Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No DHCP on pfSense VLAN with Cisco Smart Switch

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    147 Posts 7 Posters 99.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      Cannondale @johnpoz
      last edited by Cannondale

      @johnpoz

      Post the output of your ifconfig on pfsense

      Found it.

      igb0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
      	description: WAN
      	options=e100bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWFILTER,RXCSUM_IPV6,TXCSUM_IPV6>
      	ether 00:1b:21:b7:50:30
      	inet6 fe80::21b:21ff:feb7:5030%igb0 prefixlen 64 scopeid 0x1
      	inet 71.46.127.170 netmask 0xfffff000 broadcast 255.255.255.255
      	media: Ethernet autoselect (1000baseT <full-duplex>)
      	status: active
      	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
      igb1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
      	description: Lan1
      	options=e100bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWFILTER,RXCSUM_IPV6,TXCSUM_IPV6>
      	ether 00:1b:21:b7:50:31
      	inet6 fe80::21b:21ff:feb7:5031%igb1 prefixlen 64 scopeid 0x2
      	inet 192.168.0.201 netmask 0xffffff00 broadcast 192.168.0.255
      	media: Ethernet autoselect (1000baseT <full-duplex>)
      	status: active
      	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
      igb2: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
      	description: WiFiUAP
      	options=e100bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWFILTER,RXCSUM_IPV6,TXCSUM_IPV6>
      	ether 00:1b:21:b7:50:34
      	inet6 fe80::21b:21ff:feb7:5034%igb2 prefixlen 64 scopeid 0x3
      	media: Ethernet autoselect (1000baseT <full-duplex>)
      	status: active
      	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
      
      igb2.10: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
      	description: VLAN10
      	options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
      	ether 00:1b:21:b7:50:34
      	inet6 fe80::21b:21ff:feb7:5034%igb2.10 prefixlen 64 scopeid 0xf
      	inet 192.168.10.1 netmask 0xffffff00 broadcast 192.168.10.255
      	groups: vlan
      	vlan: 10 vlanpcp: 0 parent interface: igb2
      	media: Ethernet autoselect (1000baseT <full-duplex>)
      	status: active
      	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
      igb1.20: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
      	description: VLAN20
      	options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
      	ether 00:1b:21:b7:50:31
      	inet6 fe80::21b:21ff:feb7:5031%igb1.20 prefixlen 64 scopeid 0x10
      	inet 192.168.20.1 netmask 0xffffff00 broadcast 192.168.20.255
      	groups: vlan
      	vlan: 20 vlanpcp: 0 parent interface: igb1
      	media: Ethernet autoselect (1000baseT <full-duplex>)
      	status: active
      	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
      
      
      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @Cannondale
        last edited by

        @Cannondale your not testing this with AP are you.. Your putting actual devices on the ports that are in access mode.. I see a description of wifiUAP..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        C 1 Reply Last reply Reply Quote 0
        • C
          Cannondale @johnpoz
          last edited by

          @johnpoz

          your not testing this with AP are you.

          No. I'm plugging in a Linux workstation to vlan20.

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @Cannondale
            last edited by johnpoz

            @Cannondale so this lan1, you don't have it in a bridge or something do you?

            This makes zero sense really.. There should be nothing in the switch that should care if there a native untagged network on the port..

            the only thing that jumps out at me as different from your options is mine has NOMAP - but not exactly sure what that option is, can not seem to find any info on it in quick google.

            edit:
            Why do you not have?

            vlan: 6 vlanproto: 802.1q vlanpcp: 0 parent interface: igb2

            See where mine shows 802.1q??

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            C 1 Reply Last reply Reply Quote 0
            • C
              Cannondale @johnpoz
              last edited by

              @johnpoz

              so this lan1, you don't have it in a bridge or something do you?

              No bridge unless it is a factory default. I reset the switch before configuring anything.

              I did notice differences in the following ifconfig output lines:

              vlan: 20 vlanpcp: 0 parent interface: igb1
              vlan: 4 vlanproto: 802.1q vlanpcp: 0 parent interface: igb2
              
              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @Cannondale
                last edited by

                @Cannondale I just sent a message to Steve.. @stephenw10 maybe he can see something I am missing..

                But it sure shouldn't matter if pfsense is using a native untagged on the interface along with tags..

                What version of pfsense are you running - what nic specific do you have? I mean its igb should be the same..

                I have been running vlans on pfsense since really pfsense came out, have never seen a issue with them on any hardware or any switches..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                M C 2 Replies Last reply Reply Quote 0
                • M
                  mvikman @johnpoz
                  last edited by

                  @johnpoz
                  "vlan: 20 vlanproto: 802.1q vlanpcp: 0 parent interface: ixl0"
                  I also have that vlanproto in ifconfig output, so I'd say that there has to be something we are missing in Cannondale's pfSense config.

                  pfSense Plus 24.11-RELEASE (amd64)
                  Dell Optiplex 7040 SFF
                  Core i5-6500, 8GB RAM, 2x 240GB SSD (ZFS Mirror)
                  HPE 561T (X540-AT2), 2-port 10Gb RJ45
                  HPE 562SFP+ (X710-DA2), 2-port 10Gb SFP+

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @mvikman
                    last edited by

                    @mvikman but what? And that would matter if there was a native vlan or not.. The native is what wouldn't use any tagging..

                    @stephenw10 answered me back - so hoping he is reading over this long thread now and will chime in and make us all feel stupid ;)

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • C
                      Cannondale @johnpoz
                      last edited by

                      @johnpoz

                      I just sent a message to Steve.. @stephenw10 maybe he can see something I am missing

                      Great!

                      What version of pfsense are you running

                      v2.6

                      @johnpoz said in No DHCP on pfSense VLAN with Cisco Smart Switch:

                      what nic specific do you have

                      Currently, the NIC in the pfSense box is a Dell / Intel HM9JY.
                      I have also tested with NIC Dell / Intel YT674.
                      The server board is a Supermicro X10SLH-F, which also has two Intel NICs.
                      I have tested with the second onboad NIC with the same results on the SG250.

                      1 Reply Last reply Reply Quote 0
                      • M
                        mvikman
                        last edited by

                        Looks like both HM9JY and YT674 are Intel Pro 1000VT Quad Port Nics that use Intel 82575GB chip.
                        Supermicro board has Intel I210-AT chip.

                        pfSense Plus 24.11-RELEASE (amd64)
                        Dell Optiplex 7040 SFF
                        Core i5-6500, 8GB RAM, 2x 240GB SSD (ZFS Mirror)
                        HPE 561T (X540-AT2), 2-port 10Gb RJ45
                        HPE 562SFP+ (X710-DA2), 2-port 10Gb SFP+

                        C 1 Reply Last reply Reply Quote 0
                        • C
                          Cannondale @mvikman
                          last edited by

                          @mvikman

                          Looks like both HM9JY and YT674 are Intel Pro 1000VT Quad Port Nics that use Intel 82575GB chip.

                          If I remember correctly, the YT674 is a VT card with the 82575B controller while the HM9JY is an ET card and has the 82576 controller, which has slightly better capabilities.

                          M 1 Reply Last reply Reply Quote 0
                          • M
                            mvikman @Cannondale
                            last edited by

                            @Cannondale Yeah, you're right the other one is an ET card. It adds support for SR-IOV and IPSec offload over VT card.

                            pfSense Plus 24.11-RELEASE (amd64)
                            Dell Optiplex 7040 SFF
                            Core i5-6500, 8GB RAM, 2x 240GB SSD (ZFS Mirror)
                            HPE 561T (X540-AT2), 2-port 10Gb RJ45
                            HPE 562SFP+ (X710-DA2), 2-port 10Gb SFP+

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.