Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    cannot routing over pfsense on vlan

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    15 Posts 3 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      ajtak
      last edited by

      Sorry, I'm blind. It's true...
      But.. Last rule logged all traffic, when doesn't match rules before this rule? if so, nothing happens anyway.

      Routing - yes pfsense is OK. traffic from LAN to openvpn, ipsec or internet is OK.

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        I don't see any hits on that rule, you sure the default rule just didn't log..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • A
          ajtak
          last edited by

          resume:

          pfsense LAN IP 192.168.254.254/24
          pfsense VLAN IP 10.40.254.0/24

          device 1 on LAN has obtained IP 192.168.254.101/24 from DHCP
          device 2 on LAN has obtained IP 192.168.254.102/24 from DHCP
          device 3 on VLAN has obtained IP 10.40.254.101/24 from DHCP
          device 4 on VLAN has obtained IP 10.40.254.102/24 from DHCP

          ping reply is ok betwen device 1 and device 2
          ping reply is ok betwen device 1 and pfsense LAN IP
          ping reply is ok betwen device 2 and pfsense LAN IP

          ping reply is ok betwen device 3 and 4
          ping reply isn't ok betwen device 3 and pfsense VLAN IP
          ping reply isn't ok betwen device 4 and pfsense VLAN IP

          routing table on device 3 and device 4 has default route 0.0.0.0/0 -> 10.40.254.254

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by johnpoz

            @ajtak said in cannot routing over pfsense on vlan:

            pfsense VLAN IP 10.40.254.0/24

            That is NOT an ip, that is a network. And for sure doesn't match what you stated the gateway is

            routing table on device 3 and device 4 has default route 0.0.0.0/0 -> 10.40.254.254

            ping reply is ok betwen device 3 and 4

            That has ZERO to do with pfsense, since they are on the same network.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • A
              ajtak
              last edited by

              sorry ip 192.168.254.254 with subnet mask 24 etc..

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by johnpoz

                So what happens when device 3 or 4 pings lan IP 192.168.254.254

                Did you alter your rules to allow icmp on your vlan?

                Do you have any floating tab rules? Those could be blocking as well, even if you allow on your vlan rules.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • A
                  ajtak
                  last edited by

                  I can setup icmp rule remotly, but I'll be at the router in four hours for testing traffic.
                  I don't have rules on floating tab. tab is empty.

                  1 Reply Last reply Reply Quote 0
                  • A
                    ajtak
                    last edited by

                    I'm allowed icmp from 192.168.254.0/24 and device 3 has reply from 192.168.254.254. is it OK?

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      That makes zero sense you mean you allowed icmp TO, not from..

                      Rules are placed on interfaces where traffic enters pfsense.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • A
                        ajtak
                        last edited by

                        I'm added next rule which allowed all trafic to VLAN address. icmp to VLAN IP still don't working.
                        pfsense003.png
                        pfsense004.png

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.