Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No DHCP on pfSense VLAN with Cisco Smart Switch

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    147 Posts 7 Posters 99.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pete35 @johnpoz
      last edited by

      @johnpoz

      Showing up VLAN tags may depend on the pfsense type/version/device driver and the nic. At least within my configuration it doesnt show up any VLAN Tags. Lets check cannondales dump file again.

      <a href="https://carsonlam.ca">bintang88</a>
      <a href="https://carsonlam.ca">slot88</a>

      johnpozJ DerelictD 2 Replies Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @pete35
        last edited by johnpoz

        @pete35 said in No DHCP on pfSense VLAN with Cisco Smart Switch:

        type/version/device driver and the nic

        Possible.. But if it was working and sending the tags, why is his dhcp server not seeing the discover?

        For it to work, the tags have to be there - so why wouldn't basic function of tcpdump not show them?

        He is using igb interfaces - same as me. Maybe there is something with your ix interfaces, but have been using tcpdump for years.. I have never seen such an issue on all kinds of different hardware and OSes - and it for sure has worked on freebsd and pfsense going back as far as I can remember.

        edit: Just ordered a sg250-08HP off ebay.. Going to play with one of these myself.. This can not be this difficult ;) Says should be here

        Estimated delivery:
        Sat, May 27 - Tue, May 30

        Hoping for the 27th ;)

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        P C 2 Replies Last reply Reply Quote 0
        • C
          Cannondale @mvikman
          last edited by

          @mvikman
          This is what my menu looks like:

          Screenshot from 2023-05-24 06-40-01.png

          1 Reply Last reply Reply Quote 0
          • P
            pete35 @johnpoz
            last edited by

            @johnpoz
            i cant imaging how this switch shouldnt do vlan tagging correctly. If its defect it wouldnt do anything. There are thousand of SGXXX switches out there, googleing for vlan tagging problems doesnt give any problems at all.

            for the tcpdump vlan story: you see the vlan tags if running tcpdump with "-v". With "-w" it goes to a file which can be open with wireshark, vlan tags are not shown there by default.

            <a href="https://carsonlam.ca">bintang88</a>
            <a href="https://carsonlam.ca">slot88</a>

            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @pete35
              last edited by johnpoz

              @pete35 its quite possible he is looking at his output from tcpdump wrong? But I was quite clear on how to do it and showed examples.. Its a simple std output to the screen.

              I am with you - there are 1000's or even 10s or 100s of thousands of these out there - if there was some issue with vlans you would think it would be easy enough to find people complaining.

              I will have one to play with here in a few days ;) As long as it works - it will allow me to get rid of an injector using for my flex HD unifi AP have sitting on my floor in my computer room..

              Its an open box off ebay - so you never know. But says fully operational just missing couple of the rubber feet on the bottom ;)

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              P 2 Replies Last reply Reply Quote 0
              • P
                pete35 @johnpoz
                last edited by pete35

                @johnpoz

                I would really like to know the issue here. CBS350 or Catalyst 1000 is the better modern choice for this switches. SG250 is really old in terms of Cisco switches. Most of the models arent supported anymore by new firmware versions. Vlans are are working for pfsense and also for this Cisco switch. So there must be a issue between them or on layer 8 maybe.

                <a href="https://carsonlam.ca">bintang88</a>
                <a href="https://carsonlam.ca">slot88</a>

                johnpozJ 1 Reply Last reply Reply Quote 0
                • C
                  Cannondale @pete35
                  last edited by

                  Thanks for your efforts pete35! Very interesting information.
                  Not familiar with wireshark. Will install it and see what I can find.

                  I did check the pfSense DHCP log for DHCPREQUEST on the vlan20 IP but don't see anything. Just the entry for "Listening on BPF/igb1"

                  1 Reply Last reply Reply Quote 0
                  • P
                    pete35 @johnpoz
                    last edited by

                    @johnpoz @Cannondale

                    pls reboot that switch:

                    393b7dae-4799-4e45-bab2-e0defb11f3fe-image.png

                    <a href="https://carsonlam.ca">bintang88</a>
                    <a href="https://carsonlam.ca">slot88</a>

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @pete35
                      last edited by johnpoz

                      @pete35 said in No DHCP on pfSense VLAN with Cisco Smart Switch:

                      anymore by new firmware versions

                      The sg250 seems to have gotten a firmware release quite recent.

                      firmware.jpg

                      My own sg300 hasn't had one since 18-Jun-2020

                      Pretty sure he has rebooted - since I know he changed firmwares at one point, etc.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • M
                        mvikman
                        last edited by mvikman

                        He originally had the latest firmware installed

                        Roth-SG250-50P-1
                        v2.5.9.16 / RCBS3.1_930_871_10
                        

                        Also his latest "show tech" shows that firmware 2.5.9.16 is active

                        ------------------ show version ------------------
                        Active-image: flash://system/images/image_tesla250_hybrid_2.5.9.16_release_cisco_signed.bin
                          Version: 2.5.9.16
                          MD5 Digest: c1f283dd662260f1532ef8cb26158014
                          Date: 27-Feb-2023
                          Time: 16:57:47
                        Inactive-image: flash://system/images/SG250-50P-Firmware_Backup_v2.4.0.94-image1-20230428.bin
                          Version: 2.4.0.94
                          MD5 Digest: 6f5be217100f34929986f2e93dd2d5e9
                          Date: 31-May-2018
                          Time: 02:39:58
                        

                        pfSense Plus 24.11-RELEASE (amd64)
                        Dell Optiplex 7040 SFF
                        Core i5-6500, 8GB RAM, 2x 240GB SSD (ZFS Mirror)
                        HPE 561T (X540-AT2), 2-port 10Gb RJ45
                        HPE 562SFP+ (X710-DA2), 2-port 10Gb SFP+

                        C johnpozJ 2 Replies Last reply Reply Quote 0
                        • C
                          Cannondale @mvikman
                          last edited by

                          @mvikman said in No DHCP on pfSense VLAN with Cisco Smart Switch:

                          He originally had the latest firmware installed

                          Confirmed the latest fw is active.

                          Screenshot from 2023-05-24 07-35-03.png

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @mvikman
                            last edited by

                            @mvikman yeah he has gone to older firmware at one point

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • C
                              Cannondale @johnpoz
                              last edited by

                              @johnpoz said in No DHCP on pfSense VLAN with Cisco Smart Switch:

                              Just ordered a sg250-08HP off ebay

                              You're a stand up guy for going the extra mile johnpoz!
                              No need to spend your money to help solve my problem!
                              PM me and let me know how much it was so that I can reimburse you.

                              P 1 Reply Last reply Reply Quote 0
                              • P
                                pete35 @Cannondale
                                last edited by

                                @Cannondale
                                i tought the same. Johnpoz is great.

                                can you post the whole page of the vlan 10 interface configuration on the firewall ?

                                <a href="https://carsonlam.ca">bintang88</a>
                                <a href="https://carsonlam.ca">slot88</a>

                                C 1 Reply Last reply Reply Quote 0
                                • DerelictD
                                  Derelict LAYER 8 Netgate @pete35
                                  last edited by

                                  If you pcap on the parent interface you will see all the VLAN tags there along with all traffic on all VLANs. If you pcap on the VLAN interface you will not see the tags.

                                  I sometimes create unnumbered pfSense interfaces on the parent (IPv4 and IPv6 set to None) just so I can pcap there.

                                  Chattanooga, Tennessee, USA
                                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                  P 1 Reply Last reply Reply Quote 0
                                  • C
                                    Cannondale @pete35
                                    last edited by

                                    @pete35 said in No DHCP on pfSense VLAN with Cisco Smart Switch:

                                    can you post the whole page of the vlan 10 interface configuration on the firewall ?

                                    vlan10 is configured for access mode on ge24
                                    vlan20 is configured for general mode on ge20

                                    Screenshot from 2023-05-24 08-33-22.png

                                    Screenshot from 2023-05-24 08-33-55.png

                                    P 1 Reply Last reply Reply Quote 0
                                    • P
                                      pete35 @Derelict
                                      last edited by

                                      @Derelict
                                      thank you. i already found it. Wireshark shows the vlan tag under each packet. yo need to open a packet to see the vlan 802.1q information.

                                      <a href="https://carsonlam.ca">bintang88</a>
                                      <a href="https://carsonlam.ca">slot88</a>

                                      C 1 Reply Last reply Reply Quote 0
                                      • P
                                        pete35 @Cannondale
                                        last edited by

                                        @Cannondale

                                        Maybe we can do another configuration:

                                        if you have a free port on your Pfsense, just configure it as LAN port with the IP address of your VLAN 10, first clear that VLAN 10 interface including that DHCP Server. Then configure two ports on the switch as access port in vlan 10. Connect one port directly to the second/new LAN port of pfsense, the other one to your workstation. You need to configure the DHCP Server at the new LAN port.

                                        Your workstation should be able to get an IP DHCP address from Pfsense in this VLAN 10.

                                        So no tagging is needed, if that is an issue with that switch.

                                        <a href="https://carsonlam.ca">bintang88</a>
                                        <a href="https://carsonlam.ca">slot88</a>

                                        C 2 Replies Last reply Reply Quote 0
                                        • C
                                          Cannondale @pete35
                                          last edited by

                                          @pete35
                                          wireshark doesn't seem to be noob friendly. I'm in a "packets must be specified" loop!

                                          P 1 Reply Last reply Reply Quote 0
                                          • C
                                            Cannondale @pete35
                                            last edited by

                                            @pete35 said in No DHCP on pfSense VLAN with Cisco Smart Switch:

                                            Maybe we can do another configuration

                                            Working on it now

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.