Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    SMB - Windows share over vlans

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    27 Posts 4 Posters 6.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mcury Rebel Alliance
      last edited by

      Good, as we can see, your server never replied the SYN request from the client.
      Can you set the capture now in the interface that has the IP 10.0.0.1 ?
      Let's confirm if your pfsense is sending this SYN to the server.

      dead on arrival, nowhere to be found.

      1 Reply Last reply Reply Quote 0
      • S
        solaris81
        last edited by solaris81

        The capture was from the em1_vlan10 interface where the 10.0.0.1 exists. Are you talking about running a capture on the 10.0.0.51 interface/ Windows machine?

        1 Reply Last reply Reply Quote 0
        • M
          mcury Rebel Alliance
          last edited by

          Yes, run in the server, or in pfsense interface connected to the server.
          I presume those 10 networks are /27, /28 /29 right?

          A /26 or less would give you routing issues due to network overlap.

          dead on arrival, nowhere to be found.

          M 1 Reply Last reply Reply Quote 0
          • S
            solaris81
            last edited by

            No, they are all /24. 10.0.0.0/24..... Where the Windows host lives and 10.0.3.0/24, is where my Android is.

            The images above are taken from a capture on the 10.0.0.1 interface

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by johnpoz

              Well then your server never answered at all, he didn't send a RST he just ignored your connection attempt that pfsense sent.. Not a pfsense problem..

              BTW - good idea to send the pings inbetween!! That is very helpful in showing you can talk to the IP... But as you can see from the sniff, the sync is sent - just no answer.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              S 1 Reply Last reply Reply Quote 0
              • S
                solaris81 @johnpoz
                last edited by

                @johnpoz said in SMB - Windows share over vlans:

                Well then your server never answered at all, he didn't send a RST he just ignored your connection attempt that pfsense sent.. Not a pfsense problem..

                BTW - good idea to send the pings inbetween!! That is very helpful in showing you can talk to the IP... But as you can see from the sniff, the sync is sent - just no answer.

                So if the firewall is off, as well as other services, Defender and whatnot...Any idea why the machine would ignore the connection attempt? It works fine if both devices are in the same subnet

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by johnpoz

                  Your firewall or security software is not off like you think is the answer..

                  The only other logical step here to prove that to yourself, is sniff on .51 - does it see that smb syn? But just not answer.. Then something on the server 100% positive!!

                  Normally windows would send back RST if not listening.. So that you just don't get anything back points to firewall/security software for sure.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  S 1 Reply Last reply Reply Quote 0
                  • S
                    solaris81 @johnpoz
                    last edited by

                    @johnpoz

                    I just double checked the firewall on the Win box... Firewall was back on again...Not sure how it turned itself on... But I had double checked earlier. Once I disabled it, I was able to connect. Just need to set a rule that allows SMB-in from private network.

                    thanks for the help

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      No problem... glad you got it sorted... But from a sniff its real quick to figure out where the problem is.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • M
                        mcury Rebel Alliance @mcury
                        last edited by mcury

                        @mcury said in SMB - Windows share over vlans:

                        Yes, run in the server, or in pfsense interface connected to the server.
                        I presume those 10 networks are /27, /28 /29 right?

                        A /26 or less would give you routing issues due to network overlap.

                        Just realized that the networks are different, my mistake, disregard the quoted info.

                        Nice, good that is now working.
                        Even better, now you have more tools to troubleshoot problems in the future.

                        dead on arrival, nowhere to be found.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.