VLAN Help!!…..

[Derelict]

Not exactly sure what you're asking…


[wyzard]

I obviously don't have something right…

How do I post screen shots here?

[Derelict]

Click Attachments and other options.

Attach files


[wyzard]

Hopefully this will help figure this out..

settings.txt

[Gertjan]

An nearly empty text file  ?

[wyzard]

Try again…

[pfsense settings.zip](/public/imported_attachments/1/pfsense settings.zip)

[Derelict]

What is so hard about screen shots?

Asking us to do a lot of work here.

ETA: A word document? Really?

EATA: What are those 5 errors in the upper right? Click that and post it.


[wyzard]

There were error(s) loading the rules: /tmp/rules.debug:19: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [19]: table <bogonsv6> persist file "/etc/bogonsv6"
@ 2018-05-06 23:43:18
There were error(s) loading the rules: /tmp/rules.debug:19: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [19]: table <bogonsv6> persist file "/etc/bogonsv6"
@ 2018-05-06 23:48:18
There were error(s) loading the rules: /tmp/rules.debug:19: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [19]: table <bogonsv6> persist file "/etc/bogonsv6"
@ 2018-05-06 23:48:54
There were error(s) loading the rules: /tmp/rules.debug:19: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [19]: table <bogonsv6> persist file "/etc/bogonsv6"
@ 2018-05-07 00:17:09
There were error(s) loading the rules: /tmp/rules.debug:19: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [19]: table <bogonsv6> persist file "/etc/bogonsv6"
@ 2018-05-07 00:18:44

[wyzard]

Here's a zip with PNG images…  Sorry about the word doc.. it was late....

settings.zip

[johnpoz]

Your going to want to fix that bogon problem or you going to have issues with your rules..

System > Advanced > Firewall Maximum Table Entries

Set that to say 400000

Your rules are wrong on your iot interface that is for sure.

Rules are evaluated top down, first rule to trigger wins.  You have a any any rule that lets iot do anything on ipv4.  Your block to lan net would never be evaluated..  If you don't want iot going to lan net, then put that block ABOVE your any any.

[wyzard]

Got it!!!

Thanks for all the help and patience.