Two VLANs set up alike, one does not get Internet
-
I would appreciate anyone who could go through my configuration with me to help me figure out, where I am having a problem.
I have two VLANs (ID 39 for guests and ID 41 for employees’ personal devices). Both groups of users connect through Wi-Fi. For some reason I don’t comprehend, the Wi-Fi network with ID 41 works, but the one with ID 39 does not. When connected to VLAN ID 39, the host does not get assigned an IP through DHCP.
The Wi-Fi access points are configured through a Ubiquiti Cloud Key Gen 2 Plus. The WiFi pane looks like this:
The Networks pane looks like this:
Traffic coming from devices connecting to the APs on SSID “#####Guests” and “############ Personal Devices” are tagged with VLAN ID 39 and 41, respectively.
The network switch has tagged traffic on Ports 1, 23, 40 and 48 with those VLAN IDs. The APs are plugged into Port 23 and 48, and Port 1 is connected to LAN Port 2 of a Netgate 2100.
On the Netgate the interface assignments are
The VLAN tags of the interfaces are configured like this:
The port VLAN tagging is identical between the two, as well:
This is the configuration of the two interfaces:
DHCP for the two interfaces is very similar, as well:
Users have to go through a captive portal to be connected. Both captive portals at this point are using the same HTML code.
The other captive portal tabs are configured exactly the same between the two of them.
The firewall rules are the same, too:
Both sets of rules share these aliases:
I am obviously missing something. I am completely stumped.
-
@DominikHoffmann said in Two VLANs set up alike, one does not get Internet:
When connected to VLAN ID 39, the host does not get assigned an IP through DHCP.
So does it work, if you state a static IP and gateway?
If yes, sniff the DHCP traffic, while connecting a device to the wifi.
Did you try different devices?
-
I'm getting an odd situation almost exactly the same. Setup two VLANs and they work perfectly. Created a third with the same setting profiles and no internet on it.
The client does get an IP on the third VLAN and I can browse the gateway. I just can't get traffic through it. Logs aren't showing anything being blocked. It will not ping an IP beyond the gateway. Haven't pulled out Wireshark yet to see if this is a rejection or no response yet.
-
@RodSlinger
Has pfSense created an outbound NAT rule for the new subnet, in case it's in automatic or hybrid mode? If it's in manual you have to add the rule by yourself of course. -
@RodSlinger said in Two VLANs set up alike, one does not get Internet:
I'm getting an odd situation almost exactly the same. Setup two VLANs and they work perfectly. Created a third with the same setting profiles and no internet on it.
The client does get an IP on the third VLAN and I can browse the gateway. I just can't get traffic through it. Logs aren't showing anything being blocked. It will not ping an IP beyond the gateway. Haven't pulled out Wireshark yet to see if this is a rejection or no response yet.
Disregard my issue. While similar, not really related. A reboot of pfSense fixed me. Just not sure what the hangup was. Created first VLAN and it was fine. Second one wouldn't pass traffic. After reboot the second one came right up and worked normally.