Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VLAN, LAN can ping trunk, cannot ping any devices

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    28 Posts 3 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ?
      A Former User @brianjmc1
      last edited by

      @brianjmc1

      If you do not have VLANs, you have no need for a trunk. You should use access ports on your switch instead.

      1 Reply Last reply Reply Quote 0
      • B
        brianjmc1
        last edited by

        no VLANS, 2x LANS, two different physical networks off of 2x interfaces....

        Wan, LAN, OPT1

        thanks,
        Brian

        ? 1 Reply Last reply Reply Quote 0
        • ?
          A Former User @brianjmc1
          last edited by

          @brianjmc1

          Yeah, that's how I understood that. But, how do you connect pfSense to your network? The issue seems to be with that connection, not pfSense. How's your switch configured?

          1 Reply Last reply Reply Quote 0
          • B
            brianjmc1
            last edited by

            @kjk54 sorry, my misunderstanding!!!!

            I have two physical not connected, dumb LANS - best way i can say it...

            Switch one connects to LAN and connects most devices
            Switch two connects to OPT1 and then connects a security camera system

            Trying to keep all traffic of OPT1 from getting to LAN...

            My PFsense has 4 physical ports WAN, LAN, OPT1, OPT2(not used)

            ? 1 Reply Last reply Reply Quote 0
            • ?
              A Former User @brianjmc1
              last edited by

              @brianjmc1

              2 unmanaged switches?

              1 Reply Last reply Reply Quote 1
              • B
                brianjmc1
                last edited by

                Yes, sir

                ? 1 Reply Last reply Reply Quote 0
                • ?
                  A Former User @brianjmc1
                  last edited by

                  @brianjmc1

                  I've reread your post. Do I understand it correctly, that now your issue is that the OPT1 network can access the LAN network?

                  1 Reply Last reply Reply Quote 0
                  • B
                    brianjmc1
                    last edited by

                    Original pfsense, lan cannot access opt1, opt1 cannot access lan

                    Little while ago setup a brand new pfsense.... after adding opt1 rule for internet and lan access opt1, and opt1 access lan, it works, so issue with original pfsense...

                    Thanks,
                    Brian

                    ? 1 Reply Last reply Reply Quote 0
                    • ?
                      A Former User @brianjmc1
                      last edited by

                      @brianjmc1

                      I'm having difficulties understanding the issue. It would help if you do not compare some setups, but just say what the issue is with the current setup.

                      1 Reply Last reply Reply Quote 0
                      • B
                        brianjmc1
                        last edited by

                        please see message #7 for the issue....
                        thanks!

                        J ? 2 Replies Last reply Reply Quote 0
                        • J
                          Jarhead @brianjmc1
                          last edited by

                          @brianjmc1 Did you do the packet capture?

                          1 Reply Last reply Reply Quote 0
                          • ?
                            A Former User @brianjmc1
                            last edited by

                            @brianjmc1

                            #7?

                            'OK, in my home lab, I built a brand new PFsense 2.6
                            configured WAN, LAN, OPT1

                            Out of the box, LAN has internet , OPT1 does not...
                            added rule for Opt1, now it has internet.

                            No pinging from LAN to OPT1 devices or OPT1 to LAN devices
                            added a rule on LAN to pass traffic to OPT1
                            added a rule on OPT1 to pass traffic to LAN

                            It works and can access either direction......

                            must be something wrong with original PFsense that i have been trying...
                            that's my only conclusion.... extremely frustrating....

                            only other difference is on original not working right, I have openVPN and IPSEC tunnels..

                            I need a drink!!!!!!"

                            Well, saying it is "not working right" doesn't say much. I think I need to say bye. Sorry.

                            1 Reply Last reply Reply Quote 0
                            • B
                              brianjmc1
                              last edited by

                              @brianjmc1 said in VLAN, LAN can ping trunk, cannot ping any devices:

                              Newbie screwed up terminology - sorry about that!!!!
                              No VLAN, I have WAN, LAN and LAN2, on three of the interfaces... Two physical different LANS

                              I want LAN to be able to pass traffic to LAN2. I do not want LAN2 to be able to pass traffic to LAN.

                              again, setting up security cameras on LAN2 and want to keep any traffic out of LAN. I do want to be able to access the cameras, that's why I want LAN to be able to pass traffic to LAN2.

                              Currently LAN can ping LAN2 trunk only(no devices on LAN2).
                              Lan2 can ping LAN only trunk(no devices on LAN).

                              @kjk54 -this is the issue - sorry, understand and thanks for your help!!!!

                              1 Reply Last reply Reply Quote 0
                              • B
                                brianjmc1
                                last edited by

                                @Jarhead @kjk54
                                Thank you BOTH for taking time and helping out....

                                I finally found the issue, used backup\restore to my test duplicate setup....

                                There is a IPSEC VPN tunnel that is grabbing 192.168.0.0/16 traffic. Once I disable the VPN, everything is working... So I need to change LAN2(or OPT1) to a different class C address away from 192.168...

                                Thanks again, really appreciate the help!!!!!!
                                Brian

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.