SG-1100 Running Real VLANs

[chrismacmahon]

https://store.netgate.com/pfSense/SG-1100.aspx
Network Interfaces 1x Marvell 88E6141 networking switch
3x GbE Ethernet (WAN/LAN/OPT)

We only use 3 of the 4 ports on the sg-1100, the 4th is the miniPCIe Bus (wifi)

[Grimson]

@chrismacmahon said in SG-1100 Running Real VLANs:

https://store.netgate.com/pfSense/SG-1100.aspx
Network Interfaces 1x Marvell 88E6141 networking switch
3x GbE Ethernet (WAN/LAN/OPT)

We only use 3 of the 4 ports on the sg-1100, the 4th is the miniPCIe Bus (wifi)

So looking at the official ESPRESSObin schematics your information seems to be wrong. The switch is linked to the SOC and then offers 3 Ethernet ports, which also aligns with the default VLAN configuration. So these are not dedicated Ethernet interfaces and it is in essence a router on stick with the switch already included.

Additionally miniPCIe does not carry Ethernet, unless you cooked up something completely outside the standards there.

[chrismacmahon]

Your correct, looks like the material was old I was pulling from:

https://www.cnx-software.com/2016/09/23/marvell-espressobin-board-with-gigabit-ethernet-sata-pcie-and-usb-3-0-to-launch-for-39-and-up-crowdfunding/

Network Connectivity
1x Topaz Networking Switch
2x GbE Ethernet LAN
1x Ethernet WAN
1x MiniPCIe slot for Wireless/BLE periphereals

My pre-caffeine google fu was not the best.

[Derelict]

@penicheiro said in SG-1100 Running Real VLANs:

Do I need to add anything under switches (like VLAN 10 0t, 2t) and have existing LAN VLAN 4091 set as 0t, 2t as well?

In the following configuration, whatever is connected to switch port 2 (OPT) will need to be configured for:

Whatever you want the existing OPT network, untagged. For consistency this should probably be VLAN 4092 in the switch. If you would like 4092 tagged to the switch, just check tagged on port 2 in Interfaces > Switches, VLANs and edit the PVID on port 2 to VLAN 1 (or some other unused VLAN id) in Interfaces > Switches, Ports

VLANs 10 and 20 tagged.

Just edit, enable, and number OPT2 and OPT3 as desired, make desired ingress firewall rules, configure DHCP servers, Captive Portals, etc.

[penicheiro]

@derelict You must have been typing as I edited those. VLANs now working!! All of the tutorials i had viewed made no mention of the VLANs TAB under SWITCHES. That was it. Added VLAN 10 and 20, tagged 0 and 2, and that was it, everything else I had configured. THANK YOU. Working very Stably right now.

Onto my next task. In order to make LAN and OPT port work as a switch.
-Under SWITCH/PORTS edit port VLAN on OPT from 4092 to 4091.

• Add Port 1 to TAGGED VLANS 10 and 20

Is the last step to add port 1 to VLAN 4091 (untagged), and delete VLAN 4092?

Just want to confirm I am not missing anything, and that I wont get locked out AGAIN. lol

Thanks

[Derelict]

Just posted this a couple hours ago lol

https://forum.netgate.com/topic/140000/sg-1100-configuring-lan-and-opt-to-be-on-the-same-vlan

[penicheiro]

@derelict MIND READER!!! Thank you SIR!! Still adjusting to this interface, coming from tomato, and so far... I am impressed.

[pfsmooth]

Ok, I have been reading through many threads and watching all the videos on vlan setups. I have tried just about everything and spent hours trying to get my vlans set up on my sg-1100. I can never get DHCP working on my unifi AC, if I try and set it up on extra vlans. Are you saying you got yours to work? This is driving me crazy.

[Derelict]

Yes, they work. post your interface and switch configuration and describe what you are trying to do.

[pfsmooth]

I also have the firewall rules for each vlan, as well as the DHCP set for each. However clients are never able to grab a DHCP address. I am hoping its just something simple I am missing.

[Derelict]

And the pfSense switch ports tab?

[pfsmooth]

[Derelict]

That all looks fine for managing that AP on a LAN address if it is connected to port 2.

Anything in the DHCP logs? DHCP has automatic rules for any interface with a DHCP server enabled.

Based on what you have posted I'd look at the DHCP logs and packet captures on UDP port 67.

Does the smooth network work?

[pfsmooth]

Nothing showing up in the DHCP logs then I try to connect to the Work or Guest network. I can connect just fine to the regular Smooth network, clients connect and get a DHCP address. Port two is connected to a switch. I had a similar setup working with untangle, just want to make the jump to pfsense.

[Derelict]

Well, you have to tag VLANs 10 and 20 through to the AP on the switch on the ports connected to pfSense and the AP.

[Grimson]

If the L2 is setup correctly check the L3. How are the networks configured, a common beginner mistake is to use the default /32 CIDR for example.

[pfsmooth]

Yep, doublechecked /24

and vlan set on the switch port

[Derelict]

OK. On what switch port are 10 and 20 tagged to the AP?

[pfsmooth]

All to port 1

[Derelict]

OK, on what port are 10 and 20 tagged to pfSense port 2?