Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to assign Domain Controller to VLAN Systems

    Scheduled Pinned Locked Moved General pfSense Questions
    61 Posts 4 Posters 11.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • slkamathS
      slkamath @slkamath
      last edited by slkamath

      @stephenw10
      Thank you very much Steve.

      I had given Gateway as mentioned below to each VLAN, but not mentioned in Routing - Gateways Please guide me if anything wrong.

      Marketing DNS-GATEWAY
      0_1538717584757_Marketing DNS & Gateway.png

      Purchase DNS-GATEWAY
      0_1538717591964_Purchase DNS & Gateway.png

      Moulding DNS-GATEWAY
      0_1538717603411_Moulding DNS & Gateway.png

      Quality DNS-GATEWAY
      0_1538717687591_Quality DNS & Gateway.png

      Lokesh Kamath

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by johnpoz

        Dude who told you to put in a gateway - there is ZERO reason to do that. What he stated was there might a ROGUE dhcp server handing out the WRONG info!!

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

        slkamathS 1 Reply Last reply Reply Quote 0
        • slkamathS
          slkamath @johnpoz
          last edited by

          @johnpoz
          Thank you very much John.

          I will remove that immediately.

          @johnpoz, @stephenw10
          I do not have any idea on that. please guide me.

          Lokesh Kamath

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Before you go restarting your machines interfaces when something doesn't work... How about you troubleshoot WHY!!!

            Are these machines windows? If so then simple

            ipconfig /all

            from cmd prompt will give you all the info for networking.. Does it show the proper info, what does it show for your dhcp server?

            Can machine ping the box your trying to talk to for smtp? Can it resolve its FQDN? Where is this smtp server in your network? Is it outside your network?

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

            slkamathS 1 Reply Last reply Reply Quote 0
            • slkamathS
              slkamath @johnpoz
              last edited by

              @johnpoz
              Thank you very much

              When it is not working
              1st I will check in pfSense machine will go to ping and select the VLAN and ping the LAN & Google.
              2nd I will check in my machine is it working.
              3rd I will tell then to disable & enable the network. Then it will work. Now users understood that everytime it is not working then they only disable & enable.

              All these machines are UBUNTU. No Windows.

              Regarding SMTP i have not tried pinging from client. But I tried pinging google.com & it is pinging.

              SMTP is outside network. It's in BIGROCK.IN

              Lokesh Kamath

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                So when one machine is failing check the Connection Information in Network Manager.

                A rogue DHCP server is some other device that has DHCP enabled on your network that is handing out leases instead of pfSense. Like a soho router you might be using as an access point for example.

                Steve

                slkamathS 1 Reply Last reply Reply Quote 0
                • slkamathS
                  slkamath @stephenw10
                  last edited by slkamath

                  @stephenw10
                  Thank you very much.

                  Ok. Then we initially had an DHCP with Windows DC. but now I unauthorized it from DHCP (6 months back). may be that is the cause i think. If i can remove that machine from network my issue will be solved.

                  I will do that tomorrow and I will inform you.

                  Lokesh Kamath

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    If the boxes are ubuntu.. you can still view the same info just different way. Network Manager would be the gui way.

                    Very simple test would be traceroute fqdn of smtp server

                    Where does it fail? Does it even fail to resolve? Does it not get paste hop 1, you should do this test when working - does it take another path when not working, etc. etc.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                    slkamathS 2 Replies Last reply Reply Quote 0
                    • slkamathS
                      slkamath @johnpoz
                      last edited by

                      @johnpoz
                      Thank you very much.

                      Ok. I will Check & update you tomorrow.

                      Lokesh Kamath

                      1 Reply Last reply Reply Quote 0
                      • slkamathS
                        slkamath @johnpoz
                        last edited by

                        @johnpoz

                        I removed the Old Windows DC from the Network but still no luck.

                        Lokesh Kamath

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          Where did I say anything about the OLD DC? If you want help if figuring out what is wrong your going to have to give us some actually info to work with!!!

                          Your smtp server is outside - can you not reach it, can you not resolve it?

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                          slkamathS 1 Reply Last reply Reply Quote 0
                          • slkamathS
                            slkamath @johnpoz
                            last edited by

                            @johnpoz
                            Thank you John.

                            Sorry.

                            SMTP Server is resolving no issue with that.

                            traceroute mail.laxmielectronics.com - Result

                            Marketing-VLAN
                            0_1538849746243_Traceroute MarketingVLAN.png

                            Quality-VLAN
                            0_1538849766175_Traceroute Quality VLAN.png

                            Lokesh Kamath

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              That appears to be going via a completely different route. You don't even a 192.168.1.0/24 subnet on your pfSense firewall.

                              I suggest that device at 192.168.1.1 is some other rogue gateway device. Do you even have an account with actcorp.in?

                              Steve

                              slkamathS 1 Reply Last reply Reply Quote 0
                              • slkamathS
                                slkamath @stephenw10
                                last edited by slkamath

                                @stephenw10
                                Thanks Steve

                                No We don't have actcorp ISP. I think the user has connected to his own wifi Internet due to it is showing like that.

                                I am sorry for that. Please excuse me. I will once again post the right details tomorrow.

                                Our ISP Spectra.

                                Lokesh Kamath

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by johnpoz

                                  hop 2 in that trace 10.253 at 1700ms ??? WTF?? Yeah no wonder they having problems.. Whatever it is they are doing they are not going through your pfsense.

                                  And a 13ms 1st hop is horrible - and most likely wifi.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by stephenw10

                                    Yup, or cellular. 10.243 smells like CGN to me.
                                    Wouldn't be the first phone configured as a hotspot I've seen breaking stuff. 😉

                                    Steve

                                    slkamathS 1 Reply Last reply Reply Quote 0
                                    • slkamathS
                                      slkamath @stephenw10
                                      last edited by

                                      @stephenw10 @johnpoz
                                      Thank you very much.

                                      I am sorry for giving wrong info.

                                      Traceroute Output.

                                      LAN Traceroute
                                      0_1538976323669_LAN Traceroute.png

                                      Marketing Traceroute
                                      0_1538976333918_Marketing Traceroute.png

                                      Purchase Traceroute
                                      0_1538976344602_Purchase Traceroute.png

                                      Lokesh Kamath

                                      1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator
                                        last edited by

                                        Does it work when you did those traceroutes?

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                        slkamathS 1 Reply Last reply Reply Quote 0
                                        • slkamathS
                                          slkamath @johnpoz
                                          last edited by

                                          @johnpoz
                                          Thank you.

                                          Yes it is working when i give traceroute mail.laxmielectronics.com.

                                          Lokesh Kamath

                                          1 Reply Last reply Reply Quote 0
                                          • johnpozJ
                                            johnpoz LAYER 8 Global Moderator
                                            last edited by johnpoz

                                            Well there you go then you have your root cause - users not using your connection when they fail ;)

                                            The HUGE delays in that network could be a problem, or more than likely that isp they are going out blocks outbound 25.. If that is the port your talking to vs say 465 or 587 which are typical ports talking to smtp server when using encryption..

                                            So now you need to figure out why that one that was failing was using that other network..

                                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                                            If you get confused: Listen to the Music Play
                                            Please don't Chat/PM me for help, unless mod related
                                            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                            slkamathS 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.