Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Netgate 8200 MAX VLAN & Switch Configuration Issue

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    25 Posts 2 Posters 2.5k Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      smsigroupit @patient0
      last edited by

      @patient0

      i already open a ticket with Netgate.

      i will try to revert 24.11.

      Thank you!

      patient0P 1 Reply Last reply Reply Quote 0
      • patient0P Offline
        patient0 @smsigroupit
        last edited by

        @smsigroupit just a remark: I'm still baffled that on the switch it allows not tagged VLAN 1 traffic on ports that have PVID set to 27. That really should not happen.

        S 2 Replies Last reply Reply Quote 0
        • S Offline
          smsigroupit @patient0
          last edited by

          @patient0

          Update:
          I already tried reverting to version 24.11, but the issue still persists.

          Thank you.

          1 Reply Last reply Reply Quote 0
          • S Offline
            smsigroupit @patient0
            last edited by

            @patient0

            I also tested by changing the interface to igc1 for both LAN and VLAN, but the problem remains.

            Thank you!

            patient0P 1 Reply Last reply Reply Quote 0
            • patient0P Offline
              patient0 @smsigroupit
              last edited by

              @smsigroupit said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

              I also tested by changing the interface to igc1 for both LAN and VLAN, but the problem remains.

              Have you got another switch you can try?

              S 2 Replies Last reply Reply Quote 0
              • S Offline
                smsigroupit @patient0
                last edited by

                @patient0 said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

                @smsigroupit said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

                I also tested by changing the interface to igc1 for both LAN and VLAN, but the problem remains.

                Have you got another switch you can try?

                I will test the setup using another switch and provide an update afterward.

                Thank you!

                1 Reply Last reply Reply Quote 0
                • S Offline
                  smsigroupit @patient0
                  last edited by

                  @patient0

                  I already tested the setup using another switch, but the issue still persists.

                  patient0P 1 Reply Last reply Reply Quote 0
                  • patient0P Offline
                    patient0 @smsigroupit
                    last edited by patient0

                    @smsigroupit on another note: you have setup all the necessary firewall rules (one allow all rules at least) on the VLAN interfaces, I assume?

                    S 1 Reply Last reply Reply Quote 0
                    • S Offline
                      smsigroupit @patient0
                      last edited by

                      @patient0

                      you have setup all the necessary firewall rules (one allow all rules at least) on the VLAN interfaces, I assume?

                      • Yes

                      When I disable Suricata, the VLAN works correctly. Which Suricata configuration could be interfering with VLAN functionality?

                      S patient0P 2 Replies Last reply Reply Quote 0
                      • S Offline
                        smsigroupit @smsigroupit
                        last edited by

                        Suricata Config;

                        71cf6e27-952a-4f9d-a78f-6a3bdcc023e2-unnamed.png

                        52adee39-0b3e-4c70-abe7-33242f48a798-unnamed-1.png

                        1 Reply Last reply Reply Quote 0
                        • patient0P Offline
                          patient0 @smsigroupit
                          last edited by patient0

                          @smsigroupit said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

                          When I disable Suricata, the VLAN works correctly. Which Suricata configuration could be interfering with VLAN functionality?

                          I never used Suricata, someone else has to chime in. A search in the forum for 'suricata vlan' could be a start.
                          For example Important Info: Inline IPS Mode with Suricata and VLANs, post 4 talks about having to disable hardware features on ix0 to make it work with VLANs.

                          S 1 Reply Last reply Reply Quote 0
                          • S Offline
                            smsigroupit @patient0
                            last edited by

                            @patient0

                            Thank you!

                            patient0P 1 Reply Last reply Reply Quote 0
                            • patient0P Offline
                              patient0 @smsigroupit
                              last edited by patient0

                              @smsigroupit although I'm not using it myself, it be interesting to see if ifconfig ix1 -vlanhwcsum -vlanhwfilter -vlanhwtag does work for you as mentioned the thread.

                              S 1 Reply Last reply Reply Quote 0
                              • S Offline
                                smsigroupit @patient0
                                last edited by

                                @patient0

                                Yes, I tested it and it is working.

                                ifconfig ix1 -vlanhwcsum -vlanhwfilter -vlanhwtag

                                I also added these cron jobs:

                                Job 1 - Set VLAN flags on ix1
                                Minute: @reboot
                                User: root
                                Command:
                                /bin/sh -c 'sleep 25 && /sbin/ifconfig ix1 -vlanhwcsum -vlanhwfilter -vlanhwtag'

                                Job 2 - Restart Suricata after VLAN flags
                                Minute: @reboot
                                User: root
                                Command:
                                /bin/sh -c 'sleep 45 && /usr/sbin/service suricata restart'

                                Thank you.

                                patient0P 1 Reply Last reply Reply Quote 0
                                • patient0P Offline
                                  patient0 @smsigroupit
                                  last edited by

                                  @smsigroupit said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

                                  Yes, I tested it and it is working.

                                  Excellent news.

                                  I also added these cron jobs:

                                  If you like to use something that survives a reinstall, have a look at the 'Shellcmd' package (documentation: Executing Commands at Boot).

                                  S 1 Reply Last reply Reply Quote 0
                                  • S Offline
                                    smsigroupit @patient0
                                    last edited by

                                    @patient0

                                    Got it, will explore 'Shellcmd' package

                                    Thank you!

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.