• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

basic VLANS - Noob

Scheduled Pinned Locked Moved L2/Switching/VLANs
41 Posts 4 Posters 6.3k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • R
    rameshk @chrischambers
    last edited by Feb 22, 2021, 1:59 PM

    @chrischambers
    Check your settings on Unifi controller and let us know how it went.

    C 1 Reply Last reply Feb 22, 2021, 2:26 PM Reply Quote 0
    • C
      chrischambers @rameshk
      last edited by chrischambers Feb 22, 2021, 2:39 PM Feb 22, 2021, 2:26 PM

      @rameshk said in basic VLANS - Noob:

      @chrischambers
      Check your settings on Unifi controller and let us know how it went.

      ok I am still having the same issues, I did watch a video about tagging and untagging, but he was creating a DHCP on the switch and not passing the DHCP range through a VLAN.

      I did try creating a profile setting the Native network but this didn'twork as I got the same results, that I was able to ping from VLAN to anything but no from LAN to VLAN
      Testing Profile.JPG

      and here is a little picture of my network, showing there my DHCP are
      draw.JPG

      J 1 Reply Last reply Feb 22, 2021, 2:39 PM Reply Quote 0
      • J
        johnpoz LAYER 8 Global Moderator @chrischambers
        last edited by johnpoz Feb 22, 2021, 2:42 PM Feb 22, 2021, 2:39 PM

        If your client is getting dhcp from your dhcp server for vlan 20... This means your tagging is correct.. Or your traffic would never hit the vlan dhcp server.

        Not being able to ping some device on vlan 20.. You sure there is no firewall on this device. Out of the box windows for example is not going to allow some device from anything but its local network to ping it.

        Simple sniff on pfsense vlan 20 interface while you ping the vlan 20 pc IP from lan.. Do you see the ping request go out?

        That pic of tagging makes NO sense.. What port is that on.. Your saying vlan 20 is native.. but then you say tag all?

        edit: One last time..

        P1 on your switch vlan 1 (lan) untagged. Vlan 20 Tagged. Port 15.. Vlan 20 untagged..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        C 1 Reply Last reply Feb 22, 2021, 2:49 PM Reply Quote 0
        • C
          chrischambers @johnpoz
          last edited by Feb 22, 2021, 2:49 PM

          @johnpoz I take pics as it might be easier then trying to explain.

          Switch port 1.JPG
          switch port 15  - Testing.JPG

          J 1 Reply Last reply Feb 22, 2021, 2:53 PM Reply Quote 0
          • J
            johnpoz LAYER 8 Global Moderator @chrischambers
            last edited by Feb 22, 2021, 2:53 PM

            And lets see these profiles.

            Tagging vlan 1 to port 15 makes ZERO sense.. The only thing on that port should be 20 and it should be untagged.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            C 1 Reply Last reply Feb 22, 2021, 3:03 PM Reply Quote 0
            • C
              chrischambers @johnpoz
              last edited by Feb 22, 2021, 3:03 PM

              ===@johnpoz said in basic VLANS - Noob:

              se prof
              is this the profile you wanted ?

              Switch port Profiles.JPG

              J 1 Reply Last reply Feb 22, 2021, 3:06 PM Reply Quote 0
              • J
                johnpoz LAYER 8 Global Moderator @chrischambers
                last edited by Feb 22, 2021, 3:06 PM

                Show the profile on port 1 (pfsense), and the profile on port 15 (pc)

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                C 1 Reply Last reply Feb 22, 2021, 3:10 PM Reply Quote 0
                • C
                  chrischambers @johnpoz
                  last edited by chrischambers Feb 22, 2021, 3:11 PM Feb 22, 2021, 3:10 PM

                  @johnpoz said in basic VLANS - Noob:

                  Show the profile on port 1 (pfsense)

                  sorry I am cunfused. profile on pfsense - are you asking for the interface information ?
                  and want do you mean by profile of port 15. is this from the switch ?
                  please give examples

                  C 1 Reply Last reply Feb 22, 2021, 3:24 PM Reply Quote 0
                  • C
                    chrischambers @chrischambers
                    last edited by chrischambers Feb 22, 2021, 3:57 PM Feb 22, 2021, 3:24 PM

                    @chrischambers I have just check my firewall and this is turn off.
                    I also just check that the port is working the LAN range and this works, with no issues.
                    it is just something with VLAN 20 that is missing

                    just found the old video I used to create my vlans minus the blocking of extra vlans
                    https://www.youtube.com/watch?v=hhPGN4UJHAM

                    J 1 Reply Last reply Feb 22, 2021, 4:12 PM Reply Quote 0
                    • J
                      johnpoz LAYER 8 Global Moderator @chrischambers
                      last edited by johnpoz Feb 22, 2021, 4:16 PM Feb 22, 2021, 4:12 PM

                      Port 1 from your drawing is connected to pfsense... What is the profile you have assigned to port 1 on your switch..

                      port1.png

                      Port 15.. What you showed is WRONG... The only vlan on that should be native vlan 20.. nothing tagged, no other vlans

                      tagged.png

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      C 2 Replies Last reply Feb 22, 2021, 4:35 PM Reply Quote 0
                      • C
                        chrischambers @johnpoz
                        last edited by Feb 22, 2021, 4:35 PM

                        @johnpoz said in basic VLANS - Noob:

                        Port 1

                        on port 1 as shown in my drawn the profile is " All "
                        on port 15 the only profile on is "Test 20 "
                        switch port 15  - Testing.JPG
                        with the following settings
                        unifi 20 VLAN Settings.JPG

                        1 Reply Last reply Reply Quote 0
                        • C
                          chrischambers @johnpoz
                          last edited by Feb 22, 2021, 4:40 PM

                          @johnpoz said in basic VLANS - Noob:

                          Port 15.. What you showed is WRONG... The only vlan on that should be native vlan 20.. nothing tagged, no other vlans

                          tagged.png

                          forget this I was trying something. it is now deleted.

                          J 1 Reply Last reply Feb 22, 2021, 4:47 PM Reply Quote 0
                          • J
                            johnpoz LAYER 8 Global Moderator @chrischambers
                            last edited by Feb 22, 2021, 4:47 PM

                            Ok if you have your vlans setup correctly on your switch.. And your pc on vlan 20 interface on your switch gets an IP from dhcp on pfsense for vlan 20..

                            And it has internet I take it?

                            But you can not ping it from lan?

                            What are the rules on lan? Your not policy routing traffic out some vpn are you?

                            Post up rules on lan and vlan 20 interfaces on pfsense.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            C 1 Reply Last reply Feb 22, 2021, 4:56 PM Reply Quote 0
                            • C
                              chrischambers @johnpoz
                              last edited by Feb 22, 2021, 4:56 PM

                              @johnpoz

                              Ok if you have your vlans setup correctly on your switch.. And your pc on vlan 20 interface on your switch gets an IP from dhcp on pfsense for vlan 20.. -- Yes I do
                              And it has internet I take it? -- not at the moment as I have no rules for outbound
                              But you can not ping it from lan? -- That is right
                              What are the rules on lan? Your not policy routing traffic out some vpn are you? -- yes I do have a VPN
                              Post up rules on lan and vlan 20 interfaces on pfsense.

                              WAN
                              Wan Rules.JPG
                              LAN
                              LAN Rules.JPG

                              J 1 Reply Last reply Feb 22, 2021, 5:00 PM Reply Quote 0
                              • J
                                johnpoz LAYER 8 Global Moderator @chrischambers
                                last edited by johnpoz Feb 22, 2021, 5:03 PM Feb 22, 2021, 5:00 PM

                                Ok your forcing traffic out your gateway that 1.9 IP to plextv? Not sure what is the point of that?

                                That is wan and lan - where is vlan 20?

                                As long as your not coming from 1.9 and going to whatever is in that alias for plextv - you would be able to go to your vlan 20 via your lan net source any any rule.

                                So makes no difference what rules you have on vlan 20. lan should be able to ping anything on vlan20

                                So again sniff on vlan 20 interface while your pinging from lan - do you see the ping go out.. If so then problem is not pfsense..

                                Are you sending everything out some vpn.. I don't understand why your trying to policy route traffic out your wan gateway? Unless you have everything else going out some vpn?

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                C 1 Reply Last reply Feb 22, 2021, 5:03 PM Reply Quote 0
                                • C
                                  chrischambers @johnpoz
                                  last edited by Feb 22, 2021, 5:03 PM

                                  @johnpoz said in basic VLANS - Noob:

                                  VLAN 20

                                  VLAN 20 Rules.JPG

                                  I have a plex server sitting behind the PFsense, and looking at videos it informed me that I needed to added that rule.

                                  is sniff the pinging within pfsense ?

                                  J 1 Reply Last reply Feb 22, 2021, 5:07 PM Reply Quote 0
                                  • J
                                    johnpoz LAYER 8 Global Moderator @chrischambers
                                    last edited by johnpoz Feb 22, 2021, 5:10 PM Feb 22, 2021, 5:07 PM

                                    @chrischambers said in basic VLANS - Noob:

                                    and looking at videos it informed me that I needed to added that rule.

                                    Sorry but NO.. How does that make any sense? Again are you using some vpn service?? Inbound traffic to your plex, would go back out your wan.. As to plex going somewhere on its own to pull metadata, etc. - why would that not work via a vpn connection. If that is what your using.

                                    What do you have in plextv alias exactly

                                    Yes go to diagnostic - packet capture.

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    C 1 Reply Last reply Feb 22, 2021, 5:11 PM Reply Quote 0
                                    • C
                                      chrischambers @johnpoz
                                      last edited by Feb 22, 2021, 5:11 PM

                                      @johnpoz
                                      here are two of the links I used to set that up
                                      https://blog.linuxserver.io/2017/05/01/how-to-run-pfsense-with-pia-vpn-but-still-use-plex-remote-access/

                                      https://www.youtube.com/watch?v=jwwczlvWw9Y

                                      sorry have to run, have to cook dinner for the wife. I will return tomorrow - thanks for your help so far.

                                      J 1 Reply Last reply Feb 22, 2021, 5:21 PM Reply Quote 0
                                      • J
                                        johnpoz LAYER 8 Global Moderator @chrischambers
                                        last edited by Feb 22, 2021, 5:21 PM

                                        Ok if plex is just contacting plex.tv to get its public IP.. Then yeah you would want to make sure it goes out your normal wan..

                                        As long this IP is showing your actual normal wan IP from your isp then yeah that should be fine.

                                        plexoutput.png

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        C 1 Reply Last reply Feb 23, 2021, 7:49 AM Reply Quote 0
                                        • C
                                          chrischambers @johnpoz
                                          last edited by chrischambers Feb 23, 2021, 7:59 AM Feb 23, 2021, 7:49 AM

                                          @johnpoz Hi John, the plex works with no issues, it is just the vlans

                                          here are the ping results from PFsense

                                          PFSENSE Ping VLan.JPG PFSENSE Ping Lan.JPG

                                          C 1 Reply Last reply Feb 23, 2021, 9:39 AM Reply Quote 0
                                          37 out of 41
                                          • First post
                                            37/41
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received