Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to get pfSense WAN to accept VLAN 0

    Scheduled Pinned Locked Moved General pfSense Questions
    414 Posts 25 Posters 210.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tquade @natbart
      last edited by

      @natbart

      A GS105NA can be had for around $45 on amazon.ca.

      Ted

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        If you didn't have to priority tag it on the USG you wonl't have to here.

        This is going to be like a 5 line script but Netgraph always makes my brain hurt!
        Just hitting errors right now....

        N 1 Reply Last reply Reply Quote 0
        • N
          natbart @stephenw10
          last edited by

          @stephenw10 the only setting i set on the Unifi USG3 was "Use VLAN ID" and I set it to "0"

          Ubiquiti.jpg

          I was able to do a temp work around with a 24 port Cisco Small Business switch that I had and put it between ONT and pfSense. This allowed me to grab a DHCP address from provider and surf. Overkill solution.

          Will continue to look at the netgraph option... as this seems like the cleanest option. I just need to wrap my head around how netgraph work and how to compile as I dont have a system running FreeBSD (outside of this pfSense box).

          1 Reply Last reply Reply Quote 0
          • N
            natbart @stephenw10
            last edited by

            @stephenw10 will read up at provided link. Thank you for the continued engagement.

            johnpozJ 1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator @natbart
              last edited by johnpoz

              Just to point out - unifi doesn't make this as easy as made out to be..

              unifi.png

              They might support it on some versions of the controller software in some places - but like most applications 0 and 4095 are not really valid

              Is there a feature request for this? If there are ISPs that want/need this - and freebsd allows for it, etc. I would expect if there was a feature request for it - it would/could be looked at implementing in the gui as a check box, or something.

              But in 30 some years in the biz - sorry but setting vlan 0 is not a common thing.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

              N 2 Replies Last reply Reply Quote 1
              • N
                natbart @johnpoz
                last edited by

                @johnpoz having this as an option would be amazing. Would be simple than some of the other work arounds.

                Hard to believe others haven’t asked for it based on ATT also needing it (amongst other config). Not used what other ISPs are similarly config’ed.

                johnpozJ 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @natbart
                  last edited by johnpoz

                  I haven't combed through redmine yet - but yeah if you want/need this - then it should be submitted to redmine as a feature request..

                  If it can be done, and there is desire for it - why would it not be implemented.

                  But to be honest - I do believe part of the reason for such a deployment would be making it harder for isp customers to use non isp hardware.. Since setting vlan id 0 is not really something that is common

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                  N 1 Reply Last reply Reply Quote 0
                  • N
                    natbart @johnpoz
                    last edited by

                    @johnpoz I configured in the initial USG config. Not using the controller software.

                    1 Reply Last reply Reply Quote 0
                    • N
                      natbart @johnpoz
                      last edited by

                      @johnpoz sorry, I am not sure who/ what Redmine is. This is my first post and I just got pfSense installed this week. I am very new to since. My initial excitement did fizzle somewhat when I ran into this issue.

                      1 Reply Last reply Reply Quote 0
                      • Cool_CoronaC
                        Cool_Corona
                        last edited by

                        Question:

                        Why not run it in transparent mode and let pfsense handle WAN??

                        N 1 Reply Last reply Reply Quote 0
                        • N
                          natbart @Cool_Corona
                          last edited by

                          @cool_corona not sure I understand what you mean. New to pfSense can you elaborate?

                          Cool_CoronaC 1 Reply Last reply Reply Quote 0
                          • Cool_CoronaC
                            Cool_Corona @natbart
                            last edited by

                            @natbart You put the Nokia in bridge mode and connect the pfsense WAN on RJ45.

                            Then handle WAN via DHCP to see if it works. And then you are rid of the USG

                            N 2 Replies Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              As I understand it that is the plan here. But the ISP requires the traffic tagged as VLAN0 and pfSense does not currently have any way to set that.

                              Netgraph still defeating me!

                              Steve

                              N 2 Replies Last reply Reply Quote 0
                              • N
                                natbart @Cool_Corona
                                last edited by

                                This post is deleted!
                                1 Reply Last reply Reply Quote 0
                                • N
                                  natbart @Cool_Corona
                                  last edited by

                                  @cool_corona said in How to get pfSense WAN to accept VLAN 0:

                                  @natbart You put the Nokia in bridge mode and connect the pfsense WAN on RJ45.

                                  Then handle WAN via DHCP to see if it works. And then you are rid of the USG

                                  thanks for the tip. As far as I know I have no access to the Nokia ONT. It is doing media conversion from Fiber to Ethernet and is otherwise a black box to the end-user.

                                  Cool_CoronaC 1 Reply Last reply Reply Quote 0
                                  • N
                                    natbart @stephenw10
                                    last edited by

                                    @stephenw10 I appreciate any work you are attempting to do with Netgraph! I havent been able to dig into it any more myself.

                                    F 1 Reply Last reply Reply Quote 0
                                    • F
                                      fresnoboy @natbart
                                      last edited by

                                      @natbart

                                      If you look at the att netgraph scripts, they could be useful in solving the vlan0 issue. They handle that, but have a lot of other functions not needed in your case. You should be able to start with them and pare it down to pretty much nothing if you don't need the gateway auth bypass etc...

                                      N 1 Reply Last reply Reply Quote 0
                                      • N
                                        natbart @fresnoboy
                                        last edited by

                                        @fresnoboy said in How to get pfSense WAN to accept VLAN 0:

                                        @natbart

                                        If you look at the att netgraph scripts, they could be useful in solving the vlan0 issue. They handle that, but have a lot of other functions not needed in your case. You should be able to start with them and pare it down to pretty much nothing if you don't need the gateway auth bypass etc...

                                        I did start looking into that, but there are more differences than similarities. It got me looking at Netgraph, but that is requiring some more learning. @stephenw10 was also graciously looking into netgraph.

                                        1 Reply Last reply Reply Quote 0
                                        • Cool_CoronaC
                                          Cool_Corona @natbart
                                          last edited by

                                          @natbart said in How to get pfSense WAN to accept VLAN 0:

                                          @cool_corona said in How to get pfSense WAN to accept VLAN 0:

                                          @natbart You put the Nokia in bridge mode and connect the pfsense WAN on RJ45.

                                          Then handle WAN via DHCP to see if it works. And then you are rid of the USG

                                          thanks for the tip. As far as I know I have no access to the Nokia ONT. It is doing media conversion from Fiber to Ethernet and is otherwise a black box to the end-user.

                                          Try and plug the RJ45 directly into the WAN of pfsense and see if it works

                                          N 1 Reply Last reply Reply Quote 0
                                          • N
                                            natbart @Cool_Corona
                                            last edited by

                                            @cool_corona it does nto work without a switch in between to strip the 802.1q headers (I believe this is the correct explanation). I am using a Cisco ESW54) small business switch.

                                            JKnottJ 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.