Trunk port beetwen Cisco 3750g & PfSense 2.4.2-RELEASE
-
@rostyslav-didus Maybe you forgot that after 2.4.2 there were many updates. You missed them all. This means functionality issues and security issues.
This means you have to read FIRST all the upgrade notices that came after 2.4.2 and check if you didn't miss a VLAN related update issues.
Personally, I don't remember any more (why keep in mind what old software did / could / couldn't ?).When you decide to stick with an older version, you auto declared yourself at that moment expert on this version, as, when time passes, people just don't remember how things were done "using XP", when everybody uses "Win 10" now.
Which means that someone that reads your question needs to remember who things were done with 2.4.2 ..... and his will greatly reduce the change of some one helping you == the chance some one answers you question.Except for me with my silly no-answer reply.
-
Can you ping it from of the Vlan5 connected pc's ?
Btw: I do agree w. gertjan , you should upgrade your pfsense
-
@bingo600 I can not ping it.
Today,I'll update to the latest PfSense version.
Gonna make PfSense clone first.In case I am not sure if certificates and OpenVpn configuration gonna work on new Pfsense version(we've got 3 vpn working branches) ))Thank you !
-
Please post a Show Run Int Gi of the Cisco Port connected to the pfsense.
-
@nocling
Here it is.Part from "show run" command(cisco 3750g) about port port connected to the pfsense.interface GigabitEthernet1/0/1
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 5
switchport mode trunkcisco3750g_srv01#show interfaces trunk
Port Mode Encapsulation Status Native vlan
Gi1/0/1 on 802.1q trunking 1
Gi1/0/47 on 802.1q trunking 1Port Vlans allowed on trunk
Gi1/0/1 5
Gi1/0/47 5Port Vlans allowed and active in management domain
Gi1/0/1 5
Gi1/0/47 5Port Vlans in spanning tree forwarding state and not pruned
Gi1/0/1 5
Gi1/0/47 5***Gi1/0/47 is a trunk port(vlan 5 allowed) to cisco sf300-48pp.It works fine.
-
Look good.
You can set switchport nonegotiate to.Vlan 5 is created?
conf t
int vlan 5
ip add 10.10.108.9 255.255.255.0
exit
exit
ping 10.10.108.1works?
-
@nocling
I got it at my running config.
I tried #Switchport nonegotiate.Nothing changed.
I mean,I know you want me to create vlan 5 iface and assign IP/mask on it.
It is already done."Part of running config"
interface Vlan5
ip address 10.10.108.233 255.255.252.0Thus,it should work(pinging vlan5 iface on PfSence). But,it doesn't.
My IT colleagues think that the problem is about old Pfsense version.
We thought,maybe we got LAN card,which doesn't support 802.1q.
After reading Pfsense manual I found out that it does,cause when I was chosing parent Iface for vlan 5,I could choose VMX0.It means card support 802.1q
I even tried another Cisco switch for trunking-nothing changed.) -
@rostyslav-didus said in Trunk port beetwen Cisco 3750g & PfSense 2.4.2-RELEASE:
@bingo600 I can not ping it.
Today,I'll update to the latest PfSense version.
Gonna make PfSense cloneWhat net adapter type is the vmx ?
You say clone , is this a virtual pfSense ?
-
@bingo600
Yes sir!
My mistake-I didn't say that pfsense is on Esxi.
We updated pfsense. Now it got last stable version.
I am going to read how to make proper vlans on Esxi to allow vlan 5 flow.
I'll show esxi config in 2 hours.
Thanks. -
@rostyslav-didus said in Trunk port beetwen Cisco 3750g & PfSense 2.4.2-RELEASE:
@bingo600
Yes sir!
My mistake-I didn't say that pfsense is on Esxi.
We updated pfsense. Now it got last stable version.
I am going to read how to make proper vlans on Esxi to allow vlan 5 flow.
I'll show esxi config in 2 hours.
Thanks.I have not tried a pfSense on ESXi , but have a small home ESXi , where i used vSwitch to make the trunk (& Vlan definitions).
Someone else w. pfSense on a VM experience should chip in.
Have a look in this section.
https://forum.netgate.com/category/33/virtualization
