Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VLAN, LAN can ping trunk, cannot ping any devices

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    28 Posts 3 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      brianjmc1
      last edited by

      @kjk54 sorry, my misunderstanding!!!!

      I have two physical not connected, dumb LANS - best way i can say it...

      Switch one connects to LAN and connects most devices
      Switch two connects to OPT1 and then connects a security camera system

      Trying to keep all traffic of OPT1 from getting to LAN...

      My PFsense has 4 physical ports WAN, LAN, OPT1, OPT2(not used)

      ? 1 Reply Last reply Reply Quote 0
      • ?
        A Former User @brianjmc1
        last edited by

        @brianjmc1

        2 unmanaged switches?

        1 Reply Last reply Reply Quote 1
        • B
          brianjmc1
          last edited by

          Yes, sir

          ? 1 Reply Last reply Reply Quote 0
          • ?
            A Former User @brianjmc1
            last edited by

            @brianjmc1

            I've reread your post. Do I understand it correctly, that now your issue is that the OPT1 network can access the LAN network?

            1 Reply Last reply Reply Quote 0
            • B
              brianjmc1
              last edited by

              Original pfsense, lan cannot access opt1, opt1 cannot access lan

              Little while ago setup a brand new pfsense.... after adding opt1 rule for internet and lan access opt1, and opt1 access lan, it works, so issue with original pfsense...

              Thanks,
              Brian

              ? 1 Reply Last reply Reply Quote 0
              • ?
                A Former User @brianjmc1
                last edited by

                @brianjmc1

                I'm having difficulties understanding the issue. It would help if you do not compare some setups, but just say what the issue is with the current setup.

                1 Reply Last reply Reply Quote 0
                • B
                  brianjmc1
                  last edited by

                  please see message #7 for the issue....
                  thanks!

                  J ? 2 Replies Last reply Reply Quote 0
                  • J
                    Jarhead @brianjmc1
                    last edited by

                    @brianjmc1 Did you do the packet capture?

                    1 Reply Last reply Reply Quote 0
                    • ?
                      A Former User @brianjmc1
                      last edited by

                      @brianjmc1

                      #7?

                      'OK, in my home lab, I built a brand new PFsense 2.6
                      configured WAN, LAN, OPT1

                      Out of the box, LAN has internet , OPT1 does not...
                      added rule for Opt1, now it has internet.

                      No pinging from LAN to OPT1 devices or OPT1 to LAN devices
                      added a rule on LAN to pass traffic to OPT1
                      added a rule on OPT1 to pass traffic to LAN

                      It works and can access either direction......

                      must be something wrong with original PFsense that i have been trying...
                      that's my only conclusion.... extremely frustrating....

                      only other difference is on original not working right, I have openVPN and IPSEC tunnels..

                      I need a drink!!!!!!"

                      Well, saying it is "not working right" doesn't say much. I think I need to say bye. Sorry.

                      1 Reply Last reply Reply Quote 0
                      • B
                        brianjmc1
                        last edited by

                        @brianjmc1 said in VLAN, LAN can ping trunk, cannot ping any devices:

                        Newbie screwed up terminology - sorry about that!!!!
                        No VLAN, I have WAN, LAN and LAN2, on three of the interfaces... Two physical different LANS

                        I want LAN to be able to pass traffic to LAN2. I do not want LAN2 to be able to pass traffic to LAN.

                        again, setting up security cameras on LAN2 and want to keep any traffic out of LAN. I do want to be able to access the cameras, that's why I want LAN to be able to pass traffic to LAN2.

                        Currently LAN can ping LAN2 trunk only(no devices on LAN2).
                        Lan2 can ping LAN only trunk(no devices on LAN).

                        @kjk54 -this is the issue - sorry, understand and thanks for your help!!!!

                        1 Reply Last reply Reply Quote 0
                        • B
                          brianjmc1
                          last edited by

                          @Jarhead @kjk54
                          Thank you BOTH for taking time and helping out....

                          I finally found the issue, used backup\restore to my test duplicate setup....

                          There is a IPSEC VPN tunnel that is grabbing 192.168.0.0/16 traffic. Once I disable the VPN, everything is working... So I need to change LAN2(or OPT1) to a different class C address away from 192.168...

                          Thanks again, really appreciate the help!!!!!!
                          Brian

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.