Alix2d3 with 3 LANs - I need more than 3!
-
Well, all are explained very well, however I have issues with VLAN setup, and I need some help to accomplish this.
Here is my setup and the procedures I have followed so far, with no luck with the VLAN setup:
Setup
We have a Cisco SLM2048 switch as the main company switch, and I need to use some port of the switch to create the appropriate VLANs for extending PFSense.Procedures
1. Created vlans on pfsense interface (3 vlans (VLAN10, VLAN20, VLAN30) -1 interface port) and in switch (3 vlans in 3 different ports and 1 port for all).
P.S. the SLM2048 does not have a "trunk port". I have used a port set to "all" for this. All the switch ports have in "Port Settings" -> Acceptable frame type -> All or Tagged. All the ports are set to All. I have changed the VLAN ports to "Tagged", however I havent changed the PVID setting (left it to 1). Each VLAN contains its assigned port and the "trunk" port (VLAN10 = port 29 and port 32, VLAN20=port 30 and port 32, VLAN30=port 30 and port 32).2. Connect each router (in bridge mode) to the relevant vlan port of the switch.
3. Connect PFSense to the "trunk" port
4. Created 3 OPT interfaces in pfsense and assign them in the relevant vlan (VLANOPT1, VLANOPT2, VLANOPT3)
5. Enabled opt interfaces as PPPoE and assign the credentials for ISP.
Now, in Interfaces assignments I have the VLANOPT1 configured as "PPPoE4 (vr2_vlan10) - username@isp.gr
However the VLANOPT1 interface shows with the red X on the dashboard. If I change the assignment of the interface as vlan10 the port shows as connected (green).
Sorry for the long post.
Thanks in advance
Kostas
-
can you provide screenshots from that switch if there is something to fix
-
I don't have any experience with the switch you are using but I suspect the switch ports connecting to the modems should be configured as "Untagged" (that is, the switch should strip VLAN tags on output to the modems and add VLAN tags on input from the modems).
If I change the assignment of the interface as vlan10 the port shows as connected (green).
Please give more detail of what you have changed: VLANOPT1 physical interface changed from vr0_vlan10 to what?
-
Thank you all for your answers.
Here are the screenshots of the VLAN relevant areas of the switch.The ports used for VLANs is VLAN10=port 29, VLAN20=port 30, VLAN30=port 31, "trunk" port=port 32.
Each VLAN contains its port and port 32.
Best regards
Kostas
-
try client access ports with untagged, then it should work
-
You mean the ports connecting the modems?
Regards
Kostas
-
yes and computers
-
Unfortunately, it is not working. I have set the ports to untagged. When I assign the interface as PPPoE, it shows down. When it assigned as VLAN, it shows connected.
Please check images.
Best regards
-
trunk port has to be tagged
all the ports what is connected to computers and other "end devices" should not use vlans unless those are introduced to these machines
-
Thanks.
So, trunk port must be tagged for all VLANs and VLAN port must be untagged.
What about interface assignment, must be the PPPoE setting?
Thanks for the help so far.
Kostas
-
what about it(PPPoE)?
-
Shall I use PPPoE for interface assignment?
Thanks
Kostas
-
it depends about your modem settings, is it in bridging mode or routing mode?
if bridging, then you should use PPPoE, if modem had that one also(while routing with modem) -
It is bridging, and it works OK if I connect it to the normal (not OPT) WAN port.
Regards
Kostas
-
are you having ip-address in vr2 also
this question is because, if you have vlans on interface vr2 and vr2 is physical interface, that is undesired situation because it may break something.you are saing that if modem is connected to wan-if straight it works
but if you connect it to vlan-if it doesn't work
and your settings are: internet–modem--(vlan10 untagged)switch(vlan10 tagged)--pfsense -
It worked. I have followed the guides from the Definitive guide book.
The general idea is:
Trunk port=tagged for VLANs
VLAN ports=untagged AND PVID set to each port for its respective VLAN.interface assignment in PFSense is to PPPoE. Worked as a gateway fine.
are you having ip-address in vr2 also
this question is because, if you have vlans on interface vr2 and vr2 is physical interface, that is undesired situation because it may break something.you are saing that if modem is connected to wan-if straight it works
but if you connect it to vlan-if it doesn't work
and your settings are: internet–modem--(vlan10 untagged)switch(vlan10 tagged)--pfsenseI do not have IP addresses in vr2. I have VLANs on interface vr2 and yes, it is a physical interface.
How can I check if I have ip address?Regarding the modem, I had this modem connected to the first WAN (no VLAN) port as a bridge for PPPoE and worked OK. There must be the changes above that prevented it from working in PPPoE mode in the VLAN port.
I will post images for others to get help (if any) soon.
I will see how it works.
Thanks for the help so far!
Regards
Kostas
-
went bit over, is this solved or not?
you can goto interfaces:vr2 and check if that interface is static and set ip-address to it
-
I think we can consider it solved :)
If any problem occurs, I will post.
I will post the images soon as well.
Best regards and thank you all for your patience.
Kostas