Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Not pinging Netgate Vlan's

    Scheduled Pinned Locked Moved Official Netgate® Hardware
    72 Posts 3 Posters 10.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      Jarhead @afcarvalho
      last edited by

      @afcarvalho Go to interfaces/Switches.
      Post a pic of that.

      Did you check the link I posted? You'll probably be able to figure it out if you look at the instructions.

      A 1 Reply Last reply Reply Quote 1
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Yes, almost certainly a missing option(s) in the switch config.

        1 Reply Last reply Reply Quote 0
        • A
          afcarvalho @Jarhead
          last edited by

          @jarhead I did look.
          gi1/0/1 defined as trunk
          gi1/0/2 defined with Vlan 10 switchport access
          range gi1/0/3-6 with Vlan 20 switchport access
          range gi1/0/7-24 with Vlan 30 switchport access

          Cant't figure out why is the glitch...

          A

          J 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Sorry, I meant the internal switch in the 1100. What does Interfaces > Switches > VLANs show?

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              It's needs to have VLANs 10, 20 and 30 there with ports 0 and (probably) 2 as tagged members.

              1 Reply Last reply Reply Quote 1
              • J
                Jarhead @afcarvalho
                last edited by

                @afcarvalho said in Not pinging Netgate Vlan's:

                @jarhead I did look.
                gi1/0/1 defined as trunk
                gi1/0/2 defined with Vlan 10 switchport access
                range gi1/0/3-6 with Vlan 20 switchport access
                range gi1/0/7-24 with Vlan 30 switchport access

                Cant't figure out why is the glitch...

                A

                Yeah, I think you're confusing the switches. That article is referring to the internal switch in the 1100, not your switch.
                Again, Interfaces/Switches in pfSense. Make sure you keep 0t on any ports you change.

                A 1 Reply Last reply Reply Quote 0
                • A
                  afcarvalho @Jarhead
                  last edited by

                  @jarhead c940f1a8-6ccb-4ec3-a716-9b51fc8be59a-image.png

                  ac6d702a-7523-4e89-b619-0514b5b6f337-image.png

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by stephenw10

                    Ok that should work as long as the Cisco switch is connected to port 2 (LAN). Is it not?

                    How exactly are you testing?

                    A 1 Reply Last reply Reply Quote 0
                    • A
                      afcarvalho @stephenw10
                      last edited by

                      @stephenw10 It's connected to Netgate port 2
                      I can't access Negate from the switch...
                      That's the problem.
                      A
                      40ed08f5-3b03-496a-b54b-67c32a4e2809-image.png

                      stephenw10S 1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Which IP?

                        How exactly are you testing that?

                        A 1 Reply Last reply Reply Quote 0
                        • A
                          afcarvalho @stephenw10
                          last edited by

                          @stephenw10 192.168.104.2 - Cisco Switch IP
                          192.168.104.1 Netgate

                          A 1 Reply Last reply Reply Quote 0
                          • A
                            afcarvalho @afcarvalho
                            last edited by

                            Netgate port 2 Cable to GI1/0/1 in Cisco Switch configured as trunk
                            PC connected to gi1/0/11 in Cisco Switch configured as Vlan 30

                            A

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator @afcarvalho
                              last edited by stephenw10

                              @afcarvalho said in Not pinging Netgate Vlan's:

                              I can't access Negate from the switch...

                              So you are trying to ping 192.168.104.1 from the switch CLI?

                              What error is shown?

                              A 1 Reply Last reply Reply Quote 0
                              • A
                                afcarvalho @stephenw10
                                last edited by

                                @stephenw10 ef9daa06-2856-4d13-a504-4a829b2a3c28-image.png

                                A 1 Reply Last reply Reply Quote 0
                                • A
                                  afcarvalho @afcarvalho
                                  last edited by

                                  One other strange thing:
                                  NTP isformation is wrong!

                                  bd7bbccb-6df9-4575-957b-2619d0625ce2-image.png

                                  J 1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    It has no WAN connection and the 1100 has no battery backed RTC so it uses the most recent file timestamp.

                                    What are you pinging from there? Clearly not the switch.

                                    What IP address is that? Is that a static IP? How is it connected?

                                    How are you connecting the the pfSense GUI? From a different workstation?

                                    1 Reply Last reply Reply Quote 0
                                    • J
                                      Jarhead @afcarvalho
                                      last edited by

                                      @afcarvalho Are you sure you have the WAN and LAN connected correctly? Almost seems like they may be reversed.
                                      As Stephen said, no internet connection there. See where it says Can't check for updates, dead give away.
                                      Also, post the G1/0/1 config.

                                      A 1 Reply Last reply Reply Quote 0
                                      • A
                                        afcarvalho @Jarhead
                                        last edited by

                                        @jarhead I have no Wan connected.
                                        I have one PC that I connect via one usb c adapter.
                                        And I have a Wifi connection on that the PC that connects to the net.
                                        That's what I am using to answer in this communication.
                                        When I connect the PC directly to the Negate, it works fine.
                                        The Netgate has the Lan port 192.168.104.1
                                        The Netgate has one Vlan (30) with 172.168.108.1 as static IP and a DHCP service serving 172.168.108.100 to 172.168.100.200.

                                        A

                                        J 1 Reply Last reply Reply Quote 0
                                        • J
                                          Jarhead @afcarvalho
                                          last edited by

                                          @afcarvalho
                                          You're getting very confusing now.
                                          If you don't have a WAN connected, why would you think the NTP would be correct??

                                          What does "When I connect the PC directly to the Negate, it works fine." mean?
                                          Do you mean you can ping all vlan interfaces?

                                          Post the G1/0/1 config.

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            @afcarvalho said in Not pinging Netgate Vlan's:

                                            172.168.108.100 to 172.168.100.200

                                            So when you connect the client does it get an IP in that range?

                                            Can you ping 172.168.108.1?

                                            If you try to ping the LAN IP, outside that subnet the client might be trying to use the wifi if you didn't disable it.

                                            You said the firewall rules are open but are they really open?

                                            A 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.