VLAN connectivity broken after upgrade to 2.8.1-RELEASE
-
Hi,
I'm currently transitioning from a virtualized pfSense setup to a hardware-based Protectli appliance. The Protectli device came with pfSense 2.7.1, matching my virtual instance's version. I successfully transferred my complex network configuration, including 6 VLANs, along with all settings and firewall rules. After confirming everything functioned correctly, I performed sequential upgrades to version 2.7.2 and then to 2.8.1.
The migration went smoothly initially, but I'm now encountering unusual issues with the VLAN interfaces. When attempting to ping IP addresses on these interfaces, I only receive responses to approximately every fifth or sixth ping request. Interestingly, there's one exception to this pattern - the interface that hosts my "local" IP address responds normally.
Here are my interfaces:
To put more details into the case:
I am sitting on a workstation with IP 192.168.178.108 pinging the interfaces 192.168.178.200 as well as 192.168.35.200.
When I am capturing the packets on the 192.168.35.200 interface on pfSense I see all the requests coming in, but no replys going out:
I am wondering what changed with the update to the latest version as this was all working on the 2.7.1 release.
-
@litronics state policy?
https://docs.netgate.com/pfsense/en/latest/releases/2-8-0.html#generalSure you don’t have asymmetric routing?
-
@SteveITS said in VLAN connectivity broken after upgrade to 2.8.1-RELEASE:
Sure you don’t have asymmetric routing?
You're absolutely right — the current setup does involve asymmetric routing.
The state policy does positively influence the firewall's behavior, though it’s not a decisive factor. I had assumed that if one interface with asymmetric routing functions correctly, the others would follow suit. However, that’s not the case — only one interface appears to affect the behavior.
In any case, this gives me confidence that the firewall will operate as expected once the VM is shut down. Fingers crossed for a smooth transition!