Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VLAN Assistance

    Scheduled Pinned Locked Moved General pfSense Questions
    43 Posts 8 Posters 8.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • easysimpleitE
      easysimpleit @Derelict
      last edited by

      @derelict 0_1528866630970_96a0c549-bdc1-4f87-a891-bbcec1acee5b-image.png

      Here you go.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Do you have a port forward to localhost for DNS on that interface?

        The Allow all rule should pass anything anyway.

        Do you actually see leases in Status > DHCP leases for that subnet when devices are connected to it?

        Steve

        easysimpleitE 1 Reply Last reply Reply Quote 0
        • easysimpleitE
          easysimpleit @stephenw10
          last edited by

          @stephenw10

          DHCP
          0_1528919279751_6eb041a1-2795-414b-ae6e-f53b10fe2245-image.png

          Port Forwarding
          0_1528919366595_2ef46623-44ca-4446-b6e6-c61ff4f7d4f0-image.png

          1 Reply Last reply Reply Quote 0
          • easysimpleitE
            easysimpleit @Derelict
            last edited by

            @derelict Yes I am & no, sadly it does not.

            1 Reply Last reply Reply Quote 0
            • easysimpleitE
              easysimpleit
              last edited by

              Side thinking:

              Before I had two NICS that I had bridged for LAN. Both NICS feed two separate switches, one was my regular gig switch managed & the other was my PoE gig management switch. When my PoE switch died, I removed the bridge setup and reconfigured the second NIC to be dedicated to the Unifi AP. After that I have it setup with the vlan.

              Should I bridge both the LAN & WIFI NIC so they are on the same network and then attached the kids VLAN that way? I take it that should work since it technically worked before. I'm just not sure why it's not working now, in the current configuration.

              Running out of ideas so I'm just thinking out loud.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @easysimpleit
                last edited by

                @easysimpleit said in VLAN Assistance:

                Should I bridge both the LAN & WIFI NIC

                You should never bridge anything unless its the LAST freaking way to get something to work.. If you need switch ports - use a switch..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                easysimpleitE 1 Reply Last reply Reply Quote 0
                • A
                  ashima LAYER 8
                  last edited by

                  I just noticed in your attached screenshot of port forwarding... The 1st rule of DNS for kids network :

                  The dest Address should be !KIDSWIFI_VLAN12 address .
                  "!" is missing.
                  Can you try with that.

                  easysimpleitE 1 Reply Last reply Reply Quote 0
                  • easysimpleitE
                    easysimpleit @johnpoz
                    last edited by

                    @johnpoz I agree, which is why I changed the setup.

                    1 Reply Last reply Reply Quote 0
                    • easysimpleitE
                      easysimpleit @ashima
                      last edited by

                      @ashima that rule was missing the invert match option. I ticket it and still nothing is working on my end.

                      I'm wondering at this point if I should remove the vlan and try re-adding it.

                      1 Reply Last reply Reply Quote 0
                      • easysimpleitE
                        easysimpleit
                        last edited by

                        It was so simple I feel stupid. I knew it was something stupid simple but missed, I missed it because it shouldn't have been selected anyway.

                        0_1529460870419_62e9c012-ecb1-4646-bb58-82ca00de6abe-image.png

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.