• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

How to get pfSense WAN to accept VLAN 0

General pfSense Questions
25
414
206.5k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M
    michaellacroix @stephenw10
    last edited by Oct 17, 2022, 1:57 PM

    @stephenw10

    Anyone else seeing this?

    login-to-view

    T 1 Reply Last reply Oct 17, 2022, 4:24 PM Reply Quote 0
    • S
      stephenw10 Netgate Administrator
      last edited by Oct 17, 2022, 2:33 PM

      That is expected until Plus dev snaps are made public. That should be any time now but there will be an announcement when it happens.

      M 1 Reply Last reply Oct 17, 2022, 7:25 PM Reply Quote 0
      • T
        tedquade @michaellacroix
        last edited by tedquade Oct 17, 2022, 4:25 PM Oct 17, 2022, 4:24 PM

        @michaellacroix "Anyone else seeing this?"

        Yes.

        Ted

        1 Reply Last reply Reply Quote 0
        • M
          michaellacroix @stephenw10
          last edited by Oct 17, 2022, 7:25 PM

          @stephenw10

          Thanks Stephen, do you know if you clone the boot environment before upgrading to 22.11 DEV you can safely return to 22.05 by going back to that boot copy? I'm unsure if it captures the whole OS or just pfsense in that point in time. Thanks

          1 Reply Last reply Reply Quote 0
          • S
            stephenw10 Netgate Administrator
            last edited by Oct 17, 2022, 8:08 PM

            I was just testing that and, yes, that is now possible. I'm not sure if the new bootloader that allows it has made it into snapshots yet but it will be when they go public.

            M 1 Reply Last reply Oct 24, 2022, 2:53 PM Reply Quote 0
            • M
              michaellacroix @stephenw10
              last edited by Oct 24, 2022, 2:53 PM

              @stephenw10

              Hi Stephen, have you done any testing with QOS on the WAN interface while using the netgraph script? I was going to configure traffic shaping for VOIP but am unable to choose the WAN interface as a selection. Thanks

              1 Reply Last reply Reply Quote 0
              • S
                stephenw10 Netgate Administrator
                last edited by Oct 24, 2022, 3:09 PM

                I have not done that. I don't have a WAN that requires. It doesn't surprise me that it wouldn't work though ng is shown as altq capable:
                https://github.com/pfsense/pfsense/blob/RELENG_2_6_0/src/etc/inc/interfaces.inc#L6946

                What error are you seeing?

                M 1 Reply Last reply Oct 24, 2022, 3:17 PM Reply Quote 0
                • M
                  michaellacroix @stephenw10
                  last edited by Oct 24, 2022, 3:17 PM

                  @stephenw10

                  Thanks so much Stephen, I cant wait to be able to use pfsense plus natively without the netgraph script.

                  C 1 Reply Last reply Nov 5, 2022, 5:43 AM Reply Quote 0
                  • C
                    cucu007 @michaellacroix
                    last edited by Nov 5, 2022, 5:43 AM

                    Hi Team, any new updates on this...do we have a working for for the latest SS ? I am still stuck in the dark with 2.5.2

                    P 1 Reply Last reply Nov 5, 2022, 5:46 AM Reply Quote 0
                    • P
                      Patch @cucu007
                      last edited by Nov 5, 2022, 5:46 AM

                      @cucu007 see https://redmine.pfsense.org/issues/13511

                      1 Reply Last reply Reply Quote 0
                      • S
                        stephenw10 Netgate Administrator
                        last edited by Nov 5, 2022, 3:53 PM

                        That's only required to send vlan0 tagged traffic. Most connections that fail to get a DHCP lease from the ISP do so because the ISP is sending vlan0 tagged traffic. That will work in current 2.7 snapshots. See: https://redmine.pfsense.org/issues/12070

                        Steve

                        C 1 Reply Last reply Nov 5, 2022, 4:19 PM Reply Quote 0
                        • C
                          cucu007 @stephenw10
                          last edited by Nov 5, 2022, 4:19 PM

                          @stephenw10 said in How to get pfSense WAN to accept VLAN 0:

                          That's only required to send vlan0 tagged traffic. Most connections that fail to get a DHCP lease from the ISP do so because the ISP is sending vlan0 tagged traffic. That will work in current 2.7 snapshots. See: https://redmine.pfsense.org/issues/12070

                          Steve

                          Hi Steve,
                          When would this be ready for us to comsume?

                          1 Reply Last reply Reply Quote 0
                          • S
                            stephenw10 Netgate Administrator
                            last edited by Nov 5, 2022, 5:08 PM

                            I have several CE test boxes running current snapshots and they have been pretty stable for some time now. Still hard to recommend using it in 'production' though.
                            If you can test it that helps any issues of course.

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • J
                              Jhiggy
                              last edited by Nov 5, 2022, 7:50 PM

                              Hey guys- I'm using Ziply fiber- which used to be frontier. It is doing exactly this. No ip address on WAN. I've updated my netgate 4100 to the latest dev build and ran the command "ifconfig ix2 pcp 4" and it shows the flag being set correctly. Still no IP address.

                              I don't understand why this is even a problem. (I get it is because of vlan0-still) How can a major firewall manufacturer...which I actually paid for by the way...not allow all ISPs to work on their device? How can you then- choose to NOT support me. My last request for zero setup was completely ignored- now I know why. I've been in IT for a very long time and this is the first time I've ever run into something like this. First thing I'm doing for my new job is ripping out all the netgate devices that I'm responsible for- why trust a product that just doesn't even work on some internet connections in 2022?????! Absurd!

                              F S 2 Replies Last reply Nov 5, 2022, 9:25 PM Reply Quote 1
                              • F
                                fresnoboy @Jhiggy
                                last edited by Nov 5, 2022, 9:25 PM

                                @jhiggy If you run pfsense in a virtual machine (ESXi is free for this), then you avoid this issue, and get a lot of advantages like snapshots that are very useful features that are not built into PFSense.

                                To be honest, this stupidity that AT&T started (and now other Arris based ISPs use) with using VLAN0 and such is highly unusual. They make it very hard for you to use your own equipment. I would not be so harsh on the Netgate people as much as your ISP who inflicts this stupidity on the world.

                                I think folks who have to suffer with these ISPs do have a great option by running in a ESXi VM. So it's not the end of the world even if this bug isn't fixed for a long time.

                                1 Reply Last reply Reply Quote 0
                                • S
                                  stephenw10 Netgate Administrator @Jhiggy
                                  last edited by Nov 5, 2022, 9:32 PM

                                  @jhiggy You might be hitting something else there because current 23.01 snaps can accept priority tagged traffic and can accept dhcp offers tagged that way.
                                  You don't usually need to add priority tags to the replies so setting a pcp value shouldn't be required.
                                  Perhaps that ISP has some other requirement like a vlan tag?

                                  The only thing outstanding there is the driver bug in e1000 that requires vlan hardware tagging be disabled. You wouldn't hit that on an ix NIC though.

                                  Steve

                                  1 Reply Last reply Reply Quote 0
                                  • J
                                    Jhiggy
                                    last edited by Nov 5, 2022, 10:49 PM

                                    Sorry- I'm obviously really upset- I've flashed this brand new device 4 different times now with different versions with no luck. (I refuse to use that script- maybe it would work?) I purchased this so that I could learn the new Pfsense OS for my job and time is out. =/ All I know is that I've had an Edgerouter and Unfi gateway working out of the box-along with pfsense installed on a server. I also just tested with a cheap asus router working. Ziply has a hard time replacing an ONT that works with 99.9% of routers out there so I'm stuck.

                                    What else can I try?

                                    I tried the dumb switch between the ont with no luck either. I tried an untagged port in my unifi switch- same. It always detected it but always shows 0.0.0.0 as the ip. (I've reset the ONT and had ziply repush the config as well)

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      stephenw10 Netgate Administrator
                                      last edited by Nov 6, 2022, 12:12 AM

                                      First thing to do it grab a packet capture of the DHCP traffic on the WAN and see what's actually arriving. What made you think your ISP is using traffic in the first place? Perhaps you already saw it in a pcap?

                                      https://docs.netgate.com/pfsense/en/latest/diagnostics/packetcapture/webgui.html

                                      Steve

                                      M 1 Reply Last reply Nov 16, 2022, 7:34 PM Reply Quote 0
                                      • M
                                        michaellacroix @stephenw10
                                        last edited by Nov 16, 2022, 7:34 PM

                                        @stephenw10
                                        Hi All, in my testing with the limited equipment I have I noticed there is a small but noticeable performance increase with my wan connection when using 2.7.0 vs 2.6.0 using the netgraph script. When i get a chance i'll do a iperf throughput test to see if its actual or just me..
                                        Has anyone else experienced this? Thanks All

                                        M 1 Reply Last reply Nov 16, 2022, 8:04 PM Reply Quote 0
                                        • M
                                          michaellacroix @michaellacroix
                                          last edited by Nov 16, 2022, 8:04 PM

                                          @michaellacroix
                                          Also wanted to note that when using ix# nic with netgraph on pfsense 2.6 I need to manually set my WAN interface speed at 10g as for some reason when its set to auto select it goes to 1gb where in 2.7 without netgraph it picks up the 10g connection on its own with auto select. Could be because of an updated driver in 2.7??? Not sure

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.