Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Need to use OPT 1 as another LAN interface

    Scheduled Pinned Locked Moved General pfSense Questions
    21 Posts 5 Posters 2.2k Views 5 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • K Offline
      keeshpat @johnpoz
      last edited by

      @johnpoz
      There is no connectivity,
      Confirming the IP is in right subnet.
      But I dont see pfsense MAc address when i ping.
      Any other thoughts.
      Create new NIC interface on VMware just to measure the NIC is not broken

      1 Reply Last reply Reply Quote 0
      • johnpozJ Offline
        johnpoz LAYER 8 Global Moderator
        last edited by

        If you can not see mac - then fix vmware.. How do you have this setup - are they both VMs do you have it going to physical?

        Nobody can help you figure out what you did wrong without info..

        How is opt1 connected different than lan?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        K 1 Reply Last reply Reply Quote 0
        • K Offline
          keeshpat @johnpoz
          last edited by

          @johnpoz Confirming LAn and OPt1 has been configures same on vmware as well as on pfsense.
          Both pfsense and virtual machine are connected to virtual switch.
          Let me recreate the virtual switch.-- may be that help ?

          basically its all virtual connection

          1 Reply Last reply Reply Quote 0
          • johnpozJ Offline
            johnpoz LAYER 8 Global Moderator
            last edited by

            So on this virtual switch did you create a different port group? This is different network you wouldn't put it in the same port group.. How is that connected to physical.. Are you trying to ping from another VM on the same vswitch and port group..

            If this connected to physical. Did you create a different vlan tag on this port group, on your physical network, etc. etc.. etc..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            K 1 Reply Last reply Reply Quote 0
            • GertjanG Offline
              Gertjan @keeshpat
              last edited by

              @keeshpat said in Need to use OPT 1 as another LAN interface:

              @Gertjan did not work,
              Not getting DHCP IP.

              DHCP server on OPT1 is set up ok ?
              (same settings as the default LAN DHCP server, exception : the network)

              This is also shown very often :

              5dcef845-9693-4be1-8146-54a4d35087f6-image.png

              this special case - no joke - doesn't even allow you to set up a DHCP server on the OPT1 interface (spoiler : because the max pool size would be zero ...; )

              if all is well, you should have this :
              98169ef2-0bb7-4c92-ae11-70da8a277991-image.png

              and this :

              4f448863-84dd-4880-819f-75c27f96f896-image.png

              The firewall rule for OPT1 (mine is called PORTAL ) :

              089f036d-0f34-42d8-bc9d-36d08239ee56-image.png

              With all these settings, which are pure clones of the default LAN interface settings, all will be ok.

              If it doesn't work, change hardware, cable, switches.
              Or redo whatever you use as a VM.

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              K 1 Reply Last reply Reply Quote 0
              • K Offline
                keeshpat @johnpoz
                last edited by

                @johnpoz
                Physical switch :has different vlan 8 and vlan 9
                Virtual switch has 2 port group : one of them is Web (vlan 8 - connected to Lan interface on pfsense ) , 2nd is DB (vlan 9 - connected to OPT1 on pfsense)
                I have vm connected to LAN interface works fine. no issues there.
                Vm connected to OPt1 can not even reach to pfsense.

                Just delete the port group and recreate it -- still same issue .

                1 Reply Last reply Reply Quote 0
                • GertjanG Offline
                  Gertjan
                  last edited by

                  It's getting bigger all the time :
                  .....
                  .....
                  VM !
                  ......
                  VLAN's !
                  ......

                  Take your time, a pencil and paper, and make some pictures / screen copies / whatever. Include everything. And most important : all the things we don't know ;)

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  1 Reply Last reply Reply Quote 0
                  • K Offline
                    keeshpat @Gertjan
                    last edited by

                    @Gertjan
                    Thank you, confirming it is set exactly the same.
                    Still no luck.
                    Thank you

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ Offline
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      @keeshpat said in Need to use OPT 1 as another LAN interface:

                      e ) , 2nd is DB (vlan 9 - connected to OPT1 on pfsense)

                      So you set vlan ID in pfsense? Or its native on pfsense? esxi will pull tags off unless you set vlan ID 4095 on the port group..

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      K 1 Reply Last reply Reply Quote 0
                      • stephenw10S Offline
                        stephenw10 Netgate Administrator
                        last edited by

                        Look at Status > Interfaces for OPT1. Do you see any incoming packets at all?

                        This looks like some virtual network config issue, I agree.

                        Steve

                        K 1 Reply Last reply Reply Quote 0
                        • K Offline
                          keeshpat @johnpoz
                          last edited by

                          @johnpoz I tag vlan ID on virtual port group on vmware.
                          No tags on pfsense.

                          1 Reply Last reply Reply Quote 0
                          • K Offline
                            keeshpat @stephenw10
                            last edited by

                            @stephenw10 no traffic on opt1 interface

                            1 Reply Last reply Reply Quote 0
                            • K Offline
                              keeshpat
                              last edited by

                              @johnpoz @stephenw10 @Gertjan @marvosa

                              Thank you guys for your help.
                              I am able to resolve the issue.
                              Issue was on vmware side.
                              I had to create new NIC for pfsense and new NIC for server.
                              Everything is working fine now,

                              Thanks again for your input.
                              Kishan

                              1 Reply Last reply Reply Quote 1
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.