Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Netgate 8200 MAX VLAN & Switch Configuration Issue

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    25 Posts 2 Posters 1.8k Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S Offline
      smsigroupit @patient0
      last edited by

      @patient0

      I also tested by changing the interface to igc1 for both LAN and VLAN, but the problem remains.

      Thank you!

      patient0P 1 Reply Last reply Reply Quote 0
      • patient0P Online
        patient0 @smsigroupit
        last edited by

        @smsigroupit said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

        I also tested by changing the interface to igc1 for both LAN and VLAN, but the problem remains.

        Have you got another switch you can try?

        S 2 Replies Last reply Reply Quote 0
        • S Offline
          smsigroupit @patient0
          last edited by

          @patient0 said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

          @smsigroupit said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

          I also tested by changing the interface to igc1 for both LAN and VLAN, but the problem remains.

          Have you got another switch you can try?

          I will test the setup using another switch and provide an update afterward.

          Thank you!

          1 Reply Last reply Reply Quote 0
          • S Offline
            smsigroupit @patient0
            last edited by

            @patient0

            I already tested the setup using another switch, but the issue still persists.

            patient0P 1 Reply Last reply Reply Quote 0
            • patient0P Online
              patient0 @smsigroupit
              last edited by patient0

              @smsigroupit on another note: you have setup all the necessary firewall rules (one allow all rules at least) on the VLAN interfaces, I assume?

              S 1 Reply Last reply Reply Quote 0
              • S Offline
                smsigroupit @patient0
                last edited by

                @patient0

                you have setup all the necessary firewall rules (one allow all rules at least) on the VLAN interfaces, I assume?

                • Yes

                When I disable Suricata, the VLAN works correctly. Which Suricata configuration could be interfering with VLAN functionality?

                S patient0P 2 Replies Last reply Reply Quote 0
                • S Offline
                  smsigroupit @smsigroupit
                  last edited by

                  Suricata Config;

                  71cf6e27-952a-4f9d-a78f-6a3bdcc023e2-unnamed.png

                  52adee39-0b3e-4c70-abe7-33242f48a798-unnamed-1.png

                  1 Reply Last reply Reply Quote 0
                  • patient0P Online
                    patient0 @smsigroupit
                    last edited by patient0

                    @smsigroupit said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

                    When I disable Suricata, the VLAN works correctly. Which Suricata configuration could be interfering with VLAN functionality?

                    I never used Suricata, someone else has to chime in. A search in the forum for 'suricata vlan' could be a start.
                    For example Important Info: Inline IPS Mode with Suricata and VLANs, post 4 talks about having to disable hardware features on ix0 to make it work with VLANs.

                    S 1 Reply Last reply Reply Quote 0
                    • S Offline
                      smsigroupit @patient0
                      last edited by

                      @patient0

                      Thank you!

                      patient0P 1 Reply Last reply Reply Quote 0
                      • patient0P Online
                        patient0 @smsigroupit
                        last edited by patient0

                        @smsigroupit although I'm not using it myself, it be interesting to see if ifconfig ix1 -vlanhwcsum -vlanhwfilter -vlanhwtag does work for you as mentioned the thread.

                        S 1 Reply Last reply Reply Quote 0
                        • S Offline
                          smsigroupit @patient0
                          last edited by

                          @patient0

                          Yes, I tested it and it is working.

                          ifconfig ix1 -vlanhwcsum -vlanhwfilter -vlanhwtag

                          I also added these cron jobs:

                          Job 1 - Set VLAN flags on ix1
                          Minute: @reboot
                          User: root
                          Command:
                          /bin/sh -c 'sleep 25 && /sbin/ifconfig ix1 -vlanhwcsum -vlanhwfilter -vlanhwtag'

                          Job 2 - Restart Suricata after VLAN flags
                          Minute: @reboot
                          User: root
                          Command:
                          /bin/sh -c 'sleep 45 && /usr/sbin/service suricata restart'

                          Thank you.

                          patient0P 1 Reply Last reply Reply Quote 0
                          • patient0P Online
                            patient0 @smsigroupit
                            last edited by

                            @smsigroupit said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

                            Yes, I tested it and it is working.

                            Excellent news.

                            I also added these cron jobs:

                            If you like to use something that survives a reinstall, have a look at the 'Shellcmd' package (documentation: Executing Commands at Boot).

                            S 1 Reply Last reply Reply Quote 0
                            • S Offline
                              smsigroupit @patient0
                              last edited by

                              @patient0

                              Got it, will explore 'Shellcmd' package

                              Thank you!

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.