Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SG-1000 and Apple Airport Extreme

    Scheduled Pinned Locked Moved General pfSense Questions
    15 Posts 4 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N Offline
      netnewb
      last edited by

      I just bought an SG-1000 to place in front of an Apple Airport Extreme (less than 2 years old). I've placed the Airport Extreme in Bridge mode and created an interface with VLAN 1003 on pfsense with DHCP. There's nothing between Airport and Pfsense.

      Problem is, the guest network doesn't work. I can connect to Wifi, but I don't get an IP from DHCP even if I set a static IP, I can't access anything (firewall rule pass all). Furthermore, under status -> interfaces, the interface shows 0 packets for everything.

      Am I missing something? I see the SG-1000 has an extra button under interfaces - Switches. I don't recall seeing this one on my SG-2220.

      Edit: Airport Extreme is 6th generation

      1 Reply Last reply Reply Quote 0
      • N Offline
        netnewb
        last edited by

        Update: I've just tried out the same config with an SG-2440 and it works. It must be something with the SG-1000

        1 Reply Last reply Reply Quote 0
        • NogBadTheBadN Offline
          NogBadTheBad
          last edited by

          Is it just the guest wifi that doesn't work ?

          Does the SG-2440 Auto MDIX and the SG-1000 doesn't ?

          Maybe you just need a cross over cable.

          https://en.wikipedia.org/wiki/Medium-dependent_interface

          Andy

          1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

          1 Reply Last reply Reply Quote 0
          • N Offline
            netnewb
            last edited by

            @NogBadTheBad:

            Is it just the guest wifi that doesn't work ?

            Does the SG-2440 MDIX and the SG-1000 doesn't ?

            Maybe you just need a cross over cable.

            https://en.wikipedia.org/wiki/Medium-dependent_interface

            I've used the same cable and port for both of them. Basically I've just unplugged the sg-1000 and pluged the sg-2440. I've also tried a reset to factory defaults on the sg-1000 and redid the config.

            I've switched to a different cable but it still doesn't work. And yes, it's just the guest wifi that doesn't work, more specifically it looks like VLAN doesn't work.

            1 Reply Last reply Reply Quote 0
            • NogBadTheBadN Offline
              NogBadTheBad
              last edited by

              Is the other "different" cable you tried a cross over cable, I only ask as your connecting a router to a router ?

              https://upload.wikimedia.org/wikipedia/en/thumb/9/96/Vergleich_2von2_Crossoverkabel.jpg/1920px-Vergleich_2von2_Crossoverkabel.jpg

              If you set up the LAN port as a simple LAN port on the SG-1000 can you ping the Airport Extreme ?

              Andy

              1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

              1 Reply Last reply Reply Quote 0
              • N Offline
                netnewb
                last edited by

                @NogBadTheBad:

                Is the other "different" cable you tried a cross over cable, I only ask as your connecting a router to a router ?

                https://upload.wikimedia.org/wikipedia/en/thumb/9/96/Vergleich_2von2_Crossoverkabel.jpg/1920px-Vergleich_2von2_Crossoverkabel.jpg

                If you set up the LAN port as a simple LAN port on the SG-1000 can you ping the Airport Extreme ?

                Both are straight. I'm connecting the netgate to the airport directly. Simple LAN works. AE gets DHCP and I have working internet via wireless.

                But I don't see how the cable can be at fault here, since sg-2440 works just fine, and normal LAN works.

                1 Reply Last reply Reply Quote 0
                • NogBadTheBadN Offline
                  NogBadTheBad
                  last edited by

                  Yup I was trying to verify if the SG-1000 auto mdix'd or not, if you just set it up as a normal port and it works that tells me it does.

                  Andy

                  1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                  1 Reply Last reply Reply Quote 0
                  • MikeV7896M Offline
                    MikeV7896
                    last edited by

                    Is it possible that the issue has something to do with this?

                    I've got 99 problems, but a switch ain't one

                    Maybe the VLAN needs to be set up in the SG-1000 switch settings as well as on the interface?

                    The S in IOT stands for Security

                    1 Reply Last reply Reply Quote 0
                    • N Offline
                      netnewb
                      last edited by

                      @virgiliomi:

                      Is it possible that the issue has something to do with this?

                      I've got 99 problems, but a switch ain't one

                      Maybe the VLAN needs to be set up in the SG-1000 switch settings as well as on the interface?

                      I've tried creating a VLAN from there and it didn't work.

                      1 Reply Last reply Reply Quote 0
                      • NogBadTheBadN Offline
                        NogBadTheBad
                        last edited by

                        Tried doing a packet capture, are packets tagged with vlan1003 leaving the firewall ?

                        If you do a packet capture in promiscuous mode from the lan interface and then open it up in Wireshark you should be able to see if the tagged packets are leaving the SG-1000.

                        If you type vlan in the filter field you should see packets that are tagged, the attached screenshot shows packets tagged with vlan2, ignore the vlan column thats something I set up.

                        Untitled.png
                        Untitled.png_thumb

                        Andy

                        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                        1 Reply Last reply Reply Quote 0
                        • DerelictD Offline
                          Derelict LAYER 8 Netgate
                          last edited by

                          Don't pull your hair out. There might be an issue there with the higher VLAN IDs.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          1 Reply Last reply Reply Quote 0
                          • N Offline
                            netnewb
                            last edited by

                            @Derelict:

                            Don't pull your hair out. There might be an issue there with the higher VLAN IDs.

                            It might be so, I just saw this error in the log. ( i hope I attached it)

                            @NogBadTheBad:

                            Tried doing a packet capture, are packets tagged with vlan1003 leaving the firewall ?

                            I tried setting a static IP and pinging the LAN from the VLAN interface and it threw a "no route to host".

                            Unfortunately I don't have enough time to troubleshoot this in depth. I've already lost a lot of time with this. Honestly, this product should be advertised more clearly as a beta, because I'm a networking noob and I've purchased this based on the "out of the box" way the other 2 worked. I've seen some other random errors in the logs.

                            Thanks for taking your time though!

                            ![Screen Shot 2017-01-28 at 02.42.37.png](/public/imported_attachments/1/Screen Shot 2017-01-28 at 02.42.37.png)
                            ![Screen Shot 2017-01-28 at 02.42.37.png_thumb](/public/imported_attachments/1/Screen Shot 2017-01-28 at 02.42.37.png_thumb)

                            1 Reply Last reply Reply Quote 0
                            • DerelictD Offline
                              Derelict LAYER 8 Netgate
                              last edited by

                              Fixed in latest snapshots.

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              1 Reply Last reply Reply Quote 0
                              • N Offline
                                netnewb
                                last edited by

                                I've noticed. I managed to setup the VLAN and assign an interface but I can't test it yet because it's at a remote location.

                                1 Reply Last reply Reply Quote 0
                                • N Offline
                                  netnewb
                                  last edited by

                                  Problem solved with update.

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.