Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    basic VLANS - Noob

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    41 Posts 4 Posters 5.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      chrischambers @johnpoz
      last edited by

      @johnpoz

      Ok if you have your vlans setup correctly on your switch.. And your pc on vlan 20 interface on your switch gets an IP from dhcp on pfsense for vlan 20.. -- Yes I do
      And it has internet I take it? -- not at the moment as I have no rules for outbound
      But you can not ping it from lan? -- That is right
      What are the rules on lan? Your not policy routing traffic out some vpn are you? -- yes I do have a VPN
      Post up rules on lan and vlan 20 interfaces on pfsense.

      WAN
      Wan Rules.JPG
      LAN
      LAN Rules.JPG

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @chrischambers
        last edited by johnpoz

        Ok your forcing traffic out your gateway that 1.9 IP to plextv? Not sure what is the point of that?

        That is wan and lan - where is vlan 20?

        As long as your not coming from 1.9 and going to whatever is in that alias for plextv - you would be able to go to your vlan 20 via your lan net source any any rule.

        So makes no difference what rules you have on vlan 20. lan should be able to ping anything on vlan20

        So again sniff on vlan 20 interface while your pinging from lan - do you see the ping go out.. If so then problem is not pfsense..

        Are you sending everything out some vpn.. I don't understand why your trying to policy route traffic out your wan gateway? Unless you have everything else going out some vpn?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

        C 1 Reply Last reply Reply Quote 0
        • C
          chrischambers @johnpoz
          last edited by

          @johnpoz said in basic VLANS - Noob:

          VLAN 20

          VLAN 20 Rules.JPG

          I have a plex server sitting behind the PFsense, and looking at videos it informed me that I needed to added that rule.

          is sniff the pinging within pfsense ?

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @chrischambers
            last edited by johnpoz

            @chrischambers said in basic VLANS - Noob:

            and looking at videos it informed me that I needed to added that rule.

            Sorry but NO.. How does that make any sense? Again are you using some vpn service?? Inbound traffic to your plex, would go back out your wan.. As to plex going somewhere on its own to pull metadata, etc. - why would that not work via a vpn connection. If that is what your using.

            What do you have in plextv alias exactly

            Yes go to diagnostic - packet capture.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

            C 1 Reply Last reply Reply Quote 0
            • C
              chrischambers @johnpoz
              last edited by

              @johnpoz
              here are two of the links I used to set that up
              https://blog.linuxserver.io/2017/05/01/how-to-run-pfsense-with-pia-vpn-but-still-use-plex-remote-access/

              https://www.youtube.com/watch?v=jwwczlvWw9Y

              sorry have to run, have to cook dinner for the wife. I will return tomorrow - thanks for your help so far.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @chrischambers
                last edited by

                Ok if plex is just contacting plex.tv to get its public IP.. Then yeah you would want to make sure it goes out your normal wan..

                As long this IP is showing your actual normal wan IP from your isp then yeah that should be fine.

                plexoutput.png

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                C 1 Reply Last reply Reply Quote 0
                • C
                  chrischambers @johnpoz
                  last edited by chrischambers

                  @johnpoz Hi John, the plex works with no issues, it is just the vlans

                  here are the ping results from PFsense

                  PFSENSE Ping VLan.JPG PFSENSE Ping Lan.JPG

                  C 1 Reply Last reply Reply Quote 0
                  • C
                    chrischambers @chrischambers
                    last edited by

                    @chrischambers morning. I think i have it all working, I don't know why but for some reason it just started to work.

                    @johnpoz many thanks for your help yesterday.

                    johnpozJ 1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @chrischambers
                      last edited by

                      Those ping results is not what I asked for... I asked for you to sniff on your vlan 20 interface while you pinged vlan 20 from lan.. How is pinging ip in vlan 20 and lan IP from pfsense that?

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                      C 1 Reply Last reply Reply Quote 0
                      • C
                        chrischambers @johnpoz
                        last edited by

                        @johnpoz said in basic VLANS - Noob:

                        la

                        sorry @johnpoz but please see above I did ask what is Sniff as I have never hear of it. but once again thanks for your help

                        johnpozJ 1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator @chrischambers
                          last edited by johnpoz

                          Under diagnostic menu.. Packet Capture. This allows you to see like the raw data that interface sees..

                          Here this might help in what packet capture (sniff) is.

                          https://en.wikipedia.org/wiki/Packet_analyzer

                          edit: example

                          Here is a sniff (packet capture) on my dmz interface (192.168.3.253) while pinging an IP in my dmz network, from my lan network 192.168.1000

                          sniff.png

                          Now you can view more info by changing the verbosity level in that screen. Or you could just download the capture into your own software.. Wireshark for example (free)..

                          And get all kinds of great info on what is actually going on.. For troubleshooting stuff

                          info.png

                          In your specific scenario - you would of been able to see if pfsense was actually sending on the ping request, but not getting an answer, etc.

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.