Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Trying to have two subnets

    Scheduled Pinned Locked Moved Routing and Multi WAN
    16 Posts 2 Posters 3.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      inzel
      last edited by

      I got it! I need to create a GW, vlan, and interface. Then I had to put them together and enable it! All set and working great. Thanks

      1 Reply Last reply Reply Quote 0
      • I
        inzel
        last edited by

        I spoke too soon… I have an interface with a static ip of 192.168.1 with a gateway assigned that is of the same ip. I have a vlan assigned to the interface as well...

        I can get there just fine if I assign a second ip to one of my boxes... but I am unable to reach the other machines without a second ip...

        Any thoughts?

        1 Reply Last reply Reply Quote 0
        • marcellocM
          marcelloc
          last edited by

          If you change your lan to 192.168.5, you also need to change network ip configuration on all machines at the same network/vlan.

          Treinamentos de Elite: http://sys-squad.com

          Help a community developer! ;D

          1 Reply Last reply Reply Quote 0
          • I
            inzel
            last edited by

            I dont have anything set to 192.168.5.x…

            I have one subnet at 192.168.2.x and one at 192.168.1.x

            My virtual machine is using 192.168.1.101. My box that Im connecting with is at 192.168.2.36. If my box uses 192.168.1.36 as well as 192.168.2.36, it works fine. IM trying to figure out a way, without a second router, to use just the 192.168.2.36 ip and still reach the 192.168.1.101

            1 Reply Last reply Reply Quote 0
            • marcellocM
              marcelloc
              last edited by

              inzel,

              Sorry, I swapped info with another post.

              what vlan ids did you applied to pfsense interface?

              You should get something like this to have both vlans working and wan as well

              LAN (lan)        -> bce0_vlan10 -> 192.168.2.1
              WAN (wan)        -> bce1_vlan20 -> x.x.x.x
              opt1 (opt1)        -> bce1_vlan30 -> 192.168.1.1

              Treinamentos de Elite: http://sys-squad.com

              Help a community developer! ;D

              1 Reply Last reply Reply Quote 0
              • I
                inzel
                last edited by

                I created two new interfaces that are tagged to a vlan

                WAN         rl0 (mac)
                LAN         bge0 (mac)  –-> 192.168.2.1
                External_LTM bge0 vlan421 --> 192.168.1.1
                Internal_LTM bge0 vlan420

                Im not worried about the internal interface at the moment... that is going to be behind a load balancer. I just need to hit the External_LTM

                1 Reply Last reply Reply Quote 0
                • marcellocM
                  marcelloc
                  last edited by

                  The lan interface attached to bge0 must be tagged to.

                  The default switch vlan on most switches has id=1

                  configure it to
                  WAN              rl0 (mac)
                  LAN              bge0_vlan1 (mac)  –-> 192.168.2.1
                  External_LTM    bge0_vlan421 --> 192.168.1.1
                  Internal_LTM    bge0_vlan420

                  and see if it works

                  Treinamentos de Elite: http://sys-squad.com

                  Help a community developer! ;D

                  1 Reply Last reply Reply Quote 0
                  • I
                    inzel
                    last edited by

                    HHmmm… how do I do that? As soon as I tag it, I lose my lan connections. Is there something special to do inside pfsense?

                    1 Reply Last reply Reply Quote 0
                    • marcellocM
                      marcelloc
                      last edited by

                      Do it from pfsense console but you may have to setup all(3) vlans again.

                      Treinamentos de Elite: http://sys-squad.com

                      Help a community developer! ;D

                      1 Reply Last reply Reply Quote 0
                      • I
                        inzel
                        last edited by

                        Ok…. I want to clarify what I mean when I say I lose lan connections... I mean that I am unable to rdp into a box from outside when I do that... Ill try it from the console and recreate the vlans. Should I create the LAN vlan first?

                        1 Reply Last reply Reply Quote 0
                        • I
                          inzel
                          last edited by

                          I am unable to connect via console… since I dont have a serial port or a serial cable. I deleted the vlans and recreated them, starting with vlan 1 and assigning it to the LAN interface. No luck. I ended up creating all of them again and Im back to where I was before

                          1 Reply Last reply Reply Quote 0
                          • marcellocM
                            marcelloc
                            last edited by

                            From outside, you will need to Allow access from external ip to pfsense gui at wan address to configure lan interface.

                            But if have access to vlan1 untagged, you will need first to edit switch port pfsense lan is conected to and tag default vlan or set it as trunk.
                            Also check the id number for default vlan.

                            Do it carefully to do not loose access.

                            In short:
                            Access gui from wan
                            Edit switch config to tag all vlans you need
                            assign lan to It's vlan id.

                            Treinamentos de Elite: http://sys-squad.com

                            Help a community developer! ;D

                            1 Reply Last reply Reply Quote 0
                            • I
                              inzel
                              last edited by

                              Thank you for taking the time to help me out with this. It seems that I need to do some reading because I dont know where to change the switch config in the gui. I do have access to the gui from wan tho. I will look in to that further and try to educate myself more before I ask any further questions.

                              Thank you again for everything so far

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.