't understand your drawing.
          Post a screenshot of your switch vlan config.
          Use "snipping tool" if you're using windows.

          terry.cT 1 Reply Last reply Reply Quote 0
          • M
            milew
            last edited by milew

            @terry-c
            Do you have one or two interfaces in your pfsense?

            For one interface try this
            Flowchart

            1 Reply Last reply Reply Quote 0
            • terry.cT
              terry.c @Jarhead
              last edited by

              @jarhead here's screenshots of the setup.

              1.png 2.png 3.png 4.png 5.png 6.png

              V 1 Reply Last reply Reply Quote 0
              • V
                viragomann @terry.c
                last edited by

                @terry-c
                Any specific reason for having port 1 configured with PVID10?

                VLAN10 is your WAN as I got you and port 1 has it tagged. As well it should be tagged in pfSense. So there is no need for PVID.

                terry.cT 1 Reply Last reply Reply Quote 0
                • terry.cT
                  terry.c @viragomann
                  last edited by terry.c

                  @viragomann not really sure how to connect this. I'v tried a bunch of different ways. At this time if I untag port 1 from 10 I lose pfsense. Anybody have a really good example or explanation of tagged and untagged. I think I have it figured out, then it doesn't work with 2 devices. Only one vlan will work. Really confused and shocked at how difficult this is. lol 🤣

                  V J 2 Replies Last reply Reply Quote 0
                  • V
                    viragomann @terry.c
                    last edited by

                    @terry-c
                    untagged VLAN10 != PVID10

                    The switch gives you 3 way to assign a port to a VLAN.
                    tagged: outgoing packets on the port are tagged
                    untagged: outgoing packets are untagged
                    PVID: incoming packets get tagged

                    I requested you to remove the PVID from port 1. Port 1 is the trunk port to pfSense = all VLANs tagged. I.e. all outgoing packets are tagged with the respective VLAN IDs. Incoming packets must not get tagged, because they are already.

                    1 Reply Last reply Reply Quote 0
                    • J
                      Jarhead @terry.c
                      last edited by Jarhead

                      @terry-c said in VLANs setup properly?:

                      @viragomann not really sure how to connect this. I'v tried a bunch of different ways. At this time if I untag port 1 from 10 I lose pfsense. Anybody have a really good example or explanation of tagged and untagged. I think I have it figured out, then it doesn't work with 2 devices. Only one vlan will work. Really confused and shocked at how difficult this is. lol 🤣

                      Think of it like this, if you have a tagged vlan on an interface, whatever you plug into that interface also needs to be tagged.

                      Why are you using a vlan on the WAN?

                      There should be a third option on the vlans, tagged, untagged and "no". ie excluded, not allowed, something like that. If a vlan isn't being used on a port, set it to excluded on those ports.

                      All vlans are assigned to LAN as parent in pfSense, correct?

                      terry.cT 1 Reply Last reply Reply Quote 0
                      • terry.cT
                        terry.c @Jarhead
                        last edited by

                        @jarhead Hi, thanks for following up. I appreciate it. I contacted the switch manufacturer for a 3rd time and finally figured it out. lol. there was a few things i was doing wrong, plus the support tech kind of led me in the wrong direction.

                        Thanks again!!

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.