Netgate to Netgear config - VLANs cannot get DHCP or connect to the internet
-
Greetings! I am a newbie at VLANs and am attempting to set up a more secure network for a non-profit. We have a Netgate 2100 and a Netgear GS752TPP. I want to set up 3 VLANS, each isolated from the others except where rules allow specific traffic to flow between VLANs:
1 Blue Iris and Cameras
2 Wifi Mesh network access points
3 Management for systems that need to be isolated
Config seems fairly simple, but I am struggling to get it to work.
On the Netgate (pfsense), the LAN is created as 192.168.10.1/24. I defined the three VLANs, using IDs 20, 30, and 40 with matching IP ranges and /24 including DHCPs.
On the netgear, VLANs are created and membership is added for each VLAN (ports shown as untagged). The uplink port (48) is shown as a tagged connection. VLAN tags are also assigned to match the Netgate IDs.
When the ports added to the VLAN are removed from the default VLAN (vlan 1), everything breaks. DHCP doesn’t work, and the devices on the VLANs cannot connect to the internet.
I did find one online item that said the uplink port needs to be untagged instead of tagged. I tried changing that but still no go. (https://community.netgear.com/t5/Insight-Managed-Smart-Cloud/DHCP-not-working/m-p/2315038)
Can someone provided specifics for Netgate to Netgear configuration that works for VLANs?
Help will greatly appreciated.
Best,
Leon -
@ccgc said in Netgate to Netgear config - VLANs cannot get DHCP or connect to the internet:
When the ports added to the VLAN are removed from the default VLAN (vlan 1)
can you post your pfsense switch config - it can be a bit tricky for users. Where exactly are you removing vlan 1?
Your netgear sounds corrected with the port on it connected to the pfsense having your tagged vlans, and the ports your going to connect your devices to on the netgear in that vlan untagged.
