Netgate 8200 MAX VLAN & Switch Configuration Issue

smsigroupit

@patient0 said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

@smsigroupit said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

I also tested by changing the interface to igc1 for both LAN and VLAN, but the problem remains.

Have you got another switch you can try?

I will test the setup using another switch and provide an update afterward.

Thank you!

smsigroupit

@patient0

I already tested the setup using another switch, but the issue still persists.

patient0

@smsigroupit on another note: you have setup all the necessary firewall rules (one allow all rules at least) on the VLAN interfaces, I assume?

smsigroupit

@patient0

you have setup all the necessary firewall rules (one allow all rules at least) on the VLAN interfaces, I assume?

Yes

When I disable Suricata, the VLAN works correctly. Which Suricata configuration could be interfering with VLAN functionality?

smsigroupit

Suricata Config;

patient0

@smsigroupit said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

When I disable Suricata, the VLAN works correctly. Which Suricata configuration could be interfering with VLAN functionality?

I never used Suricata, someone else has to chime in. A search in the forum for 'suricata vlan' could be a start.
For example Important Info: Inline IPS Mode with Suricata and VLANs, post 4 talks about having to disable hardware features on ix0 to make it work with VLANs.

smsigroupit

@patient0

Thank you!

patient0

@smsigroupit although I'm not using it myself, it be interesting to see if ifconfig ix1 -vlanhwcsum -vlanhwfilter -vlanhwtag does work for you as mentioned the thread.

smsigroupit

@patient0

Yes, I tested it and it is working.

ifconfig ix1 -vlanhwcsum -vlanhwfilter -vlanhwtag

I also added these cron jobs:

Job 1 - Set VLAN flags on ix1
Minute: @reboot
User: root
Command:
/bin/sh -c 'sleep 25 && /sbin/ifconfig ix1 -vlanhwcsum -vlanhwfilter -vlanhwtag'

Job 2 - Restart Suricata after VLAN flags
Minute: @reboot
User: root
Command:
/bin/sh -c 'sleep 45 && /usr/sbin/service suricata restart'

Thank you.

patient0

@smsigroupit said in Netgate 8200 MAX VLAN & Switch Configuration Issue:

Yes, I tested it and it is working.

Excellent news.

I also added these cron jobs:

If you like to use something that survives a reinstall, have a look at the 'Shellcmd' package (documentation: Executing Commands at Boot).

smsigroupit

@patient0

Got it, will explore 'Shellcmd' package

Thank you!