How to assign Domain Controller to VLAN Systems

[slkamath]

@stephenw10
Thank you Steve.

Without enable / Disable they cant use internet, mails, shared folder. In LAN there is no issue.

We are enabling / disabling in Client System Network.

Lokesh Kamath

[johnpoz]

that makes ZERO sense and has zero to do with pfsense.. Is your client getting a different IP, new info like dns, etc.. Pointing to pfsense when it wasn't before, etc.

[stephenw10]

Mmm, I could believe it was a rogue dhcp server setting a bad gateway.

Steve

[slkamath]

@stephenw10
Thank you very much Steve.

I have not mentioned any Gateway in DHCP Server.

Please find the below pictures.

FIN-DHCP

FIN-DNS-GATEWAY

Marketing DHCP

Marketing-DNS-GATEWAY

Purchase-DHCP

Purchase-DNS-GATEWAY

Moulding-DHCP

Moulding-DNS-GATEWAY

Quality_DHCP

Quality-DNS-GATEWAY

Should I Specify Gateway? If Yes pfSense LAN IP is the Gateway right. Also Should I add pfSense LAN IP in Gateway (Routing - Gateway)?

Lokesh Kamath

[slkamath]

@stephenw10
Thank you very much Steve.

I had given Gateway as mentioned below to each VLAN, but not mentioned in Routing - Gateways Please guide me if anything wrong.

Marketing DNS-GATEWAY

Purchase DNS-GATEWAY

Moulding DNS-GATEWAY

Quality DNS-GATEWAY

Lokesh Kamath

[johnpoz]

Dude who told you to put in a gateway - there is ZERO reason to do that. What he stated was there might a ROGUE dhcp server handing out the WRONG info!!

[slkamath]

@johnpoz
Thank you very much John.

I will remove that immediately.

@johnpoz, @stephenw10
I do not have any idea on that. please guide me.

Lokesh Kamath

[johnpoz]

Before you go restarting your machines interfaces when something doesn't work... How about you troubleshoot WHY!!!

Are these machines windows? If so then simple

ipconfig /all

from cmd prompt will give you all the info for networking.. Does it show the proper info, what does it show for your dhcp server?

Can machine ping the box your trying to talk to for smtp? Can it resolve its FQDN? Where is this smtp server in your network? Is it outside your network?

[slkamath]

@johnpoz
Thank you very much

When it is not working
1st I will check in pfSense machine will go to ping and select the VLAN and ping the LAN & Google.
2nd I will check in my machine is it working.
3rd I will tell then to disable & enable the network. Then it will work. Now users understood that everytime it is not working then they only disable & enable.

All these machines are UBUNTU. No Windows.

Regarding SMTP i have not tried pinging from client. But I tried pinging google.com & it is pinging.

SMTP is outside network. It's in BIGROCK.IN

Lokesh Kamath

[stephenw10]

So when one machine is failing check the Connection Information in Network Manager.

A rogue DHCP server is some other device that has DHCP enabled on your network that is handing out leases instead of pfSense. Like a soho router you might be using as an access point for example.

Steve

[slkamath]

@stephenw10
Thank you very much.

Ok. Then we initially had an DHCP with Windows DC. but now I unauthorized it from DHCP (6 months back). may be that is the cause i think. If i can remove that machine from network my issue will be solved.

I will do that tomorrow and I will inform you.

Lokesh Kamath

[johnpoz]

If the boxes are ubuntu.. you can still view the same info just different way. Network Manager would be the gui way.

Very simple test would be traceroute fqdn of smtp server

Where does it fail? Does it even fail to resolve? Does it not get paste hop 1, you should do this test when working - does it take another path when not working, etc. etc.

[slkamath]

@johnpoz
Thank you very much.

Ok. I will Check & update you tomorrow.

Lokesh Kamath

[slkamath]

@johnpoz

I removed the Old Windows DC from the Network but still no luck.

Lokesh Kamath

[johnpoz]

Where did I say anything about the OLD DC? If you want help if figuring out what is wrong your going to have to give us some actually info to work with!!!

Your smtp server is outside - can you not reach it, can you not resolve it?

[slkamath]

@johnpoz
Thank you John.

Sorry.

SMTP Server is resolving no issue with that.

traceroute mail.laxmielectronics.com - Result

Marketing-VLAN

Quality-VLAN

Lokesh Kamath

[stephenw10]

That appears to be going via a completely different route. You don't even a 192.168.1.0/24 subnet on your pfSense firewall.

I suggest that device at 192.168.1.1 is some other rogue gateway device. Do you even have an account with actcorp.in?

Steve

[slkamath]

@stephenw10
Thanks Steve

No We don't have actcorp ISP. I think the user has connected to his own wifi Internet due to it is showing like that.

I am sorry for that. Please excuse me. I will once again post the right details tomorrow.

Our ISP Spectra.

Lokesh Kamath

[johnpoz]

hop 2 in that trace 10.253 at 1700ms ??? WTF?? Yeah no wonder they having problems.. Whatever it is they are doing they are not going through your pfsense.

And a 13ms 1st hop is horrible - and most likely wifi.

[stephenw10]

Yup, or cellular. 10.243 smells like CGN to me.
Wouldn't be the first phone configured as a hotspot I've seen breaking stuff.

Steve