Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VLAN Tag not being passed

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    32 Posts 6 Posters 4.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      randy9000 @ahking19
      last edited by

      @ahking19

      Yes - DHCP has been configured.

      DerelictD 1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate @randy9000
        last edited by

        @randy9000 You'll need to show the switch configuration for VLAN 40 and the pfSense configuration for the interface on VLAN 40.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        R 1 Reply Last reply Reply Quote 0
        • R
          randy9000 @Derelict
          last edited by

          @derelict

          I can now ping the gateway.

          1 Reply Last reply Reply Quote 0
          • R
            randy9000 @marvosa
            last edited by

            @marvosa

            I have the netgate configured as a firewall and router that is connected to a netgear switch on port 1. Netgate LAN1 is connected to port 1 on the switch.

            The VLAN is created on the LAN1 port of the Netgate. The firewall rules have been created to pass anything. Allow all. The parent interface is connected to the "trunk" port on the netgear switch and tagged with the "T"

            The access ports (23,24) on the switch are "U" untagged.

            The DHCP server is enabled and configured on the appropriate the interface. I can ping the gateway (192.168.40.1) from 192.168.1.216 (laptop) but I can not add PC's or devices to the 192.168.40.1 network.

            I also ran the Packet Capture on the interface and and tried to ping a PC plugged in the port with an ip address of 192.168.40.50 and got this:

            01:22:47.697263 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
            01:22:48.702622 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
            01:22:49.708371 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
            01:22:50.709008 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
            01:22:51.707711 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
            01:22:52.709573 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28
            01:22:53.715154 ARP, Request who-has 192.168.40.50 tell 192.168.40.1, length 28

            Thanks for you help!

            DerelictD 1 Reply Last reply Reply Quote 0
            • DerelictD
              Derelict LAYER 8 Netgate @randy9000
              last edited by

              @randy9000 Again, screenshots.

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              R 1 Reply Last reply Reply Quote 0
              • R
                randy9000 @Derelict
                last edited by

                @derelict

                Re: VLAN Tag not being passed

                Update: I was attempting to troubleshoot and had to reset the Netgate appliance. Therefore I am starting from a fresh start.

                Does anyone have any tutorials or step by step job aids that walks you through how to configure a Netgate appliance (router and firewall) VLANS that's connected to a Netgear Switch model GS324TP?

                You all have been great!!
                Thanks for all the responses and assistance.

                1 Reply Last reply Reply Quote 0
                • R
                  randy9000 @marvosa
                  last edited by

                  @marvosa

                  Re: VLAN Tag not being passed

                  Update: I was attempting to troubleshoot and had to reset the Netgate appliance. Therefore I am starting from a fresh start.

                  Does anyone have any tutorials or step by step job aids that walks you through how to configure a Netgate appliance (router and firewall) VLANS that's connected to a Netgear Switch model GS324TP?

                  You all have been great!!
                  Thanks for all the responses and assistance.

                  DerelictD 1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate @randy9000
                    last edited by

                    @randy9000 You are not going to find anything specific to the Netgear switch I don't think. But it really comes down to whether the VLAN traffic hits the pfSense port tagged or untagged. All 802.1q switches are pretty much the same in that regard.

                    SG-3100 Switch

                    SG-1100 Switch

                    SG-7100 Switch

                    They all have different examples for various switching configurations.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    R 2 Replies Last reply Reply Quote 0
                    • R
                      randy9000 @JKnott
                      last edited by

                      @jknott

                      Re: VLAN Tag not being passed

                      Update: I was attempting to troubleshoot and had to reset the Netgate appliance. Therefore I am starting from a fresh start.

                      Does anyone have any tutorials or step by step job aids that walks you through how to configure a Netgate appliance (router and firewall) VLANS that's connected to a Netgear Switch model GS324TP?

                      You all have been great!!
                      Thanks for all the responses and assistance.

                      1 Reply Last reply Reply Quote 0
                      • R
                        randy9000 @Derelict
                        last edited by

                        @derelict

                        That makes sense. I'll try to follow what's in the guide and report back.

                        Thanks

                        1 Reply Last reply Reply Quote 0
                        • R
                          randy9000 @Derelict
                          last edited by randy9000

                          @derelict

                          I followed those instructions and still nothing. See attached screen shots..

                          I configured firewall rules to pass all traffic.

                          Please help!

                          Screen Shot 2021-03-18 at 5.02.05 PM.jpg

                          Screen Shot 2021-03-18 at 5.00.49 PM.jpg

                          Screen Shot 2021-03-18 at 5.00.30 PM.jpg

                          Screen Shot 2021-03-18 at 5.00.12 PM.jpg

                          Screen Shot 2021-03-18 at 4.51.49 PM.jpg

                          DerelictD 1 Reply Last reply Reply Quote 0
                          • DerelictD
                            Derelict LAYER 8 Netgate @randy9000
                            last edited by Derelict

                            @randy9000 Don't set a Port VID for a tagged VLAN. The Port VID is for the untagged VLAN on that port. Just leave the Port VID at 1 on port 2.

                            And whatever you are connecting to port 2 has to be configured tagged VLAN 30, too.

                            You also need a DHCP server and firewall rules to pass traffic on the VLAN30_Port2 interface.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            R 1 Reply Last reply Reply Quote 0
                            • R
                              randy9000 @Derelict
                              last edited by

                              @derelict

                              That didn't work either.

                              1 Reply Last reply Reply Quote 0
                              • N
                                NOCling
                                last edited by

                                It works with the SG-3100, i use 10 VLANs with it over Lan1.
                                7d9cdc71-1091-4c24-9f6c-564356ad313d-image.png

                                You have to tag it right:
                                16eb2663-df03-41bd-95e1-015d8ab67ee6-image.png

                                And the same on the Switch Uplinkt to the SG-3100 LAN Port.

                                Thats all.

                                Netgate 6100 & Netgate 2100

                                R 1 Reply Last reply Reply Quote 0
                                • R
                                  randy9000 @NOCling
                                  last edited by

                                  @nocling

                                  What configuration changes do I need to make in the example you provided to use Port #2 - LAN 2?

                                  Thanks

                                  1 Reply Last reply Reply Quote 0
                                  • N
                                    NOCling
                                    last edited by

                                    Pic 2 -> Member 1t replace by 2t

                                    Netgate 6100 & Netgate 2100

                                    R 2 Replies Last reply Reply Quote 0
                                    • R
                                      randy9000 @NOCling
                                      last edited by

                                      @nocling

                                      That’s how it’s currently configured and it’s not working. See images previously posted.

                                      DerelictD 1 Reply Last reply Reply Quote 0
                                      • DerelictD
                                        Derelict LAYER 8 Netgate @randy9000
                                        last edited by

                                        @randy9000 Again, the switch port has to be expecting tagged traffic on that port.

                                        This stuff works 100%.

                                        Chattanooga, Tennessee, USA
                                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                        R 1 Reply Last reply Reply Quote 0
                                        • R
                                          randy9000 @Derelict
                                          last edited by

                                          @derelict

                                          Okay. Retrying again.

                                          1 Reply Last reply Reply Quote 0
                                          • R
                                            randy9000 @NOCling
                                            last edited by

                                            @nocling & @Derelict

                                            On the Netgear switch, am I to only tag "T" the port that the cable is in and untag "U" the others with on the VLAN? Or, Tag "T" all of the ports that will be used on the VLAN?

                                            DerelictD 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.