Internet Not Working On VLANs
-
Look at the default rule on LAN. Duplicate it on one of the VLANs. Are you sure your switch config is correct? Tagged to pfSense, untagged to your station nodes?
-
im going to post some screen shots as soon as it loads.
-
alright, here they are.
untitled and untitled 1 are LAN firewall default settings
untitled 2 is what i changed VLAN2 firewall settings to, i put an arrow next to what i changed
i saw in an earlier reply about changing everything to any any any, just like LAN is, problem with that, is LAN wasnt default any any any
which is my confusion.
should i change the lan to any any any and then do my vlans like that, or what should i do?
-
are you sure you switch is configured correctly?
it looks like a switch issue to me if you have interfaces assigned & allow rules on them ….-
all vlans are tagged on the trunkport 'towards" the pfsense?
-
on the client ports you have the appropriate vlan untagged and have also set the correct PVID ?
-
-
Exactly. There's really nothing else to do in pfSense. With that rule you should be able to get DHCP and ping the interface address. With automatic outbound NAT you should be avle to get at the internet.
What kind of switch are you using? It sounds like it's not configured correctly.
-
alright, well ill test this out, see what happens.
-
alright guys, new question.
hos should i go about setting up the floating rules for my VLANs?
like i know where to go to do it, im just not 100% sure on if id set it up right. -
Was the switch config wrong?
What do you want your floating rules to do?
-
the switch ended up working great, turns out it was that i the rules werent set up right for the VLAN
but my boss deleted all but 2 of the VLANs i set up, so now i gotta reset those up.
I was wondering if how to set up the floating rule for any any any?
i really dont want to set up the same rule for 200 VLANs -
don't use floating rules for that …. create an interface group for this purpose.
-
so the ones that have the rule already set,
should i exclude them from the group
or delete the rules from those and add them to the group,
or does it not really matter? -
or would the best way be to add new rule based on this rule and just change the interface each time, thus creating the same rule for a new VLAN?
-
It really depends on what you want your rules to do, which is what I asked before. What are you trying to accomplish? What do you want each vlan to have/not have access to?
-
thats a very good question, my boss only gives me little pieces as to what i need to do and thats part of the reason im on here, because ive been been working on this for over a week and im over it but, right now my boss wants to get on the internet with each one. i guess that answers my question though, thanks. im just going to add a new rule based on this rule and change the interface.
-
Alright, everyone. Thank you for your help. Got that one up and working perfectly.
But now i have an issue on a new machine, here's a link to that threadhttps://forum.pfsense.org/index.php?topic=86329.0
